last executing test programs: 2.648832029s ago: executing program 1 (id=2729): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001540)=""/4131, 0x1023) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x2000c014) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000011c0)}, {&(0x7f00000004c0)="a4f633cb225a0761806a092d4c93b0417a02cf264bd8d75e21a52de59e76427ea751d1e06ef39b7a276859f321963d8bef2cdb4a4b55846c3f354a6924b2e40b641f4d3bbd24c1de1c5f8eadd86df141395717f5819be2b7061783030b24687264709556f464a9289df6d8f7522623b7676cbccb1e04a5c5a82aa003dbee0f1e1d397deb986bfff26286d7ff04d0e9f54fe1bea28fc9df0badad7937cd766dc85bdc4473", 0xa4}, {&(0x7f0000000580)="a15374856070badcf6de25a925e9a7ed31cbbb61bb5484fcd60a1b5415b794c8cc7690290fb87ce46ab9c07e1e21ac1fb3db6ab028a5405a40edc04bb99c913bbf5ca951f6a64d9adcdc0e60daebc54c4944bd33ed1404a35180a23a0c9c84b7947c5ff0a9027e49eaeb833ac91c40e98de2e8dfec90ef2347f316fadafef4566e139bd3e4ab20c49528f83b0f0267500db79e1dfda34ca9365d705a1a9bd07c5a1419a30046c17c9be836166681ac1ed562ca894c74476aac13cad365", 0xbd}, {&(0x7f0000002580)="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", 0xde7}], 0x4, 0x0, 0x0, 0x40010}, 0x800) 2.009331725s ago: executing program 0 (id=2739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x7d}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @remote}}) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x54}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x140c, 0x420, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400c005) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6202000090780000fe02fe02"], 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x4a, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) getsockopt$inet_int(r8, 0x0, 0x16, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r9, @ANYBLOB="10002abd7000ffdbdf250400000006001d000300000014001f00fc00000000000000000000000000000105002100000000"], 0x38}, 0x1, 0x0, 0x0, 0x28040084}, 0x4000001) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40884) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x38, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x40086) 1.721801432s ago: executing program 1 (id=2744): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="07ef28bd7000fbdbdf2508000300"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 1.640737025s ago: executing program 0 (id=2745): socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r5, &(0x7f0000000000)={0x10}, 0x10) listen(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)={0x60, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r11) 1.639606837s ago: executing program 2 (id=2747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x40}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) (async) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b8767"], 0x4c}}, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00) 1.55217559s ago: executing program 1 (id=2748): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x12000, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) (async) r3 = epoll_create1(0x0) (async) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='netdevsim0\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x10000001}) (async) close(r2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a0000000000000000070200002004681efa361595f6937420563b4b2a881877da027f90f0c42a621756c5656408d9979a40b7230c1fc399cc8aef53e454b2a0334c41f13bfc57f543fcc539d3bd6f558515dbf7ba74136f46a40db01903cd94f37a991a"], 0x14}}, 0x0) (async) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto$inet(r7, 0x0, 0x0, 0x5, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) (async) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x21, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x10, 0x2, 0x10) 1.311588355s ago: executing program 2 (id=2750): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) poll(0x0, 0x0, 0x200) socket(0x1d, 0x6, 0xffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x18, 0x32, 0x1, 0x0, 0x0, "", [@typed={0x5, 0x95, 0x0, 0x0, @str='\xea'}]}, 0x18}], 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.284106563s ago: executing program 1 (id=2752): clock_gettime(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10941, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 1.115629261s ago: executing program 1 (id=2754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000001540)=""/4131, 0x1023) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x2000c014) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000011c0)}, {&(0x7f00000004c0)="a4f633cb225a0761806a092d4c93b0417a02cf264bd8d75e21a52de59e76427ea751d1e06ef39b7a276859f321963d8bef2cdb4a4b55846c3f354a6924b2e40b641f4d3bbd24c1de1c5f8eadd86df141395717f5819be2b7061783030b24687264709556f464a9289df6d8f7522623b7676cbccb1e04a5c5a82aa003dbee0f1e1d397deb986bfff26286d7ff04d0e9f54fe1bea28fc9df0badad7937cd766dc85bdc4473", 0xa4}, {&(0x7f0000000580)="a15374856070badcf6de25a925e9a7ed31cbbb61bb5484fcd60a1b5415b794c8cc7690290fb87ce46ab9c07e1e21ac1fb3db6ab028a5405a40edc04bb99c913bbf5ca951f6a64d9adcdc0e60daebc54c4944bd33ed1404a35180a23a0c9c84b7947c5ff0a9027e49eaeb833ac91c40e98de2e8dfec90ef2347f316fadafef4566e139bd3e4ab20c49528f83b0f0267500db79e1dfda34ca9365d705a1a9bd07c5a1419a30046c17c9be836166681ac1ed562ca894c74476aac13cad365", 0xbd}, {&(0x7f0000002580)="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", 0xde7}], 0x4, 0x0, 0x0, 0x40010}, 0x800) 1.109173622s ago: executing program 4 (id=2755): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000840) syz_emit_ethernet(0x846, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) r4 = accept(r1, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x9b) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f00000000c0)=""/69, &(0x7f0000000140)=0x45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000840) (async) syz_emit_ethernet(0x846, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) (async) accept(r1, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x9b) (async) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f00000000c0)=""/69, &(0x7f0000000140)=0x45) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) 976.991392ms ago: executing program 3 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x2000}, 0x0) 856.754214ms ago: executing program 4 (id=2757): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) r2 = socket(0x2, 0x80805, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 856.469246ms ago: executing program 3 (id=2758): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="07ef28bd7000fbdbdf2508000300"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 796.882509ms ago: executing program 3 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1400000010000100000000000000fff50000000a18010000860a0b"], 0x140}}, 0x8000) 784.356296ms ago: executing program 4 (id=2760): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x77, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x85, 0xf}}]}, 0x2c}}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="a15374856070", 0x6}], 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000e00000000e6ff0000000000000000000f17b53cb29f58cb8d2424e379205a82aeea58a3907a1506b1a014b7b627f1806c91"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x2, '\x00', r8, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="031327bd7000fcdbdf25100000007c00018008000100", @ANYRES32=r2, @ANYBLOB="1400020064766d727030000000000000000000001400020065727370616e30000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="0800030000000000080003000200000014000200626f6e645f736c6176655f30000000001400020876657468315f746f030000000000000048000180140002000000000000000000000000000000900000080001", @ANYRES32=r8, @ANYBLOB="1400020064766d7270310000000000000000000014000200766972745f7769666930000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc8040}, 0x40000000) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000400)=r10, 0x4) sendmsg$nl_generic(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32=r10, @ANYBLOB="e6"], 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x4b, 0x0, 0x800, 0x70bd2a}, 0x14}}, 0x80120c4) socket$inet_dccp(0x2, 0x6, 0x0) 679.286922ms ago: executing program 0 (id=2761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01072bbd70000004000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x35, 0x35, 0x4, [@func_proto, @datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x1, 0x2}], "25ff"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "b8d5b3"}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000900)=""/149, 0x54, 0x95, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004840)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x5, 0xfff1}, {0xc, 0xe}}}, 0x24}}, 0xc044) 624.710297ms ago: executing program 2 (id=2762): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000001400)={r2, @in6={{0xa, 0x4e22, 0x5, @empty, 0x4}}, 0x0, 0x7ffe}, 0x90) connect$netrom(r0, &(0x7f00000001c0)={{0x6, @null, 0x8}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) (async) connect$netrom(r0, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e62, @private=0xa010101}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e89bfb5e417c24b0dc1a1a6795fb7f8de1c7fb41a8fb47faa40b0d5921db5dbde032ff034c5b6a8d1ef4898bf5ddf116ba9dc4a768751e4fde0000fc93a4aec8db42edeeb25cb324d08489ae05cc01ca13648436d1", @ANYRES8, @ANYBLOB="01000000000000000000070000000c000180050002000100000015f4291cca14ae0ffa8a34fb92e5a8d581fef72cbcfddb8a9810bad8afc323c35c3f52231de31f52dabc20ab83b5809a6afc31cb811c620ed6f81251c8e0d2290e36f2a8fccb83d50b48c969e14b0767521a72901ec71df519a061a69568431f2873000000000000000000dc1c101d7d9281a31146821b38f2d08fbac8ac8952143d299808cdfea5c41d8a54ef00fa4889bf"], 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x40080) (async) socket(0x1e, 0x4, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'bond0\x00'}) 624.539195ms ago: executing program 3 (id=2763): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x541000, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000900)={'macvlan1\x00', @random}) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000000)) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x4d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'vlan0\x00', @random="458d000000eb"}) (async, rerun: 64) close(0x3) (rerun: 64) 593.292972ms ago: executing program 4 (id=2764): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x64, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000010000008000000039edbb7f44f4c36488f70600d99cd6f70f0df8c8be75f778f0229ae52e466460c895e21e985e00c1b5d1a5ea43edff5877917baf476cbf3871a8857df2b3a666cfce18c300d7a5206dba64a68b17b4419fe9bb8e9d3b87205f388a123a06e6a86fbf1fcb3ec1dbd589e6f907d1cc205f2fa3bc923c5449cc3de39c866818681fe1fc763b3636744fcb718905f6096f2278fd3737986fcc69ff72e67adca6bf0b55be5c89bcf30ff9269d21c42f99458bd9c9e057cc8f5eb67c01391eaae258775297d446", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x18, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff847}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x200000d1}, 0x60040050) 521.611294ms ago: executing program 0 (id=2765): syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x9c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r4, @ANYBLOB="010000000084000018001680140001801000020001000080"], 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 352.652408ms ago: executing program 4 (id=2766): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x949}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001400b99f000000000000c04b06"], 0x114}], 0x1, 0x0, 0x0, 0x4c041}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) socket(0x40000000015, 0x805, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r4, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b8767"], 0x4c}}, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 305.636777ms ago: executing program 2 (id=2767): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x40) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001300)) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b37108c", 0x59}], 0x1) socket$inet6(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000900000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001f00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000df0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018590000030000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000000000085000000a50b000018490000030000000000000000000000bf91000000000d00b7020000010000050000000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 303.664108ms ago: executing program 0 (id=2768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x1d, 0x0, 0xee01}}}, 0xb8}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, 0x0, &(0x7f0000000440)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x300) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x188}, 0x1, 0x0, 0x0, 0x2004c831}, 0x4841) 244.862019ms ago: executing program 3 (id=2769): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="07ef28bd7000fbdbdf2508000300"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 195.113649ms ago: executing program 2 (id=2770): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x0, 0x1, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x9403, 0x3002, 0x2b8, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {0xb802000000000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x8, 0xfc, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz1\x00', 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1ff0001ff, 0xffffff00, 0xff], 'gre0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xff51, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010105}]}, &(0x7f0000000080)=0x10) 188.001559ms ago: executing program 1 (id=2771): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x44, 0x6c, 0x1, 0x80, 0xfe, 0x4a, 0xd, 0x66, 0x4, [0x40, 0x9, 0xf, 0xffff, 0x6, 0xc, 0xfffffeff, 0x2174]}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000700)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000240)=0xe65, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r8, 0x917, 0x70bd29, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000080)="a0", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r9, 0x21) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x7, 0x20, 0x7, 0x7, 0x10001}, 0x14) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r8, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r10}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048050}, 0x4000) 61.002321ms ago: executing program 0 (id=2772): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0xfffdffff, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 60.49986ms ago: executing program 3 (id=2773): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) unshare(0x24020400) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10) (async) r4 = socket(0x21, 0x2, 0x10000000000002) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=@allocspi={0x154, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in=@remote, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, {@in6=@empty, 0x4d3, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x9}, {0x0, 0x0, 0x2}, 0x70bd26, 0x10000002, 0x2}, 0x4, 0x5}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x17}}, @migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, @in6=@loopback, @in=@broadcast, 0x3c, 0x1, 0x0, 0x3507, 0x2, 0x2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000d1900000000001c140040fe000001000000"], 0x1c}}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x18, 0x110, 0xe, "94fdd479"}], 0x28}, 0x0) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) (async) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x40c89}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}]}}}]}, 0x48}}, 0x0) (async) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00010000ac0000001c0012800b000100697036746e6c00000c00028006000f00032f0000b46d71ff43a3b88e6b4853385eccb6fa512333aaeadf5580718dba6a47fc330f358a617e429b2b0f7fd3"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 35.077618ms ago: executing program 4 (id=2774): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010000104000000000000000300000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe88000000000000000000000000010114003500776731"], 0x50}}, 0x0) 0s ago: executing program 2 (id=2775): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0x140}], 0x1) (fail_nth: 3) kernel console output (not intermixed with test programs): 272][T11802] do_syscall_64+0xf3/0x230 [ 304.100303][T11802] ? clear_bhb_loop+0x35/0x90 [ 304.100337][T11802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.100365][T11802] RIP: 0033:0x7fc49878d169 [ 304.100385][T11802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.100402][T11802] RSP: 002b:00007fc4996b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.100426][T11802] RAX: ffffffffffffffda RBX: 00007fc4989a5fa0 RCX: 00007fc49878d169 [ 304.100441][T11802] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 304.100454][T11802] RBP: 00007fc4996b0090 R08: 0000000000000000 R09: 0000000000000000 [ 304.100466][T11802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.100478][T11802] R13: 0000000000000000 R14: 00007fc4989a5fa0 R15: 00007ffe6bf08218 [ 304.100511][T11802] [ 304.708499][T11806] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 304.730018][T11806] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 304.738395][T11806] netlink: 'syz.3.2049': attribute type 2 has an invalid length. [ 304.748370][T11813] FAULT_INJECTION: forcing a failure. [ 304.748370][T11813] name failslab, interval 1, probability 0, space 0, times 0 [ 304.793261][T11813] CPU: 1 UID: 0 PID: 11813 Comm: syz.0.2050 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 304.793292][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.793305][T11813] Call Trace: [ 304.793313][T11813] [ 304.793321][T11813] dump_stack_lvl+0x241/0x360 [ 304.793351][T11813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.793371][T11813] ? __pfx__printk+0x10/0x10 [ 304.793394][T11813] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 304.793424][T11813] ? __pfx___might_resched+0x10/0x10 [ 304.793454][T11813] should_fail_ex+0x40a/0x550 [ 304.793490][T11813] should_failslab+0xac/0x100 [ 304.793520][T11813] kmem_cache_alloc_node_noprof+0x77/0x380 [ 304.793551][T11813] ? __alloc_skb+0x1c3/0x440 [ 304.793579][T11813] __alloc_skb+0x1c3/0x440 [ 304.793606][T11813] ? __pfx___alloc_skb+0x10/0x10 [ 304.793635][T11813] ? netlink_ack_tlv_len+0x6e/0x200 [ 304.793669][T11813] netlink_ack+0x145/0xa60 [ 304.793698][T11813] ? __pfx_lock_acquire+0x10/0x10 [ 304.793734][T11813] ? __pfx___might_resched+0x10/0x10 [ 304.793773][T11813] netlink_rcv_skb+0x294/0x480 [ 304.793806][T11813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.793834][T11813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.793895][T11813] genl_rcv+0x28/0x40 [ 304.793918][T11813] netlink_unicast+0x7f6/0x990 [ 304.793958][T11813] ? __pfx_netlink_unicast+0x10/0x10 [ 304.793986][T11813] ? __virt_addr_valid+0x45f/0x530 [ 304.794025][T11813] ? __phys_addr_symbol+0x2f/0x70 [ 304.794045][T11813] ? __check_object_size+0x47a/0x730 [ 304.794080][T11813] netlink_sendmsg+0x8de/0xcb0 [ 304.794115][T11813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.794142][T11813] ? aa_sock_msg_perm+0x91/0x160 [ 304.794181][T11813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.794200][T11813] __sock_sendmsg+0x221/0x270 [ 304.794235][T11813] ____sys_sendmsg+0x53a/0x860 [ 304.794270][T11813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.794295][T11813] ? __fget_files+0x2a/0x410 [ 304.794329][T11813] ? __fget_files+0x2a/0x410 [ 304.794368][T11813] __sys_sendmsg+0x269/0x350 [ 304.794399][T11813] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.794438][T11813] ? do_sys_openat2+0x17a/0x1d0 [ 304.794495][T11813] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 304.794529][T11813] ? do_syscall_64+0x100/0x230 [ 304.794563][T11813] ? do_syscall_64+0xb6/0x230 [ 304.794596][T11813] do_syscall_64+0xf3/0x230 [ 304.794627][T11813] ? clear_bhb_loop+0x35/0x90 [ 304.794659][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.794688][T11813] RIP: 0033:0x7fc5dff8d169 [ 304.794706][T11813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.794724][T11813] RSP: 002b:00007fc5e0e26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.794745][T11813] RAX: ffffffffffffffda RBX: 00007fc5e01a5fa0 RCX: 00007fc5dff8d169 [ 304.794760][T11813] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 304.794772][T11813] RBP: 00007fc5e0e26090 R08: 0000000000000000 R09: 0000000000000000 [ 304.794785][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.794795][T11813] R13: 0000000000000000 R14: 00007fc5e01a5fa0 R15: 00007ffd5b499588 [ 304.794818][T11813] [ 305.182530][T11820] FAULT_INJECTION: forcing a failure. [ 305.182530][T11820] name failslab, interval 1, probability 0, space 0, times 0 [ 305.195834][T11820] CPU: 1 UID: 0 PID: 11820 Comm: syz.1.2056 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 305.195860][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.195874][T11820] Call Trace: [ 305.195882][T11820] [ 305.195890][T11820] dump_stack_lvl+0x241/0x360 [ 305.195922][T11820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.195946][T11820] ? __pfx__printk+0x10/0x10 [ 305.195970][T11820] ? kmem_cache_alloc_noprof+0x48/0x380 [ 305.196001][T11820] ? __pfx___might_resched+0x10/0x10 [ 305.196034][T11820] should_fail_ex+0x40a/0x550 [ 305.196072][T11820] should_failslab+0xac/0x100 [ 305.196102][T11820] ? mas_alloc_nodes+0x25b/0x7e0 [ 305.196130][T11820] kmem_cache_alloc_noprof+0x70/0x380 [ 305.196164][T11820] mas_alloc_nodes+0x25b/0x7e0 [ 305.196209][T11820] mas_preallocate+0x575/0x8d0 [ 305.196244][T11820] ? __pfx_mas_preallocate+0x10/0x10 [ 305.196284][T11820] ? __mas_set_range+0x133/0x3c0 [ 305.196319][T11820] __split_vma+0x2f6/0xbf0 [ 305.196357][T11820] ? __pfx___split_vma+0x10/0x10 [ 305.196393][T11820] ? mas_find+0x950/0xbb0 [ 305.196420][T11820] ? __pfx_up_write+0x10/0x10 [ 305.196449][T11820] vms_gather_munmap_vmas+0x4c1/0x1600 [ 305.196498][T11820] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 305.196536][T11820] ? mas_find+0x8c0/0xbb0 [ 305.196570][T11820] mmap_region+0xa52/0x2fc0 [ 305.196611][T11820] ? validate_chain+0x11e/0x5920 [ 305.196654][T11820] ? __pfx_mmap_region+0x10/0x10 [ 305.196696][T11820] ? mark_lock+0x9a/0x360 [ 305.196760][T11820] ? aa_get_newest_label+0xff/0x6f0 [ 305.196799][T11820] ? __pfx_aa_get_newest_label+0x10/0x10 [ 305.196833][T11820] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 305.196858][T11820] ? rcu_is_watching+0x15/0xb0 [ 305.196884][T11820] ? apparmor_capable+0x13b/0x1b0 [ 305.196912][T11820] ? bpf_lsm_capable+0x9/0x10 [ 305.196945][T11820] ? shmem_mapping+0xd/0x50 [ 305.196981][T11820] do_mmap+0xecc/0x13a0 [ 305.197020][T11820] ? ima_file_mmap+0x17e/0x220 [ 305.197043][T11820] ? __pfx_do_mmap+0x10/0x10 [ 305.197072][T11820] ? down_write_killable+0x19e/0x260 [ 305.197092][T11820] ? vm_mmap_pgoff+0x212/0x530 [ 305.197113][T11820] ? __pfx_down_write_killable+0x10/0x10 [ 305.197131][T11820] ? common_file_perm+0x1a6/0x210 [ 305.197171][T11820] vm_mmap_pgoff+0x2a0/0x530 [ 305.197209][T11820] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 305.197230][T11820] ? hugetlbfs_get_inode+0x45f/0x690 [ 305.197268][T11820] ? hugetlb_file_setup+0x3dc/0x5c0 [ 305.197300][T11820] ksys_mmap_pgoff+0x53e/0x720 [ 305.197340][T11820] do_syscall_64+0xf3/0x230 [ 305.197371][T11820] ? clear_bhb_loop+0x35/0x90 [ 305.197404][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.197432][T11820] RIP: 0033:0x7f8aedb8d169 [ 305.197451][T11820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.197467][T11820] RSP: 002b:00007f8aee992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 305.197490][T11820] RAX: ffffffffffffffda RBX: 00007f8aedda5fa0 RCX: 00007f8aedb8d169 [ 305.197505][T11820] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 305.197518][T11820] RBP: 00007f8aee992090 R08: ffffffffffffffff R09: 0000000000000000 [ 305.197531][T11820] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000002 [ 305.197543][T11820] R13: 0000000000000001 R14: 00007f8aedda5fa0 R15: 00007ffee1c798a8 [ 305.197573][T11820] [ 305.788996][T11834] __nla_validate_parse: 6 callbacks suppressed [ 305.789018][T11834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2061'. [ 305.884018][T11837] team0: Unable to change to the same mode the team is in [ 305.964956][T11839] vxcan3: entered allmulticast mode [ 306.021706][T11846] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 306.229445][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 306.246638][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 306.290947][T11853] tipc: Enabling of bearer rejected, failed to enable media [ 306.443084][T11864] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2073'. [ 306.518341][T11870] netlink: 'syz.3.2071': attribute type 1 has an invalid length. [ 306.539449][T11870] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2071'. [ 306.836148][T11887] FAULT_INJECTION: forcing a failure. [ 306.836148][T11887] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.845345][T11882] vxcan3: entered allmulticast mode [ 306.856980][T11887] CPU: 0 UID: 0 PID: 11887 Comm: syz.1.2079 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 306.857009][T11887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.857022][T11887] Call Trace: [ 306.857030][T11887] [ 306.857039][T11887] dump_stack_lvl+0x241/0x360 [ 306.857071][T11887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.857102][T11887] ? __pfx__printk+0x10/0x10 [ 306.857127][T11887] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 306.857167][T11887] should_fail_ex+0x40a/0x550 [ 306.857205][T11887] prepare_alloc_pages+0x1da/0x5b0 [ 306.857238][T11887] __alloc_frozen_pages_noprof+0x16f/0x710 [ 306.857267][T11887] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 306.857293][T11887] ? _copy_from_iter+0x191/0x1c40 [ 306.857322][T11887] ? rep_movs_alternative+0x4a/0x70 [ 306.857351][T11887] ? __virt_addr_valid+0x183/0x530 [ 306.857378][T11887] alloc_pages_mpol+0x311/0x660 [ 306.857413][T11887] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 306.857445][T11887] ? __virt_addr_valid+0x183/0x530 [ 306.857463][T11887] ? __virt_addr_valid+0x45f/0x530 [ 306.857489][T11887] alloc_pages_noprof+0x121/0x190 [ 306.857520][T11887] af_alg_sendmsg+0x145b/0x24d0 [ 306.857577][T11887] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 306.857610][T11887] ? __pfx_aa_sk_perm+0x10/0x10 [ 306.857641][T11887] ? __import_iovec+0x582/0x830 [ 306.857671][T11887] ? aa_sock_msg_perm+0x91/0x160 [ 306.857704][T11887] ? skcipher_sendmsg+0x28/0xf0 [ 306.857739][T11887] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 306.857769][T11887] __sock_sendmsg+0x221/0x270 [ 306.857805][T11887] ____sys_sendmsg+0x53a/0x860 [ 306.857841][T11887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.857865][T11887] ? __fget_files+0x2a/0x410 [ 306.857900][T11887] ? __fget_files+0x2a/0x410 [ 306.857941][T11887] __sys_sendmsg+0x269/0x350 [ 306.857973][T11887] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.858014][T11887] ? do_sys_openat2+0x17a/0x1d0 [ 306.858074][T11887] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.858114][T11887] ? do_syscall_64+0x100/0x230 [ 306.858149][T11887] ? do_syscall_64+0xb6/0x230 [ 306.858184][T11887] do_syscall_64+0xf3/0x230 [ 306.858215][T11887] ? clear_bhb_loop+0x35/0x90 [ 306.858248][T11887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.858277][T11887] RIP: 0033:0x7f8aedb8d169 [ 306.858295][T11887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.858313][T11887] RSP: 002b:00007f8aee992038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.858335][T11887] RAX: ffffffffffffffda RBX: 00007f8aedda5fa0 RCX: 00007f8aedb8d169 [ 306.858351][T11887] RDX: 0000000000048880 RSI: 00002000000001c0 RDI: 0000000000000004 [ 306.858364][T11887] RBP: 00007f8aee992090 R08: 0000000000000000 R09: 0000000000000000 [ 306.858376][T11887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.858389][T11887] R13: 0000000000000000 R14: 00007f8aedda5fa0 R15: 00007ffee1c798a8 [ 306.858420][T11887] [ 307.270055][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'. [ 307.310534][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2081'. [ 307.378738][T11898] vlan0: entered promiscuous mode [ 307.383963][T11898] ip6gretap0: entered promiscuous mode [ 307.430710][T11894] tipc: Enabling of bearer rejected, failed to enable media [ 307.501113][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 307.612981][T11916] netlink: 'syz.0.2088': attribute type 29 has an invalid length. [ 307.672086][T11917] netlink: 'syz.0.2088': attribute type 29 has an invalid length. [ 307.723748][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.738994][T11916] netlink: 'syz.0.2088': attribute type 29 has an invalid length. [ 307.938557][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2095'. [ 308.052045][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 308.207664][T11946] tipc: Enabling of bearer rejected, failed to enable media [ 308.442040][T11951] wireguard0: entered promiscuous mode [ 308.447927][T11951] wireguard0: entered allmulticast mode [ 308.491086][T11955] wireguard0: entered promiscuous mode [ 308.499299][T11955] wireguard0: entered allmulticast mode [ 308.995797][T11979] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20004 [ 309.288765][T11995] wg1: left promiscuous mode [ 309.298540][T11995] wg1: left allmulticast mode [ 309.325324][T11995] macvtap0: left promiscuous mode [ 309.330866][T11995] macvtap0: left allmulticast mode [ 309.369663][T11996] tipc: Enabling of bearer rejected, failed to enable media [ 309.720321][T12014] wireguard0: entered promiscuous mode [ 309.725891][T12014] wireguard0: entered allmulticast mode [ 309.921736][T12029] FAULT_INJECTION: forcing a failure. [ 309.921736][T12029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.942025][T12029] CPU: 0 UID: 0 PID: 12029 Comm: syz.4.2123 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 309.942054][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.942067][T12029] Call Trace: [ 309.942074][T12029] [ 309.942084][T12029] dump_stack_lvl+0x241/0x360 [ 309.942116][T12029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.942140][T12029] ? __pfx__printk+0x10/0x10 [ 309.942171][T12029] should_fail_ex+0x40a/0x550 [ 309.942210][T12029] _copy_to_user+0x31/0xb0 [ 309.942242][T12029] bpf_verifier_vlog+0x46d/0x860 [ 309.942274][T12029] __btf_verifier_log+0xd5/0x120 [ 309.942302][T12029] ? bpf_verifier_vlog+0x47a/0x860 [ 309.942325][T12029] ? __pfx___btf_verifier_log+0x10/0x10 [ 309.942359][T12029] ? btf_parse_hdr+0x1e3/0x710 [ 309.942385][T12029] btf_parse_hdr+0x323/0x710 [ 309.942412][T12029] btf_new_fd+0x38b/0xca0 [ 309.942434][T12029] ? apparmor_capable+0x13b/0x1b0 [ 309.942468][T12029] ? __pfx_btf_new_fd+0x10/0x10 [ 309.942497][T12029] ? bpf_btf_load+0xcf/0x1a0 [ 309.942532][T12029] __sys_bpf+0x6f2/0x820 [ 309.942563][T12029] ? __pfx___sys_bpf+0x10/0x10 [ 309.942642][T12029] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 309.942678][T12029] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.942712][T12029] ? do_syscall_64+0x100/0x230 [ 309.942750][T12029] __x64_sys_bpf+0x7c/0x90 [ 309.942777][T12029] do_syscall_64+0xf3/0x230 [ 309.942807][T12029] ? clear_bhb_loop+0x35/0x90 [ 309.942840][T12029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.942868][T12029] RIP: 0033:0x7fd8e298d169 [ 309.942887][T12029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.942905][T12029] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.942928][T12029] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 309.942944][T12029] RDX: 0000000000000028 RSI: 0000200000000a00 RDI: 0000000000000012 [ 309.942957][T12029] RBP: 00007fd8e383c090 R08: 0000000000000000 R09: 0000000000000000 [ 309.942970][T12029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.942981][T12029] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 309.943012][T12029] [ 310.180637][T12028] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 310.188746][T12028] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 310.196994][T12028] netlink: 'syz.3.2122': attribute type 2 has an invalid length. [ 310.402920][T12039] x_tables: duplicate underflow at hook 1 [ 310.503422][T12043] tipc: Enabling of bearer rejected, failed to enable media [ 310.672827][T12046] FAULT_INJECTION: forcing a failure. [ 310.672827][T12046] name failslab, interval 1, probability 0, space 0, times 0 [ 310.724499][T12046] CPU: 0 UID: 0 PID: 12046 Comm: syz.0.2129 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 310.724529][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.724551][T12046] Call Trace: [ 310.724559][T12046] [ 310.724568][T12046] dump_stack_lvl+0x241/0x360 [ 310.724599][T12046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.724623][T12046] ? __pfx__printk+0x10/0x10 [ 310.724646][T12046] ? fs_reclaim_acquire+0x93/0x130 [ 310.724668][T12046] ? __pfx___might_resched+0x10/0x10 [ 310.724700][T12046] should_fail_ex+0x40a/0x550 [ 310.724737][T12046] should_failslab+0xac/0x100 [ 310.724767][T12046] __kmalloc_noprof+0xdd/0x4c0 [ 310.724796][T12046] ? tomoyo_encode+0x26f/0x540 [ 310.724823][T12046] tomoyo_encode+0x26f/0x540 [ 310.724852][T12046] tomoyo_realpath_from_path+0x59e/0x5e0 [ 310.724888][T12046] tomoyo_path_number_perm+0x239/0x770 [ 310.724917][T12046] ? __lock_acquire+0x1397/0x2100 [ 310.724952][T12046] ? tomoyo_path_number_perm+0x209/0x770 [ 310.724985][T12046] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 310.725059][T12046] ? __fget_files+0x2a/0x410 [ 310.725095][T12046] ? __fget_files+0x2a/0x410 [ 310.725132][T12046] security_file_ioctl+0xc6/0x2a0 [ 310.725163][T12046] __se_sys_ioctl+0x46/0x170 [ 310.725189][T12046] do_syscall_64+0xf3/0x230 [ 310.725221][T12046] ? clear_bhb_loop+0x35/0x90 [ 310.725252][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.725280][T12046] RIP: 0033:0x7fc5dff8d169 [ 310.725298][T12046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.725316][T12046] RSP: 002b:00007fc5e0e26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.725337][T12046] RAX: ffffffffffffffda RBX: 00007fc5e01a5fa0 RCX: 00007fc5dff8d169 [ 310.725352][T12046] RDX: 0000200000000540 RSI: 0000000040305829 RDI: 0000000000000007 [ 310.725366][T12046] RBP: 00007fc5e0e26090 R08: 0000000000000000 R09: 0000000000000000 [ 310.725379][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.725392][T12046] R13: 0000000000000000 R14: 00007fc5e01a5fa0 R15: 00007ffd5b499588 [ 310.725423][T12046] [ 310.725441][T12046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.825156][T12049] FAULT_INJECTION: forcing a failure. [ 310.825156][T12049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.051855][T12049] CPU: 1 UID: 0 PID: 12049 Comm: syz.4.2131 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 311.051886][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.051900][T12049] Call Trace: [ 311.051909][T12049] [ 311.051918][T12049] dump_stack_lvl+0x241/0x360 [ 311.051951][T12049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.051975][T12049] ? __pfx__printk+0x10/0x10 [ 311.051999][T12049] ? __pfx_lock_release+0x10/0x10 [ 311.052041][T12049] should_fail_ex+0x40a/0x550 [ 311.052080][T12049] _copy_from_user+0x2d/0xb0 [ 311.052111][T12049] sk_getsockopt+0x1cb/0x31f0 [ 311.052146][T12049] ? __pfx_sk_getsockopt+0x10/0x10 [ 311.052193][T12049] ? __pfx___might_resched+0x10/0x10 [ 311.052223][T12049] ? __might_fault+0xaa/0x120 [ 311.052246][T12049] ? __pfx_lock_release+0x10/0x10 [ 311.052287][T12049] ? __might_fault+0xaa/0x120 [ 311.052308][T12049] ? __might_fault+0xc6/0x120 [ 311.052333][T12049] do_sock_getsockopt+0x29f/0x740 [ 311.052367][T12049] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 311.052392][T12049] ? __fget_files+0x2a/0x410 [ 311.052425][T12049] ? __fget_files+0x395/0x410 [ 311.052455][T12049] ? __fget_files+0x2a/0x410 [ 311.052494][T12049] __x64_sys_getsockopt+0x2a1/0x370 [ 311.052527][T12049] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 311.052554][T12049] ? do_syscall_64+0x100/0x230 [ 311.052590][T12049] ? do_syscall_64+0xb6/0x230 [ 311.052624][T12049] do_syscall_64+0xf3/0x230 [ 311.052655][T12049] ? clear_bhb_loop+0x35/0x90 [ 311.052688][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.052716][T12049] RIP: 0033:0x7fd8e298d169 [ 311.052734][T12049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.052751][T12049] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 311.052780][T12049] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 311.052801][T12049] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 311.052814][T12049] RBP: 00007fd8e383c090 R08: 0000200000000040 R09: 0000000000000000 [ 311.052828][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.052840][T12049] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 311.052872][T12049] [ 311.393157][T12058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.438223][T12056] FAULT_INJECTION: forcing a failure. [ 311.438223][T12056] name failslab, interval 1, probability 0, space 0, times 0 [ 311.495898][T12056] CPU: 0 UID: 0 PID: 12056 Comm: syz.4.2134 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 311.495930][T12056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.495944][T12056] Call Trace: [ 311.495951][T12056] [ 311.495961][T12056] dump_stack_lvl+0x241/0x360 [ 311.495993][T12056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.496017][T12056] ? __pfx__printk+0x10/0x10 [ 311.496041][T12056] ? __kmalloc_noprof+0xb5/0x4c0 [ 311.496077][T12056] ? __pfx___might_resched+0x10/0x10 [ 311.496110][T12056] should_fail_ex+0x40a/0x550 [ 311.496148][T12056] should_failslab+0xac/0x100 [ 311.496179][T12056] __kmalloc_noprof+0xdd/0x4c0 [ 311.496207][T12056] ? __local_bh_enable_ip+0x168/0x200 [ 311.496231][T12056] ? sock_kmalloc+0xd7/0x160 [ 311.496263][T12056] sock_kmalloc+0xd7/0x160 [ 311.496294][T12056] af_alg_alloc_areq+0x90/0x260 [ 311.496328][T12056] skcipher_recvmsg+0x382/0x1230 [ 311.496369][T12056] ? aa_file_perm+0x3ef/0xf50 [ 311.496401][T12056] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 311.496434][T12056] ? aa_sock_msg_perm+0x91/0x160 [ 311.496467][T12056] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 311.496492][T12056] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 311.496527][T12056] sock_recvmsg+0x22f/0x280 [ 311.496572][T12056] sock_read_iter+0x2c4/0x3d0 [ 311.496604][T12056] ? __pfx_sock_read_iter+0x10/0x10 [ 311.496647][T12056] ? bpf_lsm_file_permission+0x9/0x10 [ 311.496686][T12056] vfs_read+0x975/0xb40 [ 311.496715][T12056] ? __pfx_vfs_read+0x10/0x10 [ 311.496733][T12056] ? do_sys_openat2+0x17a/0x1d0 [ 311.496767][T12056] ? __fget_files+0x2a/0x410 [ 311.496800][T12056] ? __fget_files+0x2a/0x410 [ 311.496842][T12056] ksys_read+0x18f/0x2b0 [ 311.496866][T12056] ? __pfx_ksys_read+0x10/0x10 [ 311.496889][T12056] ? do_syscall_64+0x100/0x230 [ 311.496923][T12056] ? do_syscall_64+0xb6/0x230 [ 311.496957][T12056] do_syscall_64+0xf3/0x230 [ 311.496988][T12056] ? clear_bhb_loop+0x35/0x90 [ 311.497021][T12056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.497049][T12056] RIP: 0033:0x7fd8e298d169 [ 311.497068][T12056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.497085][T12056] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.497106][T12056] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 311.497121][T12056] RDX: 0000000000001023 RSI: 0000200000001540 RDI: 0000000000000004 [ 311.497134][T12056] RBP: 00007fd8e383c090 R08: 0000000000000000 R09: 0000000000000000 [ 311.497146][T12056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.497158][T12056] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 311.497190][T12056] [ 311.826118][T12072] wireguard0: entered promiscuous mode [ 311.867394][T12072] wireguard0: entered allmulticast mode [ 312.091933][T12085] __nla_validate_parse: 11 callbacks suppressed [ 312.091949][T12085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2143'. [ 312.342737][T12098] FAULT_INJECTION: forcing a failure. [ 312.342737][T12098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.372324][T12098] CPU: 1 UID: 0 PID: 12098 Comm: syz.1.2148 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 312.372358][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.372371][T12098] Call Trace: [ 312.372379][T12098] [ 312.372388][T12098] dump_stack_lvl+0x241/0x360 [ 312.372429][T12098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.372453][T12098] ? __pfx__printk+0x10/0x10 [ 312.372478][T12098] ? __pfx_lock_release+0x10/0x10 [ 312.372520][T12098] should_fail_ex+0x40a/0x550 [ 312.372557][T12098] _copy_from_iter+0x1df/0x1c40 [ 312.372583][T12098] ? __virt_addr_valid+0x183/0x530 [ 312.372605][T12098] ? __pfx_lock_release+0x10/0x10 [ 312.372644][T12098] ? __alloc_skb+0x28f/0x440 [ 312.372667][T12098] ? __pfx__copy_from_iter+0x10/0x10 [ 312.372695][T12098] ? __virt_addr_valid+0x183/0x530 [ 312.372714][T12098] ? __virt_addr_valid+0x183/0x530 [ 312.372733][T12098] ? __virt_addr_valid+0x45f/0x530 [ 312.372754][T12098] ? __phys_addr_symbol+0x2f/0x70 [ 312.372773][T12098] ? __check_object_size+0x47a/0x730 [ 312.372807][T12098] netlink_sendmsg+0x742/0xcb0 [ 312.372852][T12098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.372878][T12098] ? aa_sock_msg_perm+0x91/0x160 [ 312.372916][T12098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.372935][T12098] __sock_sendmsg+0x221/0x270 [ 312.372972][T12098] ____sys_sendmsg+0x53a/0x860 [ 312.373007][T12098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.373032][T12098] ? __fget_files+0x2a/0x410 [ 312.373066][T12098] ? __fget_files+0x2a/0x410 [ 312.373106][T12098] __sys_sendmsg+0x269/0x350 [ 312.373137][T12098] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.373177][T12098] ? do_sys_openat2+0x17a/0x1d0 [ 312.373236][T12098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.373270][T12098] ? do_syscall_64+0x100/0x230 [ 312.373308][T12098] ? do_syscall_64+0xb6/0x230 [ 312.373341][T12098] do_syscall_64+0xf3/0x230 [ 312.373371][T12098] ? clear_bhb_loop+0x35/0x90 [ 312.373413][T12098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.373441][T12098] RIP: 0033:0x7f8aedb8d169 [ 312.373459][T12098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.373477][T12098] RSP: 002b:00007f8aee992038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.373499][T12098] RAX: ffffffffffffffda RBX: 00007f8aedda5fa0 RCX: 00007f8aedb8d169 [ 312.373514][T12098] RDX: 00000000000000d0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 312.373527][T12098] RBP: 00007f8aee992090 R08: 0000000000000000 R09: 0000000000000000 [ 312.373540][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.373552][T12098] R13: 0000000000000000 R14: 00007f8aedda5fa0 R15: 00007ffee1c798a8 [ 312.373583][T12098] [ 312.727804][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 312.774222][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'. [ 312.787481][T12103] tipc: Enabling of bearer rejected, failed to enable media [ 312.994584][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 313.090150][T12128] netlink: 'syz.0.2160': attribute type 2 has an invalid length. [ 313.116092][T12131] wireguard0: entered promiscuous mode [ 313.123470][T12131] wireguard0: entered allmulticast mode [ 313.173360][T12137] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2162'. [ 313.193003][T12128] netlink: 'syz.0.2160': attribute type 1 has an invalid length. [ 313.194726][ T30] audit: type=1800 audit(1742899178.998:6): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2163" name=3199 dev="tmpfs" ino=2223 res=0 errno=0 [ 313.479342][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 313.508694][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2166'. [ 313.536615][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'. [ 313.547570][T12154] tipc: Enabling of bearer rejected, failed to enable media [ 313.584962][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2168'. [ 313.610042][T12163] macvlan2: entered promiscuous mode [ 313.626024][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'. [ 313.636933][T12163] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 313.647795][T12163] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 313.749592][T12170] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 314.190904][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.219235][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.269864][T12189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.383884][T12193] wireguard0: entered promiscuous mode [ 314.394189][T12193] wireguard0: entered allmulticast mode [ 314.715251][T12202] netlink: 'syz.1.2181': attribute type 2 has an invalid length. [ 314.745863][T12202] netlink: 'syz.1.2181': attribute type 9 has an invalid length. [ 315.764856][T12214] FAULT_INJECTION: forcing a failure. [ 315.764856][T12214] name fail_futex, interval 1, probability 0, space 0, times 1 [ 315.789286][T12214] CPU: 1 UID: 0 PID: 12214 Comm: syz.3.2186 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 315.789319][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.789333][T12214] Call Trace: [ 315.789340][T12214] [ 315.789349][T12214] dump_stack_lvl+0x241/0x360 [ 315.789381][T12214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.789404][T12214] ? __pfx__printk+0x10/0x10 [ 315.789428][T12214] ? __pfx_register_lock_class+0x10/0x10 [ 315.789469][T12214] should_fail_ex+0x40a/0x550 [ 315.789511][T12214] get_futex_key+0x1a4/0xf40 [ 315.789545][T12214] ? __pfx_get_futex_key+0x10/0x10 [ 315.789573][T12214] ? __lock_acquire+0x1397/0x2100 [ 315.789613][T12214] futex_wake+0x12a/0x5c0 [ 315.789653][T12214] ? __pfx_futex_wake+0x10/0x10 [ 315.789701][T12214] do_futex+0x392/0x560 [ 315.789732][T12214] ? __pfx_do_futex+0x10/0x10 [ 315.789757][T12214] ? __mutex_unlock_slowpath+0x227/0x800 [ 315.789791][T12214] ? __might_fault+0xaa/0x120 [ 315.789815][T12214] mm_release+0x193/0x430 [ 315.789841][T12214] ? exit_robust_list+0x2cf/0x2f0 [ 315.789868][T12214] ? __pfx_mm_release+0x10/0x10 [ 315.789891][T12214] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.789916][T12214] ? lockdep_hardirqs_on+0x99/0x150 [ 315.789956][T12214] exit_mm+0xb0/0x310 [ 315.789989][T12214] ? __pfx_exit_mm+0x10/0x10 [ 315.790019][T12214] ? taskstats_exit+0x326/0xa60 [ 315.790057][T12214] do_exit+0x9ad/0x2940 [ 315.790096][T12214] ? __pfx_do_exit+0x10/0x10 [ 315.790133][T12214] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 315.790168][T12214] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.790199][T12214] ? cgroup_freezing+0x2a8/0x350 [ 315.790241][T12214] do_group_exit+0x207/0x2c0 [ 315.790271][T12214] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.790297][T12214] ? lockdep_hardirqs_on+0x99/0x150 [ 315.790329][T12214] get_signal+0x168c/0x1720 [ 315.790364][T12214] ? __pfx_poll_select_finish+0x10/0x10 [ 315.790395][T12214] ? __pfx_get_signal+0x10/0x10 [ 315.790429][T12214] arch_do_signal_or_restart+0x96/0x860 [ 315.790459][T12214] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 315.790484][T12214] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 315.790530][T12214] ? syscall_exit_to_user_mode+0xa3/0x340 [ 315.790563][T12214] syscall_exit_to_user_mode+0xce/0x340 [ 315.790597][T12214] do_syscall_64+0x100/0x230 [ 315.790628][T12214] ? clear_bhb_loop+0x35/0x90 [ 315.790662][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.790691][T12214] RIP: 0033:0x7fc49878d169 [ 315.790710][T12214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.790728][T12214] RSP: 002b:00007fc49966e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 315.790751][T12214] RAX: 0000000000000001 RBX: 00007fc4989a6160 RCX: 00007fc49878d169 [ 315.790765][T12214] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00002000000002c0 [ 315.790778][T12214] RBP: 00007fc49966e090 R08: 0000000000000000 R09: 0000000000000000 [ 315.790791][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.790803][T12214] R13: 0000000000000001 R14: 00007fc4989a6160 R15: 00007ffe6bf08218 [ 315.790833][T12214] [ 316.126956][T12224] IPv6: Can't replace route, no match found [ 316.546377][T12234] tipc: Enabling of bearer rejected, failed to enable media [ 316.646768][T12240] netlink: 'syz.1.2196': attribute type 27 has an invalid length. [ 316.754766][T12240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.804987][T12240] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.859689][T12240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.156422][T12257] lo speed is unknown, defaulting to 1000 [ 317.164436][T12257] lo speed is unknown, defaulting to 1000 [ 317.352649][T12268] batadv_slave_1: entered promiscuous mode [ 317.392614][T12270] __nla_validate_parse: 10 callbacks suppressed [ 317.392638][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 317.448906][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 317.449303][T12267] batadv_slave_1: left promiscuous mode [ 317.503049][T12270] tipc: Enabling of bearer rejected, failed to enable media [ 317.619169][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.698818][T12277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.827882][T12280] netlink: 'syz.4.2207': attribute type 1 has an invalid length. [ 317.849954][T12280] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2207'. [ 317.885785][T12280] netlink: 'syz.4.2207': attribute type 1 has an invalid length. [ 317.911266][T12280] netlink: 'syz.4.2207': attribute type 2 has an invalid length. [ 318.563089][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 318.576910][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2216'. [ 318.602044][T12303] tipc: Enabling of bearer rejected, failed to enable media [ 318.608793][T12306] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 318.842169][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2220'. [ 319.124495][T12332] lo speed is unknown, defaulting to 1000 [ 319.135700][T12332] lo speed is unknown, defaulting to 1000 [ 319.240897][T12335] FAULT_INJECTION: forcing a failure. [ 319.240897][T12335] name failslab, interval 1, probability 0, space 0, times 0 [ 319.287281][T12335] CPU: 1 UID: 0 PID: 12335 Comm: syz.3.2227 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 319.287311][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.287325][T12335] Call Trace: [ 319.287331][T12335] [ 319.287340][T12335] dump_stack_lvl+0x241/0x360 [ 319.287374][T12335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.287397][T12335] ? __pfx__printk+0x10/0x10 [ 319.287421][T12335] ? fs_reclaim_acquire+0x93/0x130 [ 319.287445][T12335] ? __pfx___might_resched+0x10/0x10 [ 319.287479][T12335] should_fail_ex+0x40a/0x550 [ 319.287519][T12335] should_failslab+0xac/0x100 [ 319.287550][T12335] __kmalloc_noprof+0xdd/0x4c0 [ 319.287579][T12335] ? tomoyo_encode+0x26f/0x540 [ 319.287606][T12335] tomoyo_encode+0x26f/0x540 [ 319.287634][T12335] tomoyo_realpath_from_path+0x59e/0x5e0 [ 319.287670][T12335] tomoyo_path_number_perm+0x239/0x770 [ 319.287740][T12335] ? __lock_acquire+0x1397/0x2100 [ 319.287776][T12335] ? tomoyo_path_number_perm+0x209/0x770 [ 319.287808][T12335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.287883][T12335] ? __fget_files+0x2a/0x410 [ 319.287917][T12335] ? __fget_files+0x2a/0x410 [ 319.287954][T12335] security_file_ioctl+0xc6/0x2a0 [ 319.287984][T12335] __se_sys_ioctl+0x46/0x170 [ 319.288011][T12335] do_syscall_64+0xf3/0x230 [ 319.288043][T12335] ? clear_bhb_loop+0x35/0x90 [ 319.288077][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.288105][T12335] RIP: 0033:0x7fc49878d169 [ 319.288125][T12335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.288142][T12335] RSP: 002b:00007fc4996b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.288165][T12335] RAX: ffffffffffffffda RBX: 00007fc4989a5fa0 RCX: 00007fc49878d169 [ 319.288181][T12335] RDX: 0000200000000540 RSI: 0000000040305829 RDI: 0000000000000007 [ 319.288194][T12335] RBP: 00007fc4996b0090 R08: 0000000000000000 R09: 0000000000000000 [ 319.288207][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.288219][T12335] R13: 0000000000000000 R14: 00007fc4989a5fa0 R15: 00007ffe6bf08218 [ 319.288252][T12335] [ 319.288278][T12335] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.748632][T12346] 8021q: VLANs not supported on bond0 [ 320.059314][T12351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2226'. [ 320.211739][T12364] wireguard0: entered promiscuous mode [ 320.238701][T12364] wireguard0: entered allmulticast mode [ 320.818761][T12392] tipc: Enabled bearer , priority 0 [ 320.880244][T12390] netlink: 'syz.2.2249': attribute type 1 has an invalid length. [ 320.924259][T12390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.953524][T12390] bond4: (slave gretap1): making interface the new active one [ 320.963744][T12390] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 320.993388][T12403] netlink: 'syz.1.2254': attribute type 2 has an invalid length. [ 321.001646][T12403] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2254'. [ 321.229828][T12411] lo speed is unknown, defaulting to 1000 [ 321.253234][T12411] lo speed is unknown, defaulting to 1000 [ 321.294906][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 321.330888][T12414] vlan3: entered promiscuous mode [ 321.336161][T12414] vlan3: entered allmulticast mode [ 321.348126][T12414] 0·: entered allmulticast mode [ 321.765382][T12440] wireguard0: entered promiscuous mode [ 321.771636][T12440] wireguard0: entered allmulticast mode [ 322.162947][T12457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.517900][T12469] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 322.539036][T12466] lo speed is unknown, defaulting to 1000 [ 322.587489][T12466] lo speed is unknown, defaulting to 1000 [ 322.611585][T12469] lo speed is unknown, defaulting to 1000 [ 322.666153][T12469] lo speed is unknown, defaulting to 1000 [ 323.057398][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2276'. [ 323.116948][T12479] wireguard0: entered promiscuous mode [ 323.127023][T12479] wireguard0: entered allmulticast mode [ 323.939123][T12497] netlink: 'syz.1.2283': attribute type 2 has an invalid length. [ 323.954153][T12499] netlink: 'syz.4.2282': attribute type 3 has an invalid length. [ 323.983548][T12497] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2283'. [ 324.069993][T12505] netlink: 'syz.0.2284': attribute type 1 has an invalid length. [ 324.085567][T12505] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2284'. [ 324.113648][T12505] netlink: 'syz.0.2284': attribute type 1 has an invalid length. [ 324.131991][T12505] netlink: 'syz.0.2284': attribute type 2 has an invalid length. [ 324.290782][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2288'. [ 324.366963][T12515] wireguard0: entered promiscuous mode [ 324.374163][T12515] wireguard0: entered allmulticast mode [ 324.866236][T12537] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2298'. [ 324.896934][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 324.915292][T12536] lo speed is unknown, defaulting to 1000 [ 324.921476][T12537] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2298'. [ 324.938167][T12536] lo speed is unknown, defaulting to 1000 [ 325.086989][T12543] netlink: 'syz.0.2300': attribute type 1 has an invalid length. [ 325.124896][T12543] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2300'. [ 325.185695][T12543] netlink: 'syz.0.2300': attribute type 1 has an invalid length. [ 325.194049][T12543] netlink: 'syz.0.2300': attribute type 2 has an invalid length. [ 325.410270][T12552] tipc: Enabled bearer , priority 0 [ 325.427347][T12554] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2304'. [ 325.522517][T12558] wireguard0: entered promiscuous mode [ 325.529290][T12558] wireguard0: entered allmulticast mode [ 325.538816][T12556] lo speed is unknown, defaulting to 1000 [ 325.545754][T12556] lo speed is unknown, defaulting to 1000 [ 325.757504][T12570] FAULT_INJECTION: forcing a failure. [ 325.757504][T12570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.799362][T12570] CPU: 1 UID: 0 PID: 12570 Comm: syz.0.2309 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 325.799391][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.799405][T12570] Call Trace: [ 325.799412][T12570] [ 325.799421][T12570] dump_stack_lvl+0x241/0x360 [ 325.799453][T12570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.799475][T12570] ? __pfx__printk+0x10/0x10 [ 325.799501][T12570] should_fail_ex+0x40a/0x550 [ 325.799538][T12570] _copy_to_user+0x31/0xb0 [ 325.799570][T12570] bpf_verifier_vlog+0x46d/0x860 [ 325.799604][T12570] __btf_verifier_log+0xd5/0x120 [ 325.799636][T12570] ? bpf_verifier_vlog+0x47a/0x860 [ 325.799660][T12570] ? __pfx___btf_verifier_log+0x10/0x10 [ 325.799695][T12570] ? btf_parse_hdr+0x1e3/0x710 [ 325.799728][T12570] btf_parse_hdr+0x34d/0x710 [ 325.799755][T12570] btf_new_fd+0x38b/0xca0 [ 325.799776][T12570] ? apparmor_capable+0x13b/0x1b0 [ 325.799825][T12570] ? __pfx_btf_new_fd+0x10/0x10 [ 325.799858][T12570] ? bpf_btf_load+0xcf/0x1a0 [ 325.799893][T12570] __sys_bpf+0x6f2/0x820 [ 325.799924][T12570] ? __pfx___sys_bpf+0x10/0x10 [ 325.799966][T12570] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 325.800002][T12570] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.800037][T12570] ? do_syscall_64+0x100/0x230 [ 325.800072][T12570] __x64_sys_bpf+0x7c/0x90 [ 325.800100][T12570] do_syscall_64+0xf3/0x230 [ 325.800131][T12570] ? clear_bhb_loop+0x35/0x90 [ 325.800163][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.800192][T12570] RIP: 0033:0x7fc5dff8d169 [ 325.800210][T12570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.800228][T12570] RSP: 002b:00007fc5e0e26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.800251][T12570] RAX: ffffffffffffffda RBX: 00007fc5e01a5fa0 RCX: 00007fc5dff8d169 [ 325.800266][T12570] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 325.800279][T12570] RBP: 00007fc5e0e26090 R08: 0000000000000000 R09: 0000000000000000 [ 325.800292][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.800304][T12570] R13: 0000000000000001 R14: 00007fc5e01a5fa0 R15: 00007ffd5b499588 [ 325.800334][T12570] [ 326.434128][T12576] wireguard1: entered promiscuous mode [ 326.457811][T12576] wireguard1: entered allmulticast mode [ 326.532791][T12585] vxcan3: entered allmulticast mode [ 326.771921][T12595] openvswitch: netlink: Multiple metadata blocks provided [ 326.798253][T12593] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 326.806458][T12593] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2317'. [ 326.822888][T12593] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 326.831206][T12593] netlink: 'syz.4.2317': attribute type 2 has an invalid length. [ 326.959375][T12599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2320'. [ 326.978046][T12599] tipc: Invalid UDP bearer configuration [ 326.978098][T12599] tipc: Enabling of bearer rejected, failed to enable media [ 327.025669][T12606] FAULT_INJECTION: forcing a failure. [ 327.025669][T12606] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.104482][T12606] CPU: 0 UID: 0 PID: 12606 Comm: syz.4.2323 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 327.104516][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.104529][T12606] Call Trace: [ 327.104537][T12606] [ 327.104547][T12606] dump_stack_lvl+0x241/0x360 [ 327.104579][T12606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.104604][T12606] ? __pfx__printk+0x10/0x10 [ 327.104628][T12606] ? __lock_acquire+0x1397/0x2100 [ 327.104669][T12606] should_fail_ex+0x40a/0x550 [ 327.104707][T12606] prepare_alloc_pages+0x1da/0x5b0 [ 327.104739][T12606] __alloc_frozen_pages_noprof+0x16f/0x710 [ 327.104768][T12606] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 327.104800][T12606] ? __pfx_validate_chain+0x10/0x10 [ 327.104827][T12606] ? __pfx_lock_acquire+0x10/0x10 [ 327.104863][T12606] alloc_pages_mpol+0x311/0x660 [ 327.104898][T12606] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 327.104937][T12606] vma_alloc_folio_noprof+0x12b/0x260 [ 327.104970][T12606] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 327.105010][T12606] folio_prealloc+0x2e/0x170 [ 327.105034][T12606] __handle_mm_fault+0x32e6/0x6ef0 [ 327.105065][T12606] ? mark_lock+0x9a/0x360 [ 327.105113][T12606] ? __pfx___handle_mm_fault+0x10/0x10 [ 327.105154][T12606] ? __pfx_lock_acquire+0x10/0x10 [ 327.105190][T12606] ? do_raw_spin_lock+0x14f/0x370 [ 327.105237][T12606] ? follow_page_pte+0x25a/0x1460 [ 327.105261][T12606] ? follow_page_pte+0x86a/0x1460 [ 327.105284][T12606] ? __pfx_lock_release+0x10/0x10 [ 327.105322][T12606] ? do_raw_spin_unlock+0x13c/0x8b0 [ 327.105378][T12606] ? __pfx___might_resched+0x10/0x10 [ 327.105410][T12606] handle_mm_fault+0x3e5/0x8d0 [ 327.105454][T12606] __get_user_pages+0x1a92/0x4140 [ 327.105486][T12606] ? mark_lock+0x9a/0x360 [ 327.105530][T12606] ? __pfx___get_user_pages+0x10/0x10 [ 327.105555][T12606] ? __pfx_down_read_killable+0x10/0x10 [ 327.105593][T12606] ? __pfx_lock_acquire+0x10/0x10 [ 327.105626][T12606] ? try_get_folio+0xf1/0x6f0 [ 327.105649][T12606] ? __pfx_lock_release+0x10/0x10 [ 327.105688][T12606] __gup_longterm_locked+0xe64/0x17f0 [ 327.105732][T12606] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.105763][T12606] ? __pfx___gup_longterm_locked+0x10/0x10 [ 327.105788][T12606] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 327.105833][T12606] gup_fast_fallback+0x2266/0x29c0 [ 327.105887][T12606] ? __pfx_gup_fast_fallback+0x10/0x10 [ 327.105907][T12606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.105973][T12606] ? is_valid_gup_args+0x124/0x200 [ 327.105998][T12606] pin_user_pages_fast+0xcc/0x160 [ 327.106023][T12606] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 327.106043][T12606] ? rcu_is_watching+0x15/0xb0 [ 327.106068][T12606] ? trace_kmalloc+0x1f/0xd0 [ 327.106096][T12606] ? rds_info_getsockopt+0x20c/0x600 [ 327.106130][T12606] rds_info_getsockopt+0x22e/0x600 [ 327.106159][T12606] ? __might_fault+0xaa/0x120 [ 327.106179][T12606] ? __pfx_lock_release+0x10/0x10 [ 327.106215][T12606] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 327.106248][T12606] ? __might_fault+0xc6/0x120 [ 327.106271][T12606] ? rds_getsockopt+0x323/0x530 [ 327.106293][T12606] ? __pfx_rds_getsockopt+0x10/0x10 [ 327.106317][T12606] do_sock_getsockopt+0x38e/0x740 [ 327.106350][T12606] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 327.106381][T12606] ? __fget_files+0x2a/0x410 [ 327.106413][T12606] ? __fget_files+0x395/0x410 [ 327.106441][T12606] ? __fget_files+0x2a/0x410 [ 327.106478][T12606] __x64_sys_getsockopt+0x2a1/0x370 [ 327.106512][T12606] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 327.106539][T12606] ? do_syscall_64+0x100/0x230 [ 327.106574][T12606] ? do_syscall_64+0xb6/0x230 [ 327.106608][T12606] do_syscall_64+0xf3/0x230 [ 327.106640][T12606] ? clear_bhb_loop+0x35/0x90 [ 327.106675][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.106701][T12606] RIP: 0033:0x7fd8e298d169 [ 327.106720][T12606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.106738][T12606] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 327.106760][T12606] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 327.106775][T12606] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 327.106787][T12606] RBP: 00007fd8e383c090 R08: 0000200000000040 R09: 0000000000000000 [ 327.106801][T12606] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002 [ 327.106814][T12606] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 327.106842][T12606] [ 327.726258][T12616] wireguard0: entered promiscuous mode [ 327.740632][T12616] wireguard0: entered allmulticast mode [ 327.780540][T12619] FAULT_INJECTION: forcing a failure. [ 327.780540][T12619] name failslab, interval 1, probability 0, space 0, times 0 [ 327.813225][T12619] CPU: 1 UID: 0 PID: 12619 Comm: syz.3.2328 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 327.813259][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.813271][T12619] Call Trace: [ 327.813279][T12619] [ 327.813288][T12619] dump_stack_lvl+0x241/0x360 [ 327.813321][T12619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.813346][T12619] ? __pfx__printk+0x10/0x10 [ 327.813369][T12619] ? __kmalloc_noprof+0xb5/0x4c0 [ 327.813401][T12619] ? __pfx___might_resched+0x10/0x10 [ 327.813434][T12619] should_fail_ex+0x40a/0x550 [ 327.813472][T12619] should_failslab+0xac/0x100 [ 327.813503][T12619] __kmalloc_noprof+0xdd/0x4c0 [ 327.813531][T12619] ? sock_kmalloc+0xd7/0x160 [ 327.813562][T12619] sock_kmalloc+0xd7/0x160 [ 327.813601][T12619] skcipher_recvmsg+0x5ff/0x1230 [ 327.813654][T12619] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 327.813686][T12619] ? aa_sock_msg_perm+0x91/0x160 [ 327.813720][T12619] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 327.813745][T12619] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 327.813779][T12619] sock_recvmsg+0x22f/0x280 [ 327.813814][T12619] sock_read_iter+0x2c4/0x3d0 [ 327.813847][T12619] ? __pfx_sock_read_iter+0x10/0x10 [ 327.813899][T12619] do_iter_readv_writev+0x71a/0x9d0 [ 327.813932][T12619] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 327.813963][T12619] ? bpf_lsm_file_permission+0x9/0x10 [ 327.813995][T12619] ? rw_verify_area+0x243/0x630 [ 327.814021][T12619] vfs_readv+0x2b3/0xa80 [ 327.814062][T12619] ? __pfx_vfs_readv+0x10/0x10 [ 327.814103][T12619] ? do_sys_openat2+0x17a/0x1d0 [ 327.814133][T12619] ? __fget_files+0x2a/0x410 [ 327.814165][T12619] ? __fget_files+0x395/0x410 [ 327.814199][T12619] ? __fget_files+0x2a/0x410 [ 327.814237][T12619] do_readv+0x1b6/0x360 [ 327.814272][T12619] ? __pfx_do_readv+0x10/0x10 [ 327.814303][T12619] ? do_syscall_64+0x100/0x230 [ 327.814337][T12619] ? do_syscall_64+0xb6/0x230 [ 327.814370][T12619] do_syscall_64+0xf3/0x230 [ 327.814400][T12619] ? clear_bhb_loop+0x35/0x90 [ 327.814433][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.814462][T12619] RIP: 0033:0x7fc49878d169 [ 327.814480][T12619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.814498][T12619] RSP: 002b:00007fc4996b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 327.814520][T12619] RAX: ffffffffffffffda RBX: 00007fc4989a5fa0 RCX: 00007fc49878d169 [ 327.814534][T12619] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 327.814546][T12619] RBP: 00007fc4996b0090 R08: 0000000000000000 R09: 0000000000000000 [ 327.814558][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.814569][T12619] R13: 0000000000000000 R14: 00007fc4989a5fa0 R15: 00007ffe6bf08218 [ 327.814608][T12619] [ 328.379850][T12637] tipc: Resetting bearer [ 328.405227][T12637] tipc: Enabling of bearer rejected, already enabled [ 328.422002][T12638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2335'. [ 328.447268][T12638] tipc: Invalid UDP bearer configuration [ 328.447338][T12638] tipc: Enabling of bearer rejected, failed to enable media [ 328.598094][ T6069] tipc: Resetting bearer [ 328.659904][T12642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.712426][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 328.733078][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 328.764773][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 328.797724][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 328.816916][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 328.935108][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 328.949457][T12659] IPv6: Can't replace route, no match found [ 328.964462][T12657] tun0: tun_chr_ioctl cmd 1074025673 [ 328.965469][T12659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2343'. [ 328.991753][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 329.332876][T12671] wireguard0: left promiscuous mode [ 329.340914][T12671] wireguard0: left allmulticast mode [ 329.353286][T12669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2347'. [ 329.365209][T12669] tipc: Invalid UDP bearer configuration [ 329.365258][T12669] tipc: Enabling of bearer rejected, failed to enable media [ 329.534492][T12684] team0: entered allmulticast mode [ 330.211061][T12705] tipc: Enabling of bearer rejected, failed to enable media [ 330.311866][T12708] netlink: 'syz.2.2362': attribute type 24 has an invalid length. [ 330.324283][T12682] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 330.346729][T12709] lo speed is unknown, defaulting to 1000 [ 330.370367][T12709] lo speed is unknown, defaulting to 1000 [ 330.514762][T12711] xt_TCPMSS: Only works on TCP SYN packets [ 330.575023][T12716] lo speed is unknown, defaulting to 1000 [ 330.591108][T12716] lo speed is unknown, defaulting to 1000 [ 331.302018][T12716] lo speed is unknown, defaulting to 1000 [ 331.347952][T12716] lo speed is unknown, defaulting to 1000 [ 331.519666][T12745] tipc: Enabling of bearer rejected, failed to enable media [ 331.537104][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 331.549081][T12718] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 331.589857][T12749] lo speed is unknown, defaulting to 1000 [ 331.635100][T12749] lo speed is unknown, defaulting to 1000 [ 332.578246][T12749] lo speed is unknown, defaulting to 1000 [ 332.597543][T12749] lo speed is unknown, defaulting to 1000 [ 332.749074][T12749] lo: entered promiscuous mode [ 332.758055][T12749] tunl0: entered promiscuous mode [ 332.766127][T12749] gre0: entered promiscuous mode [ 332.774776][T12749] gretap0: entered promiscuous mode [ 332.797354][T12749] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 333.444294][T12809] FAULT_INJECTION: forcing a failure. [ 333.444294][T12809] name failslab, interval 1, probability 0, space 0, times 0 [ 333.471710][T12809] CPU: 0 UID: 0 PID: 12809 Comm: syz.2.2390 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 333.471743][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.471757][T12809] Call Trace: [ 333.471765][T12809] [ 333.471774][T12809] dump_stack_lvl+0x241/0x360 [ 333.471808][T12809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.471831][T12809] ? __pfx__printk+0x10/0x10 [ 333.471854][T12809] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 333.471887][T12809] ? __pfx___might_resched+0x10/0x10 [ 333.471921][T12809] should_fail_ex+0x40a/0x550 [ 333.471959][T12809] should_failslab+0xac/0x100 [ 333.471988][T12809] ? __get_vm_area_node+0x132/0x2d0 [ 333.472018][T12809] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 333.472056][T12809] __get_vm_area_node+0x132/0x2d0 [ 333.472092][T12809] __vmalloc_node_range_noprof+0x344/0x1380 [ 333.472115][T12809] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 333.472155][T12809] ? mark_lock+0x9a/0x360 [ 333.472199][T12809] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.472230][T12809] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 333.472260][T12809] __vmalloc_noprof+0x79/0x90 [ 333.472280][T12809] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 333.472313][T12809] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 333.472343][T12809] ? bpf_prog_alloc+0x28/0x1b0 [ 333.472376][T12809] bpf_prog_alloc+0x3a/0x1b0 [ 333.472409][T12809] bpf_prog_load+0x7f4/0x20e0 [ 333.472454][T12809] ? __pfx_bpf_prog_load+0x10/0x10 [ 333.472485][T12809] ? __pfx___might_resched+0x10/0x10 [ 333.472528][T12809] ? __might_fault+0xaa/0x120 [ 333.472558][T12809] __sys_bpf+0x4ea/0x820 [ 333.472589][T12809] ? __pfx___sys_bpf+0x10/0x10 [ 333.472629][T12809] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.472663][T12809] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.472697][T12809] ? do_syscall_64+0x100/0x230 [ 333.472733][T12809] __x64_sys_bpf+0x7c/0x90 [ 333.472760][T12809] do_syscall_64+0xf3/0x230 [ 333.472791][T12809] ? clear_bhb_loop+0x35/0x90 [ 333.472824][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.472852][T12809] RIP: 0033:0x7ff88038d169 [ 333.472871][T12809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.472889][T12809] RSP: 002b:00007ff8811e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.472912][T12809] RAX: ffffffffffffffda RBX: 00007ff8805a5fa0 RCX: 00007ff88038d169 [ 333.472927][T12809] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 333.472941][T12809] RBP: 00007ff8811e5090 R08: 0000000000000000 R09: 0000000000000000 [ 333.472954][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.472966][T12809] R13: 0000000000000000 R14: 00007ff8805a5fa0 R15: 00007ffddb9bcf78 [ 333.472995][T12809] [ 333.473281][T12809] syz.2.2390: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 333.797664][T12800] tipc: Enabling of bearer rejected, failed to enable media [ 333.820943][T12809] CPU: 0 UID: 0 PID: 12809 Comm: syz.2.2390 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 333.820974][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.820987][T12809] Call Trace: [ 333.820994][T12809] [ 333.821003][T12809] dump_stack_lvl+0x241/0x360 [ 333.821034][T12809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.821057][T12809] ? __pfx__printk+0x10/0x10 [ 333.821082][T12809] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 333.821118][T12809] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 333.821149][T12809] warn_alloc+0x278/0x410 [ 333.821176][T12809] ? __pfx_warn_alloc+0x10/0x10 [ 333.821195][T12809] ? __kasan_kmalloc+0x23/0xb0 [ 333.821221][T12809] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 333.821258][T12809] ? __get_vm_area_node+0x280/0x2d0 [ 333.821296][T12809] __vmalloc_node_range_noprof+0x369/0x1380 [ 333.821320][T12809] ? mark_lock+0x9a/0x360 [ 333.821363][T12809] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.821394][T12809] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 333.821424][T12809] __vmalloc_noprof+0x79/0x90 [ 333.821445][T12809] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 333.821477][T12809] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 333.821508][T12809] ? bpf_prog_alloc+0x28/0x1b0 [ 333.821541][T12809] bpf_prog_alloc+0x3a/0x1b0 [ 333.821573][T12809] bpf_prog_load+0x7f4/0x20e0 [ 333.821619][T12809] ? __pfx_bpf_prog_load+0x10/0x10 [ 333.821650][T12809] ? __pfx___might_resched+0x10/0x10 [ 333.821692][T12809] ? __might_fault+0xaa/0x120 [ 333.821720][T12809] __sys_bpf+0x4ea/0x820 [ 333.821751][T12809] ? __pfx___sys_bpf+0x10/0x10 [ 333.821792][T12809] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.821826][T12809] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.821860][T12809] ? do_syscall_64+0x100/0x230 [ 333.821896][T12809] __x64_sys_bpf+0x7c/0x90 [ 333.821924][T12809] do_syscall_64+0xf3/0x230 [ 333.821954][T12809] ? clear_bhb_loop+0x35/0x90 [ 333.821988][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.822015][T12809] RIP: 0033:0x7ff88038d169 [ 333.822033][T12809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.822050][T12809] RSP: 002b:00007ff8811e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.822071][T12809] RAX: ffffffffffffffda RBX: 00007ff8805a5fa0 RCX: 00007ff88038d169 [ 333.822087][T12809] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 333.822100][T12809] RBP: 00007ff8811e5090 R08: 0000000000000000 R09: 0000000000000000 [ 333.822118][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.822131][T12809] R13: 0000000000000000 R14: 00007ff8805a5fa0 R15: 00007ffddb9bcf78 [ 333.822161][T12809] [ 333.822169][T12809] Mem-Info: [ 333.869401][T12801] lo speed is unknown, defaulting to 1000 [ 333.871507][T12810] tipc: Enabled bearer , priority 0 [ 333.957457][T12809] active_anon:8845 inactive_anon:0 isolated_anon:0 [ 333.957457][T12809] active_file:1621 inactive_file:38398 isolated_file:0 [ 333.957457][T12809] unevictable:768 dirty:289 writeback:0 [ 333.957457][T12809] slab_reclaimable:11336 slab_unreclaimable:104837 [ 333.957457][T12809] mapped:34210 shmem:2760 pagetables:803 [ 333.957457][T12809] sec_pagetables:0 bounce:0 [ 333.957457][T12809] kernel_misc_reclaimable:0 [ 333.957457][T12809] free:1327589 free_pcp:1503 free_cma:0 [ 334.138679][T12801] lo speed is unknown, defaulting to 1000 [ 334.163581][T12809] Node 0 active_anon:37780kB inactive_anon:0kB active_file:6484kB inactive_file:153516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138640kB dirty:1152kB writeback:0kB shmem:11404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12332kB pagetables:3312kB sec_pagetables:0kB all_unreclaimable? no [ 334.327907][T12809] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 334.431667][T12809] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.536866][T12809] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 334.566545][T12809] Node 0 DMA32 free:1380860kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:42184kB inactive_anon:0kB active_file:6484kB inactive_file:153216kB unevictable:1536kB writepending:1204kB present:3129332kB managed:2549680kB mlocked:0kB bounce:0kB free_pcp:4548kB local_pcp:2548kB free_cma:0kB [ 334.602486][T12817] __nla_validate_parse: 17 callbacks suppressed [ 334.602508][T12817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2393'. [ 334.626441][T12809] lowmem_reserve[]: 0 0 0 0 0 [ 334.631910][T12809] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 334.647564][T12819] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 334.660083][T12809] lowmem_reserve[]: 0 0 0 0 0 [ 334.680399][T12809] Node 1 Normal free:3908736kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 334.693968][ T6084] tipc: Resetting bearer [ 334.724037][T12809] lowmem_reserve[]: 0 0 0 0 0 [ 334.732237][T12809] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 334.774951][T12809] Node 0 DMA32: 2*4kB (UM) 37*8kB (UM) 41*16kB (U) 2*32kB (UE) 90*64kB (UE) 62*128kB (UE) 29*256kB (UME) 6*512kB (UM) 1*1024kB (M) 6*2048kB (UME) 327*4096kB (UM) = 1377920kB [ 334.794488][T12809] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 334.808248][T12809] Node 1 Normal: 132*4kB (UME) 54*8kB (UME) 42*16kB (UME) 195*32kB (UME) 103*64kB (UME) 32*128kB (UM) 18*256kB (UME) 9*512kB (UM) 6*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3908736kB [ 334.831481][T12809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.841995][T12809] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.852114][T12809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.862399][T12809] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.875968][T12809] 44301 total pagecache pages [ 334.877001][ T5886] tipc: Node number set to 43690 [ 334.882699][T12809] 0 pages in swap cache [ 334.895553][T12809] Free swap = 124996kB [ 334.906150][T12817] batadv0: entered promiscuous mode [ 334.919367][T12817] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.929386][T12817] batadv0: left promiscuous mode [ 334.931911][T12809] Total swap = 124996kB [ 334.940572][T12809] 2097051 pages RAM [ 334.944603][T12809] 0 pages HighMem/MovableOnly [ 334.954384][T12809] 427909 pages reserved [ 334.960460][T12809] 0 pages cma reserved [ 335.033961][T12819] bond1: entered promiscuous mode [ 335.059299][T12819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.139861][T12822] bond1: (slave veth7): making interface the new active one [ 335.162899][T12822] veth7: entered promiscuous mode [ 335.169698][T12822] bond1: (slave veth7): Enslaving as an active interface with an up link [ 335.224909][T12789] tipc: Resetting bearer [ 335.446374][T12838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2398'. [ 337.001094][T12789] tipc: Disabling bearer [ 337.287105][T12843] lo speed is unknown, defaulting to 1000 [ 337.305685][T12843] lo speed is unknown, defaulting to 1000 [ 337.327566][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 337.336493][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2401'. [ 337.377501][T12845] tipc: Enabling of bearer rejected, failed to enable media [ 337.597415][T12855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2404'. [ 337.664786][T12857] ax25_connect(): syz.1.2406 uses autobind, please contact jreuter@yaina.de [ 337.720616][T12858] team0: Unable to change to the same mode the team is in [ 337.820816][ T5886] IPVS: starting estimator thread 0... [ 337.831229][T12843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2400'. [ 337.835436][T12860] FAULT_INJECTION: forcing a failure. [ 337.835436][T12860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.868196][T12860] CPU: 0 UID: 0 PID: 12860 Comm: syz.0.2407 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 337.868226][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.868240][T12860] Call Trace: [ 337.868247][T12860] [ 337.868256][T12860] dump_stack_lvl+0x241/0x360 [ 337.868288][T12860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.868313][T12860] ? __pfx__printk+0x10/0x10 [ 337.868341][T12860] ? snprintf+0xda/0x120 [ 337.868369][T12860] should_fail_ex+0x40a/0x550 [ 337.868413][T12860] _copy_to_user+0x31/0xb0 [ 337.868446][T12860] simple_read_from_buffer+0xca/0x150 [ 337.868479][T12860] proc_fail_nth_read+0x1e9/0x250 [ 337.868513][T12860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.868546][T12860] ? rw_verify_area+0x243/0x630 [ 337.868568][T12860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.868601][T12860] vfs_read+0x1f8/0xb40 [ 337.868624][T12860] ? fdget_pos+0x254/0x320 [ 337.868657][T12860] ? __pfx___mutex_lock+0x10/0x10 [ 337.868689][T12860] ? __pfx_vfs_read+0x10/0x10 [ 337.868708][T12860] ? do_sys_openat2+0x17a/0x1d0 [ 337.868743][T12860] ? __fget_files+0x2a/0x410 [ 337.868776][T12860] ? __fget_files+0x395/0x410 [ 337.868806][T12860] ? __fget_files+0x2a/0x410 [ 337.868847][T12860] ksys_read+0x18f/0x2b0 [ 337.868872][T12860] ? __pfx_ksys_read+0x10/0x10 [ 337.868908][T12860] ? do_syscall_64+0x100/0x230 [ 337.868942][T12860] ? do_syscall_64+0xb6/0x230 [ 337.868977][T12860] do_syscall_64+0xf3/0x230 [ 337.869008][T12860] ? clear_bhb_loop+0x35/0x90 [ 337.869041][T12860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.869070][T12860] RIP: 0033:0x7fc5dff8bb7c [ 337.869088][T12860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 337.869105][T12860] RSP: 002b:00007fc5e0e26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.869127][T12860] RAX: ffffffffffffffda RBX: 00007fc5e01a5fa0 RCX: 00007fc5dff8bb7c [ 337.869143][T12860] RDX: 000000000000000f RSI: 00007fc5e0e260a0 RDI: 0000000000000005 [ 337.869155][T12860] RBP: 00007fc5e0e26090 R08: 0000000000000000 R09: 0000000000000000 [ 337.869168][T12860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.869180][T12860] R13: 0000000000000000 R14: 00007fc5e01a5fa0 R15: 00007ffd5b499588 [ 337.869213][T12860] [ 338.159683][T12864] IPVS: using max 20 ests per chain, 48000 per kthread [ 338.201257][T12843] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2400'. [ 338.274597][T12876] FAULT_INJECTION: forcing a failure. [ 338.274597][T12876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.288134][T12876] CPU: 0 UID: 0 PID: 12876 Comm: syz.1.2413 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 338.288162][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.288174][T12876] Call Trace: [ 338.288182][T12876] [ 338.288190][T12876] dump_stack_lvl+0x241/0x360 [ 338.288222][T12876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.288244][T12876] ? __pfx__printk+0x10/0x10 [ 338.288268][T12876] ? is_bpf_text_address+0x26/0x2a0 [ 338.288293][T12876] should_fail_ex+0x40a/0x550 [ 338.288330][T12876] prepare_alloc_pages+0x1da/0x5b0 [ 338.288361][T12876] __alloc_frozen_pages_noprof+0x16f/0x710 [ 338.288390][T12876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.288436][T12876] alloc_pages_mpol+0x311/0x660 [ 338.288470][T12876] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 338.288506][T12876] alloc_pages_noprof+0x121/0x190 [ 338.288536][T12876] get_free_pages_noprof+0xc/0x30 [ 338.288558][T12876] kasan_populate_vmalloc_pte+0x38/0xe0 [ 338.288581][T12876] __apply_to_page_range+0x806/0xde0 [ 338.288619][T12876] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 338.288648][T12876] ? __pfx___apply_to_page_range+0x10/0x10 [ 338.288681][T12876] ? do_raw_spin_unlock+0x13c/0x8b0 [ 338.288709][T12876] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 338.288745][T12876] alloc_vmap_area+0x1d4e/0x2400 [ 338.288807][T12876] ? __pfx_alloc_vmap_area+0x10/0x10 [ 338.288841][T12876] ? __kasan_kmalloc+0x98/0xb0 [ 338.288868][T12876] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 338.288899][T12876] ? __get_vm_area_node+0x132/0x2d0 [ 338.288932][T12876] ? prealloc_init+0x139/0x840 [ 338.288958][T12876] __get_vm_area_node+0x1c8/0x2d0 [ 338.288996][T12876] __vmalloc_node_range_noprof+0x344/0x1380 [ 338.289019][T12876] ? prealloc_init+0x139/0x840 [ 338.289044][T12876] ? __pfx_lock_acquire+0x10/0x10 [ 338.289078][T12876] ? __pfx_lock_release+0x10/0x10 [ 338.289129][T12876] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 338.289153][T12876] ? __pfx___might_resched+0x10/0x10 [ 338.289181][T12876] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 338.289217][T12876] bpf_map_area_alloc+0xfc/0x120 [ 338.289250][T12876] ? prealloc_init+0x139/0x840 [ 338.289277][T12876] prealloc_init+0x139/0x840 [ 338.289317][T12876] htab_map_alloc+0x86e/0xe70 [ 338.289350][T12876] map_create+0x946/0x11c0 [ 338.289387][T12876] __sys_bpf+0x6d3/0x820 [ 338.289417][T12876] ? __pfx___sys_bpf+0x10/0x10 [ 338.289452][T12876] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.289486][T12876] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.289520][T12876] ? do_syscall_64+0x100/0x230 [ 338.289558][T12876] __x64_sys_bpf+0x7c/0x90 [ 338.289585][T12876] do_syscall_64+0xf3/0x230 [ 338.289615][T12876] ? clear_bhb_loop+0x35/0x90 [ 338.289647][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.289676][T12876] RIP: 0033:0x7f8aedb8d169 [ 338.289695][T12876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.289711][T12876] RSP: 002b:00007f8aee992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.289732][T12876] RAX: ffffffffffffffda RBX: 00007f8aedda5fa0 RCX: 00007f8aedb8d169 [ 338.289748][T12876] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000000 [ 338.289761][T12876] RBP: 00007f8aee992090 R08: 0000000000000000 R09: 0000000000000000 [ 338.289773][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.289784][T12876] R13: 0000000000000000 R14: 00007f8aedda5fa0 R15: 00007ffee1c798a8 [ 338.289820][T12876] [ 338.750942][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'. [ 338.760684][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 338.774369][T12878] tipc: Enabling of bearer rejected, failed to enable media [ 338.950060][T12886] nbd: must specify a size in bytes for the device [ 339.024905][ T6073] IPVS: stop unused estimator thread 0... [ 339.161734][T12897] tipc: Resetting bearer [ 339.316420][T12904] No such timeout policy "syz0" [ 339.419124][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2428'. [ 339.502232][T12913] team0: Unable to change to the same mode the team is in [ 339.565170][T12918] FAULT_INJECTION: forcing a failure. [ 339.565170][T12918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.585112][T12918] CPU: 1 UID: 0 PID: 12918 Comm: syz.4.2433 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 339.585142][T12918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.585156][T12918] Call Trace: [ 339.585163][T12918] [ 339.585173][T12918] dump_stack_lvl+0x241/0x360 [ 339.585206][T12918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.585231][T12918] ? __pfx__printk+0x10/0x10 [ 339.585258][T12918] ? snprintf+0xda/0x120 [ 339.585285][T12918] should_fail_ex+0x40a/0x550 [ 339.585325][T12918] _copy_to_user+0x31/0xb0 [ 339.585357][T12918] simple_read_from_buffer+0xca/0x150 [ 339.585392][T12918] proc_fail_nth_read+0x1e9/0x250 [ 339.585428][T12918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.585462][T12918] ? rw_verify_area+0x243/0x630 [ 339.585485][T12918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.585518][T12918] vfs_read+0x1f8/0xb40 [ 339.585542][T12918] ? fdget_pos+0x254/0x320 [ 339.585576][T12918] ? __pfx___mutex_lock+0x10/0x10 [ 339.585608][T12918] ? __pfx_vfs_read+0x10/0x10 [ 339.585634][T12918] ? __fget_files+0x2a/0x410 [ 339.585668][T12918] ? __fget_files+0x395/0x410 [ 339.585698][T12918] ? __fget_files+0x2a/0x410 [ 339.585748][T12918] ksys_read+0x18f/0x2b0 [ 339.585774][T12918] ? __pfx_ksys_read+0x10/0x10 [ 339.585799][T12918] ? do_syscall_64+0x100/0x230 [ 339.585834][T12918] ? do_syscall_64+0xb6/0x230 [ 339.585869][T12918] do_syscall_64+0xf3/0x230 [ 339.585901][T12918] ? clear_bhb_loop+0x35/0x90 [ 339.585935][T12918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.585964][T12918] RIP: 0033:0x7fd8e298bb7c [ 339.585983][T12918] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 339.586002][T12918] RSP: 002b:00007fd8e383c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.586024][T12918] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298bb7c [ 339.586039][T12918] RDX: 000000000000000f RSI: 00007fd8e383c0a0 RDI: 0000000000000004 [ 339.586052][T12918] RBP: 00007fd8e383c090 R08: 0000000000000000 R09: 0000000000000000 [ 339.586065][T12918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.586077][T12918] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 339.586110][T12918] [ 339.853890][T12919] IPVS: Error connecting to the multicast addr [ 339.957331][T12927] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2436'. [ 340.446807][T12950] bond0: option resend_igmp: invalid value (7540) [ 340.469312][T12950] bond0: option resend_igmp: allowed values 0 - 255 [ 340.824561][T12972] tipc: Resetting bearer [ 340.886025][T12975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2453'. [ 341.093400][T12985] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2455'. [ 341.120256][T12988] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2456'. [ 341.136935][T12988] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2456'. [ 341.233883][T12980] team0: Unable to change to the same mode the team is in [ 341.491344][T12999] FAULT_INJECTION: forcing a failure. [ 341.491344][T12999] name failslab, interval 1, probability 0, space 0, times 0 [ 341.512519][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.2.2461 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 341.512551][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 341.512565][T12999] Call Trace: [ 341.512572][T12999] [ 341.512581][T12999] dump_stack_lvl+0x241/0x360 [ 341.512615][T12999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.512639][T12999] ? __pfx__printk+0x10/0x10 [ 341.512672][T12999] ? __kmalloc_cache_noprof+0x48/0x390 [ 341.512705][T12999] ? __pfx___might_resched+0x10/0x10 [ 341.512740][T12999] should_fail_ex+0x40a/0x550 [ 341.512779][T12999] should_failslab+0xac/0x100 [ 341.512815][T12999] __kmalloc_cache_noprof+0x70/0x390 [ 341.512844][T12999] ? alloc_netdev_mqs+0xc7c/0x1210 [ 341.512883][T12999] alloc_netdev_mqs+0xc7c/0x1210 [ 341.512922][T12999] rtnl_create_link+0x2f9/0xc90 [ 341.512959][T12999] rtnl_newlink_create+0x2e1/0xbd0 [ 341.512990][T12999] ? __pfx_aa_get_newest_label+0x10/0x10 [ 341.513027][T12999] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 341.513056][T12999] ? __pfx___mutex_lock+0x10/0x10 [ 341.513099][T12999] ? ns_capable+0x8a/0xf0 [ 341.513128][T12999] rtnl_newlink+0x167a/0x1d90 [ 341.513152][T12999] ? __lock_acquire+0x1397/0x2100 [ 341.513200][T12999] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.513221][T12999] ? __pfx_validate_chain+0x10/0x10 [ 341.513268][T12999] ? validate_chain+0x11e/0x5920 [ 341.513291][T12999] ? __pfx_lock_acquire+0x10/0x10 [ 341.513327][T12999] ? __pfx_lock_release+0x10/0x10 [ 341.513363][T12999] ? __pfx_validate_chain+0x10/0x10 [ 341.513389][T12999] ? mark_lock+0x9a/0x360 [ 341.513414][T12999] ? __lock_acquire+0x1397/0x2100 [ 341.513484][T12999] ? __pfx_lock_release+0x10/0x10 [ 341.513534][T12999] ? __pfx_rtnl_newlink+0x10/0x10 [ 341.513557][T12999] rtnetlink_rcv_msg+0x791/0xcf0 [ 341.513589][T12999] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 341.513624][T12999] ? __lock_acquire+0x1397/0x2100 [ 341.513671][T12999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.513724][T12999] netlink_rcv_skb+0x206/0x480 [ 341.513759][T12999] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.513796][T12999] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.513855][T12999] ? netlink_deliver_tap+0x2e/0x1b0 [ 341.513892][T12999] netlink_unicast+0x7f6/0x990 [ 341.513934][T12999] ? __pfx_netlink_unicast+0x10/0x10 [ 341.513961][T12999] ? __virt_addr_valid+0x45f/0x530 [ 341.513983][T12999] ? __phys_addr_symbol+0x2f/0x70 [ 341.514003][T12999] ? __check_object_size+0x47a/0x730 [ 341.514038][T12999] netlink_sendmsg+0x8de/0xcb0 [ 341.514073][T12999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.514100][T12999] ? aa_sock_msg_perm+0x91/0x160 [ 341.514139][T12999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.514158][T12999] __sock_sendmsg+0x221/0x270 [ 341.514195][T12999] ____sys_sendmsg+0x53a/0x860 [ 341.514232][T12999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.514256][T12999] ? __fget_files+0x2a/0x410 [ 341.514291][T12999] ? __fget_files+0x2a/0x410 [ 341.514333][T12999] __sys_sendmsg+0x269/0x350 [ 341.514366][T12999] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.514407][T12999] ? do_sys_openat2+0x17a/0x1d0 [ 341.514470][T12999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.514505][T12999] ? do_syscall_64+0x100/0x230 [ 341.514540][T12999] ? do_syscall_64+0xb6/0x230 [ 341.514574][T12999] do_syscall_64+0xf3/0x230 [ 341.514606][T12999] ? clear_bhb_loop+0x35/0x90 [ 341.514640][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.514677][T12999] RIP: 0033:0x7ff88038d169 [ 341.514696][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.514714][T12999] RSP: 002b:00007ff8811e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.514736][T12999] RAX: ffffffffffffffda RBX: 00007ff8805a5fa0 RCX: 00007ff88038d169 [ 341.514751][T12999] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 341.514765][T12999] RBP: 00007ff8811e5090 R08: 0000000000000000 R09: 0000000000000000 [ 341.514778][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.514790][T12999] R13: 0000000000000000 R14: 00007ff8805a5fa0 R15: 00007ffddb9bcf78 [ 341.514824][T12999] [ 341.557245][T13000] netlink: 'syz.1.2460': attribute type 10 has an invalid length. [ 342.158824][T13016] FAULT_INJECTION: forcing a failure. [ 342.158824][T13016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.175369][T13016] CPU: 0 UID: 0 PID: 13016 Comm: syz.2.2465 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 342.175398][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.175412][T13016] Call Trace: [ 342.175419][T13016] [ 342.175427][T13016] dump_stack_lvl+0x241/0x360 [ 342.175459][T13016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.175482][T13016] ? __pfx__printk+0x10/0x10 [ 342.175526][T13016] should_fail_ex+0x40a/0x550 [ 342.175564][T13016] _copy_to_user+0x31/0xb0 [ 342.175595][T13016] bpf_verifier_vlog+0x46d/0x860 [ 342.175630][T13016] __btf_verifier_log+0xd5/0x120 [ 342.175661][T13016] ? bpf_verifier_vlog+0x47a/0x860 [ 342.175686][T13016] ? __pfx___btf_verifier_log+0x10/0x10 [ 342.175721][T13016] ? btf_parse_hdr+0x1e3/0x710 [ 342.175746][T13016] btf_parse_hdr+0x377/0x710 [ 342.175773][T13016] btf_new_fd+0x38b/0xca0 [ 342.175795][T13016] ? apparmor_capable+0x13b/0x1b0 [ 342.175828][T13016] ? __pfx_btf_new_fd+0x10/0x10 [ 342.175856][T13016] ? bpf_btf_load+0xcf/0x1a0 [ 342.175891][T13016] __sys_bpf+0x6f2/0x820 [ 342.175922][T13016] ? __pfx___sys_bpf+0x10/0x10 [ 342.175965][T13016] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.176001][T13016] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.176035][T13016] ? do_syscall_64+0x100/0x230 [ 342.176071][T13016] __x64_sys_bpf+0x7c/0x90 [ 342.176098][T13016] do_syscall_64+0xf3/0x230 [ 342.176128][T13016] ? clear_bhb_loop+0x35/0x90 [ 342.176161][T13016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.176189][T13016] RIP: 0033:0x7ff88038d169 [ 342.176207][T13016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.176225][T13016] RSP: 002b:00007ff8811e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.176247][T13016] RAX: ffffffffffffffda RBX: 00007ff8805a5fa0 RCX: 00007ff88038d169 [ 342.176262][T13016] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 342.176279][T13016] RBP: 00007ff8811e5090 R08: 0000000000000000 R09: 0000000000000000 [ 342.176293][T13016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.176305][T13016] R13: 0000000000000001 R14: 00007ff8805a5fa0 R15: 00007ffddb9bcf78 [ 342.176335][T13016] [ 342.417020][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 342.458635][T13020] vlan2: entered promiscuous mode [ 342.463911][T13020] ip6gretap0: entered promiscuous mode [ 342.581473][T13024] FAULT_INJECTION: forcing a failure. [ 342.581473][T13024] name failslab, interval 1, probability 0, space 0, times 0 [ 342.611907][T13024] CPU: 1 UID: 0 PID: 13024 Comm: syz.1.2468 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 342.611941][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.611954][T13024] Call Trace: [ 342.611962][T13024] [ 342.611971][T13024] dump_stack_lvl+0x241/0x360 [ 342.612004][T13024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.612028][T13024] ? __pfx__printk+0x10/0x10 [ 342.612052][T13024] ? kmem_cache_alloc_noprof+0x48/0x380 [ 342.612083][T13024] ? __pfx___might_resched+0x10/0x10 [ 342.612116][T13024] should_fail_ex+0x40a/0x550 [ 342.612154][T13024] should_failslab+0xac/0x100 [ 342.612184][T13024] ? vm_area_alloc+0x10e/0x1d0 [ 342.612205][T13024] kmem_cache_alloc_noprof+0x70/0x380 [ 342.612240][T13024] vm_area_alloc+0x10e/0x1d0 [ 342.612264][T13024] mmap_region+0x1b0e/0x2fc0 [ 342.612315][T13024] ? validate_chain+0x11e/0x5920 [ 342.612358][T13024] ? __pfx_mmap_region+0x10/0x10 [ 342.612395][T13024] ? mark_lock+0x9a/0x360 [ 342.612472][T13024] ? __pfx_aa_get_newest_label+0x10/0x10 [ 342.612506][T13024] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 342.612532][T13024] ? rcu_is_watching+0x15/0xb0 [ 342.612560][T13024] ? apparmor_capable+0x13b/0x1b0 [ 342.612587][T13024] ? bpf_lsm_capable+0x9/0x10 [ 342.612621][T13024] ? shmem_mapping+0xd/0x50 [ 342.612656][T13024] do_mmap+0xecc/0x13a0 [ 342.612696][T13024] ? ima_file_mmap+0x17e/0x220 [ 342.612719][T13024] ? __pfx_do_mmap+0x10/0x10 [ 342.612748][T13024] ? down_write_killable+0x19e/0x260 [ 342.612770][T13024] ? vm_mmap_pgoff+0x212/0x530 [ 342.612791][T13024] ? __pfx_down_write_killable+0x10/0x10 [ 342.612815][T13024] ? common_file_perm+0x1a6/0x210 [ 342.612856][T13024] vm_mmap_pgoff+0x2a0/0x530 [ 342.612889][T13024] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 342.612910][T13024] ? hugetlbfs_get_inode+0x45f/0x690 [ 342.612947][T13024] ? hugetlb_file_setup+0x3dc/0x5c0 [ 342.612980][T13024] ksys_mmap_pgoff+0x53e/0x720 [ 342.613019][T13024] do_syscall_64+0xf3/0x230 [ 342.613050][T13024] ? clear_bhb_loop+0x35/0x90 [ 342.613083][T13024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.613112][T13024] RIP: 0033:0x7f8aedb8d169 [ 342.613130][T13024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.613147][T13024] RSP: 002b:00007f8aee992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 342.613170][T13024] RAX: ffffffffffffffda RBX: 00007f8aedda5fa0 RCX: 00007f8aedb8d169 [ 342.613185][T13024] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 342.613199][T13024] RBP: 00007f8aee992090 R08: ffffffffffffffff R09: 0000000000000000 [ 342.613213][T13024] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000002 [ 342.613225][T13024] R13: 0000000000000001 R14: 00007f8aedda5fa0 R15: 00007ffee1c798a8 [ 342.613256][T13024] [ 342.930817][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 343.382161][ T30] audit: type=1800 audit(1742899209.188:7): pid=13047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2479" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2714 res=0 errno=0 [ 343.442917][ T30] audit: type=1800 audit(1742899209.188:8): pid=13047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2479" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2714 res=0 errno=0 [ 343.567471][T13057] vxcan3: entered allmulticast mode [ 343.803686][T13065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2483'. [ 343.822414][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 344.272263][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 344.297571][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2489'. [ 344.420856][T13088] openvswitch: netlink: Actions may not be safe on all matching packets [ 344.712768][T13101] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 344.743830][T13101] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 344.792399][T13105] team0: Unable to change to the same mode the team is in [ 345.100023][T13122] FAULT_INJECTION: forcing a failure. [ 345.100023][T13122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.113481][T13122] CPU: 0 UID: 0 PID: 13122 Comm: syz.3.2504 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 345.113510][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.113523][T13122] Call Trace: [ 345.113530][T13122] [ 345.113539][T13122] dump_stack_lvl+0x241/0x360 [ 345.113571][T13122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.113595][T13122] ? __pfx__printk+0x10/0x10 [ 345.113629][T13122] should_fail_ex+0x40a/0x550 [ 345.113667][T13122] _copy_to_user+0x31/0xb0 [ 345.113698][T13122] bpf_verifier_vlog+0x46d/0x860 [ 345.113734][T13122] __btf_verifier_log+0xd5/0x120 [ 345.113766][T13122] ? bpf_verifier_vlog+0x47a/0x860 [ 345.113790][T13122] ? __pfx___btf_verifier_log+0x10/0x10 [ 345.113825][T13122] ? btf_parse_hdr+0x1e3/0x710 [ 345.113851][T13122] btf_parse_hdr+0x377/0x710 [ 345.113877][T13122] btf_new_fd+0x38b/0xca0 [ 345.113900][T13122] ? apparmor_capable+0x13b/0x1b0 [ 345.113933][T13122] ? __pfx_btf_new_fd+0x10/0x10 [ 345.113961][T13122] ? bpf_btf_load+0xcf/0x1a0 [ 345.113993][T13122] __sys_bpf+0x6f2/0x820 [ 345.114024][T13122] ? __pfx___sys_bpf+0x10/0x10 [ 345.114068][T13122] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 345.114104][T13122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.114138][T13122] ? do_syscall_64+0x100/0x230 [ 345.114174][T13122] __x64_sys_bpf+0x7c/0x90 [ 345.114201][T13122] do_syscall_64+0xf3/0x230 [ 345.114232][T13122] ? clear_bhb_loop+0x35/0x90 [ 345.114265][T13122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.114302][T13122] RIP: 0033:0x7fc49878d169 [ 345.114322][T13122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.114340][T13122] RSP: 002b:00007fc4996b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.114362][T13122] RAX: ffffffffffffffda RBX: 00007fc4989a5fa0 RCX: 00007fc49878d169 [ 345.114378][T13122] RDX: 0000000000000028 RSI: 0000200000000a00 RDI: 0000000000000012 [ 345.114392][T13122] RBP: 00007fc4996b0090 R08: 0000000000000000 R09: 0000000000000000 [ 345.114405][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.114417][T13122] R13: 0000000000000000 R14: 00007fc4989a5fa0 R15: 00007ffe6bf08218 [ 345.114449][T13122] [ 345.458734][T13129] __nla_validate_parse: 4 callbacks suppressed [ 345.458757][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2507'. [ 345.588482][T13131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2508'. [ 345.655447][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2511'. [ 345.852796][T13149] FAULT_INJECTION: forcing a failure. [ 345.852796][T13149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.895193][T13149] CPU: 0 UID: 0 PID: 13149 Comm: syz.0.2513 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 345.895226][T13149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.895240][T13149] Call Trace: [ 345.895247][T13149] [ 345.895256][T13149] dump_stack_lvl+0x241/0x360 [ 345.895288][T13149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.895312][T13149] ? __pfx__printk+0x10/0x10 [ 345.895346][T13149] should_fail_ex+0x40a/0x550 [ 345.895389][T13149] _copy_to_user+0x31/0xb0 [ 345.895422][T13149] sk_getsockopt+0x1f98/0x31f0 [ 345.895456][T13149] ? __pfx_sk_getsockopt+0x10/0x10 [ 345.895502][T13149] ? __pfx___might_resched+0x10/0x10 [ 345.895532][T13149] ? __might_fault+0xaa/0x120 [ 345.895554][T13149] ? __pfx_lock_release+0x10/0x10 [ 345.895596][T13149] ? __might_fault+0xaa/0x120 [ 345.895617][T13149] ? __might_fault+0xc6/0x120 [ 345.895641][T13149] do_sock_getsockopt+0x29f/0x740 [ 345.895675][T13149] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 345.895699][T13149] ? __fget_files+0x2a/0x410 [ 345.895733][T13149] ? __fget_files+0x395/0x410 [ 345.895762][T13149] ? __fget_files+0x2a/0x410 [ 345.895801][T13149] __x64_sys_getsockopt+0x2a1/0x370 [ 345.895835][T13149] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 345.895863][T13149] ? do_syscall_64+0x100/0x230 [ 345.895899][T13149] ? do_syscall_64+0xb6/0x230 [ 345.895933][T13149] do_syscall_64+0xf3/0x230 [ 345.895964][T13149] ? clear_bhb_loop+0x35/0x90 [ 345.895997][T13149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.896026][T13149] RIP: 0033:0x7fc5dff8d169 [ 345.896045][T13149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.896075][T13149] RSP: 002b:00007fc5e0e26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 345.896099][T13149] RAX: ffffffffffffffda RBX: 00007fc5e01a5fa0 RCX: 00007fc5dff8d169 [ 345.896114][T13149] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 345.896127][T13149] RBP: 00007fc5e0e26090 R08: 0000200000000040 R09: 0000000000000000 [ 345.896140][T13149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.896151][T13149] R13: 0000000000000000 R14: 00007fc5e01a5fa0 R15: 00007ffd5b499588 [ 345.896182][T13149] [ 346.265608][T13135] lo speed is unknown, defaulting to 1000 [ 346.272994][T13144] macvtap2: entered allmulticast mode [ 346.290594][T13144] veth0_macvtap: entered allmulticast mode [ 346.327488][T13135] lo speed is unknown, defaulting to 1000 [ 346.610833][T13171] team0: left allmulticast mode [ 346.633358][T13171] vlan3: left promiscuous mode [ 346.649488][T13171] vlan3: left allmulticast mode [ 346.654413][T13171] 0·: left allmulticast mode [ 346.725760][T13171] wireguard0: left promiscuous mode [ 346.736854][T13171] wireguard0: left allmulticast mode [ 346.780904][T13171] bond1: left promiscuous mode [ 346.785757][T13171] veth7: left promiscuous mode [ 346.877458][T13172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2518'. [ 346.886570][T13172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2518'. [ 346.910205][T13172] netlink: 'syz.2.2518': attribute type 6 has an invalid length. [ 346.951120][T13189] wireguard0: entered promiscuous mode [ 346.967064][T13189] wireguard0: entered allmulticast mode [ 347.134609][T13202] tipc: Enabled bearer , priority 0 [ 347.171640][T13201] tipc: Disabling bearer [ 347.331653][T13208] lo speed is unknown, defaulting to 1000 [ 347.341242][T13208] lo speed is unknown, defaulting to 1000 [ 347.394577][T13210] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2533'. [ 347.443475][T13212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2532'. [ 347.759463][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2538'. [ 347.915956][T13236] netdevsim netdevsim3: Direct firmware load for / [ 347.915956][T13236] failed with error -2 [ 347.954073][T13236] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 347.954073][T13236] [ 348.065526][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2543'. [ 348.123444][T13242] bond5: entered promiscuous mode [ 348.136194][T13242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 348.187625][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'. [ 348.256443][T13247] veth11: entered promiscuous mode [ 348.288341][T13247] bond5: (slave veth11): Enslaving as an active interface with an up link [ 348.365316][T13252] netlink: 'syz.1.2548': attribute type 29 has an invalid length. [ 348.676195][T13263] netlink: 'syz.1.2548': attribute type 29 has an invalid length. [ 348.932262][T13268] netlink: 'syz.3.2551': attribute type 9 has an invalid length. [ 348.951624][T13268] openvswitch: netlink: Message has 6 unknown bytes. [ 349.229523][T13276] bridge0: port 1(gretap0) entered blocking state [ 349.251109][T13276] bridge0: port 1(gretap0) entered disabled state [ 349.277116][T13276] gretap0: entered allmulticast mode [ 349.285448][T13276] gretap0: entered promiscuous mode [ 349.334025][T13280] gretap0: left allmulticast mode [ 349.344676][T13280] gretap0: left promiscuous mode [ 349.377505][T13280] bridge0: port 1(gretap0) entered disabled state [ 349.692327][T13299] netlink: 'syz.1.2563': attribute type 10 has an invalid length. [ 350.101512][T13318] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 350.731092][T13345] wireguard0: entered promiscuous mode [ 350.736647][T13345] wireguard0: entered allmulticast mode [ 350.856482][T13353] netlink: 'syz.2.2582': attribute type 2 has an invalid length. [ 350.975678][T13353] __nla_validate_parse: 4 callbacks suppressed [ 350.975706][T13353] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2582'. [ 351.396984][T13370] FAULT_INJECTION: forcing a failure. [ 351.396984][T13370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.474870][T13370] CPU: 1 UID: 0 PID: 13370 Comm: syz.4.2592 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 351.474909][T13370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 351.474938][T13370] Call Trace: [ 351.474945][T13370] [ 351.474954][T13370] dump_stack_lvl+0x241/0x360 [ 351.474988][T13370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.475012][T13370] ? __pfx__printk+0x10/0x10 [ 351.475040][T13370] ? snprintf+0xda/0x120 [ 351.475068][T13370] should_fail_ex+0x40a/0x550 [ 351.475105][T13370] _copy_to_user+0x31/0xb0 [ 351.475137][T13370] simple_read_from_buffer+0xca/0x150 [ 351.475170][T13370] proc_fail_nth_read+0x1e9/0x250 [ 351.475203][T13370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.475237][T13370] ? rw_verify_area+0x243/0x630 [ 351.475259][T13370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.475291][T13370] vfs_read+0x1f8/0xb40 [ 351.475314][T13370] ? fdget_pos+0x254/0x320 [ 351.475347][T13370] ? __pfx___mutex_lock+0x10/0x10 [ 351.475379][T13370] ? __pfx_vfs_read+0x10/0x10 [ 351.475405][T13370] ? __fget_files+0x2a/0x410 [ 351.475437][T13370] ? __fget_files+0x395/0x410 [ 351.475466][T13370] ? __fget_files+0x2a/0x410 [ 351.475507][T13370] ksys_read+0x18f/0x2b0 [ 351.475531][T13370] ? __pfx_ksys_read+0x10/0x10 [ 351.475554][T13370] ? do_syscall_64+0x100/0x230 [ 351.475587][T13370] ? do_syscall_64+0xb6/0x230 [ 351.475619][T13370] do_syscall_64+0xf3/0x230 [ 351.475650][T13370] ? clear_bhb_loop+0x35/0x90 [ 351.475684][T13370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.475712][T13370] RIP: 0033:0x7fd8e298bb7c [ 351.475743][T13370] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 351.475767][T13370] RSP: 002b:00007fd8e383c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.475799][T13370] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298bb7c [ 351.475815][T13370] RDX: 000000000000000f RSI: 00007fd8e383c0a0 RDI: 0000000000000008 [ 351.475828][T13370] RBP: 00007fd8e383c090 R08: 0000000000000000 R09: 0000000000000000 [ 351.475840][T13370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.475852][T13370] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 351.475893][T13370] [ 351.940481][T13385] wireguard1: entered promiscuous mode [ 351.946035][T13385] wireguard1: entered allmulticast mode [ 352.035224][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2600'. [ 352.066604][T13387] nbd: must specify at least one socket [ 352.156600][T13395] wireguard0: entered promiscuous mode [ 352.165423][T13395] wireguard0: entered allmulticast mode [ 352.261550][T13401] ip6t_srh: unknown srh match flags 5294 [ 352.401354][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 352.418610][T13408] netlink: 'syz.2.2607': attribute type 30 has an invalid length. [ 352.535993][T13413] netlink: 'syz.4.2610': attribute type 1 has an invalid length. [ 352.730475][T13426] x_tables: duplicate underflow at hook 1 [ 352.740931][T13425] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 352.751637][T13425] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2614'. [ 352.787872][T13425] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2614'. [ 353.022383][T13436] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2616'. [ 353.165462][T13443] lo speed is unknown, defaulting to 1000 [ 353.178110][T13443] lo speed is unknown, defaulting to 1000 [ 353.238907][T13447] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2623'. [ 353.545405][T13461] lo speed is unknown, defaulting to 1000 [ 353.553526][T13461] lo speed is unknown, defaulting to 1000 [ 353.986276][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 354.390101][T13495] 8021q: VLANs not supported on bond0 [ 354.547003][T13497] wireguard0: entered promiscuous mode [ 354.576574][T13497] wireguard0: entered allmulticast mode [ 354.691524][T13503] bond0: option resend_igmp: invalid value (7540) [ 354.698152][T13503] bond0: option resend_igmp: allowed values 0 - 255 [ 354.787593][T13515] team0: entered allmulticast mode [ 354.807733][T13515] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.286295][T13531] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 355.300743][T13531] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 355.317629][T13531] tipc: Resetting bearer [ 355.339836][T13534] xt_CT: No such helper "syz0" [ 355.350246][T13531] netlink: 'syz.4.2654': attribute type 2 has an invalid length. [ 355.358998][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2654'. [ 355.374871][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2654'. [ 355.689364][T13554] FAULT_INJECTION: forcing a failure. [ 355.689364][T13554] name failslab, interval 1, probability 0, space 0, times 0 [ 355.731192][T13554] CPU: 0 UID: 0 PID: 13554 Comm: syz.4.2663 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 355.731223][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 355.731236][T13554] Call Trace: [ 355.731244][T13554] [ 355.731253][T13554] dump_stack_lvl+0x241/0x360 [ 355.731285][T13554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.731309][T13554] ? __pfx__printk+0x10/0x10 [ 355.731333][T13554] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 355.731373][T13554] ? __pfx___might_resched+0x10/0x10 [ 355.731408][T13554] should_fail_ex+0x40a/0x550 [ 355.731447][T13554] should_failslab+0xac/0x100 [ 355.731477][T13554] __kmalloc_node_noprof+0xe1/0x4d0 [ 355.731506][T13554] ? __kvmalloc_node_noprof+0x72/0x190 [ 355.731545][T13554] __kvmalloc_node_noprof+0x72/0x190 [ 355.731580][T13554] alloc_netdev_mqs+0xce7/0x1210 [ 355.731620][T13554] rtnl_create_link+0x2f9/0xc90 [ 355.731657][T13554] rtnl_newlink_create+0x2e1/0xbd0 [ 355.731688][T13554] ? __pfx_aa_get_newest_label+0x10/0x10 [ 355.731725][T13554] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 355.731753][T13554] ? __pfx___mutex_lock+0x10/0x10 [ 355.731796][T13554] ? ns_capable+0x8a/0xf0 [ 355.731827][T13554] rtnl_newlink+0x167a/0x1d90 [ 355.731850][T13554] ? __lock_acquire+0x1397/0x2100 [ 355.731900][T13554] ? __pfx_rtnl_newlink+0x10/0x10 [ 355.731922][T13554] ? __pfx_validate_chain+0x10/0x10 [ 355.731968][T13554] ? validate_chain+0x11e/0x5920 [ 355.731992][T13554] ? __pfx_lock_acquire+0x10/0x10 [ 355.732028][T13554] ? __pfx_lock_release+0x10/0x10 [ 355.732064][T13554] ? __pfx_validate_chain+0x10/0x10 [ 355.732090][T13554] ? mark_lock+0x9a/0x360 [ 355.732115][T13554] ? __lock_acquire+0x1397/0x2100 [ 355.732183][T13554] ? __pfx_lock_release+0x10/0x10 [ 355.732233][T13554] ? __pfx_rtnl_newlink+0x10/0x10 [ 355.732256][T13554] rtnetlink_rcv_msg+0x791/0xcf0 [ 355.732289][T13554] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 355.732325][T13554] ? __lock_acquire+0x1397/0x2100 [ 355.732366][T13554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 355.732419][T13554] netlink_rcv_skb+0x206/0x480 [ 355.732455][T13554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 355.732492][T13554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.732548][T13554] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.732582][T13554] netlink_unicast+0x7f6/0x990 [ 355.732619][T13554] ? __pfx_netlink_unicast+0x10/0x10 [ 355.732646][T13554] ? __virt_addr_valid+0x45f/0x530 [ 355.732668][T13554] ? __phys_addr_symbol+0x2f/0x70 [ 355.732686][T13554] ? __check_object_size+0x47a/0x730 [ 355.732720][T13554] netlink_sendmsg+0x8de/0xcb0 [ 355.732758][T13554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.732784][T13554] ? aa_sock_msg_perm+0x91/0x160 [ 355.732829][T13554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.732850][T13554] __sock_sendmsg+0x221/0x270 [ 355.732886][T13554] ____sys_sendmsg+0x53a/0x860 [ 355.732924][T13554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.732948][T13554] ? __fget_files+0x2a/0x410 [ 355.732981][T13554] ? __fget_files+0x2a/0x410 [ 355.733021][T13554] __sys_sendmsg+0x269/0x350 [ 355.733053][T13554] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.733091][T13554] ? do_sys_openat2+0x17a/0x1d0 [ 355.733154][T13554] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.733189][T13554] ? do_syscall_64+0x100/0x230 [ 355.733225][T13554] ? do_syscall_64+0xb6/0x230 [ 355.733259][T13554] do_syscall_64+0xf3/0x230 [ 355.733291][T13554] ? clear_bhb_loop+0x35/0x90 [ 355.733326][T13554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.733363][T13554] RIP: 0033:0x7fd8e298d169 [ 355.733382][T13554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.733400][T13554] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.733423][T13554] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 355.733439][T13554] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 355.733452][T13554] RBP: 00007fd8e383c090 R08: 0000000000000000 R09: 0000000000000000 [ 355.733465][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.733477][T13554] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 355.733510][T13554] [ 356.382271][T13560] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 356.604565][T13573] netdevsim netdevsim3: Direct firmware load for / [ 356.604565][T13573] failed with error -2 [ 356.637260][T13573] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 356.637260][T13573] [ 356.905939][T13584] wireguard0: entered promiscuous mode [ 356.948444][T13584] wireguard0: entered allmulticast mode [ 356.957934][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 357.196445][T13595] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2679'. [ 357.469459][T13606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2684'. [ 357.480587][T13607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2684'. [ 357.566299][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'. [ 357.578121][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'. [ 357.594784][T13612] lo speed is unknown, defaulting to 1000 [ 357.621904][T13612] lo speed is unknown, defaulting to 1000 [ 357.631641][T13618] FAULT_INJECTION: forcing a failure. [ 357.631641][T13618] name failslab, interval 1, probability 0, space 0, times 0 [ 357.645446][T13618] CPU: 0 UID: 0 PID: 13618 Comm: syz.4.2688 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 357.645479][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 357.645493][T13618] Call Trace: [ 357.645500][T13618] [ 357.645509][T13618] dump_stack_lvl+0x241/0x360 [ 357.645542][T13618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.645566][T13618] ? __pfx__printk+0x10/0x10 [ 357.645590][T13618] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 357.645622][T13618] ? __pfx___might_resched+0x10/0x10 [ 357.645656][T13618] should_fail_ex+0x40a/0x550 [ 357.645695][T13618] should_failslab+0xac/0x100 [ 357.645725][T13618] kmem_cache_alloc_node_noprof+0x77/0x380 [ 357.645754][T13618] ? __alloc_skb+0x1c3/0x440 [ 357.645776][T13618] ? kmalloc_reserve+0xa8/0x2a0 [ 357.645804][T13618] __alloc_skb+0x1c3/0x440 [ 357.645825][T13618] ? __sock_sendmsg+0x221/0x270 [ 357.645853][T13618] ? ____sys_sendmsg+0x53a/0x860 [ 357.645877][T13618] ? __sys_sendmsg+0x269/0x350 [ 357.645900][T13618] ? do_syscall_64+0xf3/0x230 [ 357.645935][T13618] ? __pfx___alloc_skb+0x10/0x10 [ 357.645970][T13618] __tipc_nl_compat_dumpit+0x1b5/0xc10 [ 357.646013][T13618] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 357.646057][T13618] ? __build_skb_around+0x245/0x3d0 [ 357.646099][T13618] ? __asan_memset+0x23/0x50 [ 357.646120][T13618] ? __nlmsg_put+0xf7/0x190 [ 357.646157][T13618] tipc_nl_compat_dumpit+0x4fc/0x740 [ 357.646189][T13618] tipc_nl_compat_recv+0xe38/0x1590 [ 357.646218][T13618] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 357.646239][T13618] ? genl_get_cmd+0x610/0xce0 [ 357.646262][T13618] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 357.646288][T13618] ? __pfx_tipc_nl_compat_bearer_dump+0x10/0x10 [ 357.646312][T13618] ? __pfx___mutex_lock+0x10/0x10 [ 357.646344][T13618] ? __pfx_genl_get_cmd+0x10/0x10 [ 357.646376][T13618] ? __pfx_validate_chain+0x10/0x10 [ 357.646417][T13618] genl_rcv_msg+0xb1f/0xec0 [ 357.646453][T13618] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.646512][T13618] ? __pfx_lock_acquire+0x10/0x10 [ 357.646544][T13618] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 357.646567][T13618] ? __pfx___might_resched+0x10/0x10 [ 357.646607][T13618] netlink_rcv_skb+0x206/0x480 [ 357.646641][T13618] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.646668][T13618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.646733][T13618] genl_rcv+0x28/0x40 [ 357.646755][T13618] netlink_unicast+0x7f6/0x990 [ 357.646795][T13618] ? __pfx_netlink_unicast+0x10/0x10 [ 357.646822][T13618] ? __virt_addr_valid+0x45f/0x530 [ 357.646844][T13618] ? __phys_addr_symbol+0x2f/0x70 [ 357.646863][T13618] ? __check_object_size+0x47a/0x730 [ 357.646897][T13618] netlink_sendmsg+0x8de/0xcb0 [ 357.646932][T13618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.646957][T13618] ? aa_sock_msg_perm+0x91/0x160 [ 357.646997][T13618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.647015][T13618] __sock_sendmsg+0x221/0x270 [ 357.647050][T13618] ____sys_sendmsg+0x53a/0x860 [ 357.647085][T13618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.647109][T13618] ? __fget_files+0x2a/0x410 [ 357.647144][T13618] ? __fget_files+0x2a/0x410 [ 357.647184][T13618] __sys_sendmsg+0x269/0x350 [ 357.647218][T13618] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.647260][T13618] ? do_sys_openat2+0x17a/0x1d0 [ 357.647323][T13618] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.647357][T13618] ? do_syscall_64+0x100/0x230 [ 357.647392][T13618] ? do_syscall_64+0xb6/0x230 [ 357.647433][T13618] do_syscall_64+0xf3/0x230 [ 357.647463][T13618] ? clear_bhb_loop+0x35/0x90 [ 357.647497][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.647525][T13618] RIP: 0033:0x7fd8e298d169 [ 357.647543][T13618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.647560][T13618] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.647583][T13618] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 357.647598][T13618] RDX: 0000000020000844 RSI: 00002000000002c0 RDI: 0000000000000003 [ 357.647612][T13618] RBP: 00007fd8e383c090 R08: 0000000000000000 R09: 0000000000000000 [ 357.647625][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.647637][T13618] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 357.647671][T13618] [ 358.189626][T13626] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2691'. [ 358.268255][T13628] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2689'. [ 358.633627][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'. [ 358.673999][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2695'. [ 358.728329][T13642] FAULT_INJECTION: forcing a failure. [ 358.728329][T13642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.765012][T13642] CPU: 0 UID: 0 PID: 13642 Comm: syz.4.2695 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 358.765042][T13642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 358.765057][T13642] Call Trace: [ 358.765064][T13642] [ 358.765073][T13642] dump_stack_lvl+0x241/0x360 [ 358.765104][T13642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.765128][T13642] ? __pfx__printk+0x10/0x10 [ 358.765169][T13642] ? __pfx_lock_release+0x10/0x10 [ 358.765211][T13642] should_fail_ex+0x40a/0x550 [ 358.765249][T13642] _copy_from_user+0x2d/0xb0 [ 358.765279][T13642] copy_msghdr_from_user+0xae/0x680 [ 358.765317][T13642] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 358.765348][T13642] ? __fget_files+0x2a/0x410 [ 358.765382][T13642] ? __fget_files+0x2a/0x410 [ 358.765421][T13642] __sys_sendmsg+0x209/0x350 [ 358.765453][T13642] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.765492][T13642] ? do_sys_openat2+0x17a/0x1d0 [ 358.765549][T13642] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.765583][T13642] ? do_syscall_64+0x100/0x230 [ 358.765620][T13642] ? do_syscall_64+0xb6/0x230 [ 358.765654][T13642] do_syscall_64+0xf3/0x230 [ 358.765684][T13642] ? clear_bhb_loop+0x35/0x90 [ 358.765717][T13642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.765746][T13642] RIP: 0033:0x7fd8e298d169 [ 358.765765][T13642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.765784][T13642] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.765807][T13642] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 358.765823][T13642] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 358.765837][T13642] RBP: 00007fd8e383c090 R08: 0000000000000000 R09: 0000000000000000 [ 358.765851][T13642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.765864][T13642] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 358.765895][T13642] [ 359.522067][T13671] FAULT_INJECTION: forcing a failure. [ 359.522067][T13671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.547346][T13671] CPU: 0 UID: 0 PID: 13671 Comm: syz.3.2706 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 359.547378][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 359.547390][T13671] Call Trace: [ 359.547398][T13671] [ 359.547407][T13671] dump_stack_lvl+0x241/0x360 [ 359.547441][T13671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.547465][T13671] ? __pfx__printk+0x10/0x10 [ 359.547498][T13671] should_fail_ex+0x40a/0x550 [ 359.547536][T13671] _copy_to_user+0x31/0xb0 [ 359.547567][T13671] bpf_verifier_vlog+0x46d/0x860 [ 359.547601][T13671] __btf_verifier_log+0xd5/0x120 [ 359.547633][T13671] ? bpf_verifier_vlog+0x47a/0x860 [ 359.547658][T13671] ? __pfx___btf_verifier_log+0x10/0x10 [ 359.547693][T13671] ? btf_parse_hdr+0x1e3/0x710 [ 359.547719][T13671] btf_parse_hdr+0x3a1/0x710 [ 359.547746][T13671] btf_new_fd+0x38b/0xca0 [ 359.547767][T13671] ? apparmor_capable+0x13b/0x1b0 [ 359.547800][T13671] ? __pfx_btf_new_fd+0x10/0x10 [ 359.547828][T13671] ? bpf_btf_load+0xcf/0x1a0 [ 359.547863][T13671] __sys_bpf+0x6f2/0x820 [ 359.547895][T13671] ? __pfx___sys_bpf+0x10/0x10 [ 359.547936][T13671] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 359.547971][T13671] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.548006][T13671] ? do_syscall_64+0x100/0x230 [ 359.548043][T13671] __x64_sys_bpf+0x7c/0x90 [ 359.548071][T13671] do_syscall_64+0xf3/0x230 [ 359.548102][T13671] ? clear_bhb_loop+0x35/0x90 [ 359.548135][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.548165][T13671] RIP: 0033:0x7fc49878d169 [ 359.548184][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.548202][T13671] RSP: 002b:00007fc4996b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.548225][T13671] RAX: ffffffffffffffda RBX: 00007fc4989a5fa0 RCX: 00007fc49878d169 [ 359.548241][T13671] RDX: 0000000000000028 RSI: 0000200000000a00 RDI: 0000000000000012 [ 359.548254][T13671] RBP: 00007fc4996b0090 R08: 0000000000000000 R09: 0000000000000000 [ 359.548268][T13671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.548289][T13671] R13: 0000000000000000 R14: 00007fc4989a5fa0 R15: 00007ffe6bf08218 [ 359.548320][T13671] [ 360.127093][T13689] No such timeout policy "syz1" [ 360.303716][T13702] FAULT_INJECTION: forcing a failure. [ 360.303716][T13702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.362981][T13702] CPU: 1 UID: 0 PID: 13702 Comm: syz.4.2716 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 360.363015][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.363028][T13702] Call Trace: [ 360.363036][T13702] [ 360.363046][T13702] dump_stack_lvl+0x241/0x360 [ 360.363079][T13702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.363104][T13702] ? __pfx__printk+0x10/0x10 [ 360.363132][T13702] ? snprintf+0xda/0x120 [ 360.363161][T13702] should_fail_ex+0x40a/0x550 [ 360.363199][T13702] _copy_to_user+0x31/0xb0 [ 360.363240][T13702] simple_read_from_buffer+0xca/0x150 [ 360.363274][T13702] proc_fail_nth_read+0x1e9/0x250 [ 360.363309][T13702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.363343][T13702] ? rw_verify_area+0x243/0x630 [ 360.363366][T13702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.363399][T13702] vfs_read+0x1f8/0xb40 [ 360.363423][T13702] ? fdget_pos+0x254/0x320 [ 360.363456][T13702] ? __pfx___mutex_lock+0x10/0x10 [ 360.363489][T13702] ? __pfx_vfs_read+0x10/0x10 [ 360.363516][T13702] ? __fget_files+0x2a/0x410 [ 360.363550][T13702] ? __fget_files+0x395/0x410 [ 360.363579][T13702] ? __fget_files+0x2a/0x410 [ 360.363621][T13702] ksys_read+0x18f/0x2b0 [ 360.363647][T13702] ? __pfx_ksys_read+0x10/0x10 [ 360.363671][T13702] ? do_syscall_64+0x100/0x230 [ 360.363707][T13702] ? do_syscall_64+0xb6/0x230 [ 360.363741][T13702] do_syscall_64+0xf3/0x230 [ 360.363779][T13702] ? clear_bhb_loop+0x35/0x90 [ 360.363813][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.363844][T13702] RIP: 0033:0x7fd8e298bb7c [ 360.363863][T13702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 360.363882][T13702] RSP: 002b:00007fd8e383c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.363906][T13702] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298bb7c [ 360.363922][T13702] RDX: 000000000000000f RSI: 00007fd8e383c0a0 RDI: 0000000000000004 [ 360.363936][T13702] RBP: 00007fd8e383c090 R08: 0000000000000000 R09: 0000000000000000 [ 360.363949][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.363962][T13702] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 360.363996][T13702] [ 360.826790][T13717] tipc: Resetting bearer [ 360.851223][T13717] bond5: (slave veth11): Releasing backup interface [ 360.889003][T13717] veth11: left promiscuous mode [ 360.917201][T13720] team0: Unable to change to the same mode the team is in [ 360.996620][T13726] lo speed is unknown, defaulting to 1000 [ 361.012743][T13726] lo speed is unknown, defaulting to 1000 [ 361.427528][T13745] bond2: entered promiscuous mode [ 361.433315][T13745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.457939][T13745] veth9: entered promiscuous mode [ 361.464142][T13745] bond2: (slave veth9): Enslaving as an active interface with an up link [ 361.674690][T13752] netlink: 'syz.3.2734': attribute type 1 has an invalid length. [ 361.941476][T13761] lo: MTU too low for tipc bearer [ 361.951433][T13761] tipc: Enabling of bearer rejected, failed to enable media [ 362.036500][T13768] ax25_connect(): syz.2.2742 uses autobind, please contact jreuter@yaina.de [ 362.100663][T13765] xt_CT: No such helper "snmp" [ 362.151490][T13773] netlink: 'syz.3.2743': attribute type 2 has an invalid length. [ 362.196044][T13773] __nla_validate_parse: 10 callbacks suppressed [ 362.196071][T13773] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2743'. [ 362.277602][T13777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2745'. [ 362.335061][T13780] veth0_macvtap: left allmulticast mode [ 362.343094][T13780] macvtap2: left allmulticast mode [ 362.391924][T13789] team0: Unable to change to the same mode the team is in [ 362.454086][T13786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2748'. [ 362.552906][T13794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2749'. [ 362.577112][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2749'. [ 362.601473][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'. [ 362.776452][T13803] bond2: left promiscuous mode [ 362.786032][T13803] veth9: left promiscuous mode [ 363.404957][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'. [ 363.602943][T13842] tipc: Resetting bearer [ 363.639548][T13842] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 363.667095][T13842] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 363.690085][T13842] bond5: left promiscuous mode [ 363.811576][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.825846][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.869544][T13855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.909811][T13865] ================================================================== [ 363.918076][T13865] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 363.926884][T13865] Write of size 8 at addr ffff888079386430 by task syz.4.2774/13865 [ 363.934908][T13865] [ 363.937263][T13865] CPU: 1 UID: 0 PID: 13865 Comm: syz.4.2774 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 363.937292][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.937307][T13865] Call Trace: [ 363.937316][T13865] [ 363.937327][T13865] dump_stack_lvl+0x241/0x360 [ 363.937357][T13865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.937382][T13865] ? __pfx__printk+0x10/0x10 [ 363.937406][T13865] ? _printk+0xd5/0x120 [ 363.937426][T13865] ? __virt_addr_valid+0x183/0x530 [ 363.937447][T13865] ? __virt_addr_valid+0x183/0x530 [ 363.937469][T13865] print_report+0x16e/0x5b0 [ 363.937496][T13865] ? __virt_addr_valid+0x183/0x530 [ 363.937517][T13865] ? __virt_addr_valid+0x183/0x530 [ 363.937537][T13865] ? __virt_addr_valid+0x45f/0x530 [ 363.937557][T13865] ? __phys_addr+0xba/0x170 [ 363.937578][T13865] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 363.937604][T13865] kasan_report+0x143/0x180 [ 363.937633][T13865] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 363.937662][T13865] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 363.937690][T13865] wg_socket_init+0x78f/0xea0 [ 363.937735][T13865] ? __pfx_wg_socket_init+0x10/0x10 [ 363.937763][T13865] ? trace_contention_end+0x3c/0x120 [ 363.937789][T13865] ? __pfx_wg_receive+0x10/0x10 [ 363.937821][T13865] ? ib_device_get_by_netdev+0x595/0x5e0 [ 363.937857][T13865] ? wg_open+0x22d/0x420 [ 363.937889][T13865] wg_open+0x255/0x420 [ 363.937912][T13865] __dev_open+0x45a/0x8a0 [ 363.937948][T13865] ? __pfx___dev_open+0x10/0x10 [ 363.937982][T13865] ? dev_set_rx_mode+0xb8/0x2e0 [ 363.938008][T13865] __dev_change_flags+0x1e2/0x6f0 [ 363.938036][T13865] ? __pfx___dev_change_flags+0x10/0x10 [ 363.938060][T13865] ? validate_linkmsg+0x8b6/0xa40 [ 363.938092][T13865] ? __pfx_validate_linkmsg+0x10/0x10 [ 363.938123][T13865] netif_change_flags+0x8b/0x1a0 [ 363.938151][T13865] do_setlink+0xd94/0x41d0 [ 363.938184][T13865] ? mark_lock+0x9a/0x360 [ 363.938206][T13865] ? __pfx_do_setlink+0x10/0x10 [ 363.938229][T13865] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 363.938264][T13865] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.938300][T13865] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 363.938328][T13865] ? lockdep_hardirqs_on+0x99/0x150 [ 363.938359][T13865] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 363.938385][T13865] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 363.938417][T13865] ? rcu_is_watching+0x15/0xb0 [ 363.938443][T13865] ? __mutex_lock+0xba3/0x1010 [ 363.938475][T13865] ? __mutex_lock+0x602/0x1010 [ 363.938509][T13865] ? rtnl_newlink+0xc4c/0x1d90 [ 363.938529][T13865] ? __pfx___mutex_lock+0x10/0x10 [ 363.938564][T13865] ? nla_strscpy+0x100/0x180 [ 363.938589][T13865] ? full_name_hash+0x93/0xe0 [ 363.938625][T13865] rtnl_newlink+0x15a6/0x1d90 [ 363.938645][T13865] ? is_bpf_text_address+0x285/0x2a0 [ 363.938665][T13865] ? is_bpf_text_address+0x26/0x2a0 [ 363.938693][T13865] ? __pfx_rtnl_newlink+0x10/0x10 [ 363.938732][T13865] ? validate_chain+0x11e/0x5920 [ 363.938756][T13865] ? __pfx_lock_acquire+0x10/0x10 [ 363.938790][T13865] ? __pfx_lock_release+0x10/0x10 [ 363.938825][T13865] ? __pfx_validate_chain+0x10/0x10 [ 363.938850][T13865] ? mark_lock+0x9a/0x360 [ 363.938873][T13865] ? __lock_acquire+0x1397/0x2100 [ 363.938922][T13865] ? __pfx_lock_release+0x10/0x10 [ 363.938962][T13865] ? __pfx_rtnl_newlink+0x10/0x10 [ 363.938984][T13865] rtnetlink_rcv_msg+0x791/0xcf0 [ 363.939017][T13865] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 363.939052][T13865] ? __lock_acquire+0x1397/0x2100 [ 363.939084][T13865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.939127][T13865] netlink_rcv_skb+0x206/0x480 [ 363.939161][T13865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 363.939197][T13865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.939242][T13865] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.939277][T13865] netlink_unicast+0x7f6/0x990 [ 363.939311][T13865] ? __pfx_netlink_unicast+0x10/0x10 [ 363.939340][T13865] ? __virt_addr_valid+0x45f/0x530 [ 363.939361][T13865] ? __phys_addr_symbol+0x2f/0x70 [ 363.939381][T13865] ? __check_object_size+0x47a/0x730 [ 363.939413][T13865] netlink_sendmsg+0x8de/0xcb0 [ 363.939441][T13865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.939464][T13865] ? aa_sock_msg_perm+0x91/0x160 [ 363.939500][T13865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.939520][T13865] __sock_sendmsg+0x221/0x270 [ 363.939555][T13865] ____sys_sendmsg+0x53a/0x860 [ 363.939586][T13865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.939611][T13865] ? __fget_files+0x2a/0x410 [ 363.939644][T13865] ? __fget_files+0x2a/0x410 [ 363.939680][T13865] __sys_sendmsg+0x269/0x350 [ 363.939709][T13865] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.939791][T13865] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.939826][T13865] ? do_syscall_64+0x100/0x230 [ 363.939860][T13865] ? do_syscall_64+0xb6/0x230 [ 363.939893][T13865] do_syscall_64+0xf3/0x230 [ 363.939924][T13865] ? clear_bhb_loop+0x35/0x90 [ 363.939957][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.939995][T13865] RIP: 0033:0x7fd8e298d169 [ 363.940015][T13865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.940036][T13865] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.940060][T13865] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 363.940078][T13865] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 363.940093][T13865] RBP: 00007fd8e2a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 363.940107][T13865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.940121][T13865] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 363.940146][T13865] [ 363.940154][T13865] [ 364.487255][T13865] Allocated by task 13805: [ 364.491684][T13865] kasan_save_track+0x3f/0x80 [ 364.496379][T13865] __kasan_slab_alloc+0x66/0x80 [ 364.501237][T13865] kmem_cache_alloc_noprof+0x1d9/0x380 [ 364.506707][T13865] sk_prot_alloc+0x58/0x210 [ 364.511216][T13865] sk_alloc+0x3e/0x370 [ 364.515289][T13865] inet_create+0x648/0xea0 [ 364.519716][T13865] __sock_create+0x4c0/0xa30 [ 364.524321][T13865] __sys_socket+0x150/0x3c0 [ 364.528822][T13865] __x64_sys_socket+0x7a/0x90 [ 364.533497][T13865] do_syscall_64+0xf3/0x230 [ 364.538013][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.543928][T13865] [ 364.546251][T13865] Freed by task 13807: [ 364.550316][T13865] kasan_save_track+0x3f/0x80 [ 364.554995][T13865] kasan_save_free_info+0x40/0x50 [ 364.560039][T13865] __kasan_slab_free+0x59/0x70 [ 364.564808][T13865] kmem_cache_free+0x195/0x410 [ 364.569587][T13865] __sk_destruct+0x4fd/0x690 [ 364.574188][T13865] inet_release+0x17d/0x200 [ 364.578699][T13865] sock_close+0xbc/0x240 [ 364.582955][T13865] __fput+0x3e9/0x9f0 [ 364.586950][T13865] task_work_run+0x24f/0x310 [ 364.591542][T13865] do_exit+0xa2a/0x2940 [ 364.595707][T13865] do_group_exit+0x207/0x2c0 [ 364.600306][T13865] get_signal+0x168c/0x1720 [ 364.604813][T13865] arch_do_signal_or_restart+0x96/0x860 [ 364.610368][T13865] syscall_exit_to_user_mode+0xce/0x340 [ 364.615932][T13865] do_syscall_64+0x100/0x230 [ 364.620534][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.626435][T13865] [ 364.628777][T13865] The buggy address belongs to the object at ffff888079385d00 [ 364.628777][T13865] which belongs to the cache UDP of size 1856 [ 364.642243][T13865] The buggy address is located 1840 bytes inside of [ 364.642243][T13865] freed 1856-byte region [ffff888079385d00, ffff888079386440) [ 364.656242][T13865] [ 364.658574][T13865] The buggy address belongs to the physical page: [ 364.664996][T13865] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79380 [ 364.673858][T13865] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 364.682360][T13865] memcg:ffff888031eae101 [ 364.686599][T13865] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 364.694157][T13865] page_type: f5(slab) [ 364.698146][T13865] raw: 00fff00000000040 ffff888143290780 dead000000000100 dead000000000122 [ 364.706737][T13865] raw: 0000000000000000 0000000080100010 00000000f5000000 ffff888031eae101 [ 364.715329][T13865] head: 00fff00000000040 ffff888143290780 dead000000000100 dead000000000122 [ 364.724007][T13865] head: 0000000000000000 0000000080100010 00000000f5000000 ffff888031eae101 [ 364.732721][T13865] head: 00fff00000000003 ffffea0001e4e001 ffffffffffffffff 0000000000000000 [ 364.741574][T13865] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 364.750267][T13865] page dumped because: kasan: bad access detected [ 364.756702][T13865] page_owner tracks the page as allocated [ 364.762424][T13865] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8408, tgid 8398 (syz.0.855), ts 162406454025, free_ts 162399552877 [ 364.783709][T13865] post_alloc_hook+0x1f4/0x240 [ 364.788525][T13865] get_page_from_freelist+0x365c/0x37a0 [ 364.794096][T13865] __alloc_frozen_pages_noprof+0x292/0x710 [ 364.799929][T13865] alloc_pages_mpol+0x311/0x660 [ 364.804846][T13865] allocate_slab+0x8f/0x3a0 [ 364.809402][T13865] ___slab_alloc+0xc27/0x14a0 [ 364.814127][T13865] __slab_alloc+0x58/0xa0 [ 364.818487][T13865] kmem_cache_alloc_noprof+0x268/0x380 [ 364.823988][T13865] sk_prot_alloc+0x58/0x210 [ 364.828519][T13865] sk_alloc+0x3e/0x370 [ 364.832633][T13865] inet_create+0x648/0xea0 [ 364.837073][T13865] __sock_create+0x4c0/0xa30 [ 364.841858][T13865] inet_ctl_sock_create+0xc2/0x250 [ 364.846992][T13865] igmp_net_init+0xbb/0x150 [ 364.851511][T13865] ops_init+0x349/0x5b0 [ 364.855672][T13865] setup_net+0x287/0x9e0 [ 364.859919][T13865] page last free pid 8408 tgid 8398 stack trace: [ 364.866250][T13865] free_frozen_pages+0xe0d/0x10e0 [ 364.871283][T13865] __put_partials+0x160/0x1c0 [ 364.875972][T13865] put_cpu_partial+0x17c/0x250 [ 364.880741][T13865] __slab_free+0x290/0x380 [ 364.885175][T13865] qlist_free_all+0x9a/0x140 [ 364.889774][T13865] kasan_quarantine_reduce+0x14f/0x170 [ 364.895241][T13865] __kasan_slab_alloc+0x23/0x80 [ 364.900104][T13865] kmem_cache_alloc_lru_noprof+0x1dd/0x390 [ 364.905923][T13865] sock_alloc_inode+0x28/0xc0 [ 364.910624][T13865] alloc_inode+0x65/0x1a0 [ 364.914966][T13865] __sock_create+0x127/0xa30 [ 364.919571][T13865] __sys_socket+0x150/0x3c0 [ 364.924080][T13865] __x64_sys_socket+0x7a/0x90 [ 364.928758][T13865] do_syscall_64+0xf3/0x230 [ 364.933274][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.939179][T13865] [ 364.941505][T13865] Memory state around the buggy address: [ 364.947139][T13865] ffff888079386300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.955206][T13865] ffff888079386380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.963267][T13865] >ffff888079386400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 364.971332][T13865] ^ [ 364.976960][T13865] ffff888079386480: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 364.985140][T13865] ffff888079386500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.993236][T13865] ================================================================== [ 365.002791][T13865] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 365.010036][T13865] CPU: 1 UID: 0 PID: 13865 Comm: syz.4.2774 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 365.020827][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 365.030947][T13865] Call Trace: [ 365.034251][T13865] [ 365.037190][T13865] dump_stack_lvl+0x241/0x360 [ 365.041881][T13865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.047091][T13865] ? __pfx__printk+0x10/0x10 [ 365.051690][T13865] ? vscnprintf+0x5d/0x90 [ 365.056030][T13865] panic+0x349/0x880 [ 365.059943][T13865] ? check_panic_on_warn+0x21/0xb0 [ 365.065074][T13865] ? __pfx_panic+0x10/0x10 [ 365.069495][T13865] ? mark_lock+0x9a/0x360 [ 365.073835][T13865] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 365.079741][T13865] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 365.085653][T13865] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 365.091992][T13865] ? print_report+0x519/0x5b0 [ 365.096688][T13865] check_panic_on_warn+0x86/0xb0 [ 365.101649][T13865] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 365.107689][T13865] end_report+0x77/0x160 [ 365.111957][T13865] kasan_report+0x154/0x180 [ 365.116491][T13865] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 365.122512][T13865] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 365.128351][T13865] wg_socket_init+0x78f/0xea0 [ 365.133075][T13865] ? __pfx_wg_socket_init+0x10/0x10 [ 365.138311][T13865] ? trace_contention_end+0x3c/0x120 [ 365.143616][T13865] ? __pfx_wg_receive+0x10/0x10 [ 365.148484][T13865] ? ib_device_get_by_netdev+0x595/0x5e0 [ 365.154133][T13865] ? wg_open+0x22d/0x420 [ 365.158393][T13865] wg_open+0x255/0x420 [ 365.162473][T13865] __dev_open+0x45a/0x8a0 [ 365.166821][T13865] ? __pfx___dev_open+0x10/0x10 [ 365.171716][T13865] ? dev_set_rx_mode+0xb8/0x2e0 [ 365.176619][T13865] __dev_change_flags+0x1e2/0x6f0 [ 365.181679][T13865] ? __pfx___dev_change_flags+0x10/0x10 [ 365.187243][T13865] ? validate_linkmsg+0x8b6/0xa40 [ 365.192284][T13865] ? __pfx_validate_linkmsg+0x10/0x10 [ 365.197669][T13865] netif_change_flags+0x8b/0x1a0 [ 365.202630][T13865] do_setlink+0xd94/0x41d0 [ 365.207065][T13865] ? mark_lock+0x9a/0x360 [ 365.211401][T13865] ? __pfx_do_setlink+0x10/0x10 [ 365.216255][T13865] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 365.222251][T13865] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.228646][T13865] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 365.234574][T13865] ? lockdep_hardirqs_on+0x99/0x150 [ 365.239812][T13865] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 365.245727][T13865] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 365.252072][T13865] ? rcu_is_watching+0x15/0xb0 [ 365.256852][T13865] ? __mutex_lock+0xba3/0x1010 [ 365.261636][T13865] ? __mutex_lock+0x602/0x1010 [ 365.266420][T13865] ? rtnl_newlink+0xc4c/0x1d90 [ 365.271209][T13865] ? __pfx___mutex_lock+0x10/0x10 [ 365.276268][T13865] ? nla_strscpy+0x100/0x180 [ 365.280881][T13865] ? full_name_hash+0x93/0xe0 [ 365.285582][T13865] rtnl_newlink+0x15a6/0x1d90 [ 365.290277][T13865] ? is_bpf_text_address+0x285/0x2a0 [ 365.295627][T13865] ? is_bpf_text_address+0x26/0x2a0 [ 365.300860][T13865] ? __pfx_rtnl_newlink+0x10/0x10 [ 365.305933][T13865] ? validate_chain+0x11e/0x5920 [ 365.310906][T13865] ? __pfx_lock_acquire+0x10/0x10 [ 365.315980][T13865] ? __pfx_lock_release+0x10/0x10 [ 365.321046][T13865] ? __pfx_validate_chain+0x10/0x10 [ 365.326279][T13865] ? mark_lock+0x9a/0x360 [ 365.330739][T13865] ? __lock_acquire+0x1397/0x2100 [ 365.335855][T13865] ? __pfx_lock_release+0x10/0x10 [ 365.340958][T13865] ? __pfx_rtnl_newlink+0x10/0x10 [ 365.346021][T13865] rtnetlink_rcv_msg+0x791/0xcf0 [ 365.350985][T13865] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 365.356125][T13865] ? __lock_acquire+0x1397/0x2100 [ 365.361277][T13865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 365.366772][T13865] netlink_rcv_skb+0x206/0x480 [ 365.371650][T13865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 365.377152][T13865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.382464][T13865] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.387680][T13865] netlink_unicast+0x7f6/0x990 [ 365.392482][T13865] ? __pfx_netlink_unicast+0x10/0x10 [ 365.397805][T13865] ? __virt_addr_valid+0x45f/0x530 [ 365.402939][T13865] ? __phys_addr_symbol+0x2f/0x70 [ 365.407981][T13865] ? __check_object_size+0x47a/0x730 [ 365.413290][T13865] netlink_sendmsg+0x8de/0xcb0 [ 365.418072][T13865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.423367][T13865] ? aa_sock_msg_perm+0x91/0x160 [ 365.428326][T13865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.433727][T13865] __sock_sendmsg+0x221/0x270 [ 365.438445][T13865] ____sys_sendmsg+0x53a/0x860 [ 365.443237][T13865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.448538][T13865] ? __fget_files+0x2a/0x410 [ 365.453152][T13865] ? __fget_files+0x2a/0x410 [ 365.457773][T13865] __sys_sendmsg+0x269/0x350 [ 365.462484][T13865] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.467630][T13865] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.473979][T13865] ? do_syscall_64+0x100/0x230 [ 365.478761][T13865] ? do_syscall_64+0xb6/0x230 [ 365.483456][T13865] do_syscall_64+0xf3/0x230 [ 365.487994][T13865] ? clear_bhb_loop+0x35/0x90 [ 365.492706][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.498629][T13865] RIP: 0033:0x7fd8e298d169 [ 365.503068][T13865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.522689][T13865] RSP: 002b:00007fd8e383c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.531116][T13865] RAX: ffffffffffffffda RBX: 00007fd8e2ba5fa0 RCX: 00007fd8e298d169 [ 365.539099][T13865] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 365.547075][T13865] RBP: 00007fd8e2a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 365.555049][T13865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.563029][T13865] R13: 0000000000000000 R14: 00007fd8e2ba5fa0 R15: 00007ffc1fac8118 [ 365.571015][T13865] [ 365.574293][T13865] Kernel Offset: disabled [ 365.578641][T13865] Rebooting in 86400 seconds..