last executing test programs: 4.079909118s ago: executing program 1 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x2000}, {}, {0x8000000}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x29, 0x85, 0x72}, 0x2c) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3.795981082s ago: executing program 1 (id=1408): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r1, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r3, @ANYBLOB="080003001900000008000100", @ANYRES32=r3], 0x44}}, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xfffffffe, 0x0, {0x30, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@private2={0xfc, 0x2, '\x00', 0x4}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvmmsg(r5, &(0x7f0000011c40)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10102, 0x0) (async) sendmsg$can_raw(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@can={{0x2, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "6a05f256f7c5d239"}, 0x10}, 0x1, 0x0, 0x0, 0x4040005}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x6a040000) (async) r7 = socket(0x22, 0x2, 0x2) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f00000000c0)=0x96, 0x4) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)=0x3) (async, rerun: 32) r10 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000900000000000000000000000000e1d2feb6508478d2"], 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4000000}, @exit, @alu={0x7, 0x0, 0x3, 0x3, 0x0, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14f7f4003d0007010000000000000000047c0000e8a5e4b1bf28d75030c0d7b5b8744c84816144"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x90) (async) recvmmsg(r12, &(0x7f00000003c0)=[{{&(0x7f0000000240), 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/75, 0x4b}], 0x1, &(0x7f0000000500)=""/247, 0xf7}, 0x2}], 0x1, 0x2160, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5) (rerun: 64) 3.62420493s ago: executing program 1 (id=1412): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300fe1f000000000000000010c000000000ac1e0001000000faff0000000005000000ffffffffffff000accedc3e7fa9878d85e809c0030", @ANYRES32=0xee01, @ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000004fe8000000000000000000000000000bb4e200000000000000a0040000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300200000000000000000000000000000000000000000021000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.566126752s ago: executing program 1 (id=1414): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)='8', 0x1}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20}}], 0x1, 0x4005) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x7, 0x0) 1.994080387s ago: executing program 0 (id=1432): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\"'}]}], {0x14}}, 0x8c}}, 0x0) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x6, @empty, 0x4e21, 0x0, 'wlc\x00', 0x24, 0xd87, 0x79}, 0x2c) r3 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="5f50c974e163ca517dc8529cdaf63812d93c33d188bfe595", 0x18}], 0x1) (async, rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000100)={@dev}, &(0x7f0000000140)=0x14) 1.911237198s ago: executing program 0 (id=1433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x207, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x810000}]}, @NFT_MSG_DELSET={0x0, 0xb, 0xa, 0x402, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_EXPR={0x0, 0x11, 0x0, 0x1, @log={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x0, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOG_GROUP={0x0, 0x1, 0x1, 0x0, 0xd5e8}, @NFTA_LOG_LEVEL, @NFTA_LOG_PREFIX={0x0, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_SNAPLEN={0x0, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_LEVEL={0x0, 0x5, 0x1, 0x0, 0xf}, @NFTA_LOG_FLAGS={0x0, 0x6, 0x1, 0x0, 0xc}, @NFTA_LOG_FLAGS={0x0, 0x6, 0x1, 0x0, 0x20}, @NFTA_LOG_SNAPLEN={0x0, 0x3, 0x1, 0x0, 0xb7c}, @NFTA_LOG_PREFIX={0x0, 0x2, 0x1, 0x0, 'wlan1\x00'}]}}}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "cd2e6f366a4ae488264c937136155c563156e7addc52d6826b440d249ecb9044dccbb64f687eb720496507e00f950fe7a172e12370"}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="9e1d13", 0x3) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200), 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffef}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x20000080) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x60400) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f0000000040)=r8, 0x4) bind$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e24, @local}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r10 = epoll_create1(0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f00000001c0)=0x745a, 0x4) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000002200)=0xc0100100) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 1.88258982s ago: executing program 3 (id=1434): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x462}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x11}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}]}, 0x4c}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x2c, 0x66, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xd}, {0xe, 0x1}, {0xffe0, 0x8}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x885d}, 0x20004000) 1.725561161s ago: executing program 3 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5afa, 0x4) sendmmsg$inet(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)='O', 0x1}], 0x1}}], 0x1, 0x800c081) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x22020600) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x300, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000200)={0x1fc, 0x3, 0x0, 0x9}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400122a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.718374353s ago: executing program 0 (id=1437): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0xe, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0701000000f809000500feff"], &(0x7f0000000000)='GPL\x00', 0x8, 0xf4240, &(0x7f0000003300)=""/142, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff61, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000bf000000000000ba452478252331000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000020b7030000000003008500000058000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e004000008c71ef28ff4b"], 0xffdd) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)='%pI4 \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.552975986s ago: executing program 4 (id=1440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) unshare(0x6020400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1000, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0xb}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x12}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x8012, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x883e, 0x41424344, 0x41424344, 0x0, 0x0, 0x4}}}}, 0xfdef) 1.492536261s ago: executing program 2 (id=1441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000344b019780d310e379d059fa8355874e80e35bf913569d5c77aa3c8184fb272f832d274f254225df846ad612fa73f18b152e77991c3f677a7bec47669f02e76fbe7540eb176297ecd4270abd08af857906114be820bd392068d81d1c2fe689834dc57ed2d06d11da933d710362e4e2998168687d2c1db3207070ed9598e038e6945db5f4d4b867a5f30fa166c92e0d68ac7d60393a580ec9e"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='\x00'/15, @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r6, @ANYBLOB="7f"], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x61, 0x61, 0x5f, 0x0, 0x0, 0x2e, 0x30]}}, &(0x7f00000013c0)=""/178, 0x3d, 0xb2, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x4000) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x810, 0xffffffffffffffff, 0x65fb9000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000180)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000130400"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) socket$inet6(0xa, 0x6, 0x0) connect$inet(r9, &(0x7f0000000400)={0x2, 0x4e1e, @private=0xa010101}, 0x10) unshare(0x40000400) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0) 1.392151466s ago: executing program 0 (id=1442): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x24020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001580)={0x8}) epoll_pwait(r2, &(0x7f0000000340)=[{}], 0x1, 0xffff0001, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) recvfrom$inet6(r0, 0x0, 0xfffffe7d, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x40c8000) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="375548246f16cf8ff305231fc5d8510ab181e346a9a68f742a339797", 0x1c}], 0x1}, 0x40488c4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.38356764s ago: executing program 4 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000040000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x7d}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000000700e20600000000850000000500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.272632715s ago: executing program 2 (id=1444): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000)=0xb4, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000965d2a51c2167475a400"/29, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4001000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x1}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x2000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 1.225833571s ago: executing program 4 (id=1445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe80000000000000000000007a90fb7e2c4e000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x7, 0x9, 0xd, 0xa}, {0x2, 0xff, 0x7f, 0x6}, {0xb, 0xe, 0x6, 0x1}, {0x4, 0x81, 0xb6, 0x3}]}) (async) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x7, 0x9, 0xd, 0xa}, {0x2, 0xff, 0x7f, 0x6}, {0xb, 0xe, 0x6, 0x1}, {0x4, 0x81, 0xb6, 0x3}]}) syz_emit_ethernet(0x52, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaa8100023e28a9be60de6b0b6e4f7a936f0086dd6000ed6a00142c00fe8000000000eaffffff006af12de1bbfe8000"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000600)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x10) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x10) sendto$inet6(r3, &(0x7f0000847fff)='H', 0x1, 0x40, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x4400}}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000847fff)='H', 0x1, 0x40, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x4400}}, 0x1c) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r7, &(0x7f0000000240)="9882e70131b512e63614ac1bbd", 0xd) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800", @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000500)={0x0, 'team0\x00', {0x1}, 0x4}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000500)={0x0, 'team0\x00', {0x1}, 0x4}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffe, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x10, 0x4}, {0x1, 0xfff3}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40080) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffe, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x10, 0x4}, {0x1, 0xfff3}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40080) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000040)={{r4}}) 968.00905ms ago: executing program 4 (id=1446): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0xedf, 0x20000000, 0x0, 0x1}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x34}}, 0x48040) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x88, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40890}, 0x20000000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x9, 0x10}, &(0x7f0000000100)=0xc) 907.355495ms ago: executing program 4 (id=1447): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffff6}}], 0x1, 0x8004044) r0 = socket(0xa, 0x6, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x1c, r3, 0x705, 0x400000, 0x4, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) 767.495687ms ago: executing program 3 (id=1448): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000050500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x24, r2, 0x601, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x8040) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x270, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xf8, 0x160, 0x700, {}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, &(0x7f0000000100)=0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x22, 0x2, 0x1) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$tipc(r4, &(0x7f0000000480)={&(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x5, 0x4}}, 0x10, 0x0, 0x4f, 0x0, 0x0, 0x4044000}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100", 0x2a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0070007061796c6f6164002400028008000440000000560800054000000009080001400000000a08000240000000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) 691.933055ms ago: executing program 4 (id=1449): socket$nl_route(0x10, 0x3, 0x0) socketpair(0xa, 0x800, 0x1ff, &(0x7f0000001280)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a205dbc00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x10}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22ffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x40020000) close(0x3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000002000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000008000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 670.584416ms ago: executing program 2 (id=1450): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={&(0x7f00000000c0)="646f052727d7c5eb6b513621a58327afa7262a3338ed658215c8527fa582b073a813b9f863dbb18ef562859e9474bc9072f40377d0d520a0c27cfa51d4fb42427f7781fa0e4a1e24109c604bb5306276238d57976a354e1d0ebd92ed68df6ecc7562f589795d3f9544c51591f63fd804e4ebc159ea6ca18b8df4bd31ef4e49bcddfe21d602a6f4b5f6de8ded00ca935703f34155674c5ca1972465b8ae96d1ad9e079ae9", &(0x7f0000000180)=""/253, &(0x7f0000000280)="12502e6e906692e22cc6d9841073da454e5d69b4516b6beafb8b7f111912e67fe5c77816e6673930b83b8a78ccbb88", &(0x7f00000002c0)="9bfcb140d9bf84f84656e31b16249a1e6d5ffe892c41f4743b81b616490ebd8a57d3003bbf24c0013af4131a478001fb87d934b3f7d3f0b458d34fc302f27f6c30b518a7ad0414729ed10dc082ac6311df65beff", 0x2, 0x1, 0x4}, 0x38) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000380)="e4872249efed6898986e9ac0721577a217bdad86ee2348524ed51068e3d6b62a057464cf67efadefab21a2bca7bd69e0cf0a3a2040ff208c4380229f583c7c9ae83dc3806e7cf47d18f5943f7860a42f185d82739cf907273f2c7709c4ed4c775859507dd1924e9354efc8a3e654f930f5172216a93ce1384da301947ae74ee031716f2cf1ffd8757d9454a128bc938b30364944", 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000440)=0x1, 0x4) r3 = accept4$tipc(r0, 0x0, &(0x7f0000000480), 0x80000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000004c0)={0x3, 'ip6erspan0\x00', {0x6}, 0x40}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000500), &(0x7f0000000540)=0x30) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001580)={{r4, 0xc, 0x9, 0x957, 0x7, 0x4, 0xa, 0x3, 0x7fff, 0xfff, 0x6, 0x9, 0x2, 0x80}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000025c0)=0x0, &(0x7f0000002600)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)=@delchain={0x24, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6}, {0xffff, 0x6}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4090) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000002700)={'batadv0\x00', 0x8000}) connect$pppl2tp(r0, &(0x7f0000002740)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x1, 0x3, 0x1}}, 0x2e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000002780)={0x7, 0x0, 0x9, 0x8, 0x8}, 0x14) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000027c0)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002800)=r8, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)=@ipv4_deladdr={0x38, 0x15, 0x8, 0x70bd2d, 0x25dfdbfb, {0x2, 0x1f, 0x40, 0xc8, r6}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xa080}, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000002940), &(0x7f0000002980)=0x4) pipe(&(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003bc0)={&(0x7f0000003b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@struct={0xc, 0x4, 0x0, 0x4, 0x1, 0x9, [{0x1, 0x2, 0x8}, {0x0, 0x2, 0x9}, {0xf, 0x5, 0x5}, {0x10, 0x4, 0x200}]}]}, {0x0, [0x5f, 0x61, 0x2e, 0x5f]}}, &(0x7f0000003b80)=""/36, 0x5a, 0x24, 0x0, 0x2, 0x0, @void, @value}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000003c80)={r9, 0x7, 0x2, 0x6}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003cc0)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003dc0)={0x11, 0x17, &(0x7f0000002a00)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x16}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], &(0x7f0000002ac0)='syzkaller\x00', 0x6a87, 0x1000, &(0x7f0000002b00)=""/4096, 0x41000, 0x0, '\x00', r6, 0x0, r11, 0x8, &(0x7f0000003c00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000003c40)={0x0, 0x10, 0x5, 0x1f0}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000003d00)=[0xffffffffffffffff, r12, r13], &(0x7f0000003d40)=[{0x4, 0x1, 0x9, 0x8}, {0x4, 0x4, 0xa, 0xb}, {0x0, 0x3, 0x10, 0xc}, {0x1, 0x5, 0x4, 0x6}, {0x1, 0x2, 0x4, 0x8}, {0x4, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x7, 0xc}], 0x10, 0xffffff01, @void, @value}, 0x94) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000003e80)=""/11, &(0x7f0000003ec0)=0xb) 566.676014ms ago: executing program 2 (id=1451): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x79) r3 = socket(0x2, 0x80805, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x2, @in=@multicast1, 0x3501, 0x1, 0x2, 0x0, 0x1}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800600270006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x900}, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xd145, 0x0, 0x0, 0x8}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={r5, @in6={{0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0xd}, 0xac00}}, 0x7, 0x3, 0x33, 0x5, 0x5e, 0x3, 0x1}, 0x9c) 444.184306ms ago: executing program 3 (id=1452): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x201, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000800) 443.793554ms ago: executing program 0 (id=1453): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x3, @loopback={0xff00000000000000}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b0001006261746164760000", @ANYRES32=r4], 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) socket$inet(0x2, 0xa, 0x7) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r6, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000001c0), 0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe1c00058008000140000000000800014000000062080001400000810008000a40000000000000048024000180090001006d6574610000000014000280080001400000000108000240000000001100010000000002000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x8}, 0x14}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 439.347111ms ago: executing program 1 (id=1454): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x888, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x5}, {{0x4, 0x1, 0x1, 0x1}, {0x3, 0x1}}}}]}]}, @TCA_BASIC_POLICE={0x868, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x1000, 0x2, 0x1, {0x9, 0x2, 0xfff8, 0x8000, 0x7ff, 0x5}, {0x4, 0x2, 0x834f, 0xffff, 0x0, 0x5}, 0x6, 0x2, 0x80000001}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x48a, 0x4, 0xf8, 0x0, 0xa0a, 0x9dd, 0x1, 0x8001, 0xd6cb, 0x7, 0x1, 0x4, 0xb, 0x9, 0x9, 0x6d, 0x9, 0x7f, 0x6, 0x101, 0x4, 0x3, 0x80000001, 0x8, 0x4, 0x7c325ffc, 0x5, 0x2, 0x7, 0xffffffff, 0x3, 0x0, 0x61, 0x5, 0x8, 0x4, 0x5, 0x1, 0x7, 0x0, 0x2, 0x0, 0xffffffb0, 0x9, 0x1, 0xa4c, 0x1, 0x7fffffff, 0x0, 0x13d0, 0x1ff, 0x73, 0x5, 0xffffffd9, 0x8, 0xe, 0x42, 0xa, 0x5, 0x0, 0x2d6, 0x8, 0x3, 0x7f, 0x6, 0x6, 0x3ff, 0xb8f0, 0x4, 0x8001, 0xf8000000, 0x7, 0x8, 0x6, 0x4, 0x101, 0x5, 0x7fffffff, 0x7, 0x7, 0x3, 0x9, 0xfffffff8, 0x9, 0x6, 0x8, 0x5e54, 0x4, 0x2, 0x59, 0xdca, 0x4, 0xc, 0xffffff3b, 0x1, 0x4, 0x1, 0x5, 0x5, 0x45fe, 0x2, 0x1, 0x4, 0x4, 0x3, 0x6, 0x5, 0xffff, 0x8, 0x4, 0x6, 0x2, 0x9, 0xba8, 0xffaa, 0x42d, 0x2, 0x7, 0x2, 0x7fffffff, 0xffffff00, 0x3, 0x6e77, 0x5, 0x40, 0x8, 0x3, 0x5, 0x5, 0x3, 0x5d05, 0x3ff, 0xfff, 0x944, 0x209, 0x2a, 0x2, 0x3, 0x400, 0x9, 0x1ff, 0xe, 0x8, 0x1, 0x9, 0x3, 0x40, 0x81, 0x1, 0x7, 0x9db, 0x9900, 0xff, 0x79, 0x4, 0x101, 0x7, 0x1, 0x7, 0x4, 0xad9, 0x5, 0x4, 0x9, 0xb, 0xe, 0x3, 0x9, 0x75, 0xffffffff, 0xdf83, 0x9, 0x0, 0xfffffffb, 0xfffffffd, 0x3, 0xffff638b, 0x7, 0x0, 0xe, 0x27, 0xffffffff, 0x7fffffff, 0x6, 0x5, 0x2, 0x7, 0x9, 0xf, 0x7, 0x9, 0x7ff, 0x5, 0x7, 0x3ff, 0x7f, 0x0, 0x7, 0x0, 0xd, 0x3, 0x1, 0x81, 0x7, 0xd, 0x7, 0x2, 0x1ff, 0x0, 0x3, 0x10, 0x2, 0x9, 0xff, 0x8649, 0x1, 0x1, 0x0, 0x3ff, 0x3, 0x0, 0x5, 0x2, 0x9, 0x6, 0x9, 0x2, 0x4, 0x3, 0x9, 0x7fff, 0x2, 0x7c, 0x0, 0xffffffd1, 0x8, 0x7, 0x2, 0xfffffffa, 0x0, 0x4, 0x4, 0x0, 0x3, 0x8c, 0x6, 0x2, 0xe, 0x39c8, 0xb69e, 0xfb, 0x7, 0x4, 0x40]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x8, 0x9, 0x3f, 0xffff, 0x4, 0x1, 0x1, 0x10, 0x6, 0xb, 0x2, 0x6f5, 0x4, 0x1, 0xa4b9, 0xe0d, 0x8000, 0x3, 0x6, 0x200, 0x10000, 0x3, 0x3, 0xa, 0x7, 0x51, 0xa, 0x1, 0x4, 0xfff, 0x6, 0x8000, 0x13, 0xffff646c, 0x1, 0x8, 0x337, 0x5, 0x6, 0xa, 0xfffffffb, 0x4d5e923c, 0x0, 0x0, 0x159b, 0x7, 0x8, 0x7f, 0x7, 0x20, 0x1000, 0x8000, 0x7, 0xd4, 0x7fffffff, 0x1, 0x4, 0x7b, 0x9, 0x17d, 0x6, 0x8, 0xf9, 0x8, 0x4, 0x8c, 0x86eb611e, 0x10, 0x8000, 0xb84, 0x4, 0x9, 0x3, 0x9, 0x9, 0x3, 0x364, 0x3ff, 0x56b, 0x7, 0x0, 0xac, 0x6, 0x0, 0xa8, 0x9, 0xcf, 0x6, 0x2, 0x3c000, 0x0, 0x8, 0x8, 0xe, 0xfffffffd, 0x10000, 0x114d, 0x4c, 0xffff, 0x80000001, 0x2, 0xffffffff, 0x8, 0x2, 0x4, 0x8, 0x2, 0xb, 0x0, 0x1, 0x3, 0xffff7cac, 0x8, 0x6, 0x56, 0x3ac5b89f, 0x7ff, 0x9, 0x8, 0x6, 0x3, 0x0, 0x1, 0x7, 0x0, 0x5, 0x2, 0xf, 0x9a5, 0x2, 0x1d, 0x5, 0x7f, 0x7, 0x4, 0x8, 0x9, 0xff, 0x4, 0x8, 0x5, 0x30cbc585, 0x0, 0x400, 0x4, 0x4, 0x401, 0x3, 0x3, 0x2, 0xffff, 0x0, 0xd, 0xab8c, 0x7, 0x5, 0x9, 0x3, 0x2, 0x2, 0x200, 0x0, 0x4, 0x2, 0x4, 0x800, 0x1, 0x1000, 0x2, 0x5, 0x8, 0x1, 0xe, 0xffffffa2, 0x0, 0x293, 0x0, 0x7, 0xca, 0x0, 0x4b2f3b06, 0x7ff, 0x1098, 0x80, 0x7ff, 0x8000, 0x5, 0x0, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x9, 0x8, 0x42, 0x326, 0xfffffffd, 0x10001, 0x401, 0xc7, 0x27, 0x7, 0x8001, 0x10, 0x1, 0x2, 0xd, 0x8, 0x4, 0xef, 0x93, 0x7, 0x2, 0x0, 0x7, 0x80, 0x80, 0x400, 0x5e, 0x101, 0x4, 0x7, 0x1, 0x200, 0x0, 0x9, 0x4, 0x9, 0x2, 0x6, 0xe, 0x2, 0x79, 0x7aba, 0x70a5, 0x7, 0xb20, 0x1000, 0x200, 0x8, 0x3, 0xa, 0x2, 0x3, 0x1, 0x401, 0x1000, 0xfff, 0x6, 0x8000, 0x3ff, 0x5]}]}]}}]}, 0x8b8}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 401.345604ms ago: executing program 2 (id=1455): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000002baf0000000000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 313.564078ms ago: executing program 3 (id=1456): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c2754713e36569b2fae8649eb50c4d0000000000", @ANYRES32=0x1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1439}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x1000000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000011c0)={r1, r0, 0xadb0, 0x60, &(0x7f0000001080)="ab0139287cc03320ee51a1be2cca943eda40bb1703dc3ab0bc85998da31c2db88a2d3b803fcf82665994ace99ed079c7415715774a224c1b1f86f297e7b06cf818b1825372ebce20eacf82e9e5e4b549ebb356d53c58c7133882994b232d75e8", 0x5, 0x9, 0x6, 0x3d, 0x18a4, 0x7502f741fcf3453e, 0xfffffffd, 'syz1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) 199.720416ms ago: executing program 2 (id=1457): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = getpid() r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff61, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{r3}, &(0x7f0000000140), &(0x7f00000003c0)=r4}, 0x20) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x4000084) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 118.818864ms ago: executing program 3 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5afa, 0x4) sendmmsg$inet(r2, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)='O', 0x1}], 0x1}}], 0x1, 0x800c081) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x22020600) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x3000000, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000200)={0x1fc, 0x3, 0x0, 0x9}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400122a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 96.886037ms ago: executing program 1 (id=1459): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x4}, 0x8) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1460): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose, 0xffffffff}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r2, 0x1ad72f7) accept4(r2, 0x0, 0x0, 0x80000) r4 = accept4$netrom(r2, 0x0, 0x0, 0x80000) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000bc0)="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", 0x2c7}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x401, 0x3ffe, 0x101, {0x0, 0x0, 0x0, r1, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @random="8dd1060fe5db"}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) kernel console output (not intermixed with test programs): ? do_syscall_64+0x100/0x230 [ 92.657493][ T6052] __x64_sys_sendmmsg+0xa0/0xb0 [ 92.657520][ T6052] do_syscall_64+0xf3/0x230 [ 92.657549][ T6052] ? clear_bhb_loop+0x35/0x90 [ 92.657581][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.657610][ T6052] RIP: 0033:0x7fcdb018d169 [ 92.657628][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.657644][ T6052] RSP: 002b:00007fcdb0f6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 92.657667][ T6052] RAX: ffffffffffffffda RBX: 00007fcdb03a5fa0 RCX: 00007fcdb018d169 [ 92.657682][ T6052] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000004 [ 92.657694][ T6052] RBP: 00007fcdb0f6b090 R08: 0000000000000000 R09: 0000000000000000 [ 92.657707][ T6052] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 92.657720][ T6052] R13: 0000000000000000 R14: 00007fcdb03a5fa0 R15: 00007ffdcefb07a8 [ 92.657749][ T6052] [ 92.923601][ T6027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.948720][ T6045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 93.044480][ T6027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.162567][ T6027] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.198725][ T6027] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.290904][ T6027] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.391228][ T6027] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.571206][ T6069] lo speed is unknown, defaulting to 1000 [ 93.995549][ T6091] FAULT_INJECTION: forcing a failure. [ 93.995549][ T6091] name failslab, interval 1, probability 0, space 0, times 1 [ 94.053655][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.3.47 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 94.053683][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.053696][ T6091] Call Trace: [ 94.053704][ T6091] [ 94.053713][ T6091] dump_stack_lvl+0x241/0x360 [ 94.053744][ T6091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.053767][ T6091] ? __pfx__printk+0x10/0x10 [ 94.053790][ T6091] ? __kmalloc_cache_noprof+0x48/0x390 [ 94.053822][ T6091] ? __pfx___might_resched+0x10/0x10 [ 94.053856][ T6091] should_fail_ex+0x40a/0x550 [ 94.053893][ T6091] should_failslab+0xac/0x100 [ 94.053924][ T6091] __kmalloc_cache_noprof+0x70/0x390 [ 94.053953][ T6091] ? __scm_send+0x688/0x1610 [ 94.053987][ T6091] __scm_send+0x688/0x1610 [ 94.054025][ T6091] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 94.054063][ T6091] ? __pfx___scm_send+0x10/0x10 [ 94.054101][ T6091] unix_dgram_sendmsg+0x1ae/0x1df0 [ 94.054152][ T6091] ? aa_sk_perm+0x96d/0xab0 [ 94.054186][ T6091] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 94.054226][ T6091] ? aa_sock_msg_perm+0x91/0x160 [ 94.054265][ T6091] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 94.054295][ T6091] __sock_sendmsg+0x221/0x270 [ 94.054329][ T6091] ____sys_sendmsg+0x53a/0x860 [ 94.054364][ T6091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.054393][ T6091] ? __fget_files+0x2a/0x410 [ 94.054428][ T6091] ? __fget_files+0x2a/0x410 [ 94.054468][ T6091] __sys_sendmmsg+0x36a/0x720 [ 94.054506][ T6091] ? __pfx___sys_sendmmsg+0x10/0x10 [ 94.054543][ T6091] ? lockdep_hardirqs_on+0x99/0x150 [ 94.054586][ T6091] ? native_apic_msr_write+0x39/0x50 [ 94.054613][ T6091] ? mark_lock+0x9a/0x360 [ 94.054638][ T6091] ? __lock_acquire+0x1397/0x2100 [ 94.054721][ T6091] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.054759][ T6091] ? rcu_is_watching+0x15/0xb0 [ 94.054788][ T6091] __x64_sys_sendmmsg+0xa0/0xb0 [ 94.054816][ T6091] do_syscall_64+0xf3/0x230 [ 94.054844][ T6091] ? clear_bhb_loop+0x35/0x90 [ 94.054877][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.054906][ T6091] RIP: 0033:0x7f764538d169 [ 94.054924][ T6091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.054941][ T6091] RSP: 002b:00007f76461bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.054964][ T6091] RAX: ffffffffffffffda RBX: 00007f76455a5fa0 RCX: 00007f764538d169 [ 94.054979][ T6091] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000004 [ 94.054992][ T6091] RBP: 00007f76461bc090 R08: 0000000000000000 R09: 0000000000000000 [ 94.055005][ T6091] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 94.055017][ T6091] R13: 0000000000000000 R14: 00007f76455a5fa0 R15: 00007ffcf42839e8 [ 94.055047][ T6091] [ 94.573509][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 94.701240][ T6107] bridge_slave_0: left allmulticast mode [ 94.707108][ T6107] bridge_slave_0: left promiscuous mode [ 94.715880][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.738118][ T6107] bridge_slave_1: left allmulticast mode [ 94.745278][ T6107] bridge_slave_1: left promiscuous mode [ 94.757523][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.782980][ T6107] bond0: (slave bond_slave_0): Releasing backup interface [ 94.834382][ T6107] bond0: (slave bond_slave_1): Releasing backup interface [ 94.866223][ T6107] team0: Port device team_slave_0 removed [ 94.884971][ T6107] team0: Port device team_slave_1 removed [ 94.894313][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.905765][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.923104][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.945602][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.082093][ T6124] netlink: 32 bytes leftover after parsing attributes in process `syz.0.57'. [ 95.275258][ T6131] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.299898][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 95.316319][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.339014][ T6134] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 95.376098][ T6131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.741422][ T6148] openvswitch: netlink: Message has 8 unknown bytes. [ 95.803172][ T6148] netlink: 'syz.4.64': attribute type 12 has an invalid length. [ 96.064283][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 96.065955][ T6165] xt_hashlimit: invalid interval [ 96.133880][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 96.152782][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 96.188545][ T6161] Bluetooth: MGMT ver 1.23 [ 97.111962][ T6224] xt_hashlimit: size too large, truncated to 1048576 [ 97.353631][ T6231] Bluetooth: MGMT ver 1.23 [ 97.642344][ T6238] netem: unknown loss type 0 [ 97.668105][ T6238] netem: change failed [ 98.268348][ T6262] __nla_validate_parse: 4 callbacks suppressed [ 98.268367][ T6262] netlink: 44 bytes leftover after parsing attributes in process `syz.0.95'. [ 98.335237][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 98.392838][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 98.736538][ T6291] tipc: Started in network mode [ 98.778412][ T6291] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 98.814151][ T6291] tipc: Enabling of bearer rejected, failed to enable media [ 98.874687][ T6296] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 98.899607][ T6303] netlink: 'syz.2.106': attribute type 2 has an invalid length. [ 99.010567][ T6296] team0: Port device dummy0 added [ 99.149839][ T6308] team0: Port device dummy0 removed [ 99.189597][ T6308] bridge_slave_0: left allmulticast mode [ 99.195420][ T6308] bridge_slave_0: left promiscuous mode [ 99.224090][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.251047][ T6318] netlink: 'syz.0.108': attribute type 11 has an invalid length. [ 99.266768][ T6308] bridge_slave_1: left allmulticast mode [ 99.278119][ T6308] bridge_slave_1: left promiscuous mode [ 99.305333][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.396148][ T6308] bond0: (slave bond_slave_0): Releasing backup interface [ 99.510400][ T6308] bond0: (slave bond_slave_1): Releasing backup interface [ 99.563988][ T6308] team0: Port device team_slave_0 removed [ 99.588977][ T6308] team0: Port device team_slave_1 removed [ 99.613652][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.652311][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.701783][ T6336] netlink: 212 bytes leftover after parsing attributes in process `syz.0.114'. [ 99.973530][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.981996][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.024201][ T3078] lo speed is unknown, defaulting to 1000 [ 100.202402][ T6333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.278882][ T6348] x_tables: duplicate entry at hook 1 [ 100.289997][ T6348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 100.492185][ T6333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.636745][ T6333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.867641][ T6333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.235182][ T6333] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.254123][ T3078] IPVS: starting estimator thread 0... [ 101.428324][ T6391] IPVS: using max 19 ests per chain, 45600 per kthread [ 101.579235][ T6382] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.590319][ T6382] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.599691][ T6382] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.611254][ T6382] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.634983][ T6333] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.676638][ T6333] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.768913][ T6333] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.790778][ T6399] syzkaller1: entered promiscuous mode [ 101.796318][ T6399] syzkaller1: entered allmulticast mode [ 101.854087][ T6389] bridge0: port 1(gretap0) entered blocking state [ 101.889358][ T6389] bridge0: port 1(gretap0) entered disabled state [ 101.920259][ T6413] syz.1.127 uses obsolete (PF_INET,SOCK_PACKET) [ 101.934357][ T6389] gretap0: entered allmulticast mode [ 101.978563][ T6389] gretap0: entered promiscuous mode [ 102.590989][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'. [ 102.617038][ T6449] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 102.717828][ T6451] netlink: 'syz.2.137': attribute type 2 has an invalid length. [ 102.821248][ T6454] lo speed is unknown, defaulting to 1000 [ 103.041264][ T6473] netlink: 40 bytes leftover after parsing attributes in process `syz.3.139'. [ 103.146314][ T6479] bridge1: entered promiscuous mode [ 103.159079][ T6479] bridge1: entered allmulticast mode [ 103.173150][ T6479] team0: Device bridge1 is up. Set it down before adding it as a team port [ 103.638376][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 103.708102][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 104.095214][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 104.105611][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 104.124206][ T6514] netlink: 220 bytes leftover after parsing attributes in process `syz.1.151'. [ 104.137805][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 104.199889][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 104.239350][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 104.264958][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 104.331117][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 105.874846][ T6569] netlink: 'syz.3.167': attribute type 3 has an invalid length. [ 106.761912][ T6597] pimreg: entered allmulticast mode [ 107.183883][ T6593] lo speed is unknown, defaulting to 1000 [ 107.256721][ T6617] dvmrp5: entered allmulticast mode [ 107.282695][ T6617] pimreg: left allmulticast mode [ 107.292486][ T6617] dvmrp5: left allmulticast mode [ 107.387319][ T6593] lo: entered promiscuous mode [ 107.395757][ T6593] tunl0: entered promiscuous mode [ 107.403410][ T6593] gre0: entered promiscuous mode [ 107.411684][ T6593] gretap0: entered promiscuous mode [ 107.417052][ T6593] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.608218][ T6593] syz.2.175 (6593) used greatest stack depth: 18448 bytes left [ 108.024537][ T6635] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 108.302500][ T6642] lo speed is unknown, defaulting to 1000 [ 108.452811][ T6645] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 108.679604][ T6658] __nla_validate_parse: 37 callbacks suppressed [ 108.679628][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'. [ 108.752637][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 108.819713][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 108.982530][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 109.244357][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 109.454803][ T6701] warning: `syz.1.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.702523][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 109.877689][ T6718] netlink: 68 bytes leftover after parsing attributes in process `syz.1.211'. [ 109.896197][ T6718] netlink: 71 bytes leftover after parsing attributes in process `syz.1.211'. [ 110.026162][ T6726] trusted_key: syz.1.212 sent an empty control message without MSG_MORE. [ 110.077850][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 110.262253][ T6735] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 110.280971][ T6735] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 110.320067][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 110.910674][ T6756] syz.2.221: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 110.964597][ T6756] CPU: 1 UID: 0 PID: 6756 Comm: syz.2.221 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 110.964627][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.964639][ T6756] Call Trace: [ 110.964647][ T6756] [ 110.964656][ T6756] dump_stack_lvl+0x241/0x360 [ 110.964697][ T6756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.964721][ T6756] ? __pfx__printk+0x10/0x10 [ 110.964746][ T6756] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 110.964775][ T6756] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 110.964806][ T6756] warn_alloc+0x278/0x410 [ 110.964834][ T6756] ? __pfx_warn_alloc+0x10/0x10 [ 110.964863][ T6756] ? xskq_create+0xb6/0x170 [ 110.964884][ T6756] ? __get_vm_area_node+0x1c8/0x2d0 [ 110.964915][ T6756] ? __get_vm_area_node+0x25c/0x2d0 [ 110.964955][ T6756] __vmalloc_node_range_noprof+0x62f/0x1380 [ 110.965008][ T6756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.965037][ T6756] ? __kasan_kmalloc+0x98/0xb0 [ 110.965067][ T6756] vmalloc_user_noprof+0x74/0x80 [ 110.965089][ T6756] ? xskq_create+0xb6/0x170 [ 110.965108][ T6756] xskq_create+0xb6/0x170 [ 110.965130][ T6756] xsk_init_queue+0xa1/0x100 [ 110.965153][ T6756] xsk_setsockopt+0x560/0x810 [ 110.965174][ T6756] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.965194][ T6756] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.965227][ T6756] ? __pfx_lock_acquire+0x10/0x10 [ 110.965254][ T6756] ? aa_sock_opt_perm+0x79/0x120 [ 110.965288][ T6756] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.965306][ T6756] do_sock_setsockopt+0x3af/0x720 [ 110.965337][ T6756] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 110.965364][ T6756] ? __fget_files+0x395/0x410 [ 110.965391][ T6756] ? __fget_files+0x2a/0x410 [ 110.965427][ T6756] __x64_sys_setsockopt+0x1ee/0x280 [ 110.965459][ T6756] do_syscall_64+0xf3/0x230 [ 110.965487][ T6756] ? clear_bhb_loop+0x35/0x90 [ 110.965519][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.965547][ T6756] RIP: 0033:0x7fbb8f58d169 [ 110.965566][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.965582][ T6756] RSP: 002b:00007fbb9049b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.965604][ T6756] RAX: ffffffffffffffda RBX: 00007fbb8f7a5fa0 RCX: 00007fbb8f58d169 [ 110.965619][ T6756] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 110.965631][ T6756] RBP: 00007fbb8f60e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 110.965644][ T6756] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000000 [ 110.965657][ T6756] R13: 0000000000000000 R14: 00007fbb8f7a5fa0 R15: 00007fff4aba8e08 [ 110.965696][ T6756] [ 110.965716][ T6756] Mem-Info: [ 111.175876][ T6765] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 111.213119][ T6756] active_anon:4865 inactive_anon:0 isolated_anon:0 [ 111.213119][ T6756] active_file:1423 inactive_file:38304 isolated_file:0 [ 111.213119][ T6756] unevictable:768 dirty:24 writeback:25 [ 111.213119][ T6756] slab_reclaimable:9916 slab_unreclaimable:98765 [ 111.213119][ T6756] mapped:28726 shmem:1463 pagetables:882 [ 111.213119][ T6756] sec_pagetables:0 bounce:0 [ 111.213119][ T6756] kernel_misc_reclaimable:0 [ 111.213119][ T6756] free:1344537 free_pcp:359 free_cma:0 [ 111.333957][ T6756] Node 0 active_anon:19616kB inactive_anon:0kB active_file:5692kB inactive_file:153156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118948kB dirty:180kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11084kB pagetables:3528kB sec_pagetables:0kB all_unreclaimable? no [ 111.393278][ T6764] bridge_slave_0: left allmulticast mode [ 111.415791][ T6764] bridge_slave_0: left promiscuous mode [ 111.436580][ T6756] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 111.455319][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.512432][ T6756] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.582097][ T6756] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 111.591543][ T6764] bridge_slave_1: left allmulticast mode [ 111.592773][ T6756] Node 0 DMA32 free:1456920kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19776kB inactive_anon:0kB active_file:5692kB inactive_file:152840kB unevictable:1536kB writepending:180kB present:3129332kB managed:2549704kB mlocked:0kB bounce:0kB free_pcp:1908kB local_pcp:796kB free_cma:0kB [ 111.619291][ T6764] bridge_slave_1: left promiscuous mode [ 111.639765][ T6756] lowmem_reserve[]: 0 0 0 0 0 [ 111.645566][ T6756] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 111.690188][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.727632][ T6756] lowmem_reserve[]: 0 0 0 0 0 [ 111.745605][ T6756] Node 1 Normal free:3905788kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.780955][ T6764] bond0: (slave bond_slave_0): Releasing backup interface [ 111.792307][ T6756] lowmem_reserve[]: 0 0 0 0 0 [ 111.797108][ T6756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.816531][ T6756] Node 0 DMA32: 1*4kB (E) 26*8kB (ME) 67*16kB (UME) 87*32kB (UME) 207*64kB (UME) 69*128kB (UME) 21*256kB (UM) 6*512kB (UM) 3*1024kB (UME) 7*2048kB (UM) 343*4096kB (M) = 1456932kB [ 111.850762][ T6764] bond0: (slave bond_slave_1): Releasing backup interface [ 111.866062][ T6756] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 111.884562][ T6756] Node 1 Normal: 225*4kB (UME) 55*8kB (UME) 48*16kB (UME) 240*32kB (UME) 97*64kB (UME) 33*128kB (UME) 10*256kB (UM) 8*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3905788kB [ 111.912080][ T6756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.923380][ T6756] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.937851][ T6764] team0: Port device team_slave_0 removed [ 111.939840][ T6756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.945604][ T6756] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.945628][ T6756] 41169 total pagecache pages [ 111.945650][ T6756] 0 pages in swap cache [ 111.945660][ T6756] Free swap = 124996kB [ 111.945671][ T6756] Total swap = 124996kB [ 111.989705][ T6756] 2097051 pages RAM [ 111.993583][ T6756] 0 pages HighMem/MovableOnly [ 112.002202][ T6756] 427903 pages reserved [ 112.006412][ T6756] 0 pages cma reserved [ 112.020397][ T6764] team0: Port device team_slave_1 removed [ 112.042751][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.063289][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.075099][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.094774][ T6764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.166292][ T6765] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.297950][ T6791] netem: incorrect gi model size [ 112.323790][ T6791] netem: change failed [ 112.476242][ T6797] netlink: 'syz.2.232': attribute type 21 has an invalid length. [ 113.035132][ T6825] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 113.119913][ T6825] bond0: (slave wlan1): Releasing backup interface [ 113.239181][ T6832] lo speed is unknown, defaulting to 1000 [ 113.407086][ T6838] Cannot find map_set index 0 as target [ 113.437419][ T6840] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 113.448178][ T6840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.990975][ T6840] __nla_validate_parse: 15 callbacks suppressed [ 113.990994][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 114.095168][ T6857] lo speed is unknown, defaulting to 1000 [ 114.469372][ T6863] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 114.511954][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.248'. [ 114.551261][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 115.244500][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 115.910365][ T6926] xt_hashlimit: size too large, truncated to 1048576 [ 116.264369][ T6933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 116.529798][ T6944] netlink: 76 bytes leftover after parsing attributes in process `syz.0.270'. [ 116.637620][ T6948] lo speed is unknown, defaulting to 1000 [ 116.984882][ T6962] netlink: 44 bytes leftover after parsing attributes in process `syz.2.276'. [ 116.985476][ T6961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.276'. [ 117.242063][ T6966] netlink: 'syz.3.278': attribute type 21 has an invalid length. [ 117.251421][ T6967] netlink: 52 bytes leftover after parsing attributes in process `syz.2.277'. [ 117.270872][ T6966] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.292030][ T6966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.299760][ T6966] IPv6: NLM_F_CREATE should be set when creating new route [ 117.307117][ T6966] IPv6: NLM_F_CREATE should be set when creating new route [ 117.309777][ T3505] wlan0: Trigger new scan to find an IBSS to join [ 117.314410][ T6966] IPv6: NLM_F_CREATE should be set when creating new route [ 117.343793][ T6970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.277'. [ 117.427444][ T6967] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.436432][ T6967] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.444804][ T6967] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.453193][ T6967] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.472327][ T6951] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 117.536395][ T6948] lo speed is unknown, defaulting to 1000 [ 117.856398][ T6982] netlink: 'syz.0.283': attribute type 9 has an invalid length. [ 118.056595][ T6990] tipc: Trying to set illegal importance in message [ 118.129884][ T6996] Cannot find del_set index 1 as target [ 118.254044][ T6990] lo speed is unknown, defaulting to 1000 [ 118.367149][ T7004] lo speed is unknown, defaulting to 1000 [ 118.423094][ T7009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 118.551666][ T7016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.559056][ T7016] IPv6: NLM_F_CREATE should be set when creating new route [ 118.566364][ T7016] IPv6: NLM_F_CREATE should be set when creating new route [ 118.592135][ T7006] can: request_module (can-proto-4) failed. [ 118.794640][ T7021] netlink: 'syz.0.290': attribute type 1 has an invalid length. [ 118.874542][ T7021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.432014][ T7037] __nla_validate_parse: 8 callbacks suppressed [ 119.432036][ T7037] netlink: 88 bytes leftover after parsing attributes in process `syz.2.295'. [ 119.457504][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.295'. [ 119.507402][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.295'. [ 119.535058][ T7037] netlink: 80 bytes leftover after parsing attributes in process `syz.2.295'. [ 120.026825][ T7055] netlink: zone id is out of range [ 120.033317][ T7055] netlink: zone id is out of range [ 120.055198][ T7055] netlink: zone id is out of range [ 120.101692][ T7055] netlink: zone id is out of range [ 120.124934][ T7055] netlink: zone id is out of range [ 120.141844][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 120.151391][ T7055] netlink: zone id is out of range [ 120.184137][ T7055] netlink: zone id is out of range [ 120.208434][ T7055] netlink: zone id is out of range [ 120.214152][ T7055] netlink: zone id is out of range [ 120.221618][ T7055] netlink: zone id is out of range [ 120.430544][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.307'. [ 120.837046][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 121.007783][ T7095] syz.1.313: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 121.041489][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.1.313 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 121.041516][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.041528][ T7095] Call Trace: [ 121.041535][ T7095] [ 121.041543][ T7095] dump_stack_lvl+0x241/0x360 [ 121.041574][ T7095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.041596][ T7095] ? __pfx__printk+0x10/0x10 [ 121.041622][ T7095] ? __rcu_read_unlock+0xa1/0x110 [ 121.041673][ T7095] warn_alloc+0x278/0x410 [ 121.041699][ T7095] ? __pfx_warn_alloc+0x10/0x10 [ 121.041726][ T7095] ? xskq_create+0xb6/0x170 [ 121.041746][ T7095] ? __get_vm_area_node+0x1c8/0x2d0 [ 121.041775][ T7095] ? __get_vm_area_node+0x25c/0x2d0 [ 121.041811][ T7095] __vmalloc_node_range_noprof+0x62f/0x1380 [ 121.041861][ T7095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 121.041892][ T7095] ? __kasan_kmalloc+0x98/0xb0 [ 121.041920][ T7095] vmalloc_user_noprof+0x74/0x80 [ 121.041939][ T7095] ? xskq_create+0xb6/0x170 [ 121.041957][ T7095] xskq_create+0xb6/0x170 [ 121.041980][ T7095] xsk_init_queue+0xa1/0x100 [ 121.042003][ T7095] xsk_setsockopt+0x560/0x810 [ 121.042026][ T7095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.042047][ T7095] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.042078][ T7095] ? __pfx_lock_acquire+0x10/0x10 [ 121.042106][ T7095] ? aa_sock_opt_perm+0x79/0x120 [ 121.042141][ T7095] ? __pfx_xsk_setsockopt+0x10/0x10 [ 121.042160][ T7095] do_sock_setsockopt+0x3af/0x720 [ 121.042191][ T7095] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 121.042220][ T7095] ? __fget_files+0x395/0x410 [ 121.042248][ T7095] ? __fget_files+0x2a/0x410 [ 121.042286][ T7095] __x64_sys_setsockopt+0x1ee/0x280 [ 121.042318][ T7095] do_syscall_64+0xf3/0x230 [ 121.042345][ T7095] ? clear_bhb_loop+0x35/0x90 [ 121.042378][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.042404][ T7095] RIP: 0033:0x7fcdb018d169 [ 121.042419][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.042433][ T7095] RSP: 002b:00007fcdb0f6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.042451][ T7095] RAX: ffffffffffffffda RBX: 00007fcdb03a5fa0 RCX: 00007fcdb018d169 [ 121.042463][ T7095] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 121.042473][ T7095] RBP: 00007fcdb020e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 121.042483][ T7095] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000000 [ 121.042493][ T7095] R13: 0000000000000000 R14: 00007fcdb03a5fa0 R15: 00007ffdcefb07a8 [ 121.042517][ T7095] [ 121.042550][ T7095] Mem-Info: [ 121.302367][ T7095] active_anon:4931 inactive_anon:0 isolated_anon:0 [ 121.302367][ T7095] active_file:1440 inactive_file:38311 isolated_file:0 [ 121.302367][ T7095] unevictable:768 dirty:161 writeback:0 [ 121.302367][ T7095] slab_reclaimable:9918 slab_unreclaimable:100764 [ 121.302367][ T7095] mapped:28757 shmem:1443 pagetables:863 [ 121.302367][ T7095] sec_pagetables:0 bounce:0 [ 121.302367][ T7095] kernel_misc_reclaimable:0 [ 121.302367][ T7095] free:1338316 free_pcp:3237 free_cma:0 [ 121.389982][ T7109] raw_sendmsg: syz.0.316 forgot to set AF_INET. Fix it! [ 121.393369][ T7095] Node 0 active_anon:19804kB inactive_anon:0kB active_file:5760kB inactive_file:153172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115080kB dirty:640kB writeback:0kB shmem:4244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:3500kB sec_pagetables:0kB all_unreclaimable? no [ 121.501390][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.317'. [ 121.511565][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 121.512685][ T7095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 121.520922][ T7113] netlink: 10 bytes leftover after parsing attributes in process `syz.3.317'. [ 121.561112][ T7113] nbd: socks must be embedded in a SOCK_ITEM attr [ 121.592631][ T7095] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.652879][ T7095] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 121.681763][ T7095] Node 0 DMA32 free:1441148kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:19564kB inactive_anon:0kB active_file:5760kB inactive_file:152856kB unevictable:1536kB writepending:640kB present:3129332kB managed:2549704kB mlocked:0kB bounce:0kB free_pcp:4432kB local_pcp:3716kB free_cma:0kB [ 121.789157][ T7095] lowmem_reserve[]: 0 0 0 0 0 [ 121.831225][ T7095] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 121.911140][ T7095] lowmem_reserve[]: 0 0 0 0 0 [ 121.916059][ T7095] Node 1 Normal free:3905860kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.954957][ T7120] lo speed is unknown, defaulting to 1000 [ 122.010366][ T7095] lowmem_reserve[]: 0 0 0 0 0 [ 122.015196][ T7095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.094006][ T7095] Node 0 DMA32: 1*4kB (M) 50*8kB (ME) 92*16kB (ME) 111*32kB (UME) 107*64kB (UME) 57*128kB (UME) 31*256kB (UM) 10*512kB (UM) 5*1024kB (ME) 3*2048kB (UM) 341*4096kB (UM) = 1440628kB [ 122.155308][ T7095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.203993][ T7095] Node 1 Normal: 223*4kB (UME) 53*8kB (UME) 48*16kB (UME) 237*32kB (UME) 96*64kB (UME) 33*128kB (UME) 9*256kB (UM) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3905860kB [ 122.246506][ T7095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.265844][ T12] wlan0: Trigger new scan to find an IBSS to join [ 122.318374][ T7095] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.327792][ T7095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.348491][ T7139] netlink: 'syz.2.324': attribute type 11 has an invalid length. [ 122.367528][ T7095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.386366][ T7095] 41722 total pagecache pages [ 122.410979][ T7095] 0 pages in swap cache [ 122.415205][ T7095] Free swap = 124996kB [ 122.429169][ T7095] Total swap = 124996kB [ 122.433389][ T7095] 2097051 pages RAM [ 122.439616][ T7131] veth3: entered promiscuous mode [ 122.463777][ T7095] 0 pages HighMem/MovableOnly [ 122.468873][ T7095] 427903 pages reserved [ 122.473058][ T7095] 0 pages cma reserved [ 122.675305][ T7134] lo speed is unknown, defaulting to 1000 [ 123.259651][ T30] wlan0: Creating new IBSS network, BSSID d6:5a:54:15:bb:ab [ 123.716798][ T7147] tipc: Started in network mode [ 123.726775][ T7147] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 123.750892][ T7147] tipc: Enabled bearer , priority 10 [ 123.971175][ T7180] lo speed is unknown, defaulting to 1000 [ 124.182477][ T7189] bridge_slave_0: entered promiscuous mode [ 124.215683][ T7189] bridge_slave_0: entered allmulticast mode [ 124.677211][ T7209] lo speed is unknown, defaulting to 1000 [ 124.734825][ T7210] lo speed is unknown, defaulting to 1000 [ 124.749842][ T975] tipc: Node number set to 10136234 [ 125.005917][ T7222] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 125.017695][ T7216] IPVS: stopping backup sync thread 7222 ... [ 125.094761][ T7184] __nla_validate_parse: 9 callbacks suppressed [ 125.094783][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 125.304681][ T7229] netlink: 44 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.313863][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.352'. [ 125.370695][ T7233] netlink: 'syz.2.353': attribute type 2 has an invalid length. [ 125.803293][ T7236] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.826647][ T7243] net_ratelimit: 303 callbacks suppressed [ 125.826668][ T7243] openvswitch: netlink: IPv4 tunnel dst address is zero [ 125.910017][ T7236] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.951221][ T7241] lo speed is unknown, defaulting to 1000 [ 126.017391][ T7236] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.048488][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 126.084581][ T7252] ipvlan2: entered promiscuous mode [ 126.105554][ T7252] bridge0: port 1(ipvlan2) entered blocking state [ 126.113153][ T7252] bridge0: port 1(ipvlan2) entered disabled state [ 126.120671][ T7252] ipvlan2: entered allmulticast mode [ 126.126771][ T7252] bridge0: entered allmulticast mode [ 126.134282][ T7252] ipvlan2: left allmulticast mode [ 126.139756][ T7252] bridge0: left allmulticast mode [ 126.186488][ T7236] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.477134][ T7236] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.597438][ T7236] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.645018][ T7236] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.698674][ T7236] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.828437][ T7266] tap0: tun_chr_ioctl cmd 1074025677 [ 126.843655][ T7266] tap0: linktype set to 774 [ 126.980536][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.365'. [ 126.992187][ T7267] tap0: tun_chr_ioctl cmd 1074025676 [ 127.007184][ T7267] tap0: owner set to 0 [ 127.028505][ T7269] tap0: tun_chr_ioctl cmd 1074025673 [ 127.162225][ T7277] bond0: entered promiscuous mode [ 127.180477][ T7277] bond_slave_0: entered promiscuous mode [ 127.208213][ T7277] bond_slave_1: entered promiscuous mode [ 127.215731][ T7277] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.255736][ T7277] bond0: left promiscuous mode [ 127.308296][ T7277] bond_slave_0: left promiscuous mode [ 127.315890][ T7277] bond_slave_1: left promiscuous mode [ 127.335107][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 127.352920][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 127.705616][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.372'. [ 128.210508][ T7332] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 128.255417][ T7332] team0: Port device dummy0 added [ 128.349731][ T7340] netlink: 172 bytes leftover after parsing attributes in process `syz.0.382'. [ 128.513059][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 128.926697][ T7372] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 128.951690][ T7372] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 129.395614][ T7396] tipc: Started in network mode [ 129.441853][ T7396] tipc: Node identity ac14140f, cluster identity 4711 [ 129.450425][ T7396] tipc: New replicast peer: 255.255.255.255 [ 129.464694][ T7396] tipc: Enabled bearer , priority 10 [ 129.562328][ T7405] netlink: 'syz.4.398': attribute type 10 has an invalid length. [ 129.593031][ T7405] team0: Port device dummy0 removed [ 129.682585][ T7407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.730575][ T7407] bond0: (slave bond1): Enslaving as an active interface with an up link [ 129.760949][ T7412] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 129.774376][ T7410] ip6gre1: entered promiscuous mode [ 129.814555][ T7416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.851609][ T7416] 8021q: adding VLAN 0 to HW filter on device team1 [ 130.129914][ T7427] bridge_slave_1: mtu less than device minimum [ 130.139897][ T7428] tipc: New replicast peer: 255.255.255.255 [ 130.154557][ T7428] tipc: Enabled bearer , priority 10 [ 130.268036][ T7440] __nla_validate_parse: 8 callbacks suppressed [ 130.268055][ T7440] netlink: 47 bytes leftover after parsing attributes in process `syz.4.409'. [ 130.448158][ T9] tipc: Node number set to 2886997007 [ 130.486868][ T7450] lo speed is unknown, defaulting to 1000 [ 130.600971][ T7452] netlink: 'syz.0.413': attribute type 41 has an invalid length. [ 130.696097][ T7452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.115969][ T7461] tipc: Cannot configure node identity twice [ 131.225194][ T7463] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.268052][ T5921] tipc: Node number set to 11521 [ 131.343437][ T5921] IPVS: starting estimator thread 0... [ 131.348879][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 131.440292][ T7463] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.451012][ T7471] IPVS: using max 21 ests per chain, 50400 per kthread [ 131.524113][ T7463] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.594105][ T7463] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.702767][ T7463] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.724760][ T7463] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.741397][ T7463] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.757436][ T7463] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.844329][ T7482] netlink: 64 bytes leftover after parsing attributes in process `syz.1.422'. [ 131.899547][ T7485] netlink: 'syz.1.423': attribute type 7 has an invalid length. [ 132.343413][ T7497] macvtap0: mtu less than device minimum [ 132.642206][ T7513] x_tables: duplicate underflow at hook 1 [ 132.708300][ T7517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.434'. [ 132.723049][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 132.737557][ T7517] vlan2: entered promiscuous mode [ 132.746731][ T7517] veth0: entered promiscuous mode [ 132.746736][ T7516] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 132.784736][ T7517] veth0: left promiscuous mode [ 132.785968][ T7516] netlink: 224 bytes leftover after parsing attributes in process `syz.4.435'. [ 132.874038][ T7522] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 132.908657][ T7524] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 133.230556][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.238524][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.247659][ T7521] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 133.646461][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 133.748382][ T7576] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 133.959500][ T7572] team0: Failed to send options change via netlink (err -105) [ 133.984736][ T7572] team0: Mode changed to "loadbalance" [ 134.395340][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 134.417986][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 134.452084][ T7593] bridge0: entered promiscuous mode [ 134.586199][ T7593] bridge0: left promiscuous mode [ 134.654392][ T7597] lo speed is unknown, defaulting to 1000 [ 134.721890][ T7599] x_tables: duplicate underflow at hook 1 [ 134.884099][ T7599] lo speed is unknown, defaulting to 1000 [ 134.960053][ T7604] x_tables: duplicate underflow at hook 1 [ 135.173780][ T7612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.651791][ T7638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.466'. [ 135.678101][ T7638] netlink: 32 bytes leftover after parsing attributes in process `syz.0.466'. [ 135.797280][ T975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.139619][ T7664] veth3: entered promiscuous mode [ 136.150855][ T7672] SET target dimension over the limit! [ 136.207820][ T7674] xt_nat: multiple ranges no longer supported [ 136.380710][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 136.402354][ T7686] netlink: 96 bytes leftover after parsing attributes in process `syz.2.483'. [ 136.765555][ T7704] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 136.807138][ T7704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.846673][ T7709] bond2: (slave gretap1): making interface the new active one [ 136.860606][ T7709] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 137.571078][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 137.596210][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 137.625913][ T7751] netlink: 'syz.2.505': attribute type 4 has an invalid length. [ 137.669498][ T7754] netlink: 'syz.3.507': attribute type 4 has an invalid length. [ 137.870302][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 137.891541][ T7764] lo speed is unknown, defaulting to 1000 [ 137.945952][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 138.076301][ T7778] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 138.095562][ T7778] netlink: 'syz.2.514': attribute type 4 has an invalid length. [ 138.399485][ T7790] ipip0: entered promiscuous mode [ 138.575097][ T7807] netlink: 'syz.3.524': attribute type 9 has an invalid length. [ 138.936832][ T7813] lo speed is unknown, defaulting to 1000 [ 138.958810][ T7820] netlink: 'syz.4.527': attribute type 10 has an invalid length. [ 138.997618][ T7820] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 139.025118][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 139.342001][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 139.579808][ T7855] lo speed is unknown, defaulting to 1000 [ 139.600838][ T7856] dummy0: entered promiscuous mode [ 139.610086][ T7856] team0: entered promiscuous mode [ 139.625553][ T7856] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 139.635944][ T7856] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 139.649545][ T7859] IPVS: Error connecting to the multicast addr [ 139.656505][ T7851] lo speed is unknown, defaulting to 1000 [ 140.709791][ T7909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.821377][ T7915] netlink: 'syz.4.550': attribute type 1 has an invalid length. [ 140.849406][ T7915] __nla_validate_parse: 5 callbacks suppressed [ 140.849425][ T7915] netlink: 224 bytes leftover after parsing attributes in process `syz.4.550'. [ 140.880857][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 140.951183][ T7927] tc_dump_action: action bad kind [ 141.117439][ T7929] lo speed is unknown, defaulting to 1000 [ 141.293736][ T7934] lo speed is unknown, defaulting to 1000 [ 141.317442][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 141.352307][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 141.376171][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 141.426519][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 141.460154][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 141.496906][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 141.530679][ T7943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.555'. [ 141.542594][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.554'. [ 141.744937][ T7948] IPv6: sit1: Disabled Multicast RS [ 141.776257][ T7948] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 141.983718][ T7951] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 142.011057][ T7951] syzkaller1: Refused to change device type [ 142.295212][ T7967] lo speed is unknown, defaulting to 1000 [ 142.315133][ T7968] netem: change failed [ 142.790877][ T8005] FAULT_INJECTION: forcing a failure. [ 142.790877][ T8005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.804846][ T8005] CPU: 1 UID: 0 PID: 8005 Comm: syz.3.572 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 142.804876][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.804888][ T8005] Call Trace: [ 142.804895][ T8005] [ 142.804903][ T8005] dump_stack_lvl+0x241/0x360 [ 142.804933][ T8005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.804955][ T8005] ? __pfx__printk+0x10/0x10 [ 142.804976][ T8005] ? __pfx_lock_release+0x10/0x10 [ 142.805027][ T8005] should_fail_ex+0x40a/0x550 [ 142.805065][ T8005] _copy_from_user+0x2d/0xb0 [ 142.805095][ T8005] copy_msghdr_from_user+0xae/0x680 [ 142.805133][ T8005] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.805173][ T8005] ? __fget_files+0x2a/0x410 [ 142.805208][ T8005] ? __fget_files+0x2a/0x410 [ 142.805248][ T8005] __sys_sendmmsg+0x32b/0x720 [ 142.805294][ T8005] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.805333][ T8005] ? __pfx_lock_release+0x10/0x10 [ 142.805363][ T8005] ? kstrtouint_from_user+0x128/0x190 [ 142.805412][ T8005] ? ksys_write+0x22a/0x2b0 [ 142.805435][ T8005] ? __pfx_lock_release+0x10/0x10 [ 142.805473][ T8005] ? sb_end_write+0xe9/0x1c0 [ 142.805503][ T8005] ? vfs_write+0x7fa/0xd10 [ 142.805529][ T8005] ? __mutex_unlock_slowpath+0x227/0x800 [ 142.805587][ T8005] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.805622][ T8005] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.805655][ T8005] ? do_syscall_64+0x100/0x230 [ 142.805687][ T8005] __x64_sys_sendmmsg+0xa0/0xb0 [ 142.805715][ T8005] do_syscall_64+0xf3/0x230 [ 142.805743][ T8005] ? clear_bhb_loop+0x35/0x90 [ 142.805776][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.805808][ T8005] RIP: 0033:0x7f764538d169 [ 142.805826][ T8005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.805843][ T8005] RSP: 002b:00007f76461bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.805864][ T8005] RAX: ffffffffffffffda RBX: 00007f76455a5fa0 RCX: 00007f764538d169 [ 142.805879][ T8005] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000005 [ 142.805892][ T8005] RBP: 00007f76461bc090 R08: 0000000000000000 R09: 0000000000000000 [ 142.805904][ T8005] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 142.805916][ T8005] R13: 0000000000000000 R14: 00007f76455a5fa0 R15: 00007ffcf42839e8 [ 142.805947][ T8005] [ 143.413289][ T5921] IPVS: starting estimator thread 0... [ 143.431319][ T8024] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.558208][ T8029] IPVS: using max 20 ests per chain, 48000 per kthread [ 143.689947][ T8038] FAULT_INJECTION: forcing a failure. [ 143.689947][ T8038] name failslab, interval 1, probability 0, space 0, times 0 [ 143.723437][ T8038] CPU: 1 UID: 0 PID: 8038 Comm: syz.0.585 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 143.723465][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.723475][ T8038] Call Trace: [ 143.723481][ T8038] [ 143.723488][ T8038] dump_stack_lvl+0x241/0x360 [ 143.723516][ T8038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.723536][ T8038] ? __pfx__printk+0x10/0x10 [ 143.723557][ T8038] ? __kmalloc_noprof+0xb5/0x4c0 [ 143.723585][ T8038] ? __pfx___might_resched+0x10/0x10 [ 143.723618][ T8038] should_fail_ex+0x40a/0x550 [ 143.723655][ T8038] should_failslab+0xac/0x100 [ 143.723684][ T8038] __kmalloc_noprof+0xdd/0x4c0 [ 143.723712][ T8038] ? sock_kmalloc+0xd7/0x160 [ 143.723743][ T8038] sock_kmalloc+0xd7/0x160 [ 143.723773][ T8038] ____sys_sendmsg+0x231/0x860 [ 143.723805][ T8038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.723828][ T8038] ? __fget_files+0x2a/0x410 [ 143.723861][ T8038] ? __fget_files+0x2a/0x410 [ 143.723910][ T8038] __sys_sendmmsg+0x36a/0x720 [ 143.723947][ T8038] ? __pfx___sys_sendmmsg+0x10/0x10 [ 143.723985][ T8038] ? __pfx_lock_release+0x10/0x10 [ 143.724014][ T8038] ? kstrtouint_from_user+0x128/0x190 [ 143.724059][ T8038] ? ksys_write+0x22a/0x2b0 [ 143.724081][ T8038] ? __pfx_lock_release+0x10/0x10 [ 143.724113][ T8038] ? sb_end_write+0xe9/0x1c0 [ 143.724141][ T8038] ? vfs_write+0x7fa/0xd10 [ 143.724162][ T8038] ? __mutex_unlock_slowpath+0x227/0x800 [ 143.724211][ T8038] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.724242][ T8038] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.724273][ T8038] ? do_syscall_64+0x100/0x230 [ 143.724303][ T8038] __x64_sys_sendmmsg+0xa0/0xb0 [ 143.724330][ T8038] do_syscall_64+0xf3/0x230 [ 143.724358][ T8038] ? clear_bhb_loop+0x35/0x90 [ 143.724390][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.724418][ T8038] RIP: 0033:0x7f471978d169 [ 143.724437][ T8038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.724454][ T8038] RSP: 002b:00007f47195f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.724477][ T8038] RAX: ffffffffffffffda RBX: 00007f47199a5fa0 RCX: 00007f471978d169 [ 143.724492][ T8038] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000005 [ 143.724505][ T8038] RBP: 00007f47195f9090 R08: 0000000000000000 R09: 0000000000000000 [ 143.724517][ T8038] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 143.724530][ T8038] R13: 0000000000000000 R14: 00007f47199a5fa0 R15: 00007fff28cd6128 [ 143.724561][ T8038] [ 144.110456][ T5885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.562178][ T8074] lo speed is unknown, defaulting to 1000 [ 145.040711][ T8087] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 145.109484][ T8090] FAULT_INJECTION: forcing a failure. [ 145.109484][ T8090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.133056][ T8090] CPU: 1 UID: 0 PID: 8090 Comm: syz.3.600 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 145.133088][ T8090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.133099][ T8090] Call Trace: [ 145.133107][ T8090] [ 145.133115][ T8090] dump_stack_lvl+0x241/0x360 [ 145.133147][ T8090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.133170][ T8090] ? __pfx__printk+0x10/0x10 [ 145.133193][ T8090] ? __pfx_lock_release+0x10/0x10 [ 145.133234][ T8090] should_fail_ex+0x40a/0x550 [ 145.133272][ T8090] _copy_from_user+0x2d/0xb0 [ 145.133301][ T8090] ____sys_sendmsg+0x30b/0x860 [ 145.133336][ T8090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.133367][ T8090] ? __fget_files+0x2a/0x410 [ 145.133402][ T8090] ? __fget_files+0x2a/0x410 [ 145.133442][ T8090] __sys_sendmmsg+0x36a/0x720 [ 145.133480][ T8090] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.133529][ T8090] ? __pfx_lock_release+0x10/0x10 [ 145.133568][ T8090] ? kstrtouint_from_user+0x128/0x190 [ 145.133616][ T8090] ? ksys_write+0x22a/0x2b0 [ 145.133640][ T8090] ? __pfx_lock_release+0x10/0x10 [ 145.133678][ T8090] ? sb_end_write+0xe9/0x1c0 [ 145.133708][ T8090] ? vfs_write+0x7fa/0xd10 [ 145.133733][ T8090] ? __mutex_unlock_slowpath+0x227/0x800 [ 145.133791][ T8090] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.133826][ T8090] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.133859][ T8090] ? do_syscall_64+0x100/0x230 [ 145.133891][ T8090] __x64_sys_sendmmsg+0xa0/0xb0 [ 145.133918][ T8090] do_syscall_64+0xf3/0x230 [ 145.133946][ T8090] ? clear_bhb_loop+0x35/0x90 [ 145.133986][ T8090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.134014][ T8090] RIP: 0033:0x7f764538d169 [ 145.134032][ T8090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.134048][ T8090] RSP: 002b:00007f76461bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.134070][ T8090] RAX: ffffffffffffffda RBX: 00007f76455a5fa0 RCX: 00007f764538d169 [ 145.134085][ T8090] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000005 [ 145.134097][ T8090] RBP: 00007f76461bc090 R08: 0000000000000000 R09: 0000000000000000 [ 145.134110][ T8090] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 145.134123][ T8090] R13: 0000000000000000 R14: 00007f76455a5fa0 R15: 00007ffcf42839e8 [ 145.134153][ T8090] [ 145.438221][ T8094] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 145.464755][ T8087] sctp: [Deprecated]: syz.1.599 (pid 8087) Use of int in max_burst socket option deprecated. [ 145.464755][ T8087] Use struct sctp_assoc_value instead [ 145.535418][ T8094] netlink: 'syz.3.602': attribute type 1 has an invalid length. [ 145.904536][ T8114] __nla_validate_parse: 37 callbacks suppressed [ 145.904558][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 145.962836][ T8114] vlan2: entered allmulticast mode [ 145.980677][ T8114] bridge0: entered allmulticast mode [ 145.994771][ T8114] bridge0: left allmulticast mode [ 146.176509][ T8127] FAULT_INJECTION: forcing a failure. [ 146.176509][ T8127] name failslab, interval 1, probability 0, space 0, times 0 [ 146.201564][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.4.612 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 146.201594][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.201607][ T8127] Call Trace: [ 146.201614][ T8127] [ 146.201623][ T8127] dump_stack_lvl+0x241/0x360 [ 146.201665][ T8127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.201689][ T8127] ? __pfx__printk+0x10/0x10 [ 146.201712][ T8127] ? __kmalloc_cache_noprof+0x48/0x390 [ 146.201745][ T8127] ? __pfx___might_resched+0x10/0x10 [ 146.201771][ T8127] ? unwind_get_return_address+0x4d/0x90 [ 146.201808][ T8127] should_fail_ex+0x40a/0x550 [ 146.201845][ T8127] should_failslab+0xac/0x100 [ 146.201875][ T8127] __kmalloc_cache_noprof+0x70/0x390 [ 146.201904][ T8127] ? __scm_send+0x688/0x1610 [ 146.201937][ T8127] __scm_send+0x688/0x1610 [ 146.201975][ T8127] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 146.202013][ T8127] ? __pfx___scm_send+0x10/0x10 [ 146.202052][ T8127] unix_dgram_sendmsg+0x1ae/0x1df0 [ 146.202101][ T8127] ? aa_sk_perm+0x96d/0xab0 [ 146.202135][ T8127] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 146.202174][ T8127] ? aa_sock_msg_perm+0x91/0x160 [ 146.202213][ T8127] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 146.202242][ T8127] __sock_sendmsg+0x221/0x270 [ 146.202276][ T8127] ____sys_sendmsg+0x53a/0x860 [ 146.202310][ T8127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.202333][ T8127] ? __fget_files+0x2a/0x410 [ 146.202368][ T8127] ? __fget_files+0x2a/0x410 [ 146.202407][ T8127] __sys_sendmmsg+0x36a/0x720 [ 146.202444][ T8127] ? __pfx___sys_sendmmsg+0x10/0x10 [ 146.202483][ T8127] ? __pfx_lock_release+0x10/0x10 [ 146.202513][ T8127] ? kstrtouint_from_user+0x128/0x190 [ 146.202561][ T8127] ? ksys_write+0x22a/0x2b0 [ 146.202584][ T8127] ? __pfx_lock_release+0x10/0x10 [ 146.202622][ T8127] ? sb_end_write+0xe9/0x1c0 [ 146.202675][ T8127] ? vfs_write+0x7fa/0xd10 [ 146.202701][ T8127] ? __mutex_unlock_slowpath+0x227/0x800 [ 146.202759][ T8127] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.202793][ T8127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.202827][ T8127] ? do_syscall_64+0x100/0x230 [ 146.202860][ T8127] __x64_sys_sendmmsg+0xa0/0xb0 [ 146.202888][ T8127] do_syscall_64+0xf3/0x230 [ 146.202915][ T8127] ? clear_bhb_loop+0x35/0x90 [ 146.202948][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.202975][ T8127] RIP: 0033:0x7fe38b78d169 [ 146.202993][ T8127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.203011][ T8127] RSP: 002b:00007fe38c585038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.203033][ T8127] RAX: ffffffffffffffda RBX: 00007fe38b9a5fa0 RCX: 00007fe38b78d169 [ 146.203049][ T8127] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000005 [ 146.203062][ T8127] RBP: 00007fe38c585090 R08: 0000000000000000 R09: 0000000000000000 [ 146.203074][ T8127] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 146.203086][ T8127] R13: 0000000000000000 R14: 00007fe38b9a5fa0 R15: 00007ffca501e208 [ 146.203117][ T8127] [ 147.075217][ T8145] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 147.346125][ T8161] netlink: 48 bytes leftover after parsing attributes in process `syz.0.623'. [ 147.379267][ T8168] FAULT_INJECTION: forcing a failure. [ 147.379267][ T8168] name failslab, interval 1, probability 0, space 0, times 0 [ 147.403415][ T8168] CPU: 1 UID: 0 PID: 8168 Comm: syz.1.624 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 147.403445][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.403458][ T8168] Call Trace: [ 147.403465][ T8168] [ 147.403474][ T8168] dump_stack_lvl+0x241/0x360 [ 147.403504][ T8168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.403528][ T8168] ? __pfx__printk+0x10/0x10 [ 147.403551][ T8168] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 147.403583][ T8168] ? __pfx___might_resched+0x10/0x10 [ 147.403615][ T8168] should_fail_ex+0x40a/0x550 [ 147.403652][ T8168] should_failslab+0xac/0x100 [ 147.403681][ T8168] kmem_cache_alloc_node_noprof+0x77/0x380 [ 147.403711][ T8168] ? __alloc_skb+0x1c3/0x440 [ 147.403737][ T8168] __alloc_skb+0x1c3/0x440 [ 147.403772][ T8168] ? __pfx___alloc_skb+0x10/0x10 [ 147.403793][ T8168] ? __pfx_lock_acquire+0x10/0x10 [ 147.403824][ T8168] ? __fget_files+0x2a/0x410 [ 147.403853][ T8168] ? __pfx_lock_release+0x10/0x10 [ 147.403884][ T8168] alloc_skb_with_frags+0xc3/0x820 [ 147.403914][ T8168] ? __fget_files+0x2a/0x410 [ 147.403946][ T8168] sock_alloc_send_pskb+0x91a/0xa60 [ 147.403973][ T8168] ? unix_get_socket+0x125/0x1b0 [ 147.404010][ T8168] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 147.404042][ T8168] ? __pfx___scm_send+0x10/0x10 [ 147.404079][ T8168] unix_dgram_sendmsg+0x5e8/0x1df0 [ 147.404127][ T8168] ? aa_sk_perm+0x96d/0xab0 [ 147.404162][ T8168] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 147.404201][ T8168] ? aa_sock_msg_perm+0x91/0x160 [ 147.404238][ T8168] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 147.404268][ T8168] __sock_sendmsg+0x221/0x270 [ 147.404302][ T8168] ____sys_sendmsg+0x53a/0x860 [ 147.404336][ T8168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.404359][ T8168] ? __fget_files+0x2a/0x410 [ 147.404393][ T8168] ? __fget_files+0x2a/0x410 [ 147.404432][ T8168] __sys_sendmmsg+0x36a/0x720 [ 147.404469][ T8168] ? __pfx___sys_sendmmsg+0x10/0x10 [ 147.404506][ T8168] ? __pfx_lock_release+0x10/0x10 [ 147.404535][ T8168] ? kstrtouint_from_user+0x128/0x190 [ 147.404583][ T8168] ? ksys_write+0x22a/0x2b0 [ 147.404606][ T8168] ? __pfx_lock_release+0x10/0x10 [ 147.404643][ T8168] ? sb_end_write+0xe9/0x1c0 [ 147.404674][ T8168] ? vfs_write+0x7fa/0xd10 [ 147.404699][ T8168] ? __mutex_unlock_slowpath+0x227/0x800 [ 147.404764][ T8168] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.404798][ T8168] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.404831][ T8168] ? do_syscall_64+0x100/0x230 [ 147.404862][ T8168] __x64_sys_sendmmsg+0xa0/0xb0 [ 147.404890][ T8168] do_syscall_64+0xf3/0x230 [ 147.404919][ T8168] ? clear_bhb_loop+0x35/0x90 [ 147.404951][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.404979][ T8168] RIP: 0033:0x7fcdb018d169 [ 147.404997][ T8168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.405014][ T8168] RSP: 002b:00007fcdb0f6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.405036][ T8168] RAX: ffffffffffffffda RBX: 00007fcdb03a5fa0 RCX: 00007fcdb018d169 [ 147.405051][ T8168] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000005 [ 147.405064][ T8168] RBP: 00007fcdb0f6b090 R08: 0000000000000000 R09: 0000000000000000 [ 147.405077][ T8168] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 147.405089][ T8168] R13: 0000000000000000 R14: 00007fcdb03a5fa0 R15: 00007ffdcefb07a8 [ 147.405119][ T8168] [ 148.035931][ T8191] netlink: 76 bytes leftover after parsing attributes in process `syz.3.630'. [ 148.103513][ T8188] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.113143][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 148.178076][ T8194] lo speed is unknown, defaulting to 1000 [ 148.390723][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 148.401076][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 148.464539][ T8206] IPv6: Can't replace route, no match found [ 148.749800][ T8217] FAULT_INJECTION: forcing a failure. [ 148.749800][ T8217] name failslab, interval 1, probability 0, space 0, times 0 [ 148.780522][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.1.638 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 148.780554][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.780566][ T8217] Call Trace: [ 148.780574][ T8217] [ 148.780583][ T8217] dump_stack_lvl+0x241/0x360 [ 148.780614][ T8217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.780638][ T8217] ? __pfx__printk+0x10/0x10 [ 148.780662][ T8217] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 148.780693][ T8217] ? __pfx___might_resched+0x10/0x10 [ 148.780726][ T8217] should_fail_ex+0x40a/0x550 [ 148.780764][ T8217] should_failslab+0xac/0x100 [ 148.780794][ T8217] __kmalloc_node_noprof+0xe1/0x4d0 [ 148.780827][ T8217] ? alloc_slab_obj_exts+0x3a/0xa0 [ 148.780862][ T8217] alloc_slab_obj_exts+0x3a/0xa0 [ 148.780890][ T8217] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 148.780928][ T8217] kmem_cache_alloc_node_noprof+0x288/0x380 [ 148.780957][ T8217] ? __alloc_skb+0x1c3/0x440 [ 148.780984][ T8217] __alloc_skb+0x1c3/0x440 [ 148.781012][ T8217] ? __pfx___alloc_skb+0x10/0x10 [ 148.781034][ T8217] ? __pfx_lock_acquire+0x10/0x10 [ 148.781066][ T8217] ? __fget_files+0x2a/0x410 [ 148.781097][ T8217] ? __pfx_lock_release+0x10/0x10 [ 148.781131][ T8217] alloc_skb_with_frags+0xc3/0x820 [ 148.781163][ T8217] ? __fget_files+0x2a/0x410 [ 148.781198][ T8217] sock_alloc_send_pskb+0x91a/0xa60 [ 148.781226][ T8217] ? unix_get_socket+0x125/0x1b0 [ 148.781264][ T8217] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 148.781296][ T8217] ? __pfx___scm_send+0x10/0x10 [ 148.781335][ T8217] unix_dgram_sendmsg+0x5e8/0x1df0 [ 148.781383][ T8217] ? aa_sk_perm+0x96d/0xab0 [ 148.781418][ T8217] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 148.781456][ T8217] ? aa_sock_msg_perm+0x91/0x160 [ 148.781501][ T8217] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 148.781531][ T8217] __sock_sendmsg+0x221/0x270 [ 148.781564][ T8217] ____sys_sendmsg+0x53a/0x860 [ 148.781598][ T8217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.781621][ T8217] ? __fget_files+0x2a/0x410 [ 148.781654][ T8217] ? __fget_files+0x2a/0x410 [ 148.781693][ T8217] __sys_sendmmsg+0x36a/0x720 [ 148.781730][ T8217] ? __pfx___sys_sendmmsg+0x10/0x10 [ 148.781768][ T8217] ? __pfx_lock_release+0x10/0x10 [ 148.781797][ T8217] ? kstrtouint_from_user+0x128/0x190 [ 148.781846][ T8217] ? ksys_write+0x22a/0x2b0 [ 148.781869][ T8217] ? __pfx_lock_release+0x10/0x10 [ 148.781908][ T8217] ? sb_end_write+0xe9/0x1c0 [ 148.781939][ T8217] ? vfs_write+0x7fa/0xd10 [ 148.781965][ T8217] ? __mutex_unlock_slowpath+0x227/0x800 [ 148.782023][ T8217] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.782057][ T8217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.782090][ T8217] ? do_syscall_64+0x100/0x230 [ 148.782122][ T8217] __x64_sys_sendmmsg+0xa0/0xb0 [ 148.782150][ T8217] do_syscall_64+0xf3/0x230 [ 148.782178][ T8217] ? clear_bhb_loop+0x35/0x90 [ 148.782210][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.782237][ T8217] RIP: 0033:0x7fcdb018d169 [ 148.782256][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.782272][ T8217] RSP: 002b:00007fcdb0f6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.782294][ T8217] RAX: ffffffffffffffda RBX: 00007fcdb03a5fa0 RCX: 00007fcdb018d169 [ 148.782309][ T8217] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000005 [ 148.782322][ T8217] RBP: 00007fcdb0f6b090 R08: 0000000000000000 R09: 0000000000000000 [ 148.782334][ T8217] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 148.782347][ T8217] R13: 0000000000000000 R14: 00007fcdb03a5fa0 R15: 00007ffdcefb07a8 [ 148.782377][ T8217] [ 149.194412][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'. [ 149.206561][ T8213] bridge_slave_0: left promiscuous mode [ 149.214520][ T8213] bridge_slave_0: left allmulticast mode [ 149.220438][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'. [ 149.295031][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'. [ 149.306754][ T8220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'. [ 149.440634][ T8213] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.468042][ T8213] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.476547][ T8213] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.507937][ T8213] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.547377][ T3078] lo speed is unknown, defaulting to 1000 [ 149.757544][ T8233] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.251670][ T1138] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 150.756704][ T8290] FAULT_INJECTION: forcing a failure. [ 150.756704][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 150.770003][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.2.659 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 150.770032][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.770044][ T8290] Call Trace: [ 150.770051][ T8290] [ 150.770059][ T8290] dump_stack_lvl+0x241/0x360 [ 150.770092][ T8290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.770115][ T8290] ? __pfx__printk+0x10/0x10 [ 150.770138][ T8290] ? fs_reclaim_acquire+0x93/0x130 [ 150.770162][ T8290] ? __pfx___might_resched+0x10/0x10 [ 150.770195][ T8290] should_fail_ex+0x40a/0x550 [ 150.770232][ T8290] should_failslab+0xac/0x100 [ 150.770272][ T8290] __kmalloc_noprof+0xdd/0x4c0 [ 150.770300][ T8290] ? kstrtouint_from_user+0x128/0x190 [ 150.770322][ T8290] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 150.770351][ T8290] tomoyo_realpath_from_path+0xcf/0x5e0 [ 150.770387][ T8290] tomoyo_path_number_perm+0x239/0x770 [ 150.770416][ T8290] ? __lock_acquire+0x1397/0x2100 [ 150.770451][ T8290] ? tomoyo_path_number_perm+0x209/0x770 [ 150.770482][ T8290] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.770559][ T8290] ? __fget_files+0x2a/0x410 [ 150.770593][ T8290] ? __fget_files+0x2a/0x410 [ 150.770629][ T8290] security_file_ioctl+0xc6/0x2a0 [ 150.770660][ T8290] __se_sys_ioctl+0x46/0x170 [ 150.770687][ T8290] do_syscall_64+0xf3/0x230 [ 150.770716][ T8290] ? clear_bhb_loop+0x35/0x90 [ 150.770749][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.770777][ T8290] RIP: 0033:0x7fbb8f58d169 [ 150.770795][ T8290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.770811][ T8290] RSP: 002b:00007fbb9049b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.770832][ T8290] RAX: ffffffffffffffda RBX: 00007fbb8f7a5fa0 RCX: 00007fbb8f58d169 [ 150.770847][ T8290] RDX: 0000400000001440 RSI: 00000000000089f6 RDI: 0000000000000003 [ 150.770860][ T8290] RBP: 00007fbb9049b090 R08: 0000000000000000 R09: 0000000000000000 [ 150.770873][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.770885][ T8290] R13: 0000000000000000 R14: 00007fbb8f7a5fa0 R15: 00007fff4aba8e08 [ 150.770917][ T8290] [ 150.770926][ T8290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.175340][ T8298] Cannot find set identified by id 0 to match [ 151.292510][ T8300] lo speed is unknown, defaulting to 1000 [ 151.369095][ T8309] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.441452][ T8311] bond0: (slave dummy0): Releasing backup interface [ 151.551125][ T8311] bond2: (slave gretap1): Releasing active interface [ 151.768084][ T8304] lo speed is unknown, defaulting to 1000 [ 152.214599][ T8331] __nla_validate_parse: 5 callbacks suppressed [ 152.214622][ T8331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.672'. [ 152.333511][ T8336] netlink: 'syz.1.673': attribute type 10 has an invalid length. [ 152.357119][ T8336] team0: Port device dummy0 added [ 152.724509][ T8362] netlink: 68 bytes leftover after parsing attributes in process `syz.1.681'. [ 152.879661][ T8366] netlink: 60 bytes leftover after parsing attributes in process `syz.1.683'. [ 152.941360][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 152.997120][ T8377] netlink: 428 bytes leftover after parsing attributes in process `syz.1.685'. [ 153.006676][ T8377] netlink: 104 bytes leftover after parsing attributes in process `syz.1.685'. [ 153.259969][ T8394] FAULT_INJECTION: forcing a failure. [ 153.259969][ T8394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.281034][ T8394] CPU: 1 UID: 0 PID: 8394 Comm: syz.0.690 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 153.281064][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.281077][ T8394] Call Trace: [ 153.281084][ T8394] [ 153.281093][ T8394] dump_stack_lvl+0x241/0x360 [ 153.281125][ T8394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.281149][ T8394] ? __pfx__printk+0x10/0x10 [ 153.281181][ T8394] should_fail_ex+0x40a/0x550 [ 153.281217][ T8394] _copy_from_user+0x2d/0xb0 [ 153.281247][ T8394] get_user_ifreq+0xc3/0x200 [ 153.281287][ T8394] sock_ioctl+0x793/0x8e0 [ 153.281318][ T8394] ? __pfx_sock_ioctl+0x10/0x10 [ 153.281364][ T8394] ? __pfx_sock_ioctl+0x10/0x10 [ 153.281395][ T8394] __se_sys_ioctl+0xf5/0x170 [ 153.281422][ T8394] do_syscall_64+0xf3/0x230 [ 153.281452][ T8394] ? clear_bhb_loop+0x35/0x90 [ 153.281485][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.281513][ T8394] RIP: 0033:0x7f471978d169 [ 153.281531][ T8394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.281547][ T8394] RSP: 002b:00007f47195f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.281568][ T8394] RAX: ffffffffffffffda RBX: 00007f47199a5fa0 RCX: 00007f471978d169 [ 153.281583][ T8394] RDX: 0000400000001440 RSI: 00000000000089f6 RDI: 0000000000000003 [ 153.281596][ T8394] RBP: 00007f47195f9090 R08: 0000000000000000 R09: 0000000000000000 [ 153.281609][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.281621][ T8394] R13: 0000000000000000 R14: 00007f47199a5fa0 R15: 00007fff28cd6128 [ 153.281650][ T8394] [ 153.569811][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'. [ 153.718409][ T8411] netlink: 80 bytes leftover after parsing attributes in process `syz.2.695'. [ 153.844548][ T8419] bridge0: entered allmulticast mode [ 153.890167][ T8421] openvswitch: netlink: Tunnel attr 208 out of range max 16 [ 153.965679][ T8428] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.022688][ T8428] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.110236][ T8428] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.175518][ T8428] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.282838][ T8428] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.320278][ T8428] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.347175][ T8428] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.390698][ T8428] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.578081][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 154.601854][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 154.618279][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 154.750772][ T8453] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.919450][ T8461] @ÿ: renamed from bond_slave_0 [ 155.081352][ T8472] netlink: 'syz.0.710': attribute type 4 has an invalid length. [ 155.234870][ T8477] lo speed is unknown, defaulting to 1000 [ 155.475771][ T8495] team0: Refused to change device type [ 155.540577][ T8496] team0: Refused to change device type [ 155.588123][ T5885] IPVS: starting estimator thread 0... [ 155.593827][ T8498] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 155.699633][ T8503] IPVS: using max 21 ests per chain, 50400 per kthread [ 155.966361][ T8527] veth1_macvtap: left promiscuous mode [ 156.418321][ T8554] FAULT_INJECTION: forcing a failure. [ 156.418321][ T8554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.432323][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.2.730 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 156.432351][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.432364][ T8554] Call Trace: [ 156.432371][ T8554] [ 156.432379][ T8554] dump_stack_lvl+0x241/0x360 [ 156.432412][ T8554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.432435][ T8554] ? __pfx__printk+0x10/0x10 [ 156.432460][ T8554] ? br_fdb_fillbuf+0x37e/0x720 [ 156.432489][ T8554] should_fail_ex+0x40a/0x550 [ 156.432526][ T8554] _copy_to_user+0x31/0xb0 [ 156.432558][ T8554] br_dev_siocdevprivate+0x685/0x1ba0 [ 156.432592][ T8554] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 156.432618][ T8554] ? __mutex_trylock_common+0x183/0x2e0 [ 156.432649][ T8554] ? __pfx___mutex_trylock_common+0x10/0x10 [ 156.432678][ T8554] ? rcu_is_watching+0x15/0xb0 [ 156.432702][ T8554] ? trace_contention_end+0x3c/0x120 [ 156.432727][ T8554] ? __mutex_lock+0x397/0x1010 [ 156.432758][ T8554] ? full_name_hash+0x93/0xe0 [ 156.432809][ T8554] dev_ifsioc+0xcac/0x1130 [ 156.432841][ T8554] ? __pfx___mutex_lock+0x10/0x10 [ 156.432876][ T8554] ? __pfx_dev_ifsioc+0x10/0x10 [ 156.432911][ T8554] ? dev_load+0x21/0x1f0 [ 156.432943][ T8554] dev_ioctl+0x881/0x1340 [ 156.432978][ T8554] sock_ioctl+0x7ef/0x8e0 [ 156.433009][ T8554] ? __pfx_sock_ioctl+0x10/0x10 [ 156.433053][ T8554] ? __pfx_sock_ioctl+0x10/0x10 [ 156.433084][ T8554] __se_sys_ioctl+0xf5/0x170 [ 156.433107][ T8554] do_syscall_64+0xf3/0x230 [ 156.433133][ T8554] ? clear_bhb_loop+0x35/0x90 [ 156.433164][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.433190][ T8554] RIP: 0033:0x7fbb8f58d169 [ 156.433207][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.433222][ T8554] RSP: 002b:00007fbb9049b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.433243][ T8554] RAX: ffffffffffffffda RBX: 00007fbb8f7a5fa0 RCX: 00007fbb8f58d169 [ 156.433258][ T8554] RDX: 0000400000001440 RSI: 00000000000089f6 RDI: 0000000000000003 [ 156.433271][ T8554] RBP: 00007fbb9049b090 R08: 0000000000000000 R09: 0000000000000000 [ 156.433282][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.433293][ T8554] R13: 0000000000000000 R14: 00007fbb8f7a5fa0 R15: 00007fff4aba8e08 [ 156.433322][ T8554] [ 156.851549][ T8557] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.017764][ T8571] netlink: zone id is out of range [ 157.024893][ T8571] netlink: zone id is out of range [ 157.035185][ T8571] netlink: zone id is out of range [ 157.042681][ T8571] netlink: zone id is out of range [ 157.053158][ T8571] netlink: zone id is out of range [ 157.063873][ T8571] netlink: set zone limit has 8 unknown bytes [ 157.266745][ T8585] netlink: 'syz.3.739': attribute type 3 has an invalid length. [ 157.397545][ T8593] FAULT_INJECTION: forcing a failure. [ 157.397545][ T8593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.415523][ T8593] CPU: 1 UID: 0 PID: 8593 Comm: syz.1.742 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 157.415555][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.415568][ T8593] Call Trace: [ 157.415575][ T8593] [ 157.415584][ T8593] dump_stack_lvl+0x241/0x360 [ 157.415616][ T8593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.415640][ T8593] ? __pfx__printk+0x10/0x10 [ 157.415668][ T8593] ? snprintf+0xda/0x120 [ 157.415693][ T8593] should_fail_ex+0x40a/0x550 [ 157.415730][ T8593] _copy_to_user+0x31/0xb0 [ 157.415761][ T8593] simple_read_from_buffer+0xca/0x150 [ 157.415795][ T8593] proc_fail_nth_read+0x1e9/0x250 [ 157.415828][ T8593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.415861][ T8593] ? rw_verify_area+0x243/0x630 [ 157.415883][ T8593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.415915][ T8593] vfs_read+0x1f8/0xb40 [ 157.415946][ T8593] ? fdget_pos+0x254/0x320 [ 157.415979][ T8593] ? __pfx___mutex_lock+0x10/0x10 [ 157.416008][ T8593] ? __pfx_vfs_read+0x10/0x10 [ 157.416028][ T8593] ? dev_load+0x21/0x1f0 [ 157.416062][ T8593] ? __fget_files+0x2a/0x410 [ 157.416094][ T8593] ? __fget_files+0x395/0x410 [ 157.416122][ T8593] ? __fget_files+0x2a/0x410 [ 157.416163][ T8593] ksys_read+0x18f/0x2b0 [ 157.416189][ T8593] ? __pfx_ksys_read+0x10/0x10 [ 157.416212][ T8593] ? do_syscall_64+0x100/0x230 [ 157.416244][ T8593] ? do_syscall_64+0xb6/0x230 [ 157.416275][ T8593] do_syscall_64+0xf3/0x230 [ 157.416303][ T8593] ? clear_bhb_loop+0x35/0x90 [ 157.416336][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.416364][ T8593] RIP: 0033:0x7fcdb018bb7c [ 157.416383][ T8593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.416400][ T8593] RSP: 002b:00007fcdb0f6b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.416421][ T8593] RAX: ffffffffffffffda RBX: 00007fcdb03a5fa0 RCX: 00007fcdb018bb7c [ 157.416437][ T8593] RDX: 000000000000000f RSI: 00007fcdb0f6b0a0 RDI: 0000000000000004 [ 157.416449][ T8593] RBP: 00007fcdb0f6b090 R08: 0000000000000000 R09: 0000000000000000 [ 157.416462][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.416474][ T8593] R13: 0000000000000000 R14: 00007fcdb03a5fa0 R15: 00007ffdcefb07a8 [ 157.416506][ T8593] [ 157.734902][ T8603] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.738736][ T8601] __nla_validate_parse: 7 callbacks suppressed [ 157.738757][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 157.834595][ T8609] Unsupported ieee802154 address type: 0 [ 157.936294][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 157.946035][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.750'. [ 157.957577][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 158.435176][ T8640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.756'. [ 158.623204][ T8640] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.631998][ T8640] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.641462][ T8640] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.658052][ T8640] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.867827][ T8653] sctp: [Deprecated]: syz.3.760 (pid 8653) Use of int in max_burst socket option. [ 158.867827][ T8653] Use struct sctp_assoc_value instead [ 159.007077][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 159.035898][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.760'. [ 159.058937][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.762'. [ 159.072025][ T8651] netlink: 172 bytes leftover after parsing attributes in process `syz.4.759'. [ 159.433464][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.769'. [ 159.450150][ T8678] ax25_connect(): syz.3.769 uses autobind, please contact jreuter@yaina.de [ 159.485386][ T8678] dummy0: entered promiscuous mode [ 159.507162][ T8678] dummy0: left promiscuous mode [ 159.714230][ T8692] net_ratelimit: 1 callbacks suppressed [ 159.714251][ T8692] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 159.817335][ T8697] netlink: 'syz.4.774': attribute type 10 has an invalid length. [ 159.836904][ T8697] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 160.098825][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 161.887582][ T8775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.330097][ T8791] vlan0: entered promiscuous mode [ 162.468710][ T8798] bond2: entered promiscuous mode [ 162.474162][ T8798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.735978][ T8812] lo speed is unknown, defaulting to 1000 [ 163.233470][ T8833] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 163.263529][ T8834] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 163.298060][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 163.516081][ T8841] __nla_validate_parse: 11 callbacks suppressed [ 163.516102][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 163.659074][ T8843] netlink: 'syz.3.816': attribute type 1 has an invalid length. [ 163.666897][ T8843] netlink: 'syz.3.816': attribute type 2 has an invalid length. [ 163.710934][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 163.966248][ T8857] netlink: 48 bytes leftover after parsing attributes in process `syz.4.822'. [ 163.995649][ T8857] netlink: 100 bytes leftover after parsing attributes in process `syz.4.822'. [ 164.048137][ T5921] IPVS: starting estimator thread 0... [ 164.048276][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 164.148088][ T8868] IPVS: using max 21 ests per chain, 50400 per kthread [ 164.366517][ T8878] lo speed is unknown, defaulting to 1000 [ 164.377264][ T8879] syzkaller0: refused to change device tx_queue_len [ 164.407777][ T8879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.827'. [ 164.416945][ T8879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.827'. [ 164.665738][ T8897] netlink: 'syz.0.830': attribute type 21 has an invalid length. [ 164.685820][ T8897] netlink: 'syz.0.830': attribute type 20 has an invalid length. [ 164.777484][ T8901] netlink: 192 bytes leftover after parsing attributes in process `syz.4.831'. [ 164.932609][ T8901] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 165.646037][ T8925] lo speed is unknown, defaulting to 1000 [ 165.695077][ T8930] xt_hashlimit: size too large, truncated to 1048576 [ 166.041126][ T10] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 166.056719][ T10] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 166.266842][ T8952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.847'. [ 166.527489][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'. [ 166.795260][ T8976] team0: Mode changed to "loadbalance" [ 167.014689][ T8987] pim6reg1: entered promiscuous mode [ 167.020523][ T8987] pim6reg1: entered allmulticast mode [ 167.860113][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 167.995863][ T9029] sock: sock_timestamping_bind_phc: sock not bind to device [ 168.242561][ T9033] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.634134][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.641767][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.861539][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.902316][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.992248][ T9056] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.002425][ T9056] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.012902][ T9056] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.022271][ T9056] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.330569][ T9083] sctp: [Deprecated]: syz.2.881 (pid 9083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.330569][ T9083] Use struct sctp_sack_info instead [ 169.496214][ T9083] lo speed is unknown, defaulting to 1000 [ 169.549752][ T9092] __nla_validate_parse: 7 callbacks suppressed [ 169.549775][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.883'. [ 169.582287][ T9094] netlink: 'syz.1.884': attribute type 4 has an invalid length. [ 169.623967][ T9094] netlink: 152 bytes leftover after parsing attributes in process `syz.1.884'. [ 169.635106][ T9095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.883'. [ 169.675465][ T9094] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.923192][ T9103] netlink: 96 bytes leftover after parsing attributes in process `syz.1.887'. [ 169.938105][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 170.085283][ T9108] netlink: 240 bytes leftover after parsing attributes in process `syz.4.889'. [ 170.110196][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 170.125765][ T9112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.890'. [ 170.169641][ T9112] gtp0: entered promiscuous mode [ 170.175058][ T9112] gtp0: entered allmulticast mode [ 170.196310][ T9113] netlink: 48 bytes leftover after parsing attributes in process `syz.3.890'. [ 170.223041][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 170.341712][ T9119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 170.527340][ T9120] netlink: 'syz.4.892': attribute type 16 has an invalid length. [ 170.545579][ T9123] lo speed is unknown, defaulting to 1000 [ 170.620451][ T9129] netlink: 'syz.0.896': attribute type 10 has an invalid length. [ 170.732210][ T9129] team0: Device veth1_macvtap failed to register rx_handler [ 170.781887][ T9134] 8021q: VLANs not supported on ip_vti0 [ 170.796351][ T9129] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 171.052620][ T9148] lo speed is unknown, defaulting to 1000 [ 171.333492][ T9149] lo speed is unknown, defaulting to 1000 [ 171.587135][ T9175] vlan2: entered allmulticast mode [ 171.592796][ T9175] batadv0: entered allmulticast mode [ 171.607165][ T9175] batadv0: left allmulticast mode [ 171.952064][ T9197] tipc: Enabled bearer , priority 18 [ 171.972169][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.999076][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.024773][ T9205] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.379814][ T9217] lo speed is unknown, defaulting to 1000 [ 172.436518][ T9214] lo speed is unknown, defaulting to 1000 [ 172.977019][ T9250] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.773141][ T9284] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 173.831159][ T9284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.862991][ T9284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.878420][ T9284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.888431][ T9284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.962395][ T9284] team0: Port device geneve0 added [ 174.160499][ T9305] can: request_module (can-proto-5) failed. [ 174.173106][ T9310] netlink: 'syz.3.941': attribute type 5 has an invalid length. [ 174.218000][ T55] Bluetooth: hci4: link tx timeout [ 174.223423][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.234053][ T55] Bluetooth: hci4: link tx timeout [ 174.240348][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.275756][ T9313] lo speed is unknown, defaulting to 1000 [ 174.576938][ T9330] __nla_validate_parse: 12 callbacks suppressed [ 174.576960][ T9330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.949'. [ 174.585908][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 174.790726][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 174.938724][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.951167][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.959976][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 174.984277][ T9346] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.034723][ T9348] tipc: Enabled bearer , priority 0 [ 175.043303][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.050578][ T9353] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 175.077955][ T9353] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 175.085611][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.099488][ T9348] sch_fq: defrate 511 ignored. [ 175.178875][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.957'. [ 175.324469][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.335423][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.350191][ T9346] virt_wifi0 speed is unknown, defaulting to 1000 [ 175.430608][ T9356] syzkaller1: entered promiscuous mode [ 175.443697][ T9356] syzkaller1: entered allmulticast mode [ 175.540741][ T55] Bluetooth: hci4: link tx timeout [ 175.547078][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.780581][ T9365] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 176.266100][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 176.287105][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.965'. [ 176.856680][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.975'. [ 176.968147][ T9414] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 176.979942][ T9414] netlink: 244 bytes leftover after parsing attributes in process `syz.2.975'. [ 177.525150][ T9429] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 177.750081][ T9441] netlink: 'syz.1.979': attribute type 7 has an invalid length. [ 177.965422][ T9452] bond0: mtu less than device minimum [ 178.269557][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.985'. [ 178.416377][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.987'. [ 178.447450][ T9480] lo speed is unknown, defaulting to 1000 [ 178.484349][ T9480] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.616865][ T9490] lo speed is unknown, defaulting to 1000 [ 178.631552][ T9490] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.741255][ T9494] lo speed is unknown, defaulting to 1000 [ 178.789241][ T9494] virt_wifi0 speed is unknown, defaulting to 1000 [ 178.836299][ T9500] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.869175][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 179.141729][ T9505] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 179.154839][ T9509] netlink: 'syz.4.995': attribute type 9 has an invalid length. [ 179.160559][ T9505] openvswitch: netlink: Message has 44053 unknown bytes. [ 179.176349][ T9509] netlink: 'syz.4.995': attribute type 6 has an invalid length. [ 179.259968][ T9494] netlink: 'syz.1.991': attribute type 39 has an invalid length. [ 179.410643][ T9516] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 179.432969][ T9516] netlink: 'syz.3.998': attribute type 4 has an invalid length. [ 179.938115][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 181.842255][ T9555] __nla_validate_parse: 3 callbacks suppressed [ 181.842278][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1010'. [ 182.005511][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 182.056842][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1014'. [ 182.116695][ T9572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1015'. [ 182.155846][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'. [ 182.197416][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 182.303173][ T9580] lo speed is unknown, defaulting to 1000 [ 182.332341][ T9580] virt_wifi0 speed is unknown, defaulting to 1000 [ 182.383815][ T9585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'. [ 182.399549][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 182.429495][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 182.450033][ T9585] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1019'. [ 182.739757][ T9597] openvswitch: netlink: Message has 8 unknown bytes. [ 182.818903][ T9601] syzkaller1: entered promiscuous mode [ 182.827324][ T9601] syzkaller1: entered allmulticast mode [ 183.093140][ T9617] nft_compat: unsupported protocol 1 [ 183.124154][ T9617] 8021q: VLANs not supported on ipvlan1 [ 183.373118][ T9623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.684772][ T9645] ip6gre1: entered promiscuous mode [ 183.859214][ T9654] netlink: 'syz.2.1035': attribute type 7 has an invalid length. [ 184.741692][ T9686] netlink: 'syz.1.1048': attribute type 5 has an invalid length. [ 184.764823][ T9686] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 184.777526][ T9688] @ÿ: renamed from veth0_vlan (while UP) [ 184.936912][ T9689] lo speed is unknown, defaulting to 1000 [ 184.958974][ T9689] virt_wifi0 speed is unknown, defaulting to 1000 [ 184.983409][ T9694] netlink: 'syz.0.1051': attribute type 11 has an invalid length. [ 185.003285][ T9694] openvswitch: netlink: Flow actions attr not present in new flow. [ 185.126485][ T9702] netlink: 'syz.3.1053': attribute type 2 has an invalid length. [ 185.170448][ T9702] : entered promiscuous mode [ 185.504446][ T9723] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 185.675802][ T9734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.683161][ T9734] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 185.897078][ T9742] gretap0: left promiscuous mode [ 185.915801][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.951110][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.962021][ T9742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.304530][ T9761] bridge0: left allmulticast mode [ 186.340698][ T9761] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.350604][ T9761] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.359459][ T9761] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.368244][ T9761] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.382816][ T9761] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 186.427742][ T9761] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 186.451249][ T9761] ipip0: left promiscuous mode [ 186.471492][ T9761] ip6gre1: left promiscuous mode [ 186.990526][ T9781] xt_CT: No such helper "pptp" [ 187.004742][ T9781] __nla_validate_parse: 20 callbacks suppressed [ 187.004766][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 187.119015][ T9790] Cannot find add_set index 1 as target [ 187.236201][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1081'. [ 187.268142][ T9795] Driver unsupported XDP return value 0 on prog (id 385) dev N/A, expect packet loss! [ 187.346745][ T9799] lo speed is unknown, defaulting to 1000 [ 187.367552][ T9803] netlink: 'syz.1.1083': attribute type 3 has an invalid length. [ 187.375790][ T9803] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1083'. [ 187.391654][ T9803] xt_nfacct: accounting object `syz1' does not exists [ 187.435669][ T9799] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.442118][ T9809] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.442976][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'. [ 187.819985][ T9825] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 187.823782][ T9823] lo speed is unknown, defaulting to 1000 [ 187.846022][ T9823] virt_wifi0 speed is unknown, defaulting to 1000 [ 188.878586][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 188.898574][ T9852] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.978349][ T9855] netlink: 'syz.2.1098': attribute type 1 has an invalid length. [ 189.020249][ T9861] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.041542][ T9855] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 189.151318][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 189.171532][ T9869] netlink: 'syz.0.1102': attribute type 11 has an invalid length. [ 189.312319][ T9881] netlink: 'syz.2.1105': attribute type 30 has an invalid length. [ 189.414802][ T9885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'. [ 189.524891][ T9890] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.550463][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'. [ 190.072126][ T9921] netlink: 'syz.0.1118': attribute type 1 has an invalid length. [ 190.119663][ T9921] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.139967][ T9923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 190.200367][ T9925] bond3: (slave veth5): Enslaving as an active interface with a down link [ 190.238728][ T9921] ip6erspan0: entered promiscuous mode [ 190.257471][ T9921] bond3: (slave ip6erspan0): making interface the new active one [ 190.283934][ T9921] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 190.307666][ T9931] geneve1: mtu less than device minimum [ 190.389558][ T9942] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1118'. [ 190.554253][ T9947] netlink: 'syz.1.1124': attribute type 10 has an invalid length. [ 190.592060][ T9949] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.613242][ T9950] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 190.626206][ T9947] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.636438][ T9947] bond0: (slave team0): Enslaving as an active interface with an up link [ 190.687987][ T9952] macvtap1: entered promiscuous mode [ 190.703578][ T9952] bond0: entered promiscuous mode [ 190.719164][ T9952] veth0_to_bond: entered promiscuous mode [ 190.743746][ T9952] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 190.753854][ T9952] team0: Device macvtap1 failed to register rx_handler [ 190.765836][ T9952] bond0: left promiscuous mode [ 190.774301][ T9952] veth0_to_bond: left promiscuous mode [ 190.808142][ T9947] syz.1.1124 (9947) used greatest stack depth: 18352 bytes left [ 191.042356][ T9969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.054879][ T9971] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.070894][ T9971] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.083912][ T9971] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.095037][ T9971] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.109646][ T9971] geneve3: entered promiscuous mode [ 191.116014][ T9971] geneve3: entered allmulticast mode [ 191.339664][ T9987] lo speed is unknown, defaulting to 1000 [ 191.357601][ T9987] virt_wifi0 speed is unknown, defaulting to 1000 [ 191.772514][T10005] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 191.874587][T10009] RDS: rds_bind could not find a transport for ::4000:0:40:0, load rds_tcp or rds_rdma? [ 191.999063][T10014] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.008813][T10014] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.017800][T10014] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.028581][T10014] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.038451][T10014] geneve2: entered promiscuous mode [ 192.050302][T10014] geneve2: entered allmulticast mode [ 192.288672][T10022] syzkaller0: entered promiscuous mode [ 192.294777][T10022] syzkaller0: entered allmulticast mode [ 192.334257][T10024] openvswitch: netlink: IP tunnel TTL not specified. [ 192.837429][T10046] netlink: 'syz.1.1156': attribute type 1 has an invalid length. [ 192.845589][T10046] __nla_validate_parse: 11 callbacks suppressed [ 192.845608][T10046] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1156'. [ 192.930927][T10048] lo speed is unknown, defaulting to 1000 [ 192.969326][T10048] virt_wifi0 speed is unknown, defaulting to 1000 [ 193.043170][T10056] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 193.059604][T10056] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 193.097154][T10057] bridge0: port 3(syz_tun) entered blocking state [ 193.108252][T10057] bridge0: port 3(syz_tun) entered disabled state [ 193.115203][T10057] syz_tun: entered allmulticast mode [ 193.132096][T10057] syz_tun: entered promiscuous mode [ 193.180259][T10067] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 193.197523][T10067] team0: Device ipvlan1 failed to register rx_handler [ 193.211002][T10067] tipc: Resetting bearer [ 193.399787][T10078] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 193.964215][T10098] lo speed is unknown, defaulting to 1000 [ 193.971134][T10098] virt_wifi0 speed is unknown, defaulting to 1000 [ 194.218234][T10106] netlink: 'syz.0.1171': attribute type 26 has an invalid length. [ 194.234299][T10088] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.243570][T10088] tipc: Enabled bearer , priority 10 [ 194.253691][T10105] netlink: 'syz.0.1171': attribute type 26 has an invalid length. [ 194.368069][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.555183][T10123] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 194.623390][T10126] sctp: [Deprecated]: syz.0.1177 (pid 10126) Use of int in max_burst socket option. [ 194.623390][T10126] Use struct sctp_assoc_value instead [ 194.638675][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.647025][T10127] sctp: [Deprecated]: syz.0.1177 (pid 10127) Use of int in max_burst socket option. [ 194.647025][T10127] Use struct sctp_assoc_value instead [ 194.670055][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.696655][T10127] nbd: must specify at least one socket [ 194.703010][T10126] nbd: must specify at least one socket [ 194.870135][T10135] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1179'. [ 195.108052][T10146] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 195.120136][T10146] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 195.168076][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.171168][T10146] ip6t_srh: unknown srh match flags 4000 [ 195.192927][T10146] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 195.648642][T10169] syzkaller1: entered promiscuous mode [ 195.654278][T10169] syzkaller1: entered allmulticast mode [ 195.848835][T10182] netlink: 'syz.2.1190': attribute type 21 has an invalid length. [ 195.886416][T10169] bridge0: port 3(syz_tun) entered disabled state [ 195.958379][T10169] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.967328][T10169] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.997895][T10169] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.006821][T10169] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.071092][T10169] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.080410][T10169] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.090743][T10169] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.099892][T10169] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 196.129122][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 196.177953][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.252889][T10191] lo speed is unknown, defaulting to 1000 [ 196.260237][T10191] virt_wifi0 speed is unknown, defaulting to 1000 [ 197.076697][T10191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1193'. [ 197.129109][T10217] lo speed is unknown, defaulting to 1000 [ 197.136066][T10217] virt_wifi0 speed is unknown, defaulting to 1000 [ 197.218051][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 197.370846][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1200'. [ 197.460235][T10228] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 197.613160][T10237] macvlan0: entered promiscuous mode [ 197.633772][T10237] macvlan0: entered allmulticast mode [ 198.089920][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 198.107942][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 198.257937][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 198.738075][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 198.796099][T10268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1214'. [ 199.083175][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1217'. [ 199.230953][T10287] 8021q: VLANs not supported on tunl0 [ 199.297934][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.361292][T10292] lo speed is unknown, defaulting to 1000 [ 199.368695][T10292] virt_wifi0 speed is unknown, defaulting to 1000 [ 199.644909][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'. [ 199.715639][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 199.872692][T10322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 200.012162][T10328] bpq0: entered allmulticast mode [ 200.172466][T10335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1233'. [ 200.182286][T10335] netlink: 'syz.4.1233': attribute type 7 has an invalid length. [ 200.209103][T10335] netlink: 'syz.4.1233': attribute type 8 has an invalid length. [ 200.217135][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 200.337947][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.664102][T10359] netlink: 'syz.0.1241': attribute type 21 has an invalid length. [ 200.979875][T10378] netlink: 'syz.3.1245': attribute type 1 has an invalid length. [ 201.012762][T10377] netlink: 'syz.3.1245': attribute type 1 has an invalid length. [ 201.305988][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.331579][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.377947][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.382164][T10394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.397990][T10399] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 201.808173][ T31] audit: type=1804 audit(1742407072.693:2): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1254" name="/newroot/271/cgroup.controllers" dev="tmpfs" ino=1411 res=1 errno=0 [ 201.867071][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 201.875103][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 201.876584][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 201.881454][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 201.891238][ T31] audit: type=1800 audit(1742407072.743:3): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1254" name="cgroup.controllers" dev="tmpfs" ino=1411 res=0 errno=0 [ 202.072620][T10417] lo speed is unknown, defaulting to 1000 [ 202.080349][T10421] lo speed is unknown, defaulting to 1000 [ 202.089365][T10399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.089613][T10421] virt_wifi0 speed is unknown, defaulting to 1000 [ 202.108353][T10417] virt_wifi0 speed is unknown, defaulting to 1000 [ 202.417949][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.962795][T10446] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.221646][T10455] sit0: entered promiscuous mode [ 203.235600][T10455] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 203.264341][T10455] __nla_validate_parse: 10 callbacks suppressed [ 203.264366][T10455] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1267'. [ 203.457928][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.469548][T10470] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1271'. [ 203.568934][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 203.601117][T10478] bridge5: entered promiscuous mode [ 203.606405][T10478] bridge5: entered allmulticast mode [ 203.639543][T10478] team0: Port device bridge5 added [ 203.685335][T10487] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.706978][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'. [ 203.850732][T10494] SET target dimension over the limit! [ 203.890022][T10495] lo speed is unknown, defaulting to 1000 [ 203.917256][T10495] virt_wifi0 speed is unknown, defaulting to 1000 [ 204.097082][T10507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1281'. [ 204.104465][T10506] netlink: 'syz.2.1282': attribute type 3 has an invalid length. [ 204.497959][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.620932][T10530] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.635188][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 204.882942][T10539] sctp: [Deprecated]: syz.4.1291 (pid 10539) Use of int in max_burst socket option deprecated. [ 204.882942][T10539] Use struct sctp_assoc_value instead [ 204.938751][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 204.998943][T10544] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.1294'. [ 205.008610][T10544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.200457][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 205.306704][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 205.439793][T10567] batadv_slave_1: entered promiscuous mode [ 205.446350][T10567] batadv_slave_1: left promiscuous mode [ 205.455401][T10567] netlink: 'syz.0.1300': attribute type 8 has an invalid length. [ 205.534239][T10571] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.541292][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.660973][T10574] netem: change failed [ 206.172704][T10602] bond0: (slave veth0_to_bond): Releasing backup interface [ 206.263525][T10595] team0: Mode changed to "loadbalance" [ 206.302980][T10595] netlink: 'syz.4.1309': attribute type 1 has an invalid length. [ 206.336147][T10607] lo speed is unknown, defaulting to 1000 [ 206.370269][T10607] virt_wifi0 speed is unknown, defaulting to 1000 [ 206.578007][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.835373][T10625] vlan2: entered promiscuous mode [ 207.562706][T10653] lo speed is unknown, defaulting to 1000 [ 207.581454][T10653] virt_wifi0 speed is unknown, defaulting to 1000 [ 207.617995][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.238162][T10693] lo speed is unknown, defaulting to 1000 [ 208.261232][T10693] virt_wifi0 speed is unknown, defaulting to 1000 [ 208.546861][T10715] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.568628][T10715] __nla_validate_parse: 16 callbacks suppressed [ 208.568652][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1332'. [ 208.657934][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.975491][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 208.984714][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 208.998719][T10727] netlink: 'syz.2.1336': attribute type 5 has an invalid length. [ 209.044988][T10727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1336'. [ 209.313196][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 209.697926][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.732214][T10764] netlink: 'syz.4.1350': attribute type 2 has an invalid length. [ 209.740650][T10764] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1350'. [ 209.752596][T10770] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.768913][T10766] lo speed is unknown, defaulting to 1000 [ 209.776191][T10766] virt_wifi0 speed is unknown, defaulting to 1000 [ 210.353370][T10788] netlink: 'syz.1.1357': attribute type 7 has an invalid length. [ 210.401254][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 210.737978][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.766880][T10799] bond3 (unregistering): Released all slaves [ 210.869831][T10806] lo speed is unknown, defaulting to 1000 [ 210.876736][T10806] virt_wifi0 speed is unknown, defaulting to 1000 [ 211.122976][T10815] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.175317][T10815] bond4: entered promiscuous mode [ 211.201965][T10815] team0: Port device bond4 added [ 211.277669][T10826] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.582132][T10843] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 211.777933][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.938158][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 212.593973][T10885] lo speed is unknown, defaulting to 1000 [ 212.620441][T10885] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.647611][T10888] netlink: 'syz.0.1375': attribute type 2 has an invalid length. [ 212.706711][T10887] netlink: 'syz.0.1375': attribute type 2 has an invalid length. [ 212.748221][T10895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1376'. [ 212.818092][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.012485][T10903] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1378'. [ 213.032368][T10903] x_tables: duplicate underflow at hook 2 [ 213.271148][T10915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1380'. [ 213.285945][T10915] bridge0: port 2(vlan3) entered blocking state [ 213.292760][T10915] bridge0: port 2(vlan3) entered disabled state [ 213.299459][T10915] vlan3: entered allmulticast mode [ 213.313651][T10915] vlan3: left allmulticast mode [ 213.387272][T10914] lo speed is unknown, defaulting to 1000 [ 213.402834][T10914] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.626424][T10922] 8021q: VLANs not supported on wg1 [ 213.740762][T10929] netlink: 'syz.3.1386': attribute type 10 has an invalid length. [ 213.858242][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.901727][T10938] tipc: Can't bind to reserved service type 1 [ 213.913328][T10941] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.929766][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 214.003853][T10945] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1392'. [ 214.014061][T10944] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1392'. [ 214.395353][T10963] lo speed is unknown, defaulting to 1000 [ 214.403529][T10963] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.606339][T10971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1399'. [ 214.618466][T10971] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744071870057742) [ 214.629456][T10971] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 214.641640][T10971] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1399'. [ 214.775304][T10971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.897937][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.116646][T10983] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.125149][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 215.227329][T10991] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1405'. [ 215.711097][T11024] x_tables: duplicate underflow at hook 3 [ 215.937982][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.018429][T11042] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1421'. [ 216.323315][T11051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1424'. [ 216.341909][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 216.489266][T11054] netlink: 'syz.2.1425': attribute type 9 has an invalid length. [ 216.889627][T11072] IPVS: length: 8 != 432648 [ 216.941910][T11074] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 216.958125][T11074] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 216.978057][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.715631][T11113] lo speed is unknown, defaulting to 1000 [ 217.725445][T11113] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.925413][T11125] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.018044][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.131709][T11128] netlink: 'syz.4.1446': attribute type 4 has an invalid length. [ 218.229100][T11130] netlink: 'syz.4.1447': attribute type 13 has an invalid length. [ 218.237382][T11130] netlink: 'syz.4.1447': attribute type 12 has an invalid length. [ 218.275487][T11130] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.390119][T11133] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 218.440679][T11133] bond0 (unregistering): Released all slaves [ 218.569235][T11138] lo speed is unknown, defaulting to 1000 [ 218.576126][T11138] virt_wifi0 speed is unknown, defaulting to 1000 [ 218.722865][T11147] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 218.802157][T11147] bond4: entered promiscuous mode [ 218.807689][T11147] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.876339][T11153] batadv1: entered promiscuous mode [ 218.882484][T11153] batadv1: entered allmulticast mode [ 219.058061][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.161947][T11157] ================================================================== [ 219.170250][T11157] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 219.179157][T11157] Write of size 8 at addr ffff88802956ccf0 by task syz.2.1457/11157 [ 219.187156][T11157] [ 219.189496][T11157] CPU: 0 UID: 0 PID: 11157 Comm: syz.2.1457 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 219.189520][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.189532][T11157] Call Trace: [ 219.189538][T11157] [ 219.189546][T11157] dump_stack_lvl+0x241/0x360 [ 219.189576][T11157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.189596][T11157] ? __pfx__printk+0x10/0x10 [ 219.189613][T11157] ? _printk+0xd5/0x120 [ 219.189629][T11157] ? __virt_addr_valid+0x183/0x530 [ 219.189646][T11157] ? __virt_addr_valid+0x183/0x530 [ 219.189664][T11157] print_report+0x16e/0x5b0 [ 219.189686][T11157] ? __virt_addr_valid+0x183/0x530 [ 219.189702][T11157] ? __virt_addr_valid+0x183/0x530 [ 219.189717][T11157] ? __virt_addr_valid+0x45f/0x530 [ 219.189733][T11157] ? __phys_addr+0xba/0x170 [ 219.189749][T11157] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 219.189768][T11157] kasan_report+0x143/0x180 [ 219.189790][T11157] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 219.189813][T11157] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 219.189833][T11157] tipc_udp_enable+0xf08/0x16f0 [ 219.189861][T11157] ? __pfx_tipc_udp_enable+0x10/0x10 [ 219.189889][T11157] ? kasan_save_track+0x51/0x80 [ 219.189907][T11157] ? kasan_save_track+0x3f/0x80 [ 219.189924][T11157] ? __kasan_kmalloc+0x98/0xb0 [ 219.189960][T11157] ? __pfx_tipc_udp_recv+0x10/0x10 [ 219.189990][T11157] ? __kasan_kmalloc+0x98/0xb0 [ 219.190010][T11157] ? __kmalloc_cache_noprof+0x243/0x390 [ 219.190034][T11157] ? __tipc_nl_bearer_enable+0xafb/0x1420 [ 219.190059][T11157] __tipc_nl_bearer_enable+0xbd2/0x1420 [ 219.190085][T11157] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 219.190116][T11157] ? __pfx___mutex_lock+0x10/0x10 [ 219.190142][T11157] ? __nla_parse+0x40/0x60 [ 219.190162][T11157] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 219.190184][T11157] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 219.190207][T11157] tipc_nl_bearer_enable+0x22/0x40 [ 219.190229][T11157] genl_rcv_msg+0xb1f/0xec0 [ 219.190252][T11157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.190284][T11157] ? __pfx_lock_acquire+0x10/0x10 [ 219.190309][T11157] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 219.190333][T11157] ? __pfx___might_resched+0x10/0x10 [ 219.190360][T11157] netlink_rcv_skb+0x206/0x480 [ 219.190386][T11157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.190406][T11157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.190443][T11157] genl_rcv+0x28/0x40 [ 219.190460][T11157] netlink_unicast+0x7f6/0x990 [ 219.190487][T11157] ? __pfx_netlink_unicast+0x10/0x10 [ 219.190509][T11157] ? __virt_addr_valid+0x45f/0x530 [ 219.190525][T11157] ? __phys_addr_symbol+0x2f/0x70 [ 219.190541][T11157] ? __check_object_size+0x47a/0x730 [ 219.190566][T11157] netlink_sendmsg+0x8de/0xcb0 [ 219.190604][T11157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.190632][T11157] ? aa_sock_msg_perm+0x91/0x160 [ 219.190661][T11157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.190686][T11157] __sock_sendmsg+0x221/0x270 [ 219.190713][T11157] ____sys_sendmsg+0x53a/0x860 [ 219.190736][T11157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.190755][T11157] ? __fget_files+0x2a/0x410 [ 219.190782][T11157] ? __fget_files+0x2a/0x410 [ 219.190810][T11157] __sys_sendmsg+0x269/0x350 [ 219.190829][T11157] ? __pfx_futex_wake+0x10/0x10 [ 219.190856][T11157] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.190894][T11157] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.190921][T11157] ? do_syscall_64+0x100/0x230 [ 219.190946][T11157] ? do_syscall_64+0xb6/0x230 [ 219.190970][T11157] do_syscall_64+0xf3/0x230 [ 219.190992][T11157] ? clear_bhb_loop+0x35/0x90 [ 219.191018][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.191042][T11157] RIP: 0033:0x7fbb8f58d169 [ 219.191065][T11157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.191081][T11157] RSP: 002b:00007fbb9049b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.191107][T11157] RAX: ffffffffffffffda RBX: 00007fbb8f7a5fa0 RCX: 00007fbb8f58d169 [ 219.191121][T11157] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 000000000000000d [ 219.191132][T11157] RBP: 00007fbb8f60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 219.191144][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.191155][T11157] R13: 0000000000000000 R14: 00007fbb8f7a5fa0 R15: 00007fff4aba8e08 [ 219.191174][T11157] [ 219.191180][T11157] [ 219.614822][T11157] Allocated by task 10292: [ 219.619253][T11157] kasan_save_track+0x3f/0x80 [ 219.623945][T11157] __kasan_slab_alloc+0x66/0x80 [ 219.628812][T11157] kmem_cache_alloc_noprof+0x1d9/0x380 [ 219.634282][T11157] sk_prot_alloc+0x58/0x210 [ 219.638797][T11157] sk_alloc+0x3e/0x370 [ 219.642874][T11157] inet_create+0x648/0xea0 [ 219.647298][T11157] __sock_create+0x4c0/0xa30 [ 219.651902][T11157] inet_ctl_sock_create+0xc2/0x250 [ 219.657025][T11157] igmp_net_init+0xbb/0x150 [ 219.661530][T11157] ops_init+0x349/0x5b0 [ 219.665715][T11157] setup_net+0x287/0x9e0 [ 219.670003][T11157] copy_net_ns+0x33f/0x570 [ 219.674458][T11157] create_new_namespaces+0x425/0x7b0 [ 219.679767][T11157] unshare_nsproxy_namespaces+0x124/0x180 [ 219.685504][T11157] ksys_unshare+0x57d/0xa70 [ 219.690235][T11157] __x64_sys_unshare+0x38/0x40 [ 219.695083][T11157] do_syscall_64+0xf3/0x230 [ 219.699613][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.705534][T11157] [ 219.707867][T11157] Freed by task 30: [ 219.711677][T11157] kasan_save_track+0x3f/0x80 [ 219.716365][T11157] kasan_save_free_info+0x40/0x50 [ 219.721411][T11157] __kasan_slab_free+0x59/0x70 [ 219.726183][T11157] kmem_cache_free+0x195/0x410 [ 219.730964][T11157] __sk_destruct+0x4fd/0x690 [ 219.735563][T11157] inet_release+0x17d/0x200 [ 219.740075][T11157] sock_release+0x82/0x150 [ 219.744501][T11157] cleanup_net+0x812/0xd60 [ 219.748924][T11157] process_scheduled_works+0xabe/0x18e0 [ 219.754487][T11157] worker_thread+0x870/0xd30 [ 219.759093][T11157] kthread+0x7a9/0x920 [ 219.763168][T11157] ret_from_fork+0x4b/0x80 [ 219.767595][T11157] ret_from_fork_asm+0x1a/0x30 [ 219.772377][T11157] [ 219.774708][T11157] The buggy address belongs to the object at ffff88802956c5c0 [ 219.774708][T11157] which belongs to the cache UDP of size 1856 [ 219.788173][T11157] The buggy address is located 1840 bytes inside of [ 219.788173][T11157] freed 1856-byte region [ffff88802956c5c0, ffff88802956cd00) [ 219.802158][T11157] [ 219.804486][T11157] The buggy address belongs to the physical page: [ 219.810898][T11157] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802956c5c0 pfn:0x29568 [ 219.820976][T11157] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 219.829476][T11157] memcg:ffff888034c29601 [ 219.833718][T11157] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 219.841273][T11157] page_type: f5(slab) [ 219.845277][T11157] raw: 00fff00000000040 ffff888143aa5a00 ffffea0000d4ee00 0000000000000002 [ 219.853863][T11157] raw: ffff88802956c5c0 0000000000100009 00000000f5000000 ffff888034c29601 [ 219.862806][T11157] head: 00fff00000000040 ffff888143aa5a00 ffffea0000d4ee00 0000000000000002 [ 219.871579][T11157] head: ffff88802956c5c0 0000000000100009 00000000f5000000 ffff888034c29601 [ 219.880272][T11157] head: 00fff00000000003 ffffea0000a55a01 ffffffffffffffff 0000000000000000 [ 219.889038][T11157] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 219.897705][T11157] page dumped because: kasan: bad access detected [ 219.904132][T11157] page_owner tracks the page as allocated [ 219.909846][T11157] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 84395178856, free_ts 84379114063 [ 219.931222][T11157] post_alloc_hook+0x1f4/0x240 [ 219.936164][T11157] get_page_from_freelist+0x365c/0x37a0 [ 219.941730][T11157] __alloc_frozen_pages_noprof+0x292/0x710 [ 219.947540][T11157] alloc_pages_mpol+0x311/0x660 [ 219.952407][T11157] allocate_slab+0x8f/0x3a0 [ 219.956913][T11157] ___slab_alloc+0xc27/0x14a0 [ 219.961590][T11157] __slab_alloc+0x58/0xa0 [ 219.965920][T11157] kmem_cache_alloc_noprof+0x268/0x380 [ 219.971407][T11157] sk_prot_alloc+0x58/0x210 [ 219.975914][T11157] sk_alloc+0x3e/0x370 [ 219.979989][T11157] inet_create+0x648/0xea0 [ 219.984428][T11157] __sock_create+0x4c0/0xa30 [ 219.989030][T11157] __sys_socket+0x150/0x3c0 [ 219.993547][T11157] __x64_sys_socket+0x7a/0x90 [ 219.998243][T11157] do_syscall_64+0xf3/0x230 [ 220.002754][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.008655][T11157] page last free pid 1138 tgid 1138 stack trace: [ 220.014976][T11157] free_frozen_pages+0xe0d/0x10e0 [ 220.020010][T11157] __slab_free+0x2c2/0x380 [ 220.024433][T11157] qlist_free_all+0x9a/0x140 [ 220.029029][T11157] kasan_quarantine_reduce+0x14f/0x170 [ 220.034493][T11157] __kasan_slab_alloc+0x23/0x80 [ 220.039350][T11157] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 220.045259][T11157] __alloc_skb+0x1c3/0x440 [ 220.049680][T11157] nl80211_send_ibss_bssid+0x92/0x470 [ 220.055156][T11157] __cfg80211_ibss_joined+0x355/0x450 [ 220.060543][T11157] cfg80211_process_wdev_events+0x3af/0x510 [ 220.066537][T11157] cfg80211_process_rdev_events+0xac/0x110 [ 220.072380][T11157] cfg80211_event_work+0x2c/0x60 [ 220.077621][T11157] process_scheduled_works+0xabe/0x18e0 [ 220.083195][T11157] worker_thread+0x870/0xd30 [ 220.087827][T11157] kthread+0x7a9/0x920 [ 220.091919][T11157] ret_from_fork+0x4b/0x80 [ 220.096356][T11157] [ 220.098043][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.098760][T11157] Memory state around the buggy address: [ 220.098776][T11157] ffff88802956cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.119357][T11157] ffff88802956cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.127529][T11157] >ffff88802956cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.135598][T11157] ^ [ 220.143423][T11157] ffff88802956cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.151583][T11157] ffff88802956cd80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.159669][T11157] ================================================================== [ 220.168993][T11157] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 220.176217][T11157] CPU: 0 UID: 0 PID: 11157 Comm: syz.2.1457 Not tainted 6.14.0-rc6-syzkaller-01313-g23c9ff659140 #0 [ 220.186993][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.197061][T11157] Call Trace: [ 220.200347][T11157] [ 220.203295][T11157] dump_stack_lvl+0x241/0x360 [ 220.207989][T11157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.213207][T11157] ? __pfx__printk+0x10/0x10 [ 220.217811][T11157] ? vscnprintf+0x5d/0x90 [ 220.222332][T11157] panic+0x349/0x880 [ 220.226249][T11157] ? check_panic_on_warn+0x21/0xb0 [ 220.231399][T11157] ? __pfx_panic+0x10/0x10 [ 220.235835][T11157] ? mark_lock+0x9a/0x360 [ 220.240264][T11157] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 220.246177][T11157] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 220.252083][T11157] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 220.258603][T11157] ? print_report+0x519/0x5b0 [ 220.263315][T11157] check_panic_on_warn+0x86/0xb0 [ 220.268282][T11157] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 220.274280][T11157] end_report+0x77/0x160 [ 220.278542][T11157] kasan_report+0x154/0x180 [ 220.283062][T11157] ? udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 220.289060][T11157] udp_tunnel_update_gro_lookup+0xfe/0x2c0 [ 220.294884][T11157] tipc_udp_enable+0xf08/0x16f0 [ 220.299842][T11157] ? __pfx_tipc_udp_enable+0x10/0x10 [ 220.305151][T11157] ? kasan_save_track+0x51/0x80 [ 220.310011][T11157] ? kasan_save_track+0x3f/0x80 [ 220.314871][T11157] ? __kasan_kmalloc+0x98/0xb0 [ 220.319665][T11157] ? __pfx_tipc_udp_recv+0x10/0x10 [ 220.324795][T11157] ? __kasan_kmalloc+0x98/0xb0 [ 220.329569][T11157] ? __kmalloc_cache_noprof+0x243/0x390 [ 220.335136][T11157] ? __tipc_nl_bearer_enable+0xafb/0x1420 [ 220.340870][T11157] __tipc_nl_bearer_enable+0xbd2/0x1420 [ 220.346454][T11157] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 220.352561][T11157] ? __pfx___mutex_lock+0x10/0x10 [ 220.357633][T11157] ? __nla_parse+0x40/0x60 [ 220.362150][T11157] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 220.368507][T11157] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 220.374964][T11157] tipc_nl_bearer_enable+0x22/0x40 [ 220.380099][T11157] genl_rcv_msg+0xb1f/0xec0 [ 220.384618][T11157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.389673][T11157] ? __pfx_lock_acquire+0x10/0x10 [ 220.394725][T11157] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 220.400551][T11157] ? __pfx___might_resched+0x10/0x10 [ 220.405857][T11157] netlink_rcv_skb+0x206/0x480 [ 220.410646][T11157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.415680][T11157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.420990][T11157] genl_rcv+0x28/0x40 [ 220.424982][T11157] netlink_unicast+0x7f6/0x990 [ 220.429762][T11157] ? __pfx_netlink_unicast+0x10/0x10 [ 220.435061][T11157] ? __virt_addr_valid+0x45f/0x530 [ 220.440182][T11157] ? __phys_addr_symbol+0x2f/0x70 [ 220.445211][T11157] ? __check_object_size+0x47a/0x730 [ 220.450510][T11157] netlink_sendmsg+0x8de/0xcb0 [ 220.455299][T11157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.460604][T11157] ? aa_sock_msg_perm+0x91/0x160 [ 220.465557][T11157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.470858][T11157] __sock_sendmsg+0x221/0x270 [ 220.475549][T11157] ____sys_sendmsg+0x53a/0x860 [ 220.480329][T11157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.485622][T11157] ? __fget_files+0x2a/0x410 [ 220.490232][T11157] ? __fget_files+0x2a/0x410 [ 220.494997][T11157] __sys_sendmsg+0x269/0x350 [ 220.499628][T11157] ? __pfx_futex_wake+0x10/0x10 [ 220.504509][T11157] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.509661][T11157] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.516017][T11157] ? do_syscall_64+0x100/0x230 [ 220.520821][T11157] ? do_syscall_64+0xb6/0x230 [ 220.525545][T11157] do_syscall_64+0xf3/0x230 [ 220.530080][T11157] ? clear_bhb_loop+0x35/0x90 [ 220.534779][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.540692][T11157] RIP: 0033:0x7fbb8f58d169 [ 220.545113][T11157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.564765][T11157] RSP: 002b:00007fbb9049b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.573201][T11157] RAX: ffffffffffffffda RBX: 00007fbb8f7a5fa0 RCX: 00007fbb8f58d169 [ 220.581201][T11157] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 000000000000000d [ 220.589182][T11157] RBP: 00007fbb8f60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.597174][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.605159][T11157] R13: 0000000000000000 R14: 00007fbb8f7a5fa0 R15: 00007fff4aba8e08 [ 220.613164][T11157] [ 220.616576][T11157] Kernel Offset: disabled [ 220.620907][T11157] Rebooting in 86400 seconds..