last executing test programs: 6.951617729s ago: executing program 0 (id=11635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) unshare(0x20000400) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r8, 0x0, 0xffffffff000) r9 = socket$inet6(0xa, 0x802, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r10, 0xfff) accept(r10, 0xfffffffffffffffd, 0x0) connect$inet6(r9, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r11, @ANYBLOB="15450100038000002400d48e00a90000060401000000197cbf3c4653842f2a3a3d6519fad033fc9edd600104581a4c534722ba50c8788ad9c4d7f2e82543ba22668c6fef5e184c80820b5f81ae89bae1b31b5824eb020086f3b4debb150c286458d74a1a43259fd28c5626097a5243ecb47ba91f95326b1759b1d494a0221a4971f36c20dc4a7d687a9a3537ecf3114ebe7755cb34eade34ded22f4a07d9b8", @ANYRES32=r2], 0x54}}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010800000000ffffffff00000000", @ANYRES32=r0, @ANYBLOB="00feffff0397965c1c002b800a0008"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 5.92940255s ago: executing program 0 (id=11644): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x1, 0xfffff010}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) 5.28638038s ago: executing program 0 (id=11657): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f0000000340)=0x78) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200908600000180c200000008004500001c00000000001190780800001ce0000001000017c10008"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x6}, &(0x7f0000000300)={0x77359400}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r5, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006ffdd00"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x78492000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xed408ab34a679903, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x2}}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x3, 0xa}]}, {0x0, [0x0, 0xc2, 0x61, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000c00)=""/116, 0x54, 0x74, 0x1, 0xf, 0x10000, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x4, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="00751f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x240, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x20c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x268}, 0x1, 0x0, 0x0, 0x80000}, 0x4040000) 4.370902516s ago: executing program 0 (id=11661): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @rand_addr=0x64010101}], 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r9 = epoll_create(0x3ff) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)) 3.561482791s ago: executing program 4 (id=11668): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000010185100000070080", @ANYRESOCT, @ANYRES8], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x4d, 0x0, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce987", 0x0, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.490131324s ago: executing program 2 (id=11670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) unshare(0x20000400) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, r8, 0x0, 0xffffffff000) r9 = socket$inet6(0xa, 0x802, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r10, 0xfff) accept(r10, 0xfffffffffffffffd, 0x0) connect$inet6(r9, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r11, @ANYBLOB="15450100038000002400d48e00a90000060401000000197cbf3c4653842f2a3a3d6519fad033fc9edd600104581a4c534722ba50c8788ad9c4d7f2e82543ba22668c6fef5e184c80820b5f81ae89bae1b31b5824eb020086f3b4debb150c286458d74a1a43259fd28c5626097a5243ecb47ba91f95326b1759b1d494a0221a4971f36c20dc4a7d687a9a3537ecf3114ebe7755cb34eade34ded22f4a07d9b8", @ANYRES32=r2], 0x54}}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010800000000ffffffff00000000", @ANYRES32=r0, @ANYBLOB="00feffff0397965c1c002b800a0008"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 3.260629713s ago: executing program 3 (id=11671): pipe(&(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f000000140000000400000012975b200089"], 0x20) 3.014674847s ago: executing program 4 (id=11673): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a8014"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r1], 0x48) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.952196479s ago: executing program 0 (id=11674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40008, @void, @value}, 0x94) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7) close(0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, 0x1c, 0x0}}], 0x1, 0x10) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x98a, 0x1, "c2"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000300), 0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000000)=0x8040801, 0x4) 2.902673087s ago: executing program 3 (id=11676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000006c0)=ANY=[], 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r4, 0x2000000, 0x1d, 0xfffffffffffffcbf, &(0x7f0000000440)="13435cd378b76a90bd300500dd0501d66fa9d9063e99ff1ec42f5a00", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x1d, &(0x7f00000008c0)=0x2, 0x4) close(0x4) 2.856686359s ago: executing program 4 (id=11677): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, 0x0, 0x0, {0x0, 0xff}}, 0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "7b8bdfd668e040b5", "89e73c8e9aa7e7aa844ee902749b141eb57bda9660b3563988c3ddb6cb7405a5", "e01bfca4", "b914d9d2ad0d05dc"}, 0x38) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.610709853s ago: executing program 1 (id=11678): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0xba01}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x8, 0xfff1}, {0xfff3, 0x2}, {0x9, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r11 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000229bd7000fedbdf250400000030000180080003000000000014000200766972745f776966693000000000000008000100", @ANYRES32=r10, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000080) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="5dd0f16d1bff5120aebe4b9c74ba7d76e6d1f910e784b5384f13dc8199704791571b44a1f4fccc032141710084cb9da910a71c4ebee48d6da44123062dc957a34984861f1acbd800f62c41335698fdb2b25c95a01844d028012f31e1f904b1f5e0ceed9e7a6a5915e268ae919e3d06", 0x6f}, {&(0x7f00000002c0)="2b9c161c4ee31d283af2af03592d7f65b3ccfc91a6014291f0c5b62e39f2cadb1177a32d012057d570142deebba400149208f0c64ed3cf697bc94320bafc0c3ba194a0d019cbb30f5be2c0a196cb4aa84ade11087cea2a698b1ac618af02ee02be6399d9c701ff55", 0x68}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x9, [{@remote, 0xa}]}, @generic={0xe, 0xb, "562d048b811cf4b3b7"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x1, [{@empty, 0xb12}]}, @ssrr={0x89, 0x17, 0x24, [@loopback, @empty, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x7f, [@local]}]}}}, @ip_ttl={{0x14}}], 0xf8}}, {{&(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001680)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="ade67d9abd86ababaee6038dfebbbb1789bc075310e59d805be0c978fec6ae6f49158cd361f214c73f69062b7e2c63fba3d62f5cc618bfec9593f14c0381d83a", 0x40}, {&(0x7f0000001500)="7446f979a7a54048a0f5db45ee1590f0d7a4248933e5b39033af2b", 0x1b}, {&(0x7f0000001540)="cc8030fb4c20aa981c456b0dfa4f565e8e3ea737c06522c3bb58c8cc7f9a6560d1513efb7c808f726f9f4009a018b0610bed13ea200db515c27152f13d68cff75b9af1e3bed25921a22ea81d057ba8c4335baf2f0d388dfca103f875d0f1418914a477a28fd9e054551e9b803c1ad80d2bc18ce473ff142ef46d2456ccc6d14ea540d0615a3b7c9aa0366fc95dae46511b59cb6bf4c0f601adae0453d2b9254f0058a6d195de5237fb91560585cfea663ce693e538c12464511f4bb32ae50ae936", 0xc1}, {&(0x7f0000001640)="c2d28e91d8bf3fff0a36", 0xa}], 0x5, &(0x7f0000001700)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @local}}}], 0x90}}, {{&(0x7f00000017c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001800)="bc0aa3946e", 0x5}], 0x1, &(0x7f0000001880)=[@ip_retopts={{0xf4, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x97, [@broadcast, @remote, @multicast2, @multicast2, @empty, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @cipso={0x86, 0x32, 0x3, [{0x6, 0xf, "470bedeb605558fecb3db3a2c2"}, {0x0, 0x5, "e36cf2"}, {0x5, 0x4, "935d"}, {0x7, 0x2}, {0x2, 0x10, "ddb86d677edba351e48ec8edd920"}, {0x6, 0x2}]}, @ssrr={0x89, 0x13, 0x8d, [@empty, @broadcast, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x41, 0x3, 0x5, [{@multicast1, 0x2}, {@multicast1, 0xed8}, {@broadcast, 0x80}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x91a}, {@empty, 0xe7}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0xcd8}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @cipso={0x86, 0x1e, 0x3, [{0x6, 0xd, "4adb6c554cde3d0d851634"}, {0x7, 0x7, "bca2269924"}, {0x2, 0x4, "41b9"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x218a5a78}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}], 0x188}}], 0x3, 0x4000000) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x2}}, 0x18) 2.516331167s ago: executing program 2 (id=11679): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000010185100000070080", @ANYRESOCT, @ANYRES8], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x4d, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce987", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x14, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.290596123s ago: executing program 2 (id=11680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000006c0)=ANY=[], 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r4, 0x2000000, 0x1d, 0xfffffffffffffcbf, &(0x7f0000000440)="13435cd378b76a90bd300500dd0501d66fa9d9063e99ff1ec42f5a00", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x1d, &(0x7f00000008c0)=0x2, 0x4) close(0x4) 2.255857075s ago: executing program 1 (id=11681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'nicvf0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000140)="474d15221515d13a6da17e949366c8e056600100cf1f34d5", 0x18}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, 0x0, 0x44480, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @any, 0x3b}, 0xa) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xa00) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9b30e07600380000100ffef86dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.010392431s ago: executing program 1 (id=11682): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x30}, 0x1, 0xba01}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x8, 0xfff1}, {0xfff3, 0x2}, {0x9, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r11 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000229bd7000fedbdf250400000030000180080003000000000014000200766972745f776966693000000000000008000100", @ANYRES32=r10, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000080) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="5dd0f16d1bff5120aebe4b9c74ba7d76e6d1f910e784b5384f13dc8199704791571b44a1f4fccc032141710084cb9da910a71c4ebee48d6da44123062dc957a34984861f1acbd800f62c41335698fdb2b25c95a01844d028012f31e1f904b1f5e0ceed9e7a6a5915e268ae919e3d06", 0x6f}, {&(0x7f00000002c0)="2b9c161c4ee31d283af2af03592d7f65b3ccfc91a6014291f0c5b62e39f2cadb1177a32d012057d570142deebba400149208f0c64ed3cf697bc94320bafc0c3ba194a0d019cbb30f5be2c0a196cb4aa84ade11087cea2a698b1ac618af02ee02be6399d9c701ff55", 0x68}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x9, [{@remote, 0xa}]}, @generic={0xe, 0xb, "562d048b811cf4b3b7"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x1, [{@empty, 0xb12}]}, @ssrr={0x89, 0x17, 0x24, [@loopback, @empty, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x7f, [@local]}]}}}, @ip_ttl={{0x14}}], 0xf8}}, {{&(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001680)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="ade67d9abd86ababaee6038dfebbbb1789bc075310e59d805be0c978fec6ae6f49158cd361f214c73f69062b7e2c63fba3d62f5cc618bfec9593f14c0381d83a", 0x40}, {&(0x7f0000001500)="7446f979a7a54048a0f5db45ee1590f0d7a4248933e5b39033af2b", 0x1b}, {&(0x7f0000001540)="cc8030fb4c20aa981c456b0dfa4f565e8e3ea737c06522c3bb58c8cc7f9a6560d1513efb7c808f726f9f4009a018b0610bed13ea200db515c27152f13d68cff75b9af1e3bed25921a22ea81d057ba8c4335baf2f0d388dfca103f875d0f1418914a477a28fd9e054551e9b803c1ad80d2bc18ce473ff142ef46d2456ccc6d14ea540d0615a3b7c9aa0366fc95dae46511b59cb6bf4c0f601adae0453d2b9254f0058a6d195de5237fb91560585cfea663ce693e538c12464511f4bb32ae50ae936", 0xc1}, {&(0x7f0000001640)="c2d28e91d8bf3fff0a36", 0xa}], 0x5, &(0x7f0000001700)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @local}}}], 0x90}}, {{&(0x7f00000017c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001800)="bc0aa3946e", 0x5}], 0x1, &(0x7f0000001880)=[@ip_retopts={{0xf4, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x97, [@broadcast, @remote, @multicast2, @multicast2, @empty, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @cipso={0x86, 0x32, 0x3, [{0x6, 0xf, "470bedeb605558fecb3db3a2c2"}, {0x0, 0x5, "e36cf2"}, {0x5, 0x4, "935d"}, {0x7, 0x2}, {0x2, 0x10, "ddb86d677edba351e48ec8edd920"}, {0x6, 0x2}]}, @ssrr={0x89, 0x13, 0x8d, [@empty, @broadcast, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x41, 0x3, 0x5, [{@multicast1, 0x2}, {@multicast1, 0xed8}, {@broadcast, 0x80}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x91a}, {@empty, 0xe7}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0xcd8}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @cipso={0x86, 0x1e, 0x3, [{0x6, 0xd, "4adb6c554cde3d0d851634"}, {0x7, 0x7, "bca2269924"}, {0x2, 0x4, "41b9"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x218a5a78}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}], 0x188}}], 0x3, 0x4000000) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x2}}, 0x18) 1.891029838s ago: executing program 0 (id=11683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000006c0)=ANY=[], 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r4, 0x2000000, 0x1d, 0xfffffffffffffcbf, &(0x7f0000000440)="13435cd378b76a90bd300500dd0501d66fa9d9063e99ff1ec42f5a00", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x1d, &(0x7f00000008c0)=0x2, 0x4) close(0x4) 1.890553731s ago: executing program 4 (id=11684): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB, @ANYRES32, @ANYBLOB="000000000000010185100000070080", @ANYRESOCT, @ANYRES8], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x4d, 0x0, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce987", 0x0, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.761557932s ago: executing program 1 (id=11685): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28030604eaff7f"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x880) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/38, 0x26}}, {{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1, &(0x7f0000000200)=""/222, 0xde}, 0x6}, {{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000001600)=""/90, 0x5a}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f00000004c0)=""/113, 0x71}], 0x4}, 0xa}, {{&(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000740)=""/27, 0x1b}, 0xa10}, {{&(0x7f0000000980)=@qipcrtr, 0x80, &(0x7f0000001140)=[{&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b80)=""/251, 0xfb}, {&(0x7f0000000c80)=""/179, 0xb3}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000000e40)=""/130, 0x82}, {&(0x7f0000000f00)=""/150, 0x96}, {&(0x7f0000000fc0)=""/244, 0xf4}, {&(0x7f00000010c0)=""/119, 0x77}, {&(0x7f0000000900)=""/25, 0x19}], 0xa, &(0x7f0000001200)=""/161, 0xa1}, 0x40}], 0x5, 0x2, 0x0) 1.681937922s ago: executing program 4 (id=11686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000006c0)=ANY=[], 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r4, 0x2000000, 0x1d, 0xfffffffffffffcbf, &(0x7f0000000440)="13435cd378b76a90bd300500dd0501d66fa9d9063e99ff1ec42f5a00", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x1d, &(0x7f00000008c0)=0x2, 0x4) close(0x4) 1.59990151s ago: executing program 1 (id=11687): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a8014"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r1], 0x48) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.588283435s ago: executing program 3 (id=11688): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 1.336070475s ago: executing program 2 (id=11689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) unshare(0x20000400) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = socket$inet6(0xa, 0x802, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r10, 0xfff) accept(r10, 0xfffffffffffffffd, 0x0) connect$inet6(r9, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r11, @ANYBLOB="15450100038000002400d48e00a90000060401000000197cbf3c4653842f2a3a3d6519fad033fc9edd600104581a4c534722ba50c8788ad9c4d7f2e82543ba22668c6fef5e184c80820b5f81ae89bae1b31b5824eb020086f3b4debb150c286458d74a1a43259fd28c5626097a5243ecb47ba91f95326b1759b1d494a0221a4971f36c20dc4a7d687a9a3537ecf3114ebe7755cb34eade34ded22f4a07d9b8", @ANYRES32=r2], 0x54}}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010800000000ffffffff00000000", @ANYRES32=r0, @ANYBLOB="00feffff0397965c1c002b800a0008"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 1.237090122s ago: executing program 3 (id=11690): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 782.615554ms ago: executing program 1 (id=11691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000006c0)=ANY=[], 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r4, 0x2000000, 0x1d, 0xfffffffffffffcbf, &(0x7f0000000440)="13435cd378b76a90bd300500dd0501d66fa9d9063e99ff1ec42f5a00", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f000006a000/0x2000)=nil, 0x2000, 0xd, 0x4000010, 0xffffffffffffffff, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x1d, &(0x7f00000008c0)=0x2, 0x4) close(0x4) 775.033925ms ago: executing program 3 (id=11692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'nicvf0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000140)="474d15221515d13a6da17e949366c8e056600100cf1f34d5", 0x18}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, 0x0, 0x44480, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @any, 0x3b}, 0xa) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xa00) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9b30e07600380000100ffef86dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 656.394509ms ago: executing program 4 (id=11693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) unshare(0x20000400) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, 0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) r10 = socket$inet6(0xa, 0x802, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r11, 0xfff) accept(r11, 0xfffffffffffffffd, 0x0) connect$inet6(r10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESOCT, @ANYBLOB="15450100038000002400d48e00a90000060401000000197cbf3c4653842f2a3a3d6519fad033fc9edd600104581a4c534722ba50c8788ad9c4d7f2e82543ba22668c6fef5e184c80820b5f81ae89bae1b31b5824eb020086f3b4debb150c286458d74a1a43259fd28c5626097a5243ecb47ba91f95326b1759b1d494a0221a4971f36c20dc4a7d687a9a3537ecf3114ebe7755cb34eade34ded22f4a07d9b8", @ANYRES32=r2], 0x54}}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010800000000ffffffff00000000", @ANYRES32=r0, @ANYBLOB="00feffff0397965c1c002b800a0008"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) 248.976394ms ago: executing program 2 (id=11694): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000010185100000070080", @ANYRESOCT, @ANYRES8], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x4d, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce987", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 25.659359ms ago: executing program 3 (id=11695): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x30}, 0x1, 0xba01}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x8, 0xfff1}, {0xfff3, 0x2}, {0x9, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r11 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000229bd7000fedbdf250400000030000180080003000000000014000200766972745f776966693000000000000008000100", @ANYRES32=r10, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000080) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="5dd0f16d1bff5120aebe4b9c74ba7d76e6d1f910e784b5384f13dc8199704791571b44a1f4fccc032141710084cb9da910a71c4ebee48d6da44123062dc957a34984861f1acbd800f62c41335698fdb2b25c95a01844d028012f31e1f904b1f5e0ceed9e7a6a5915e268ae919e3d06", 0x6f}, {&(0x7f00000002c0)="2b9c161c4ee31d283af2af03592d7f65b3ccfc91a6014291f0c5b62e39f2cadb1177a32d012057d570142deebba400149208f0c64ed3cf697bc94320bafc0c3ba194a0d019cbb30f5be2c0a196cb4aa84ade11087cea2a698b1ac618af02ee02be6399d9c701ff55", 0x68}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x9, [{@remote, 0xa}]}, @generic={0xe, 0xb, "562d048b811cf4b3b7"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x9, 0x1, 0x1, [{@empty, 0xb12}]}, @ssrr={0x89, 0x17, 0x24, [@loopback, @empty, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x7f, [@local]}]}}}, @ip_ttl={{0x14}}], 0xf8}}, {{&(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001680)=[{&(0x7f00000004c0)="1f4bf87037b79a681146232949669b16b8c23b270b21136eb58711eceab098bbeb22bb562ae84dec49f037f3115d83b37a9758936e48a0115a51ff6ce19928035c7cbc509d6df6a27910548a9637df495fb9735f0c21b09e668c8a4abf2508b674a30743aa57339f9d68b9bb12770fc8c42e2bc037ea861ba822abd844ed5139bf2a46e4579c14adde5626ba96d1cb80a7eb71da310f1e46d5bd746dac3072829e896504e7aa7d06f7e203c6ba4649fe97358e1077044f858fd17720309ee0a13757623ff49030a0f7f9a091d5fce56d7202033ab847634ac55b79ba40e19e455a3354a8feb522f783d0d8552a84e06fbb3478b99002f400321009ad80fe475a03647ee988b4a725a457727c73cb5875224e850da93f2580cbeb61dc52f4c267a2733c4411897125962606efc08e54a06b4aaaa8f3a867f46b54f132daf1acf11fe79eeea75827a17591bd455cad8247d6ae5c5635700e9b8e6f3d161a387be74759091de6388cf8898ce5d1df8dc092e0888b64232c9a644ca7795f87afa743756582987b9948e981c4bb19d916984730fdb350131d4f90dabfcaf53ebab4db6b25f8fa6070a283915d59e7a9a6333351e7711cc77dfc800a113c990593a81dec67474d1930f752120cc53804fdfba2f565306fd1453b2c0d72aa8c9347c3cd83fbed7feeca98811836beb0ac7a0fb26d551e159d11d7fbf33b6a44e37aa0b7d412627c45111fe8b4ea71d7b5768334a089c31139091bbdefdd18f0946e2395025cb3aecdd6a0ee5b042ceeb103b50e102e757706eaa206cb1d98986657137d1aad0944b5c38a136a938190ae3e37e212b9cc49746fbac960aea939db8a29a293cf1f930dd0d920e1b198867db64f34a98280153ef9a7427f9b78d0817849abb49cdfb54c7119e355839a8bbc0b6322dacdf9f1e01caaa33b80309cb20119f4c4ed4d50bd09c0c9a12e49602c1e041495df84051c110f08101ba7180cb15da7d6592a1c74fb1d9ae8c3cd4e10155c6c4c17287f389f4c9f75bde509255636bacc3c4a880ce5f21a83342d415d5fc86bb9f5d61f8f0c116d3f8da46ae01ffcae3bd25905c01a17cedef701248b2d7938ed6322d9819496aeb92b0aa1769617bb8b03c8b8a169a912b7906eeeed79db969805966bf63120654ad5be6dcf4f49104164d6732d28e125d6a372c31c47c6cfb292679a46a9c3bd247340028ef6983a4791a254fd1c945e20d22a1c0434ff4bf118ddc8d33250a50c438deb7b3f1ef1a7e6c7919eb01e3e68868a395fd618b5f55e44d25eb466843846b6747d68fc830a79bca14908be2034f8c68d4a3549f0a3214383c1cca44e38de446499a8054b6d9efc6b3ea80a9894f6ed87a6cc443d2f62bd4e480e5f6941622355feb858d1d2cfb0a4188189cd6430d7bf1fbd9d67b7808c5da65b76ccd94e296bfb123a3391b1ef378f3290a2ca98754d1114524e95adef2182bc9b22e01a9007b8334a65a034b03c0978e7a8bb7f640e9e71380d20bc7399fddd96b785611c0236b1465f92868584358fb3399c09856be8df01b6655f7a74850423d56040e7563dbdff9be1140eacab659278a7954bf678112a39c40aa2dc5d18d9843b39c3be8a28c902a7a4c7aa9f7321acaa39313fee314d2e1f1d5dcd7c40b7ea5b011ff19172533362ffa3fa95e9c8d017b9d665b3b44a0f3cd6c2301004d11ecedd31a21773d7dcbfc3b551549aed8600d165c21be8ddafcdeeb33b65e5eb8a340dc76ffff078f8d90f180ac061f2b4eddbeedf6062da339fccc091c0c324c54e94cd89c039b2615505d04a67662417fb23ae56890027d01215b60b489f3ba1be72b081ff6ebb29a8c0c9631ca05683e5ad69a01d14a0977dc8b4e9dc55175c66a1888a64d52c05496a447f7ff0f71aebb2a27a61fe1c005468a5159147fdf2c74173668be48e3c89bf653a8f9dd302cc62657283b7f6edfe04ed8f4141144ca4b236c18c8fcdb63d8dc34445072b9014aa28b03766bf62073d10bedbc0d96c8169a6018e37418f92f6918bf55e668d8dcdc43c39574206c5ca9aeaa359a6ec4457bb645b4cef92a0de2bc04ca462f1f1f8f936d617bfc9f59c8c8884a53ffac98ebce00139da8495958052ec84245310bf47264518a56e571ee176bf26e62afba4506b485ce5e5ac5b6e0a997ee358be152117be0a295682988991160cb45df6408848ff8f4b956f0f81f4b45338cf97abf9574e43abeb8b660e12727b0997e60803675975e673662e6ccc6a65237c8d3d60a848023ce485d6c8ebdbf6bcd168151d9e8d9c32adb1439f354721e9c88a3c8e847ade3324ea79e0e8f62abfb31d5c6a1ea6ce1c9622ae40f60729ead0cb08c1d433c59cee72b027c122dcbfb1f230ac5e617ec551e88dc2464d8ef9767606d48fe18feea7ef0c6a168f1933c6ce742402fa38f2241ad377455035d14e818f4d33768686b49c43ba89d925299e2bb4b7845fa019676ebd472bfca651e933fbcdaa114f67faa2f362fc92a36e7f5430b0d899994b086efb18766087f7fde4d1090320936b21bc6f8b7e0e6b9db236efb7398a96e6e91938eadd2c0492b52e5b02a331dc3e1984234be6da9fdd6cdd5e1af947c73c85faa371cf746430f773d4e863c934a8854027c02d8f8e2b71105ac721e1fb6492ea56203051000db8f5176ba79eb56c44c3684fe8d482c3a83a3bbe8df23507dbe4b3dcfc884dada56186fd873246669a5ed6971d4c1f855172539326a960cbe658b730a6b119f7ab6395ab0e5c7e7e19ba8ea2538d4b81c1b7e96c60746fcc78665447fab3621c002933e7a7b9f025f0290763b98765817501b851dac3433cc3416088009105b63d485365efeb1e0221a57e7b22ebd513d252dafd5be253defaf0337e585af830fb4d196cea30db9f10d208e5bcd007733b55a03665500f250c00e72fd723705c8fab30268e504a5fdc85a6c06f826cfe5c43ea3b03dc0b61d3ae0475376afef3ee2b25856011ec3594a4db1a30f55a8f2b9cc33f30c0ae1955e0ae3159ac73e7e9863271862b0b51e72a73e8373c065d03f87d5f6b36ea4adc54455d033b0d525a5334920cd19e219242f3c64e7892e494ae64ee56fd18baccc9cba20282709b138fd2fbdb29e64451bd21a30b9c6eeb5fc0813439aa8f2c305d59c4ea7577130bfd466ee63ea793b6f1463d3e247316395d93518d76d686479f6afe6be272354c7ec28d85a06031af746822aadd50b6a96ef5b2c76db070ebae67c5c9b1e54c89d92769deead1face075b4a0d718ebfff70711c66222300bae44a4e35f1a155f5cba3d4adecd6c4c24fbb7008fd4c0f884462b5852e69b1cd99cdd1bc15d356325810954d52440503c6100108dad87e471edcfd1efa5cf4a48fbc527ab7ec5873fda5c75fc32cd0d5c46c2c3fc44a261dd93d6bfc1c12f46b1f1551153bcfbb8b5ffa2091477503ceff9f2b38a3197930b96e2dd9d30e241b36b3c23ab3a98a586996c8b88aa59efaf489f93290aee1ac6d56f4ddd68d782ea7dd51f40baa26e0772c29d3ee17d3f099ad42996d381f4d47bbd4611c4583786acd43c58bd21877c05a1b84d4dc71e51d37874b8b67c3a7a011e936e56b478a67a40fd4c4d4fb193f19030e45ecca2a7951bb521432a604734587dd4db74960234e55fe708e8fe9325719d657481429c14703d69a731656ad1d7e97f128990522d8bb020db48958dca951a0a4318a564c15efbd9229a6a90c556b78a0313ef63745685b010bd3cb618ac62efa9a6dc7ac757822812b28ad14330b176fe838d0bdf44450b021d9d14effccbc467cef7a11df84d4813a2bff769afdfd9ca949b1d374d696379607a5553fce3fc609a2c8f750e3b89442d4261ba8c78866a4fa7ea825e3a5a6789767dfdfdc20e82874a3a290158efb69ae1f5ed7975fbd39f42835f6b07da6bf937282dac7a6003dd8c56b301cbb587066c6dcafb1189d8ea93bb1c0390abb277b527a9cec121d29bd04ac0aafac43af34bc9a7352ae9e721c28843d3c30c9273ea44be22cc685e16d3aa7608c7a7186c7ec7d84e590addd8fb394c0b3e548d0c094193aa21ef823d80e6e44829952c45df84d8e70bf51141c39be11dea1a3deb37fd1763356499bff46528153daeac10b443d7ef1e951fa545211fbaa6ac4d720f451e8e1f7ed33aa888b2dfc429cc0aa1d340384fa26f84a8847e39b9aa8d76c830f0be85041a2ac10c1d47db16eb5de2681535dc99cbbad31854acb9aa5edb6d2cbe2088ab53779bfead565a8efcc9570a54bdcf933dc9494b9f3a5515db7f40d197f68dfd5c008f3c7612f54971ff04de1b0b39bb424590f782e6bd064e2c8cf5ca4673cbe3b889dc4aaf3cab89cd3e9a96f79c39f965864e2feffbb576990ace8c44741c67162b5d5c6d6a969e875865f1f44490b0859d808eb26184c89fe88469809b96c1fc3adeb1b0b3e4d0c7861a60271878a3fad3fb27d19466d4edd9d12509db5ab1b3f968b7964f3d44ae326c55954810d92fb2395a87fc36879aa3e9b575448316524159a14d145dedb2ece11cf80d2208739cd6147300af6261886c785a3292bb14e969e37a12dc44e8179d97b8389818098e4552a307ebd42813fb14881586309825aa7fd6d4dc6cd9aca06d7f97873ee0736b32f2516cac99ee46f710723752256a6733ec7278b89b66ba8177d05881e72db679ef766ea9ec4458cafef7aa556ed505f5ce6ff123908e378242dcee0b8b931c3a85099424f04b3c9858f61ec1439faf5f78cfa240589ee837f23047aba9a98ac86447c69fc5bf76027c54486e4cec50825a77e88b350da37f8b1a648165a756d2525c765c85ef3fd92158fb047445a4a612a5cf5a20a781064ff3b28c744c3d3c7aa2d1a13ee2e09f11fd9627bcda3832222f04a306527c281e70226c019b8d64df919169f704708b3ee78f5f895a812e3e083ce541e65143745f43d48ea0da87cd8440c77ce52f00cd2cd2481c7eb65a8051a3fc886bfbea231d253b75b945551683124e6c1ecb2e7cee7ac1e779364b071c2d674e7d2e7f46c2d1bbfab9e890fd96ffff80cc6769167bea7352e33afe54f651bc8c44698e9788b355288729b2bf68becc90cd4c681aee2055a77a40629503f66d8bfaafea57fc23d80a8f3ed9a49eab21913a26eec5ff9c582ad61f9dbdadb9c594a3ca714c37969dff347f374f50c605182ad7f9e346fe1d1b31f2060f0de6339b108627656b42508ac2758491d81c6864ef33c57a6c6ad8a7d1989aa70141690994e4d4d3a2be2bc53d68eaa3a6e7a48b9acc0cb3b5421ea6e04d4e18b47258e00164a7a3a79b8a33847252b294ed1acf130b6b2edf0107cde76870c70ad8fef9e93ab448edf6020a45c93e46c6e94e906221612eb623878cdf6a92797470c52b4d3bc33b9ee6ee5ebd8da94ba67e8eefbae588b1d98df6a5649d52a3d9dbe8071e642fa1ae83f4019835ee0630da89d08758e1942db95b7ad2f6f0878bc59879412abbff922d10c912bd32c3f1b0905bc2f1c05c9f4e594261c31b5c2d4736984bbb9ebf1e717375d15fff142c57a619ed6ec978e68d0563053a3da7308456934fbd1ac6c15279b0277c770fa332d68ec7a8ef2d742c95f03a21fe54441864f75d273605c208047232aa0cd27da117287f9751392c10fb1815cfc3529c322ca23f0a57172836a7c5fdb2af9a9f10f8482fda85f09ebc1fdfd82a950871ff1dc250295b6ed15b85540b23d313a8ac07d1da785ca1ef05b2ec4277fb6d5b79efa11c9a3fe1511235130a3", 0x1000}, {&(0x7f00000014c0)="ade67d9abd86ababaee6038dfebbbb1789bc075310e59d805be0c978fec6ae6f49158cd361f214c73f69062b7e2c63fba3d62f5cc618bfec9593f14c0381d83a", 0x40}, {&(0x7f0000001500)="7446f979a7a54048a0f5db45ee1590f0d7a4248933e5b39033af2b", 0x1b}, {&(0x7f0000001540)="cc8030fb4c20aa981c456b0dfa4f565e8e3ea737c06522c3bb58c8cc7f9a6560d1513efb7c808f726f9f4009a018b0610bed13ea200db515c27152f13d68cff75b9af1e3bed25921a22ea81d057ba8c4335baf2f0d388dfca103f875d0f1418914a477a28fd9e054551e9b803c1ad80d2bc18ce473ff142ef46d2456ccc6d14ea540d0615a3b7c9aa0366fc95dae46511b59cb6bf4c0f601adae0453d2b9254f0058a6d195de5237fb91560585cfea663ce693e538c12464511f4bb32ae50ae936", 0xc1}, {&(0x7f0000001640)="c2d28e91d8bf3fff0a36", 0xa}], 0x5, &(0x7f0000001700)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @local}}}], 0x90}}, {{&(0x7f00000017c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001800)="bc0aa3946e", 0x5}], 0x1, &(0x7f0000001880)=[@ip_retopts={{0xf4, 0x0, 0x7, {[@ssrr={0x89, 0x2b, 0x97, [@broadcast, @remote, @multicast2, @multicast2, @empty, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @cipso={0x86, 0x32, 0x3, [{0x6, 0xf, "470bedeb605558fecb3db3a2c2"}, {0x0, 0x5, "e36cf2"}, {0x5, 0x4, "935d"}, {0x7, 0x2}, {0x2, 0x10, "ddb86d677edba351e48ec8edd920"}, {0x6, 0x2}]}, @ssrr={0x89, 0x13, 0x8d, [@empty, @broadcast, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x41, 0x3, 0x5, [{@multicast1, 0x2}, {@multicast1, 0xed8}, {@broadcast, 0x80}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x91a}, {@empty, 0xe7}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0xcd8}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @cipso={0x86, 0x1e, 0x3, [{0x6, 0xd, "4adb6c554cde3d0d851634"}, {0x7, 0x7, "bca2269924"}, {0x2, 0x4, "41b9"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x218a5a78}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}], 0x188}}], 0x3, 0x4000000) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x2}}, 0x18) 0s ago: executing program 2 (id=11696): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_vlan\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8de4"}}, @common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@dev, @private, 0x0, 0x0, 'pimreg1\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x6}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_to_hsr\x00', 'batadv0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r1, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e000000040002800800", @ANYRES64=r2], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) kernel console output (not intermixed with test programs): 0] CPU: 0 UID: 0 PID: 10000 Comm: syz.2.10242 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1499.950048][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1499.950063][T10000] Call Trace: [ 1499.950072][T10000] [ 1499.950081][T10000] dump_stack_lvl+0x241/0x360 [ 1499.950139][T10000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1499.950169][T10000] ? __pfx__printk+0x10/0x10 [ 1499.950204][T10000] ? __pfx___might_resched+0x10/0x10 [ 1499.950236][T10000] should_fail_ex+0x424/0x570 [ 1499.950276][T10000] should_failslab+0xac/0x100 [ 1499.950308][T10000] __kmalloc_cache_noprof+0x73/0x370 [ 1499.950336][T10000] ? genl_start+0x1cb/0x6d0 [ 1499.950364][T10000] genl_start+0x1cb/0x6d0 [ 1499.950397][T10000] __netlink_dump_start+0x45c/0x790 [ 1499.950439][T10000] genl_rcv_msg+0x8a4/0xf00 [ 1499.950472][T10000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1499.950502][T10000] ? __dev_queue_xmit+0x1780/0x3f60 [ 1499.950532][T10000] ? __pfx_genl_start+0x10/0x10 [ 1499.950550][T10000] ? __pfx_genl_dumpit+0x10/0x10 [ 1499.950568][T10000] ? __pfx_genl_done+0x10/0x10 [ 1499.950606][T10000] ? __lock_acquire+0xad5/0xd80 [ 1499.950629][T10000] ? __pfx_ethnl_default_start+0x10/0x10 [ 1499.950658][T10000] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1499.950687][T10000] ? __pfx_ethnl_default_done+0x10/0x10 [ 1499.950736][T10000] netlink_rcv_skb+0x208/0x480 [ 1499.950767][T10000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1499.950792][T10000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1499.950848][T10000] ? netlink_deliver_tap+0x2e/0x1b0 [ 1499.950886][T10000] genl_rcv+0x28/0x40 [ 1499.950905][T10000] netlink_unicast+0x7f8/0x9a0 [ 1499.950943][T10000] ? __pfx_netlink_unicast+0x10/0x10 [ 1499.950973][T10000] ? skb_put+0x114/0x1f0 [ 1499.951011][T10000] netlink_sendmsg+0x8c3/0xcd0 [ 1499.951058][T10000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1499.951093][T10000] ? aa_sock_msg_perm+0x91/0x160 [ 1499.951130][T10000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1499.951158][T10000] __sock_sendmsg+0x221/0x270 [ 1499.951190][T10000] ____sys_sendmsg+0x523/0x860 [ 1499.951222][T10000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1499.951242][T10000] ? __fget_files+0x2a/0x420 [ 1499.951278][T10000] ? __fget_files+0x2a/0x420 [ 1499.951322][T10000] __sys_sendmsg+0x271/0x360 [ 1499.951350][T10000] ? __pfx___sys_sendmsg+0x10/0x10 [ 1499.951439][T10000] ? do_syscall_64+0xb6/0x230 [ 1499.951473][T10000] do_syscall_64+0xf3/0x230 [ 1499.951508][T10000] ? clear_bhb_loop+0x45/0xa0 [ 1499.951535][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.951557][T10000] RIP: 0033:0x7f6c2ef8d169 [ 1499.951577][T10000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.951595][T10000] RSP: 002b:00007f6c2fed0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1499.951618][T10000] RAX: ffffffffffffffda RBX: 00007f6c2f1a5fa0 RCX: 00007f6c2ef8d169 [ 1499.951635][T10000] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 1499.951649][T10000] RBP: 00007f6c2fed0090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.951662][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.951676][T10000] R13: 0000000000000000 R14: 00007f6c2f1a5fa0 R15: 00007ffd0b6afe28 [ 1499.951711][T10000] [ 1499.975826][T10002] No such timeout policy "syz0" [ 1500.642002][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10248'. [ 1501.517634][T10055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.118499][T10080] FAULT_INJECTION: forcing a failure. [ 1502.118499][T10080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.131999][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.2.10269 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1502.132031][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1502.132045][T10080] Call Trace: [ 1502.132055][T10080] [ 1502.132065][T10080] dump_stack_lvl+0x241/0x360 [ 1502.132103][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1502.132133][T10080] ? __pfx__printk+0x10/0x10 [ 1502.132175][T10080] should_fail_ex+0x424/0x570 [ 1502.132215][T10080] _copy_from_user+0x2d/0xb0 [ 1502.132246][T10080] move_addr_to_kernel+0x7f/0x170 [ 1502.132274][T10080] __sys_bind+0x12e/0x290 [ 1502.132306][T10080] ? __pfx___sys_bind+0x10/0x10 [ 1502.132363][T10080] __x64_sys_bind+0x7a/0x90 [ 1502.132393][T10080] do_syscall_64+0xf3/0x230 [ 1502.132421][T10080] ? clear_bhb_loop+0x45/0xa0 [ 1502.132447][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.132468][T10080] RIP: 0033:0x7f6c2ef8d169 [ 1502.132488][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.132507][T10080] RSP: 002b:00007f6c2fed0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1502.132529][T10080] RAX: ffffffffffffffda RBX: 00007f6c2f1a5fa0 RCX: 00007f6c2ef8d169 [ 1502.132554][T10080] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 1502.132568][T10080] RBP: 00007f6c2fed0090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.132582][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.132595][T10080] R13: 0000000000000000 R14: 00007f6c2f1a5fa0 R15: 00007ffd0b6afe28 [ 1502.132630][T10080] [ 1502.181302][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10270'. [ 1502.339414][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10270'. [ 1502.560874][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10273'. [ 1502.574693][T10100] netlink: 'syz.2.10275': attribute type 1 has an invalid length. [ 1502.583698][T10100] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1502.895266][T10115] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 1502.906993][T10115] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1502.943032][T10117] tipc: Cannot configure node identity twice [ 1502.969336][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1503.301094][T10133] FAULT_INJECTION: forcing a failure. [ 1503.301094][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.328066][T10133] CPU: 1 UID: 0 PID: 10133 Comm: syz.1.10287 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1503.328100][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1503.328115][T10133] Call Trace: [ 1503.328124][T10133] [ 1503.328134][T10133] dump_stack_lvl+0x241/0x360 [ 1503.328191][T10133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1503.328229][T10133] ? __pfx__printk+0x10/0x10 [ 1503.328264][T10133] ? __pfx___might_resched+0x10/0x10 [ 1503.328294][T10133] should_fail_ex+0x424/0x570 [ 1503.328334][T10133] should_failslab+0xac/0x100 [ 1503.328365][T10133] __kmalloc_noprof+0xdf/0x4d0 [ 1503.328393][T10133] ? ethnl_default_start+0x13e/0x570 [ 1503.328430][T10133] ethnl_default_start+0x13e/0x570 [ 1503.328469][T10133] genl_start+0x4dc/0x6d0 [ 1503.328503][T10133] __netlink_dump_start+0x45c/0x790 [ 1503.328545][T10133] genl_rcv_msg+0x8a4/0xf00 [ 1503.328578][T10133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1503.328598][T10133] ? stack_trace_save+0x11a/0x1d0 [ 1503.328631][T10133] ? __pfx_stack_trace_save+0x10/0x10 [ 1503.328661][T10133] ? __pfx_genl_start+0x10/0x10 [ 1503.328681][T10133] ? __pfx_genl_dumpit+0x10/0x10 [ 1503.328704][T10133] ? __pfx_genl_done+0x10/0x10 [ 1503.328742][T10133] ? __lock_acquire+0xad5/0xd80 [ 1503.328765][T10133] ? __pfx_ethnl_default_start+0x10/0x10 [ 1503.328792][T10133] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1503.328821][T10133] ? __pfx_ethnl_default_done+0x10/0x10 [ 1503.328868][T10133] netlink_rcv_skb+0x208/0x480 [ 1503.328897][T10133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1503.328921][T10133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1503.328976][T10133] ? netlink_deliver_tap+0x2e/0x1b0 [ 1503.329013][T10133] genl_rcv+0x28/0x40 [ 1503.329033][T10133] netlink_unicast+0x7f8/0x9a0 [ 1503.329071][T10133] ? __pfx_netlink_unicast+0x10/0x10 [ 1503.329101][T10133] ? skb_put+0x114/0x1f0 [ 1503.329138][T10133] netlink_sendmsg+0x8c3/0xcd0 [ 1503.329185][T10133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1503.329226][T10133] ? aa_sock_msg_perm+0x91/0x160 [ 1503.329264][T10133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1503.329291][T10133] __sock_sendmsg+0x221/0x270 [ 1503.329323][T10133] ____sys_sendmsg+0x523/0x860 [ 1503.329356][T10133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1503.329375][T10133] ? __fget_files+0x2a/0x420 [ 1503.329410][T10133] ? __fget_files+0x2a/0x420 [ 1503.329453][T10133] __sys_sendmsg+0x271/0x360 [ 1503.329481][T10133] ? __pfx___sys_sendmsg+0x10/0x10 [ 1503.329570][T10133] ? do_syscall_64+0xb6/0x230 [ 1503.329603][T10133] do_syscall_64+0xf3/0x230 [ 1503.329630][T10133] ? clear_bhb_loop+0x45/0xa0 [ 1503.329656][T10133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.329678][T10133] RIP: 0033:0x7fe8a9f8d169 [ 1503.329699][T10133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1503.329717][T10133] RSP: 002b:00007fe8aad9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1503.329741][T10133] RAX: ffffffffffffffda RBX: 00007fe8aa1a5fa0 RCX: 00007fe8a9f8d169 [ 1503.329758][T10133] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 1503.329773][T10133] RBP: 00007fe8aad9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.329786][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.329799][T10133] R13: 0000000000000000 R14: 00007fe8aa1a5fa0 R15: 00007fff734d01c8 [ 1503.329836][T10133] [ 1503.966003][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10294'. [ 1504.059632][T10157] IPv6: sit2: Disabled Multicast RS [ 1504.066031][T10157] sit2: entered allmulticast mode [ 1504.118503][T10156] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.10295'. [ 1504.179264][T10163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1504.186598][T10163] IPv6: NLM_F_CREATE should be set when creating new route [ 1504.749302][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10304'. [ 1504.768013][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10304'. [ 1504.806639][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10308'. [ 1504.816094][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10308'. [ 1504.992764][T10202] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1505.002033][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10310'. [ 1505.011858][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10310'. [ 1505.554811][T10235] FAULT_INJECTION: forcing a failure. [ 1505.554811][T10235] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.569537][T10235] CPU: 0 UID: 0 PID: 10235 Comm: syz.4.10323 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1505.569570][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1505.569583][T10235] Call Trace: [ 1505.569593][T10235] [ 1505.569603][T10235] dump_stack_lvl+0x241/0x360 [ 1505.569642][T10235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1505.569673][T10235] ? __pfx__printk+0x10/0x10 [ 1505.569708][T10235] ? __pfx___might_resched+0x10/0x10 [ 1505.569739][T10235] should_fail_ex+0x424/0x570 [ 1505.569779][T10235] should_failslab+0xac/0x100 [ 1505.569808][T10235] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 1505.569837][T10235] ? sock_alloc_inode+0x28/0xc0 [ 1505.569869][T10235] sock_alloc_inode+0x28/0xc0 [ 1505.569892][T10235] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1505.569916][T10235] alloc_inode+0x69/0x1b0 [ 1505.569949][T10235] __sock_create+0x127/0xa30 [ 1505.569991][T10235] mptcp_subflow_create_socket+0x12d/0xd10 [ 1505.570036][T10235] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1505.570082][T10235] __mptcp_nmpc_sk+0x18c/0x830 [ 1505.570116][T10235] ? __local_bh_enable_ip+0x168/0x200 [ 1505.570151][T10235] ? mptcp_bind+0x9d/0x1c0 [ 1505.570178][T10235] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1505.570223][T10235] mptcp_bind+0xa5/0x1c0 [ 1505.570263][T10235] __sys_bind+0x1de/0x290 [ 1505.570297][T10235] ? __pfx___sys_bind+0x10/0x10 [ 1505.570355][T10235] __x64_sys_bind+0x7a/0x90 [ 1505.570386][T10235] do_syscall_64+0xf3/0x230 [ 1505.570415][T10235] ? clear_bhb_loop+0x45/0xa0 [ 1505.570442][T10235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.570464][T10235] RIP: 0033:0x7f3210b8d169 [ 1505.570484][T10235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1505.570505][T10235] RSP: 002b:00007f32119e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1505.570529][T10235] RAX: ffffffffffffffda RBX: 00007f3210da5fa0 RCX: 00007f3210b8d169 [ 1505.570546][T10235] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 1505.570560][T10235] RBP: 00007f32119e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.570574][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.570586][T10235] R13: 0000000000000000 R14: 00007f3210da5fa0 R15: 00007fff0211ce88 [ 1505.570621][T10235] [ 1505.572015][T10235] socket: no more sockets [ 1506.203636][T10260] x_tables: duplicate underflow at hook 2 [ 1506.337869][T10267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10333'. [ 1506.338225][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10334'. [ 1506.351486][T10265] FAULT_INJECTION: forcing a failure. [ 1506.351486][T10265] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.357641][T10269] tipc: Enabling of bearer rejected, already enabled [ 1506.409564][T10265] CPU: 1 UID: 0 PID: 10265 Comm: syz.0.10330 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1506.409597][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1506.409610][T10265] Call Trace: [ 1506.409619][T10265] [ 1506.409628][T10265] dump_stack_lvl+0x241/0x360 [ 1506.409667][T10265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1506.409696][T10265] ? __pfx__printk+0x10/0x10 [ 1506.409722][T10265] ? stack_trace_save+0x11a/0x1d0 [ 1506.409754][T10265] ? __pfx___might_resched+0x10/0x10 [ 1506.409784][T10265] should_fail_ex+0x424/0x570 [ 1506.409824][T10265] should_failslab+0xac/0x100 [ 1506.409853][T10265] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 1506.409882][T10265] ? __alloc_skb+0x1c2/0x480 [ 1506.409910][T10265] ? genl_rcv_msg+0x8a4/0xf00 [ 1506.409936][T10265] __alloc_skb+0x1c2/0x480 [ 1506.409963][T10265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.409991][T10265] ? __pfx___alloc_skb+0x10/0x10 [ 1506.410035][T10265] netlink_dump+0x237/0xeb0 [ 1506.410078][T10265] ? __pfx_netlink_dump+0x10/0x10 [ 1506.410122][T10265] ? __asan_memset+0x23/0x50 [ 1506.410143][T10265] ? genl_start+0x4ae/0x6d0 [ 1506.410176][T10265] __netlink_dump_start+0x5a2/0x790 [ 1506.410225][T10265] genl_rcv_msg+0x8a4/0xf00 [ 1506.410258][T10265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1506.410276][T10265] ? stack_trace_save+0x11a/0x1d0 [ 1506.410308][T10265] ? __pfx_stack_trace_save+0x10/0x10 [ 1506.410338][T10265] ? __pfx_genl_start+0x10/0x10 [ 1506.410356][T10265] ? __pfx_genl_dumpit+0x10/0x10 [ 1506.410375][T10265] ? __pfx_genl_done+0x10/0x10 [ 1506.410414][T10265] ? __lock_acquire+0xad5/0xd80 [ 1506.410438][T10265] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 1506.410487][T10265] netlink_rcv_skb+0x208/0x480 [ 1506.410515][T10265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1506.410539][T10265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1506.410600][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 1506.410636][T10265] genl_rcv+0x28/0x40 [ 1506.410655][T10265] netlink_unicast+0x7f8/0x9a0 [ 1506.410694][T10265] ? __pfx_netlink_unicast+0x10/0x10 [ 1506.410722][T10265] ? skb_put+0x114/0x1f0 [ 1506.410759][T10265] netlink_sendmsg+0x8c3/0xcd0 [ 1506.410803][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1506.410838][T10265] ? aa_sock_msg_perm+0x91/0x160 [ 1506.410873][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1506.410899][T10265] __sock_sendmsg+0x221/0x270 [ 1506.410929][T10265] ____sys_sendmsg+0x523/0x860 [ 1506.410962][T10265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1506.410982][T10265] ? __fget_files+0x2a/0x420 [ 1506.411016][T10265] ? __fget_files+0x2a/0x420 [ 1506.411058][T10265] __sys_sendmsg+0x271/0x360 [ 1506.411086][T10265] ? __pfx___sys_sendmsg+0x10/0x10 [ 1506.411174][T10265] ? do_syscall_64+0xb6/0x230 [ 1506.411213][T10265] do_syscall_64+0xf3/0x230 [ 1506.411242][T10265] ? clear_bhb_loop+0x45/0xa0 [ 1506.411269][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.411290][T10265] RIP: 0033:0x7f0b8878d169 [ 1506.411311][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.411329][T10265] RSP: 002b:00007f0b896d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1506.411351][T10265] RAX: ffffffffffffffda RBX: 00007f0b889a5fa0 RCX: 00007f0b8878d169 [ 1506.411368][T10265] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1506.411382][T10265] RBP: 00007f0b896d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.411395][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.411408][T10265] R13: 0000000000000000 R14: 00007f0b889a5fa0 R15: 00007fff7388deb8 [ 1506.411444][T10265] [ 1507.017640][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10339'. [ 1507.030420][T10286] IPVS: Unknown mcast interface: vcan0 [ 1507.195407][T10291] bridge3: entered promiscuous mode [ 1507.246792][T10291] bridge3: entered allmulticast mode [ 1507.318686][T10301] netlink: 'syz.4.10345': attribute type 7 has an invalid length. [ 1507.375260][T10303] netlink: zone id is out of range [ 1507.382391][T10303] netlink: zone id is out of range [ 1507.387600][T10303] netlink: set zone limit has 4 unknown bytes [ 1507.422232][T10305] lo speed is unknown, defaulting to 1000 [ 1507.430516][T10305] lo speed is unknown, defaulting to 1000 [ 1507.438140][T10305] lo speed is unknown, defaulting to 1000 [ 1508.150956][T10328] netlink: 'syz.2.10355': attribute type 4 has an invalid length. [ 1508.278226][T10331] netlink: 'syz.4.10357': attribute type 12 has an invalid length. [ 1508.902361][T10363] FAULT_INJECTION: forcing a failure. [ 1508.902361][T10363] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.936194][T10363] CPU: 1 UID: 0 PID: 10363 Comm: syz.1.10367 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1508.936229][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1508.936243][T10363] Call Trace: [ 1508.936253][T10363] [ 1508.936262][T10363] dump_stack_lvl+0x241/0x360 [ 1508.936302][T10363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1508.936332][T10363] ? __pfx__printk+0x10/0x10 [ 1508.936376][T10363] should_fail_ex+0x424/0x570 [ 1508.936417][T10363] should_failslab+0xac/0x100 [ 1508.936448][T10363] __kmalloc_cache_noprof+0x73/0x370 [ 1508.936475][T10363] ? sctp_add_bind_addr+0x89/0x3a0 [ 1508.936510][T10363] sctp_add_bind_addr+0x89/0x3a0 [ 1508.936545][T10363] sctp_copy_local_addr_list+0x313/0x500 [ 1508.936578][T10363] ? sctp_copy_local_addr_list+0xad/0x500 [ 1508.936609][T10363] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1508.936642][T10363] ? sctp_v6_is_any+0x60/0x70 [ 1508.936675][T10363] ? sctp_copy_one_addr+0x94/0x360 [ 1508.936710][T10363] sctp_bind_addr_copy+0xad/0x3b0 [ 1508.936739][T10363] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 1508.936770][T10363] sctp_connect_new_asoc+0x337/0x700 [ 1508.936797][T10363] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1508.936820][T10363] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 1508.936846][T10363] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 1508.936865][T10363] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 1508.936885][T10363] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1508.936912][T10363] sctp_sendmsg+0x2009/0x3620 [ 1508.936960][T10363] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1508.936994][T10363] ? aa_sk_perm+0x96f/0xac0 [ 1508.937041][T10363] ? inet_sendmsg+0x330/0x390 [ 1508.937070][T10363] __sock_sendmsg+0x1a6/0x270 [ 1508.937102][T10363] __sys_sendto+0x365/0x4c0 [ 1508.937141][T10363] ? __pfx___sys_sendto+0x10/0x10 [ 1508.937189][T10363] ? __fget_files+0x2a/0x420 [ 1508.937233][T10363] ? ksys_write+0x275/0x2d0 [ 1508.937270][T10363] __x64_sys_sendto+0xde/0x100 [ 1508.937306][T10363] do_syscall_64+0xf3/0x230 [ 1508.937335][T10363] ? clear_bhb_loop+0x45/0xa0 [ 1508.937362][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.937383][T10363] RIP: 0033:0x7fe8a9f8d169 [ 1508.937402][T10363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1508.937420][T10363] RSP: 002b:00007fe8aad9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1508.937444][T10363] RAX: ffffffffffffffda RBX: 00007fe8aa1a5fa0 RCX: 00007fe8a9f8d169 [ 1508.937460][T10363] RDX: 0000000000010727 RSI: 0000200000000500 RDI: 0000000000000003 [ 1508.937474][T10363] RBP: 00007fe8aad9d090 R08: 0000200000000140 R09: 000000000000001c [ 1508.937489][T10363] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1508.937503][T10363] R13: 0000000000000000 R14: 00007fe8aa1a5fa0 R15: 00007fff734d01c8 [ 1508.937539][T10363] [ 1509.623419][T10380] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 1509.633756][T10384] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 1509.901308][T10400] __nla_validate_parse: 1 callbacks suppressed [ 1509.901335][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10379'. [ 1510.386168][T10417] team0: left promiscuous mode [ 1510.393040][T10417] team0: left allmulticast mode [ 1510.425415][T10417] wg2: left promiscuous mode [ 1510.431461][T10417] wg2: left allmulticast mode [ 1510.440030][T10417] tipc: Resetting bearer [ 1510.459503][T10417] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 1510.467465][T10417] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 1510.479526][T10417] vlan0: left promiscuous mode [ 1510.484526][T10417] bridge0: left promiscuous mode [ 1510.499727][T10417] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.508661][T10417] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.517257][T10417] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.526145][T10417] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1510.551613][T10417] gretap2: left promiscuous mode [ 1510.599323][ T6673] lo speed is unknown, defaulting to 1000 [ 1510.599555][T10420] bridge0: port 1(gretap0) entered blocking state [ 1510.605124][ T6673] syz0: Port: 1 Link DOWN [ 1510.612082][T10420] bridge0: port 1(gretap0) entered disabled state [ 1510.623201][T10420] gretap0: entered allmulticast mode [ 1510.630474][T10420] gretap0: entered promiscuous mode [ 1510.653457][T10428] IPv6: sit1: Disabled Multicast RS [ 1510.663735][T10428] sit1: entered allmulticast mode [ 1510.826422][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10388'. [ 1510.836470][T10433] netlink: 'syz.2.10388': attribute type 3 has an invalid length. [ 1510.918000][T16509] lo speed is unknown, defaulting to 1000 [ 1511.483096][T10464] x_tables: duplicate underflow at hook 2 [ 1511.551514][T10465] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.10397'. [ 1511.955862][T10486] bridge0: left promiscuous mode [ 1511.975966][T10486] macvlan0: left promiscuous mode [ 1512.004874][T10486] netlink: 'syz.3.10406': attribute type 1 has an invalid length. [ 1512.021309][T10486] netlink: 'syz.3.10406': attribute type 2 has an invalid length. [ 1512.137980][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10410'. [ 1512.148381][T10496] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10410'. [ 1512.227818][T10500] FAULT_INJECTION: forcing a failure. [ 1512.227818][T10500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.241990][T10500] CPU: 0 UID: 0 PID: 10500 Comm: syz.2.10413 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1512.242023][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1512.242037][T10500] Call Trace: [ 1512.242046][T10500] [ 1512.242055][T10500] dump_stack_lvl+0x241/0x360 [ 1512.242094][T10500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1512.242124][T10500] ? __pfx__printk+0x10/0x10 [ 1512.242168][T10500] should_fail_ex+0x424/0x570 [ 1512.242208][T10500] _copy_from_iter+0x211/0x1c70 [ 1512.242243][T10500] ? __build_skb_around+0x247/0x3d0 [ 1512.242280][T10500] ? __alloc_skb+0x298/0x480 [ 1512.242310][T10500] ? __pfx__copy_from_iter+0x10/0x10 [ 1512.242340][T10500] ? __pfx___alloc_skb+0x10/0x10 [ 1512.242374][T10500] ? skb_put+0x114/0x1f0 [ 1512.242412][T10500] netlink_sendmsg+0x73c/0xcd0 [ 1512.242457][T10500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.242493][T10500] ? aa_sock_msg_perm+0x91/0x160 [ 1512.242530][T10500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.242558][T10500] __sock_sendmsg+0x221/0x270 [ 1512.242589][T10500] sock_write_iter+0x2d9/0x3f0 [ 1512.242618][T10500] ? __pfx_sock_write_iter+0x10/0x10 [ 1512.242670][T10500] do_iter_readv_writev+0x71f/0x9d0 [ 1512.242711][T10500] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1512.242744][T10500] ? bpf_lsm_file_permission+0x9/0x10 [ 1512.242767][T10500] ? rw_verify_area+0x246/0x630 [ 1512.242788][T10500] vfs_writev+0x38d/0xbc0 [ 1512.242813][T10500] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1512.242840][T10500] ? vfs_write+0xb29/0xd10 [ 1512.242861][T10500] ? __lock_acquire+0xad5/0xd80 [ 1512.242878][T10500] ? __pfx_vfs_writev+0x10/0x10 [ 1512.242918][T10500] ? __fget_files+0x2a/0x420 [ 1512.242945][T10500] ? __fget_files+0x39d/0x420 [ 1512.242968][T10500] ? __fget_files+0x2a/0x420 [ 1512.243001][T10500] do_writev+0x1b8/0x360 [ 1512.243031][T10500] ? __pfx_do_writev+0x10/0x10 [ 1512.243061][T10500] ? do_syscall_64+0xb6/0x230 [ 1512.243086][T10500] do_syscall_64+0xf3/0x230 [ 1512.243108][T10500] ? clear_bhb_loop+0x45/0xa0 [ 1512.243129][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.243146][T10500] RIP: 0033:0x7f6c2ef8d169 [ 1512.243162][T10500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.243196][T10500] RSP: 002b:00007f6c2fed0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1512.243216][T10500] RAX: ffffffffffffffda RBX: 00007f6c2f1a5fa0 RCX: 00007f6c2ef8d169 [ 1512.243229][T10500] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 1512.243241][T10500] RBP: 00007f6c2fed0090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.243252][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.243262][T10500] R13: 0000000000000000 R14: 00007f6c2f1a5fa0 R15: 00007ffd0b6afe28 [ 1512.243291][T10500] [ 1512.653321][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10416'. [ 1512.729534][T10513] netlink: 'syz.2.10417': attribute type 10 has an invalid length. [ 1512.741345][T10513] : (slave hsr0): The slave device specified does not support setting the MAC address [ 1512.763605][T10513] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1512.779597][T10513] : (slave hsr0): Error -22 calling dev_set_mtu [ 1512.853154][T10517] x_tables: duplicate underflow at hook 2 [ 1512.861067][T10520] FAULT_INJECTION: forcing a failure. [ 1512.861067][T10520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.876046][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.4.10419 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1512.876079][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1512.876094][T10520] Call Trace: [ 1512.876103][T10520] [ 1512.876113][T10520] dump_stack_lvl+0x241/0x360 [ 1512.876152][T10520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1512.876182][T10520] ? __pfx__printk+0x10/0x10 [ 1512.876223][T10520] should_fail_ex+0x424/0x570 [ 1512.876264][T10520] _copy_to_user+0x31/0xb0 [ 1512.876298][T10520] simple_read_from_buffer+0xc4/0x170 [ 1512.876333][T10520] proc_fail_nth_read+0x1ef/0x260 [ 1512.876371][T10520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1512.876421][T10520] ? rw_verify_area+0x246/0x630 [ 1512.876442][T10520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1512.876476][T10520] vfs_read+0x21f/0xb90 [ 1512.876503][T10520] ? __pfx___mutex_lock+0x10/0x10 [ 1512.876532][T10520] ? __pfx_vfs_read+0x10/0x10 [ 1512.876559][T10520] ? __fget_files+0x2a/0x420 [ 1512.876594][T10520] ? __fget_files+0x39d/0x420 [ 1512.876623][T10520] ? __fget_files+0x2a/0x420 [ 1512.876665][T10520] ksys_read+0x19d/0x2d0 [ 1512.876692][T10520] ? __pfx_ksys_read+0x10/0x10 [ 1512.876722][T10520] ? do_syscall_64+0xb6/0x230 [ 1512.876754][T10520] do_syscall_64+0xf3/0x230 [ 1512.876782][T10520] ? clear_bhb_loop+0x45/0xa0 [ 1512.876809][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.876830][T10520] RIP: 0033:0x7f3210b8bb7c [ 1512.876849][T10520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1512.876867][T10520] RSP: 002b:00007f32119e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1512.876892][T10520] RAX: ffffffffffffffda RBX: 00007f3210da5fa0 RCX: 00007f3210b8bb7c [ 1512.876908][T10520] RDX: 000000000000000f RSI: 00007f32119e80a0 RDI: 0000000000000004 [ 1512.876922][T10520] RBP: 00007f32119e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.876936][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.876950][T10520] R13: 0000000000000000 R14: 00007f3210da5fa0 R15: 00007fff0211ce88 [ 1512.876986][T10520] [ 1513.148238][T10525] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10420'. [ 1513.163230][T10526] netlink: 'syz.4.10422': attribute type 21 has an invalid length. [ 1513.171579][T10526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10422'. [ 1513.861041][T10563] smc: net device bond0 erased user defined pnetid SYZ2 [ 1513.869807][T10563] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 1514.403231][T10586] x_tables: duplicate underflow at hook 2 [ 1514.624204][T10595] ip6tnl1: entered promiscuous mode [ 1514.649165][T10595] ip6tnl1: entered allmulticast mode [ 1514.657481][T10595] team0: Device ip6tnl1 is of different type [ 1514.855663][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10441'. [ 1514.916357][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10446'. [ 1515.369137][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1515.518050][T10630] IPv6: sit2: Disabled Multicast RS [ 1515.544724][T10630] sit2: entered allmulticast mode [ 1515.608904][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1515.870497][T10646] ip6tnl2: entered promiscuous mode [ 1515.875835][T10646] ip6tnl2: entered allmulticast mode [ 1515.883434][T10646] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 1516.216471][T10659] IPVS: length: 118 != 24 [ 1516.307530][T10663] FAULT_INJECTION: forcing a failure. [ 1516.307530][T10663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.329088][T10663] CPU: 0 UID: 0 PID: 10663 Comm: syz.4.10461 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1516.329131][T10663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1516.329145][T10663] Call Trace: [ 1516.329154][T10663] [ 1516.329164][T10663] dump_stack_lvl+0x241/0x360 [ 1516.329202][T10663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1516.329232][T10663] ? __pfx__printk+0x10/0x10 [ 1516.329275][T10663] should_fail_ex+0x424/0x570 [ 1516.329314][T10663] _copy_from_user+0x2d/0xb0 [ 1516.329345][T10663] copy_msghdr_from_user+0xb3/0x580 [ 1516.329380][T10663] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1516.329405][T10663] ? __fget_files+0x2a/0x420 [ 1516.329440][T10663] ? __fget_files+0x2a/0x420 [ 1516.329481][T10663] __sys_sendmsg+0x20a/0x360 [ 1516.329509][T10663] ? __pfx___sys_sendmsg+0x10/0x10 [ 1516.329595][T10663] ? do_syscall_64+0xb6/0x230 [ 1516.329627][T10663] do_syscall_64+0xf3/0x230 [ 1516.329655][T10663] ? clear_bhb_loop+0x45/0xa0 [ 1516.329682][T10663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.329703][T10663] RIP: 0033:0x7f3210b8d169 [ 1516.329723][T10663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.329741][T10663] RSP: 002b:00007f32119c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.329765][T10663] RAX: ffffffffffffffda RBX: 00007f3210da6080 RCX: 00007f3210b8d169 [ 1516.329781][T10663] RDX: 0000000000000000 RSI: 0000200000001b80 RDI: 0000000000000003 [ 1516.329796][T10663] RBP: 00007f32119c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.329809][T10663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.329822][T10663] R13: 0000000000000001 R14: 00007f3210da6080 R15: 00007fff0211ce88 [ 1516.329857][T10663] [ 1516.535116][T10667] lo speed is unknown, defaulting to 1000 [ 1516.543260][T10667] lo speed is unknown, defaulting to 1000 [ 1516.550980][T10667] lo speed is unknown, defaulting to 1000 [ 1517.090894][T10694] FAULT_INJECTION: forcing a failure. [ 1517.090894][T10694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1517.104883][T10694] CPU: 1 UID: 0 PID: 10694 Comm: syz.4.10470 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1517.104913][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1517.104928][T10694] Call Trace: [ 1517.104937][T10694] [ 1517.104947][T10694] dump_stack_lvl+0x241/0x360 [ 1517.104987][T10694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1517.105018][T10694] ? __pfx__printk+0x10/0x10 [ 1517.105071][T10694] should_fail_ex+0x424/0x570 [ 1517.105111][T10694] _copy_to_user+0x31/0xb0 [ 1517.105145][T10694] simple_read_from_buffer+0xc4/0x170 [ 1517.105181][T10694] proc_fail_nth_read+0x1ef/0x260 [ 1517.105220][T10694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1517.105258][T10694] ? rw_verify_area+0x246/0x630 [ 1517.105280][T10694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1517.105316][T10694] vfs_read+0x21f/0xb90 [ 1517.105344][T10694] ? __pfx___mutex_lock+0x10/0x10 [ 1517.105375][T10694] ? __pfx_vfs_read+0x10/0x10 [ 1517.105401][T10694] ? __fget_files+0x2a/0x420 [ 1517.105434][T10694] ? __fget_files+0x39d/0x420 [ 1517.105463][T10694] ? __fget_files+0x2a/0x420 [ 1517.105506][T10694] ksys_read+0x19d/0x2d0 [ 1517.105531][T10694] ? __pfx_ksys_read+0x10/0x10 [ 1517.105562][T10694] ? do_syscall_64+0xb6/0x230 [ 1517.105594][T10694] do_syscall_64+0xf3/0x230 [ 1517.105622][T10694] ? clear_bhb_loop+0x45/0xa0 [ 1517.105649][T10694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.105670][T10694] RIP: 0033:0x7f3210b8bb7c [ 1517.105690][T10694] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1517.105709][T10694] RSP: 002b:00007f32119e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1517.105732][T10694] RAX: ffffffffffffffda RBX: 00007f3210da5fa0 RCX: 00007f3210b8bb7c [ 1517.105748][T10694] RDX: 000000000000000f RSI: 00007f32119e80a0 RDI: 0000000000000004 [ 1517.105762][T10694] RBP: 00007f32119e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.105775][T10694] R10: 0000000000002011 R11: 0000000000000246 R12: 0000000000000002 [ 1517.105789][T10694] R13: 0000000000000000 R14: 00007f3210da5fa0 R15: 00007fff0211ce88 [ 1517.105823][T10694] [ 1517.619879][T10708] netlink: 'syz.4.10473': attribute type 21 has an invalid length. [ 1517.628199][T10708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10473'. [ 1517.786468][T10712] netlink: 'syz.4.10475': attribute type 21 has an invalid length. [ 1517.822083][T10712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10475'. [ 1518.400718][T10738] ip6gretap3: entered promiscuous mode [ 1518.899423][T10766] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10490'. [ 1518.926039][T10764] netlink: 'syz.3.10489': attribute type 4 has an invalid length. [ 1519.204031][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10497'. [ 1519.837024][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10503'. [ 1520.105896][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10508'. [ 1520.474913][T10844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10518'. [ 1520.614912][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10522'. [ 1520.617600][T10854] FAULT_INJECTION: forcing a failure. [ 1520.617600][T10854] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.643803][T10854] CPU: 0 UID: 0 PID: 10854 Comm: syz.2.10521 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1520.643839][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1520.643853][T10854] Call Trace: [ 1520.643863][T10854] [ 1520.643872][T10854] dump_stack_lvl+0x241/0x360 [ 1520.643912][T10854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1520.643942][T10854] ? __pfx__printk+0x10/0x10 [ 1520.643978][T10854] ? __pfx___might_resched+0x10/0x10 [ 1520.644011][T10854] should_fail_ex+0x424/0x570 [ 1520.644053][T10854] should_failslab+0xac/0x100 [ 1520.644084][T10854] __kmalloc_cache_noprof+0x73/0x370 [ 1520.644111][T10854] ? tcf_ife_init+0x257/0xfc0 [ 1520.644148][T10854] tcf_ife_init+0x257/0xfc0 [ 1520.644195][T10854] ? __pfx_tcf_ife_init+0x10/0x10 [ 1520.644247][T10854] ? nla_memcpy+0x5a/0xb0 [ 1520.644280][T10854] ? __pfx_tcf_ife_init+0x10/0x10 [ 1520.644311][T10854] tcf_action_init_1+0x5d9/0x900 [ 1520.644350][T10854] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1520.644374][T10854] ? _raw_read_unlock+0x28/0x50 [ 1520.644397][T10854] ? tc_action_load_ops+0x247/0x530 [ 1520.644448][T10854] ? __nla_parse+0x40/0x60 [ 1520.644477][T10854] tcf_action_init+0x2e9/0xae0 [ 1520.644510][T10854] ? is_bpf_text_address+0x26/0x2a0 [ 1520.644541][T10854] ? __pfx_tcf_action_init+0x10/0x10 [ 1520.644642][T10854] ? apparmor_capable+0x13b/0x1b0 [ 1520.644678][T10854] tc_ctl_action+0x47f/0xcf0 [ 1520.644719][T10854] ? __pfx_tc_ctl_action+0x10/0x10 [ 1520.644743][T10854] ? __lock_acquire+0xad5/0xd80 [ 1520.644807][T10854] ? aa_get_newest_label+0x101/0x6f0 [ 1520.644874][T10854] ? __pfx_tc_ctl_action+0x10/0x10 [ 1520.644903][T10854] rtnetlink_rcv_msg+0x7c2/0xd70 [ 1520.644931][T10854] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 1520.644966][T10854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1520.645006][T10854] ? ref_tracker_free+0x63e/0x7e0 [ 1520.645038][T10854] netlink_rcv_skb+0x208/0x480 [ 1520.645070][T10854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1520.645102][T10854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1520.645155][T10854] ? netlink_deliver_tap+0x2e/0x1b0 [ 1520.645189][T10854] ? netlink_deliver_tap+0x2e/0x1b0 [ 1520.645222][T10854] netlink_unicast+0x7f8/0x9a0 [ 1520.645260][T10854] ? __pfx_netlink_unicast+0x10/0x10 [ 1520.645290][T10854] ? skb_put+0x114/0x1f0 [ 1520.645328][T10854] netlink_sendmsg+0x8c3/0xcd0 [ 1520.645373][T10854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.645407][T10854] ? aa_sock_msg_perm+0x91/0x160 [ 1520.645442][T10854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.645469][T10854] __sock_sendmsg+0x221/0x270 [ 1520.645501][T10854] ____sys_sendmsg+0x523/0x860 [ 1520.645534][T10854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1520.645551][T10854] ? __fget_files+0x2a/0x420 [ 1520.645585][T10854] ? __fget_files+0x2a/0x420 [ 1520.645625][T10854] __sys_sendmsg+0x271/0x360 [ 1520.645652][T10854] ? __pfx___sys_sendmsg+0x10/0x10 [ 1520.645739][T10854] ? do_syscall_64+0xb6/0x230 [ 1520.645773][T10854] do_syscall_64+0xf3/0x230 [ 1520.645810][T10854] ? clear_bhb_loop+0x45/0xa0 [ 1520.645839][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.645860][T10854] RIP: 0033:0x7f6c2ef8d169 [ 1520.645881][T10854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.645899][T10854] RSP: 002b:00007f6c2fed0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1520.645922][T10854] RAX: ffffffffffffffda RBX: 00007f6c2f1a5fa0 RCX: 00007f6c2ef8d169 [ 1520.645939][T10854] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1520.645953][T10854] RBP: 00007f6c2fed0090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.645968][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.645981][T10854] R13: 0000000000000000 R14: 00007f6c2f1a5fa0 R15: 00007ffd0b6afe28 [ 1520.646017][T10854] [ 1521.347938][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10524'. [ 1521.631599][T10870] ip6gre1: entered allmulticast mode [ 1522.286485][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10530'. [ 1522.309189][T10892] gre0: entered allmulticast mode [ 1522.314480][T10892] netlink: 'syz.4.10530': attribute type 8 has an invalid length. [ 1522.366683][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1523.105932][T10907] FAULT_INJECTION: forcing a failure. [ 1523.105932][T10907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.119616][T10907] CPU: 1 UID: 0 PID: 10907 Comm: syz.4.10537 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1523.119649][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1523.119664][T10907] Call Trace: [ 1523.119673][T10907] [ 1523.119683][T10907] dump_stack_lvl+0x241/0x360 [ 1523.119722][T10907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1523.119752][T10907] ? __pfx__printk+0x10/0x10 [ 1523.119797][T10907] should_fail_ex+0x424/0x570 [ 1523.119837][T10907] _copy_from_user+0x2d/0xb0 [ 1523.119869][T10907] core_sys_select+0x68d/0xab0 [ 1523.119912][T10907] ? __pfx_core_sys_select+0x10/0x10 [ 1523.119938][T10907] ? rcu_read_lock_any_held+0xbb/0x160 [ 1523.119971][T10907] ? vfs_write+0xb29/0xd10 [ 1523.120024][T10907] ? __pfx_set_user_sigmask+0x10/0x10 [ 1523.120048][T10907] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1523.120076][T10907] ? __fget_files+0x2a/0x420 [ 1523.120115][T10907] __se_sys_pselect6+0x356/0x3e0 [ 1523.120148][T10907] ? fput+0x9b/0xd0 [ 1523.120182][T10907] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1523.120222][T10907] ? __x64_sys_pselect6+0x21/0xf0 [ 1523.120255][T10907] do_syscall_64+0xf3/0x230 [ 1523.120284][T10907] ? clear_bhb_loop+0x45/0xa0 [ 1523.120311][T10907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.120331][T10907] RIP: 0033:0x7f3210b8d169 [ 1523.120352][T10907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.120371][T10907] RSP: 002b:00007f32119e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1523.120395][T10907] RAX: ffffffffffffffda RBX: 00007f3210da5fa0 RCX: 00007f3210b8d169 [ 1523.120412][T10907] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1523.120426][T10907] RBP: 00007f32119e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.120440][T10907] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1523.120454][T10907] R13: 0000000000000000 R14: 00007f3210da5fa0 R15: 00007fff0211ce88 [ 1523.120489][T10907] [ 1523.437174][T10911] FAULT_INJECTION: forcing a failure. [ 1523.437174][T10911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.466952][T10911] CPU: 1 UID: 0 PID: 10911 Comm: syz.4.10539 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1523.466985][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1523.466999][T10911] Call Trace: [ 1523.467008][T10911] [ 1523.467017][T10911] dump_stack_lvl+0x241/0x360 [ 1523.467055][T10911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1523.467085][T10911] ? __pfx__printk+0x10/0x10 [ 1523.467128][T10911] should_fail_ex+0x424/0x570 [ 1523.467169][T10911] _copy_to_user+0x31/0xb0 [ 1523.467201][T10911] simple_read_from_buffer+0xc4/0x170 [ 1523.467237][T10911] proc_fail_nth_read+0x1ef/0x260 [ 1523.467275][T10911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1523.467314][T10911] ? rw_verify_area+0x246/0x630 [ 1523.467335][T10911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1523.467371][T10911] vfs_read+0x21f/0xb90 [ 1523.467401][T10911] ? __pfx___mutex_lock+0x10/0x10 [ 1523.467430][T10911] ? __pfx_vfs_read+0x10/0x10 [ 1523.467458][T10911] ? __fget_files+0x2a/0x420 [ 1523.467491][T10911] ? __fget_files+0x39d/0x420 [ 1523.467521][T10911] ? __fget_files+0x2a/0x420 [ 1523.467564][T10911] ksys_read+0x19d/0x2d0 [ 1523.467591][T10911] ? __pfx_ksys_read+0x10/0x10 [ 1523.467630][T10911] ? do_syscall_64+0xb6/0x230 [ 1523.467662][T10911] do_syscall_64+0xf3/0x230 [ 1523.467691][T10911] ? clear_bhb_loop+0x45/0xa0 [ 1523.467718][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.467740][T10911] RIP: 0033:0x7f3210b8bb7c [ 1523.467760][T10911] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1523.467780][T10911] RSP: 002b:00007f32119e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1523.467804][T10911] RAX: ffffffffffffffda RBX: 00007f3210da5fa0 RCX: 00007f3210b8bb7c [ 1523.467820][T10911] RDX: 000000000000000f RSI: 00007f32119e80a0 RDI: 0000000000000006 [ 1523.467835][T10911] RBP: 00007f32119e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.467849][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.467862][T10911] R13: 0000000000000000 R14: 00007f3210da5fa0 R15: 00007fff0211ce88 [ 1523.467898][T10911] [ 1523.945605][T10927] FAULT_INJECTION: forcing a failure. [ 1523.945605][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.007393][T10927] CPU: 1 UID: 0 PID: 10927 Comm: syz.3.10546 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1524.007428][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1524.007442][T10927] Call Trace: [ 1524.007452][T10927] [ 1524.007462][T10927] dump_stack_lvl+0x241/0x360 [ 1524.007502][T10927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1524.007533][T10927] ? __pfx__printk+0x10/0x10 [ 1524.007569][T10927] ? __pfx___might_resched+0x10/0x10 [ 1524.007602][T10927] should_fail_ex+0x424/0x570 [ 1524.007643][T10927] should_failslab+0xac/0x100 [ 1524.007675][T10927] __kmalloc_node_noprof+0xe7/0x4d0 [ 1524.007705][T10927] ? crypto_create_tfm_node+0x8a/0x3d0 [ 1524.007736][T10927] crypto_create_tfm_node+0x8a/0x3d0 [ 1524.007773][T10927] crypto_spawn_tfm2+0x5c/0x90 [ 1524.007803][T10927] cryptd_aead_init_tfm+0x44/0xf0 [ 1524.007829][T10927] crypto_create_tfm_node+0x16c/0x3d0 [ 1524.007859][T10927] crypto_alloc_tfm_node+0x15d/0x3a0 [ 1524.007896][T10927] cryptd_alloc_aead+0xe4/0x200 [ 1524.007929][T10927] ? __pfx_cryptd_alloc_aead+0x10/0x10 [ 1524.007981][T10927] ? rcu_is_watching+0x15/0xb0 [ 1524.008008][T10927] ? trace_kmalloc+0x1f/0xd0 [ 1524.008039][T10927] simd_aead_init+0x67/0x150 [ 1524.008067][T10927] crypto_create_tfm_node+0x16c/0x3d0 [ 1524.008098][T10927] crypto_alloc_tfm_node+0x15d/0x3a0 [ 1524.008135][T10927] tipc_crypto_key_init+0x138/0x870 [ 1524.008190][T10927] tipc_nl_node_set_key+0x7c9/0xb20 [ 1524.008229][T10927] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 1524.008270][T10927] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 1524.008306][T10927] genl_rcv_msg+0xb38/0xf00 [ 1524.008347][T10927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1524.008367][T10927] ? __dev_queue_xmit+0x1780/0x3f60 [ 1524.008388][T10927] ? kasan_save_track+0x3f/0x80 [ 1524.008409][T10927] ? __kasan_slab_alloc+0x66/0x80 [ 1524.008442][T10927] ? do_syscall_64+0xf3/0x230 [ 1524.008492][T10927] ? __lock_acquire+0xad5/0xd80 [ 1524.008517][T10927] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 1524.008568][T10927] netlink_rcv_skb+0x208/0x480 [ 1524.008600][T10927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1524.008625][T10927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1524.008684][T10927] ? netlink_deliver_tap+0x2e/0x1b0 [ 1524.008719][T10927] genl_rcv+0x28/0x40 [ 1524.008738][T10927] netlink_unicast+0x7f8/0x9a0 [ 1524.008782][T10927] ? __pfx_netlink_unicast+0x10/0x10 [ 1524.008812][T10927] ? skb_put+0x114/0x1f0 [ 1524.008852][T10927] netlink_sendmsg+0x8c3/0xcd0 [ 1524.008899][T10927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1524.008936][T10927] ? aa_sock_msg_perm+0x91/0x160 [ 1524.008973][T10927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1524.009001][T10927] __sock_sendmsg+0x221/0x270 [ 1524.009033][T10927] ____sys_sendmsg+0x523/0x860 [ 1524.009067][T10927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1524.009086][T10927] ? __fget_files+0x2a/0x420 [ 1524.009122][T10927] ? __fget_files+0x2a/0x420 [ 1524.009165][T10927] __sys_sendmsg+0x271/0x360 [ 1524.009194][T10927] ? __pfx___sys_sendmsg+0x10/0x10 [ 1524.009287][T10927] ? do_syscall_64+0xb6/0x230 [ 1524.009319][T10927] do_syscall_64+0xf3/0x230 [ 1524.009347][T10927] ? clear_bhb_loop+0x45/0xa0 [ 1524.009374][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.009396][T10927] RIP: 0033:0x7f10a178d169 [ 1524.009416][T10927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1524.009434][T10927] RSP: 002b:00007f10a25f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1524.009458][T10927] RAX: ffffffffffffffda RBX: 00007f10a19a5fa0 RCX: 00007f10a178d169 [ 1524.009474][T10927] RDX: 0000000004008014 RSI: 0000200000000100 RDI: 0000000000000003 [ 1524.009488][T10927] RBP: 00007f10a25f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.009502][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1524.009515][T10927] R13: 0000000000000000 R14: 00007f10a19a5fa0 R15: 00007ffe97bb0c28 [ 1524.009553][T10927] [ 1524.633250][T10940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10550'. [ 1524.864663][T10938] netlink: 'syz.3.10549': attribute type 4 has an invalid length. [ 1525.044810][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10559'. [ 1525.344659][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10563'. [ 1525.355509][T10977] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10563'. [ 1525.658617][T10982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10565'. [ 1525.926175][T10991] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10568'. [ 1525.967103][T10993] gre0: left allmulticast mode [ 1526.006337][T10993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.017700][T10993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.034325][T10993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1526.059728][ T1547] lo speed is unknown, defaulting to 1000 [ 1526.065866][ T1547] syz0: Port: 1 Link ACTIVE [ 1526.075831][ T1547] lo speed is unknown, defaulting to 1000 [ 1526.626729][T11000] IPv6: sit2: Disabled Multicast RS [ 1526.652156][T11030] FAULT_INJECTION: forcing a failure. [ 1526.652156][T11030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1526.667559][T11000] sit2: entered allmulticast mode [ 1526.671899][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.1.10580 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1526.671937][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1526.671952][T11030] Call Trace: [ 1526.671962][T11030] [ 1526.671973][T11030] dump_stack_lvl+0x241/0x360 [ 1526.672018][T11030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1526.672049][T11030] ? __pfx__printk+0x10/0x10 [ 1526.672098][T11030] should_fail_ex+0x424/0x570 [ 1526.672141][T11030] _copy_from_iter+0x43c/0x1c70 [ 1526.672191][T11030] ? __pfx__copy_from_iter+0x10/0x10 [ 1526.672221][T11030] ? __lock_acquire+0xad5/0xd80 [ 1526.672260][T11030] ping_v4_sendmsg+0x27b/0x25c0 [ 1526.672291][T11030] ? __lock_acquire+0xad5/0xd80 [ 1526.672338][T11030] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1526.672381][T11030] ? __local_bh_enable_ip+0x168/0x200 [ 1526.672416][T11030] ? lockdep_hardirqs_on+0x9d/0x150 [ 1526.672451][T11030] ? inet_sendmsg+0x16b/0x390 [ 1526.672476][T11030] ? inet_sendmsg+0x16b/0x390 [ 1526.672520][T11030] ? inet_sendmsg+0x330/0x390 [ 1526.672551][T11030] __sock_sendmsg+0x1a6/0x270 [ 1526.672586][T11030] ____sys_sendmsg+0x523/0x860 [ 1526.672619][T11030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1526.672636][T11030] ? __fget_files+0x2a/0x420 [ 1526.672671][T11030] ? __fget_files+0x2a/0x420 [ 1526.672711][T11030] __sys_sendmsg+0x271/0x360 [ 1526.672738][T11030] ? __pfx___sys_sendmsg+0x10/0x10 [ 1526.672822][T11030] ? do_syscall_64+0xb6/0x230 [ 1526.672854][T11030] do_syscall_64+0xf3/0x230 [ 1526.672882][T11030] ? clear_bhb_loop+0x45/0xa0 [ 1526.672908][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.672928][T11030] RIP: 0033:0x7fe8a9f8d169 [ 1526.672947][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1526.672965][T11030] RSP: 002b:00007fe8aad9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1526.672988][T11030] RAX: ffffffffffffffda RBX: 00007fe8aa1a5fa0 RCX: 00007fe8a9f8d169 [ 1526.673004][T11030] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1526.673017][T11030] RBP: 00007fe8aad9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1526.673031][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1526.673044][T11030] R13: 0000000000000000 R14: 00007fe8aa1a5fa0 R15: 00007fff734d01c8 [ 1526.673079][T11030] [ 1526.861915][T11036] FAULT_INJECTION: forcing a failure. [ 1526.861915][T11036] name failslab, interval 1, probability 0, space 0, times 0 [ 1526.953108][T11036] CPU: 0 UID: 0 PID: 11036 Comm: syz.1.10584 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1526.953143][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1526.953158][T11036] Call Trace: [ 1526.953167][T11036] [ 1526.953177][T11036] dump_stack_lvl+0x241/0x360 [ 1526.953216][T11036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1526.953246][T11036] ? __pfx__printk+0x10/0x10 [ 1526.953291][T11036] should_fail_ex+0x424/0x570 [ 1526.953331][T11036] should_failslab+0xac/0x100 [ 1526.953361][T11036] __kmalloc_cache_noprof+0x73/0x370 [ 1526.953389][T11036] ? sctp_add_bind_addr+0x89/0x3a0 [ 1526.953425][T11036] sctp_add_bind_addr+0x89/0x3a0 [ 1526.953460][T11036] sctp_copy_local_addr_list+0x313/0x500 [ 1526.953500][T11036] ? sctp_copy_local_addr_list+0xad/0x500 [ 1526.953531][T11036] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1526.953563][T11036] ? sctp_v6_is_any+0x60/0x70 [ 1526.953596][T11036] ? sctp_copy_one_addr+0x94/0x360 [ 1526.953631][T11036] sctp_bind_addr_copy+0xad/0x3b0 [ 1526.953659][T11036] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 1526.953690][T11036] sctp_connect_new_asoc+0x337/0x700 [ 1526.953717][T11036] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1526.953740][T11036] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 1526.953767][T11036] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 1526.953788][T11036] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 1526.953811][T11036] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1526.953837][T11036] sctp_sendmsg+0x2009/0x3620 [ 1526.953886][T11036] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1526.953912][T11036] ? aa_sk_perm+0x96f/0xac0 [ 1526.953960][T11036] ? inet_sendmsg+0x330/0x390 [ 1526.953989][T11036] __sock_sendmsg+0x1a6/0x270 [ 1526.954020][T11036] __sys_sendto+0x365/0x4c0 [ 1526.954058][T11036] ? __pfx___sys_sendto+0x10/0x10 [ 1526.954107][T11036] ? __fget_files+0x2a/0x420 [ 1526.954150][T11036] ? ksys_write+0x275/0x2d0 [ 1526.954186][T11036] __x64_sys_sendto+0xde/0x100 [ 1526.954222][T11036] do_syscall_64+0xf3/0x230 [ 1526.954251][T11036] ? clear_bhb_loop+0x45/0xa0 [ 1526.954278][T11036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.954299][T11036] RIP: 0033:0x7fe8a9f8d169 [ 1526.954319][T11036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1526.954338][T11036] RSP: 002b:00007fe8aad9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1526.954361][T11036] RAX: ffffffffffffffda RBX: 00007fe8aa1a5fa0 RCX: 00007fe8a9f8d169 [ 1526.954378][T11036] RDX: 0000000000010727 RSI: 0000200000000500 RDI: 0000000000000003 [ 1526.954392][T11036] RBP: 00007fe8aad9d090 R08: 0000200000000140 R09: 000000000000001c [ 1526.954407][T11036] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1526.954421][T11036] R13: 0000000000000000 R14: 00007fe8aa1a5fa0 R15: 00007fff734d01c8 [ 1526.954458][T11036] [ 1527.345232][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10585'. [ 1527.421252][T11046] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10588'. [ 1527.650824][T11060] x_tables: duplicate underflow at hook 2 [ 1527.890958][T11071] FAULT_INJECTION: forcing a failure. [ 1527.890958][T11071] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.008442][T11078] IPv6: sit2: Disabled Multicast RS [ 1528.013383][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.1.10596 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1528.013421][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1528.013437][T11071] Call Trace: [ 1528.013449][T11071] [ 1528.013460][T11071] dump_stack_lvl+0x241/0x360 [ 1528.013503][T11071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1528.013536][T11071] ? __pfx__printk+0x10/0x10 [ 1528.013569][T11071] ? ref_tracker_alloc+0x159/0x4c0 [ 1528.013596][T11071] ? __pfx___might_resched+0x10/0x10 [ 1528.013633][T11071] should_fail_ex+0x424/0x570 [ 1528.013677][T11071] should_failslab+0xac/0x100 [ 1528.013706][T11071] __kmalloc_cache_noprof+0x73/0x370 [ 1528.013732][T11071] ? subflow_ulp_init+0xcb/0x560 [ 1528.013770][T11071] subflow_ulp_init+0xcb/0x560 [ 1528.013805][T11071] tcp_set_ulp+0x537/0x5f0 [ 1528.013836][T11071] mptcp_subflow_create_socket+0x676/0xd10 [ 1528.013877][T11071] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1528.013920][T11071] __mptcp_nmpc_sk+0x18c/0x830 [ 1528.013952][T11071] ? __local_bh_enable_ip+0x168/0x200 [ 1528.013986][T11071] ? mptcp_bind+0x9d/0x1c0 [ 1528.014011][T11071] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1528.014055][T11071] mptcp_bind+0xa5/0x1c0 [ 1528.014087][T11071] __sys_bind+0x1de/0x290 [ 1528.014120][T11071] ? __pfx___sys_bind+0x10/0x10 [ 1528.014188][T11071] __x64_sys_bind+0x7a/0x90 [ 1528.014219][T11071] do_syscall_64+0xf3/0x230 [ 1528.014247][T11071] ? clear_bhb_loop+0x45/0xa0 [ 1528.014274][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.014295][T11071] RIP: 0033:0x7fe8a9f8d169 [ 1528.014315][T11071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.014338][T11071] RSP: 002b:00007fe8aad9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1528.014362][T11071] RAX: ffffffffffffffda RBX: 00007fe8aa1a5fa0 RCX: 00007fe8a9f8d169 [ 1528.014378][T11071] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 1528.014392][T11071] RBP: 00007fe8aad9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.014406][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.014420][T11071] R13: 0000000000000000 R14: 00007fe8aa1a5fa0 R15: 00007fff734d01c8 [ 1528.014456][T11071] [ 1528.253339][T11078] sit2: entered allmulticast mode [ 1528.877277][T11104] x_tables: duplicate underflow at hook 2 [ 1528.901524][T11105] IPv6: sit1: Disabled Multicast RS [ 1528.908027][T11105] sit1: entered allmulticast mode [ 1529.485747][T11121] netlink: 'syz.3.10613': attribute type 1 has an invalid length. [ 1529.493996][T11121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10613'. [ 1529.529337][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10613'. [ 1529.579482][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10613'. [ 1529.605342][T11127] netlink: 'syz.4.10614': attribute type 2 has an invalid length. [ 1529.614435][T11127] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10614'. [ 1529.627347][T11127] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1529.663807][T11127] lo speed is unknown, defaulting to 1000 [ 1529.673055][T11127] lo speed is unknown, defaulting to 1000 [ 1529.680913][T11127] lo speed is unknown, defaulting to 1000 [ 1530.746070][T11161] IPv6: sit2: Disabled Multicast RS [ 1530.752823][T11161] sit2: entered allmulticast mode [ 1531.080302][T11185] __nla_validate_parse: 14 callbacks suppressed [ 1531.080325][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10633'. [ 1531.563787][T11198] x_tables: duplicate underflow at hook 2 [ 1531.967821][T11206] FAULT_INJECTION: forcing a failure. [ 1531.967821][T11206] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.027177][T11188] FAULT_INJECTION: forcing a failure. [ 1532.027177][T11188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1532.038793][T11206] CPU: 0 UID: 0 PID: 11206 Comm: syz.3.10640 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1532.038840][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1532.038856][T11206] Call Trace: [ 1532.038866][T11206] [ 1532.038878][T11206] dump_stack_lvl+0x241/0x360 [ 1532.038921][T11206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1532.038954][T11206] ? __pfx__printk+0x10/0x10 [ 1532.038983][T11206] ? rcu_is_watching+0x15/0xb0 [ 1532.039016][T11206] ? __pfx___might_resched+0x10/0x10 [ 1532.039050][T11206] should_fail_ex+0x424/0x570 [ 1532.039093][T11206] should_failslab+0xac/0x100 [ 1532.039127][T11206] __kmalloc_cache_noprof+0x73/0x370 [ 1532.039158][T11206] ? tipc_crypto_key_init+0x217/0x870 [ 1532.039199][T11206] tipc_crypto_key_init+0x217/0x870 [ 1532.039256][T11206] tipc_nl_node_set_key+0x7c9/0xb20 [ 1532.039299][T11206] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 1532.039341][T11206] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 1532.039378][T11206] genl_rcv_msg+0xb38/0xf00 [ 1532.039416][T11206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1532.039437][T11206] ? __dev_queue_xmit+0x1780/0x3f60 [ 1532.039460][T11206] ? kasan_save_track+0x3f/0x80 [ 1532.039482][T11206] ? __kasan_slab_alloc+0x66/0x80 [ 1532.039515][T11206] ? do_syscall_64+0xf3/0x230 [ 1532.039568][T11206] ? __lock_acquire+0xad5/0xd80 [ 1532.039593][T11206] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 1532.039645][T11206] netlink_rcv_skb+0x208/0x480 [ 1532.039680][T11206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1532.039705][T11206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1532.039766][T11206] ? netlink_deliver_tap+0x2e/0x1b0 [ 1532.039817][T11206] genl_rcv+0x28/0x40 [ 1532.039839][T11206] netlink_unicast+0x7f8/0x9a0 [ 1532.039880][T11206] ? __pfx_netlink_unicast+0x10/0x10 [ 1532.039912][T11206] ? skb_put+0x114/0x1f0 [ 1532.039953][T11206] netlink_sendmsg+0x8c3/0xcd0 [ 1532.040002][T11206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1532.040040][T11206] ? aa_sock_msg_perm+0x91/0x160 [ 1532.040078][T11206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1532.040108][T11206] __sock_sendmsg+0x221/0x270 [ 1532.040143][T11206] ____sys_sendmsg+0x523/0x860 [ 1532.040179][T11206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1532.040199][T11206] ? __fget_files+0x2a/0x420 [ 1532.040236][T11206] ? __fget_files+0x2a/0x420 [ 1532.040275][T11206] __sys_sendmsg+0x271/0x360 [ 1532.040301][T11206] ? __pfx___sys_sendmsg+0x10/0x10 [ 1532.040385][T11206] ? do_syscall_64+0xb6/0x230 [ 1532.040416][T11206] do_syscall_64+0xf3/0x230 [ 1532.040444][T11206] ? clear_bhb_loop+0x45/0xa0 [ 1532.040470][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.040491][T11206] RIP: 0033:0x7f10a178d169 [ 1532.040511][T11206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.040529][T11206] RSP: 002b:00007f10a25f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1532.040552][T11206] RAX: ffffffffffffffda RBX: 00007f10a19a5fa0 RCX: 00007f10a178d169 [ 1532.040568][T11206] RDX: 0000000004008014 RSI: 0000200000000100 RDI: 0000000000000003 [ 1532.040582][T11206] RBP: 00007f10a25f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.040596][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1532.040609][T11206] R13: 0000000000000000 R14: 00007f10a19a5fa0 R15: 00007ffe97bb0c28 [ 1532.040646][T11206] [ 1532.387325][T11188] CPU: 0 UID: 0 PID: 11188 Comm: syz.4.10634 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1532.387358][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1532.387373][T11188] Call Trace: [ 1532.387382][T11188] [ 1532.387393][T11188] dump_stack_lvl+0x241/0x360 [ 1532.387431][T11188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1532.387461][T11188] ? __pfx__printk+0x10/0x10 [ 1532.387506][T11188] should_fail_ex+0x424/0x570 [ 1532.387545][T11188] set_fd_set+0x3a/0xa0 [ 1532.387573][T11188] core_sys_select+0x89c/0xab0 [ 1532.387615][T11188] ? __pfx_core_sys_select+0x10/0x10 [ 1532.387639][T11188] ? rcu_read_lock_any_held+0xbb/0x160 [ 1532.387674][T11188] ? vfs_write+0xb29/0xd10 [ 1532.387727][T11188] ? __pfx_set_user_sigmask+0x10/0x10 [ 1532.387750][T11188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1532.387777][T11188] ? __fget_files+0x2a/0x420 [ 1532.387824][T11188] __se_sys_pselect6+0x356/0x3e0 [ 1532.387856][T11188] ? fput+0x9b/0xd0 [ 1532.387890][T11188] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1532.387927][T11188] ? __x64_sys_pselect6+0x21/0xf0 [ 1532.387959][T11188] do_syscall_64+0xf3/0x230 [ 1532.387987][T11188] ? clear_bhb_loop+0x45/0xa0 [ 1532.388015][T11188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.388036][T11188] RIP: 0033:0x7f3210b8d169 [ 1532.388056][T11188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.388074][T11188] RSP: 002b:00007f32119e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1532.388098][T11188] RAX: ffffffffffffffda RBX: 00007f3210da5fa0 RCX: 00007f3210b8d169 [ 1532.388114][T11188] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1532.388128][T11188] RBP: 00007f32119e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.388142][T11188] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1532.388156][T11188] R13: 0000000000000000 R14: 00007f3210da5fa0 R15: 00007fff0211ce88 [ 1532.388191][T11188] [ 1533.081139][T11231] IPv6: sit1: Disabled Multicast RS [ 1533.087569][T11231] sit1: entered allmulticast mode [ 1533.216804][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10649'. [ 1533.230019][T11233] warn_alloc: 1 callbacks suppressed [ 1533.230043][T11233] syz.1.10648: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1533.259919][T11233] CPU: 1 UID: 0 PID: 11233 Comm: syz.1.10648 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1533.259954][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1533.259968][T11233] Call Trace: [ 1533.259977][T11233] [ 1533.259987][T11233] dump_stack_lvl+0x241/0x360 [ 1533.260027][T11233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1533.260056][T11233] ? __pfx__printk+0x10/0x10 [ 1533.260084][T11233] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1533.260117][T11233] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1533.260146][T11233] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1533.260179][T11233] warn_alloc+0x27c/0x410 [ 1533.260220][T11233] ? __pfx_warn_alloc+0x10/0x10 [ 1533.260262][T11233] ? hash_netnet_create+0x803/0x1710 [ 1533.260286][T11233] ? __get_vm_area_node+0x1c8/0x2d0 [ 1533.260315][T11233] ? __get_vm_area_node+0x25c/0x2d0 [ 1533.260354][T11233] __vmalloc_node_range_noprof+0x634/0x1390 [ 1533.260423][T11233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1533.260460][T11233] ? __kasan_kmalloc_large+0x1a/0xa0 [ 1533.260492][T11233] ? hash_netnet_create+0x803/0x1710 [ 1533.260518][T11233] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 1533.260548][T11233] ? hash_netnet_create+0x803/0x1710 [ 1533.260570][T11233] ? hash_netnet_create+0x803/0x1710 [ 1533.260593][T11233] ? hash_netnet_create+0x7a3/0x1710 [ 1533.260622][T11233] hash_netnet_create+0x803/0x1710 [ 1533.260666][T11233] ? __pfx_hash_netnet_create+0x10/0x10 [ 1533.260694][T11233] ? __nla_parse+0x40/0x60 [ 1533.260720][T11233] ? __pfx_hash_netnet_create+0x10/0x10 [ 1533.260751][T11233] ip_set_create+0xa7d/0x1960 [ 1533.260778][T11233] ? ip_set_create+0x48c/0x1960 [ 1533.260806][T11233] ? __pfx_ip_set_create+0x10/0x10 [ 1533.260869][T11233] ? nfnetlink_rcv_msg+0x227/0x1190 [ 1533.260892][T11233] nfnetlink_rcv_msg+0xbf7/0x1190 [ 1533.260914][T11233] ? nfnetlink_rcv_msg+0x227/0x1190 [ 1533.260964][T11233] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1533.260983][T11233] ? stack_trace_save+0x11a/0x1d0 [ 1533.261047][T11233] ? __update_page_owner_handle+0x5a/0x550 [ 1533.261081][T11233] ? __lock_acquire+0xad5/0xd80 [ 1533.261113][T11233] netlink_rcv_skb+0x208/0x480 [ 1533.261144][T11233] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1533.261168][T11233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1533.261215][T11233] ? apparmor_capable+0x13b/0x1b0 [ 1533.261239][T11233] ? bpf_lsm_capable+0x9/0x10 [ 1533.261262][T11233] ? security_capable+0x7e/0x2d0 [ 1533.261298][T11233] nfnetlink_rcv+0x296/0x28f0 [ 1533.261318][T11233] ? __kernel_text_address+0xd/0x40 [ 1533.261353][T11233] ? arch_stack_walk+0xff/0x150 [ 1533.261396][T11233] ? stack_trace_save+0x11a/0x1d0 [ 1533.261428][T11233] ? __pfx_stack_trace_save+0x10/0x10 [ 1533.261459][T11233] ? stack_depot_save_flags+0x44/0x940 [ 1533.261478][T11233] ? stack_trace_snprint+0x71/0xf0 [ 1533.261507][T11233] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1533.261533][T11233] ? kasan_save_track+0x51/0x80 [ 1533.261553][T11233] ? kasan_save_track+0x3f/0x80 [ 1533.261573][T11233] ? __kasan_slab_alloc+0x66/0x80 [ 1533.261595][T11233] ? kmem_cache_alloc_node_noprof+0x1f2/0x3b0 [ 1533.261621][T11233] ? kmalloc_reserve+0xa8/0x2a0 [ 1533.261649][T11233] ? __alloc_skb+0x1f2/0x480 [ 1533.261677][T11233] ? netlink_sendmsg+0x638/0xcd0 [ 1533.261703][T11233] ? __sock_sendmsg+0x221/0x270 [ 1533.261735][T11233] ? ____sys_sendmsg+0x523/0x860 [ 1533.261760][T11233] ? __lock_acquire+0xad5/0xd80 [ 1533.261812][T11233] ? __lock_acquire+0xad5/0xd80 [ 1533.261856][T11233] ? netlink_deliver_tap+0x2e/0x1b0 [ 1533.261888][T11233] ? netlink_deliver_tap+0x2e/0x1b0 [ 1533.261920][T11233] netlink_unicast+0x7f8/0x9a0 [ 1533.261958][T11233] ? __pfx_netlink_unicast+0x10/0x10 [ 1533.261988][T11233] ? skb_put+0x114/0x1f0 [ 1533.262025][T11233] netlink_sendmsg+0x8c3/0xcd0 [ 1533.262071][T11233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1533.262105][T11233] ? aa_sock_msg_perm+0x91/0x160 [ 1533.262142][T11233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1533.262168][T11233] __sock_sendmsg+0x221/0x270 [ 1533.262199][T11233] ____sys_sendmsg+0x523/0x860 [ 1533.262231][T11233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1533.262250][T11233] ? __fget_files+0x2a/0x420 [ 1533.262285][T11233] ? __fget_files+0x2a/0x420 [ 1533.262327][T11233] __sys_sendmsg+0x271/0x360 [ 1533.262355][T11233] ? __pfx___sys_sendmsg+0x10/0x10 [ 1533.262445][T11233] ? do_syscall_64+0xb6/0x230 [ 1533.262476][T11233] do_syscall_64+0xf3/0x230 [ 1533.262503][T11233] ? clear_bhb_loop+0x45/0xa0 [ 1533.262529][T11233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.262550][T11233] RIP: 0033:0x7fe8a9f8d169 [ 1533.262569][T11233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.262588][T11233] RSP: 002b:00007fe8aad7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1533.262611][T11233] RAX: ffffffffffffffda RBX: 00007fe8aa1a6080 RCX: 00007fe8a9f8d169 [ 1533.262628][T11233] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1533.262641][T11233] RBP: 00007fe8aa00e990 R08: 0000000000000000 R09: 0000000000000000 [ 1533.262655][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.262668][T11233] R13: 0000000000000001 R14: 00007fe8aa1a6080 R15: 00007fff734d01c8 [ 1533.262705][T11233] [ 1533.262791][T11233] Mem-Info: [ 1533.627888][T11245] netlink: 'syz.3.10651': attribute type 4 has an invalid length. [ 1533.636788][T11233] active_anon:24823 inactive_anon:0 isolated_anon:0 [ 1533.636788][T11233] active_file:1864 inactive_file:38874 isolated_file:0 [ 1533.636788][T11233] unevictable:768 dirty:385 writeback:0 [ 1533.636788][T11233] slab_reclaimable:11631 slab_unreclaimable:115700 [ 1533.636788][T11233] mapped:33023 shmem:1462 pagetables:919 [ 1533.636788][T11233] sec_pagetables:0 bounce:0 [ 1533.636788][T11233] kernel_misc_reclaimable:0 [ 1533.636788][T11233] free:1292179 free_pcp:517 free_cma:0 [ 1533.918852][T11233] Node 0 active_anon:98592kB inactive_anon:0kB active_file:7456kB inactive_file:155424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119692kB dirty:1540kB writeback:0kB shmem:4312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11060kB pagetables:3476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1533.976224][T11233] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1534.035925][T11233] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1534.086827][T11233] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1534.097371][T11233] Node 0 DMA32 free:1240244kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:98600kB inactive_anon:0kB active_file:7456kB inactive_file:155324kB unevictable:1536kB writepending:1592kB present:3129332kB managed:2547528kB mlocked:0kB bounce:0kB free_pcp:10324kB local_pcp:2692kB free_cma:0kB [ 1534.164755][T11258] lo speed is unknown, defaulting to 1000 [ 1534.173059][T11258] lo speed is unknown, defaulting to 1000 [ 1534.180941][T11258] lo speed is unknown, defaulting to 1000 [ 1534.334253][T11233] lowmem_reserve[]: 0 0 0 0 0 [ 1534.377036][T11233] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1534.474482][T11233] lowmem_reserve[]: 0 0 0 0 0 [ 1534.485142][T11233] Node 1 Normal free:3912996kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1534.790120][T11233] lowmem_reserve[]: 0 0 0 0 0 [ 1534.795037][T11233] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1534.875882][T11233] Node 0 DMA32: 1544*4kB (UME) 437*8kB (UE) 85*16kB [ 1534.883612][T11280] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1534.904198][T11280] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 1534.924923][T11233] (UE) 300*32kB (UME) 253*64kB (UME) 505*128kB (UME) 267*256kB (UM) 118*512kB (UM) 63*1024kB (UM) 4*2048kB (UM) 228*4096kB (UME) = 1236824kB [ 1534.979700][T11233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1534.998311][T11233] Node 1 Normal: 231*4kB (UE) 63*8kB (UME) 43*16kB (UME) 199*32kB (UME) 104*64kB (UME) 32*128kB (UME) 16*256kB (UME) 7*512kB (UME) 5*1024kB (UM) 1*2048kB (E) 947*4096kB (UM) = 3912996kB [ 1535.036381][T11233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1535.134446][T11233] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1535.154234][T11233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1535.164530][T11233] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1535.174139][T11233] 46749 total pagecache pages [ 1535.182485][T11233] 0 pages in swap cache [ 1535.186948][T11233] Free swap = 124996kB [ 1535.191451][T11233] Total swap = 124996kB [ 1535.195776][T11233] 2097051 pages RAM [ 1535.200231][T11233] 0 pages HighMem/MovableOnly [ 1535.205821][T11233] 428511 pages reserved [ 1535.211322][T11233] 0 pages cma reserved [ 1535.426904][T11294] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10662'. [ 1535.459128][T11294] bridge_slave_0: entered allmulticast mode [ 1535.676490][T11301] netlink: 'syz.1.10664': attribute type 4 has an invalid length. [ 1535.823802][T11306] vlan0: entered allmulticast mode [ 1535.935026][T11313] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.10667'. [ 1536.470027][T11335] netlink: 'syz.0.10675': attribute type 4 has an invalid length. [ 1537.549581][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10683'. [ 1537.637481][T11367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1538.380142][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10696'. [ 1538.423815][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10696'. [ 1538.523919][T11401] tipc: New replicast peer: 10.1.1.2 [ 1538.551907][T11401] tipc: Enabled bearer , priority 10 [ 1538.568525][T11406] x_tables: duplicate underflow at hook 2 [ 1538.598496][T11405] gtp1: entered promiscuous mode [ 1538.604187][T11405] gtp1: entered allmulticast mode [ 1539.086993][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10708'. [ 1539.103647][T11432] netlink: 'syz.1.10708': attribute type 1 has an invalid length. [ 1539.112389][T11432] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10708'. [ 1539.227174][T11439] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1539.448140][T11448] xt_NFQUEUE: number of total queues is 0 [ 1539.629602][T11465] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10719'. [ 1539.848005][T11476] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10724'. [ 1539.886297][T11478] FAULT_INJECTION: forcing a failure. [ 1539.886297][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.909682][T11478] CPU: 0 UID: 0 PID: 11478 Comm: syz.3.10725 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1539.909713][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1539.909727][T11478] Call Trace: [ 1539.909736][T11478] [ 1539.909746][T11478] dump_stack_lvl+0x241/0x360 [ 1539.909784][T11478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1539.909814][T11478] ? __pfx__printk+0x10/0x10 [ 1539.909849][T11478] ? ref_tracker_alloc+0x316/0x4c0 [ 1539.909877][T11478] should_fail_ex+0x424/0x570 [ 1539.909917][T11478] should_failslab+0xac/0x100 [ 1539.909948][T11478] kmem_cache_alloc_noprof+0x78/0x390 [ 1539.909977][T11478] ? skb_clone+0x20c/0x390 [ 1539.910003][T11478] skb_clone+0x20c/0x390 [ 1539.910030][T11478] __netlink_deliver_tap+0x3c4/0x7f0 [ 1539.910075][T11478] ? netlink_deliver_tap+0x2e/0x1b0 [ 1539.910104][T11478] netlink_deliver_tap+0x19d/0x1b0 [ 1539.910133][T11478] netlink_sendskb+0x68/0x140 [ 1539.910161][T11478] netlink_unicast+0x39f/0x9a0 [ 1539.910183][T11478] ? __asan_memcpy+0x40/0x70 [ 1539.910213][T11478] ? __pfx_netlink_unicast+0x10/0x10 [ 1539.910250][T11478] netlink_rcv_skb+0x296/0x480 [ 1539.910280][T11478] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1539.910310][T11478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1539.910363][T11478] ? netlink_deliver_tap+0x2e/0x1b0 [ 1539.910394][T11478] ? netlink_deliver_tap+0x2e/0x1b0 [ 1539.910425][T11478] netlink_unicast+0x7f8/0x9a0 [ 1539.910473][T11478] ? __pfx_netlink_unicast+0x10/0x10 [ 1539.910503][T11478] ? skb_put+0x114/0x1f0 [ 1539.910539][T11478] netlink_sendmsg+0x8c3/0xcd0 [ 1539.910582][T11478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1539.910615][T11478] ? aa_sock_msg_perm+0x91/0x160 [ 1539.910649][T11478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1539.910676][T11478] __sock_sendmsg+0x221/0x270 [ 1539.910706][T11478] sock_write_iter+0x2d9/0x3f0 [ 1539.910735][T11478] ? __pfx_sock_write_iter+0x10/0x10 [ 1539.910786][T11478] do_iter_readv_writev+0x71f/0x9d0 [ 1539.910820][T11478] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1539.910853][T11478] ? bpf_lsm_file_permission+0x9/0x10 [ 1539.910877][T11478] ? rw_verify_area+0x246/0x630 [ 1539.910904][T11478] vfs_writev+0x38d/0xbc0 [ 1539.910934][T11478] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1539.910966][T11478] ? vfs_write+0xb29/0xd10 [ 1539.910992][T11478] ? __lock_acquire+0xad5/0xd80 [ 1539.911014][T11478] ? __pfx_vfs_writev+0x10/0x10 [ 1539.911065][T11478] ? __fget_files+0x2a/0x420 [ 1539.911099][T11478] ? __fget_files+0x39d/0x420 [ 1539.911128][T11478] ? __fget_files+0x2a/0x420 [ 1539.911170][T11478] do_writev+0x1b8/0x360 [ 1539.911208][T11478] ? __pfx_do_writev+0x10/0x10 [ 1539.911245][T11478] ? do_syscall_64+0xb6/0x230 [ 1539.911277][T11478] do_syscall_64+0xf3/0x230 [ 1539.911304][T11478] ? clear_bhb_loop+0x45/0xa0 [ 1539.911331][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.911352][T11478] RIP: 0033:0x7f10a178d169 [ 1539.911372][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1539.911390][T11478] RSP: 002b:00007f10a25f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1539.911414][T11478] RAX: ffffffffffffffda RBX: 00007f10a19a5fa0 RCX: 00007f10a178d169 [ 1539.911429][T11478] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 1539.911450][T11478] RBP: 00007f10a25f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.911463][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1539.911476][T11478] R13: 0000000000000000 R14: 00007f10a19a5fa0 R15: 00007ffe97bb0c28 [ 1539.911512][T11478] [ 1540.357879][T11489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10733'. [ 1540.385699][T11489] nbd: socks must be embedded in a SOCK_ITEM attr [ 1541.098892][T11501] netlink: 'syz.3.10730': attribute type 4 has an invalid length. [ 1541.323588][T11512] netlink: 'syz.0.10737': attribute type 21 has an invalid length. [ 1541.413216][T11516] netlink: 'syz.0.10737': attribute type 3 has an invalid length. [ 1542.816852][T11532] IPv6: sit1: Disabled Multicast RS [ 1542.973939][T11532] sit1: entered allmulticast mode [ 1543.163720][T11554] bond0: entered promiscuous mode [ 1543.169183][T11554] bond0: entered allmulticast mode [ 1543.178317][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.341540][T11560] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1543.407599][T11568] FAULT_INJECTION: forcing a failure. [ 1543.407599][T11568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1543.463352][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.3.10751 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1543.463385][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1543.463399][T11568] Call Trace: [ 1543.463408][T11568] [ 1543.463418][T11568] dump_stack_lvl+0x241/0x360 [ 1543.463456][T11568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1543.463487][T11568] ? __pfx__printk+0x10/0x10 [ 1543.463530][T11568] should_fail_ex+0x424/0x570 [ 1543.463569][T11568] _copy_to_user+0x31/0xb0 [ 1543.463599][T11568] simple_read_from_buffer+0xc4/0x170 [ 1543.463633][T11568] proc_fail_nth_read+0x1ef/0x260 [ 1543.463671][T11568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1543.463709][T11568] ? rw_verify_area+0x246/0x630 [ 1543.463732][T11568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1543.463768][T11568] vfs_read+0x21f/0xb90 [ 1543.463798][T11568] ? __pfx___mutex_lock+0x10/0x10 [ 1543.463827][T11568] ? __pfx_vfs_read+0x10/0x10 [ 1543.463854][T11568] ? __fget_files+0x2a/0x420 [ 1543.463888][T11568] ? __fget_files+0x39d/0x420 [ 1543.463917][T11568] ? __fget_files+0x2a/0x420 [ 1543.463960][T11568] ksys_read+0x19d/0x2d0 [ 1543.463986][T11568] ? __pfx_ksys_read+0x10/0x10 [ 1543.464008][T11568] ? rcu_is_watching+0x15/0xb0 [ 1543.464035][T11568] ? trace_sys_enter+0x25/0x120 [ 1543.464066][T11568] do_syscall_64+0xf3/0x230 [ 1543.464094][T11568] ? clear_bhb_loop+0x45/0xa0 [ 1543.464129][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.464151][T11568] RIP: 0033:0x7f10a178bb7c [ 1543.464171][T11568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1543.464190][T11568] RSP: 002b:00007f10a25f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1543.464215][T11568] RAX: ffffffffffffffda RBX: 00007f10a19a5fa0 RCX: 00007f10a178bb7c [ 1543.464232][T11568] RDX: 000000000000000f RSI: 00007f10a25f50a0 RDI: 0000000000000006 [ 1543.464245][T11568] RBP: 00007f10a25f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.464259][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.464272][T11568] R13: 0000000000000000 R14: 00007f10a19a5fa0 R15: 00007ffe97bb0c28 [ 1543.464314][T11568] [ 1543.834004][T11574] netlink: 'syz.1.10755': attribute type 4 has an invalid length. [ 1544.815405][T11613] IPv6: sit2: Disabled Multicast RS [ 1544.832426][T11613] sit2: entered allmulticast mode [ 1545.300059][T11625] netlink: 'syz.2.10769': attribute type 4 has an invalid length. [ 1546.031931][T11656] netlink: 'syz.2.10777': attribute type 21 has an invalid length. [ 1546.040265][T11656] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10777'. [ 1546.129425][T11655] netlink: 'syz.4.10776': attribute type 10 has an invalid length. [ 1546.188174][T11663] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.10776'. [ 1546.667425][T11675] netlink: 'syz.2.10781': attribute type 4 has an invalid length. [ 1546.864554][T11684] FAULT_INJECTION: forcing a failure. [ 1546.864554][T11684] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.877473][T11684] CPU: 0 UID: 0 PID: 11684 Comm: syz.4.10783 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1546.877521][T11684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1546.877544][T11684] Call Trace: [ 1546.877559][T11684] [ 1546.877574][T11684] dump_stack_lvl+0x241/0x360 [ 1546.877617][T11684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1546.877647][T11684] ? __pfx__printk+0x10/0x10 [ 1546.877681][T11684] ? __pfx___might_resched+0x10/0x10 [ 1546.877712][T11684] should_fail_ex+0x424/0x570 [ 1546.877753][T11684] should_failslab+0xac/0x100 [ 1546.877784][T11684] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 1546.877815][T11684] ? __alloc_skb+0x1c2/0x480 [ 1546.877859][T11684] __alloc_skb+0x1c2/0x480 [ 1546.877898][T11684] ? __pfx___alloc_skb+0x10/0x10 [ 1546.877933][T11684] ? netlink_autobind+0xd6/0x2f0 [ 1546.877963][T11684] ? netlink_autobind+0x2b0/0x2f0 [ 1546.878007][T11684] netlink_sendmsg+0x638/0xcd0 [ 1546.878053][T11684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.878089][T11684] ? aa_sock_msg_perm+0x91/0x160 [ 1546.878126][T11684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.878153][T11684] __sock_sendmsg+0x221/0x270 [ 1546.878186][T11684] ____sys_sendmsg+0x523/0x860 [ 1546.878219][T11684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1546.878238][T11684] ? __fget_files+0x2a/0x420 [ 1546.878280][T11684] ? __fget_files+0x2a/0x420 [ 1546.878328][T11684] __sys_sendmsg+0x271/0x360 [ 1546.878357][T11684] ? __pfx___sys_sendmsg+0x10/0x10 [ 1546.878444][T11684] ? do_syscall_64+0xb6/0x230 [ 1546.878476][T11684] do_syscall_64+0xf3/0x230 [ 1546.878504][T11684] ? clear_bhb_loop+0x45/0xa0 [ 1546.878531][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.878552][T11684] RIP: 0033:0x7f3210b8d169 [ 1546.878573][T11684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1546.878591][T11684] RSP: 002b:00007f32119e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1546.878614][T11684] RAX: ffffffffffffffda RBX: 00007f3210da5fa0 RCX: 00007f3210b8d169 [ 1546.878630][T11684] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1546.878644][T11684] RBP: 00007f32119e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.878658][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.878676][T11684] R13: 0000000000000000 R14: 00007f3210da5fa0 R15: 00007fff0211ce88 [ 1546.878709][T11684] [ 1547.194409][T11685] IPv6: sit2: Disabled Multicast RS [ 1547.210491][T11685] sit2: entered allmulticast mode [ 1547.630696][T11704] netlink: 'syz.0.10788': attribute type 2 has an invalid length. [ 1547.674436][T11706] lo speed is unknown, defaulting to 1000 [ 1547.683157][T11706] lo speed is unknown, defaulting to 1000 [ 1547.691190][T11706] lo speed is unknown, defaulting to 1000 [ 1548.215915][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10791'. [ 1548.326371][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10793'. [ 1548.380066][T11720] netlink: 'syz.1.10792': attribute type 4 has an invalid length. [ 1548.687097][T11731] tipc: Enabling of bearer rejected, already enabled [ 1548.696469][T11737] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 1548.704286][T11737] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 1549.054442][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10802'. [ 1549.404490][T11764] FAULT_INJECTION: forcing a failure. [ 1549.404490][T11764] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.421292][T11764] CPU: 0 UID: 0 PID: 11764 Comm: syz.2.10808 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1549.421326][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1549.421340][T11764] Call Trace: [ 1549.421349][T11764] [ 1549.421359][T11764] dump_stack_lvl+0x241/0x360 [ 1549.421398][T11764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1549.421428][T11764] ? __pfx__printk+0x10/0x10 [ 1549.421462][T11764] ? __pfx___might_resched+0x10/0x10 [ 1549.421493][T11764] should_fail_ex+0x424/0x570 [ 1549.421533][T11764] should_failslab+0xac/0x100 [ 1549.421564][T11764] __kmalloc_cache_noprof+0x73/0x370 [ 1549.421593][T11764] ? call_usermodehelper_setup+0x8e/0x270 [ 1549.421613][T11764] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 1549.421658][T11764] call_usermodehelper_setup+0x8e/0x270 [ 1549.421680][T11764] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1549.421707][T11764] __request_module+0x3cf/0x640 [ 1549.421732][T11764] ? __rtnl_unlock+0xcc/0xf0 [ 1549.421753][T11764] ? load_metalist+0x177/0x500 [ 1549.421785][T11764] ? __pfx___request_module+0x10/0x10 [ 1549.421812][T11764] ? __pfx_netdev_run_todo+0x10/0x10 [ 1549.421846][T11764] ? load_metalist+0x159/0x500 [ 1549.421884][T11764] load_metalist+0x1ff/0x500 [ 1549.421921][T11764] tcf_ife_init+0x467/0xfc0 [ 1549.421967][T11764] ? __pfx_tcf_ife_init+0x10/0x10 [ 1549.422020][T11764] ? nla_memcpy+0x5a/0xb0 [ 1549.422053][T11764] ? __pfx_tcf_ife_init+0x10/0x10 [ 1549.422084][T11764] tcf_action_init_1+0x5d9/0x900 [ 1549.422121][T11764] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1549.422145][T11764] ? _raw_read_unlock+0x28/0x50 [ 1549.422168][T11764] ? tc_action_load_ops+0x247/0x530 [ 1549.422216][T11764] ? __nla_parse+0x40/0x60 [ 1549.422245][T11764] tcf_action_init+0x2e9/0xae0 [ 1549.422277][T11764] ? is_bpf_text_address+0x26/0x2a0 [ 1549.422308][T11764] ? __pfx_tcf_action_init+0x10/0x10 [ 1549.422407][T11764] ? apparmor_capable+0x13b/0x1b0 [ 1549.422442][T11764] tc_ctl_action+0x47f/0xcf0 [ 1549.422482][T11764] ? __pfx_tc_ctl_action+0x10/0x10 [ 1549.422506][T11764] ? __lock_acquire+0xad5/0xd80 [ 1549.422561][T11764] ? aa_get_newest_label+0x101/0x6f0 [ 1549.422632][T11764] ? __pfx_tc_ctl_action+0x10/0x10 [ 1549.422660][T11764] rtnetlink_rcv_msg+0x7c2/0xd70 [ 1549.422687][T11764] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 1549.422722][T11764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1549.422760][T11764] ? ref_tracker_free+0x63e/0x7e0 [ 1549.422792][T11764] netlink_rcv_skb+0x208/0x480 [ 1549.422823][T11764] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1549.422854][T11764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1549.422911][T11764] ? netlink_deliver_tap+0x2e/0x1b0 [ 1549.422944][T11764] ? netlink_deliver_tap+0x2e/0x1b0 [ 1549.422977][T11764] netlink_unicast+0x7f8/0x9a0 [ 1549.423014][T11764] ? __pfx_netlink_unicast+0x10/0x10 [ 1549.423044][T11764] ? skb_put+0x114/0x1f0 [ 1549.423082][T11764] netlink_sendmsg+0x8c3/0xcd0 [ 1549.423128][T11764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.423164][T11764] ? aa_sock_msg_perm+0x91/0x160 [ 1549.423199][T11764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.423227][T11764] __sock_sendmsg+0x221/0x270 [ 1549.423258][T11764] ____sys_sendmsg+0x523/0x860 [ 1549.423290][T11764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1549.423309][T11764] ? __fget_files+0x2a/0x420 [ 1549.423342][T11764] ? __fget_files+0x2a/0x420 [ 1549.423384][T11764] __sys_sendmsg+0x271/0x360 [ 1549.423412][T11764] ? __pfx___sys_sendmsg+0x10/0x10 [ 1549.423497][T11764] ? do_syscall_64+0xb6/0x230 [ 1549.423528][T11764] do_syscall_64+0xf3/0x230 [ 1549.423554][T11764] ? clear_bhb_loop+0x45/0xa0 [ 1549.423580][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.423600][T11764] RIP: 0033:0x7f6c2ef8d169 [ 1549.423619][T11764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1549.423649][T11764] RSP: 002b:00007f6c2fed0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1549.423672][T11764] RAX: ffffffffffffffda RBX: 00007f6c2f1a5fa0 RCX: 00007f6c2ef8d169 [ 1549.423688][T11764] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1549.423702][T11764] RBP: 00007f6c2fed0090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.423716][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1549.423729][T11764] R13: 0000000000000000 R14: 00007f6c2f1a5fa0 R15: 00007ffd0b6afe28 [ 1549.423763][T11764] [ 1550.367849][T11770] macsec2: entered promiscuous mode [ 1550.407395][T11770] dummy0: entered promiscuous mode [ 1550.439736][T11770] macsec2: entered allmulticast mode [ 1550.499774][T11770] dummy0: entered allmulticast mode [ 1550.585892][T11792] xt_hashlimit: size too large, truncated to 1048576 [ 1550.602697][T11770] dummy0: left allmulticast mode [ 1550.609101][T11770] dummy0: left promiscuous mode [ 1550.662174][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1550.744216][T11767] macsec2: entered promiscuous mode [ 1550.777307][T11767] dummy0: entered promiscuous mode [ 1550.799557][T11767] macsec2: entered allmulticast mode [ 1550.830199][T11767] dummy0: entered allmulticast mode [ 1550.857592][T11767] dummy0: left allmulticast mode [ 1550.899423][T11767] dummy0: left promiscuous mode [ 1551.010270][T11798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10816'. [ 1551.034379][T11801] vlan1: entered allmulticast mode [ 1551.253423][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10819'. [ 1551.454855][T11789] : renamed from bond0 [ 1551.550577][T11821] rdma_rxe: rxe_newlink: failed to add lo [ 1551.649600][T11818] gre0: entered allmulticast mode [ 1551.657743][T11818] netlink: 'syz.4.10819': attribute type 8 has an invalid length. [ 1551.701400][T11781] lo speed is unknown, defaulting to 1000 [ 1551.762129][T11781] lo speed is unknown, defaulting to 1000 [ 1551.858987][T11781] lo speed is unknown, defaulting to 1000 [ 1552.315659][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10827'. [ 1552.622123][T11860] syzkaller1: entered promiscuous mode [ 1552.629188][T11860] syzkaller1: entered allmulticast mode [ 1552.713187][T11851] IPv6: sit1: Disabled Multicast RS [ 1552.731683][T11851] sit1: entered allmulticast mode [ 1553.844125][T11910] FAULT_INJECTION: forcing a failure. [ 1553.844125][T11910] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.894567][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz.0.10851 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1553.894603][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1553.894617][T11910] Call Trace: [ 1553.894627][T11910] [ 1553.894637][T11910] dump_stack_lvl+0x241/0x360 [ 1553.894676][T11910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1553.894708][T11910] ? __pfx__printk+0x10/0x10 [ 1553.894752][T11910] should_fail_ex+0x424/0x570 [ 1553.894793][T11910] should_failslab+0xac/0x100 [ 1553.894825][T11910] __kmalloc_cache_noprof+0x73/0x370 [ 1553.894854][T11910] ? sctp_add_bind_addr+0x89/0x3a0 [ 1553.894890][T11910] sctp_add_bind_addr+0x89/0x3a0 [ 1553.894925][T11910] sctp_copy_local_addr_list+0x313/0x500 [ 1553.894959][T11910] ? sctp_copy_local_addr_list+0xad/0x500 [ 1553.894991][T11910] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1553.895025][T11910] ? sctp_v6_is_any+0x60/0x70 [ 1553.895058][T11910] ? sctp_copy_one_addr+0x94/0x360 [ 1553.895094][T11910] sctp_bind_addr_copy+0xad/0x3b0 [ 1553.895124][T11910] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 1553.895156][T11910] sctp_connect_new_asoc+0x337/0x700 [ 1553.895184][T11910] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1553.895208][T11910] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 1553.895235][T11910] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 1553.895254][T11910] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 1553.895281][T11910] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1553.895308][T11910] sctp_sendmsg+0x2009/0x3620 [ 1553.895356][T11910] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1553.895381][T11910] ? aa_sk_perm+0x96f/0xac0 [ 1553.895427][T11910] ? inet_sendmsg+0x330/0x390 [ 1553.895454][T11910] __sock_sendmsg+0x1a6/0x270 [ 1553.895485][T11910] __sys_sendto+0x365/0x4c0 [ 1553.895522][T11910] ? __pfx___sys_sendto+0x10/0x10 [ 1553.895569][T11910] ? __fget_files+0x2a/0x420 [ 1553.895611][T11910] ? ksys_write+0x275/0x2d0 [ 1553.895648][T11910] __x64_sys_sendto+0xde/0x100 [ 1553.895682][T11910] do_syscall_64+0xf3/0x230 [ 1553.895710][T11910] ? clear_bhb_loop+0x45/0xa0 [ 1553.895736][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.895757][T11910] RIP: 0033:0x7f0b8878d169 [ 1553.895777][T11910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.895796][T11910] RSP: 002b:00007f0b896d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1553.895820][T11910] RAX: ffffffffffffffda RBX: 00007f0b889a5fa0 RCX: 00007f0b8878d169 [ 1553.895836][T11910] RDX: 0000000000010727 RSI: 0000200000000500 RDI: 0000000000000003 [ 1553.895851][T11910] RBP: 00007f0b896d3090 R08: 0000200000000140 R09: 000000000000001c [ 1553.895865][T11910] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1553.895878][T11910] R13: 0000000000000000 R14: 00007f0b889a5fa0 R15: 00007fff7388deb8 [ 1553.895914][T11910] [ 1554.296351][T11922] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10856'. [ 1554.606022][T11938] bond0: option ad_select: unable to set because the bond device is up [ 1554.617978][T11938] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10864'. [ 1554.821528][T11950] IPv6: sit1: Disabled Multicast RS [ 1554.827997][T11950] sit1: entered allmulticast mode [ 1555.065933][T11954] syzkaller1: entered promiscuous mode [ 1555.071684][T11954] syzkaller1: entered allmulticast mode [ 1555.162438][T11964] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.10869'. [ 1555.554166][T11976] xt_hashlimit: overflow, try lower: 0/0 [ 1556.995184][T12001] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10882'. [ 1557.421782][T12015] lo speed is unknown, defaulting to 1000 [ 1557.444333][T12015] lo speed is unknown, defaulting to 1000 [ 1557.486848][T12015] lo speed is unknown, defaulting to 1000 [ 1557.853324][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10892'. [ 1557.862772][T12025] netlink: 'syz.4.10892': attribute type 8 has an invalid length. [ 1558.159908][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10897'. [ 1558.780706][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10905'. [ 1558.943907][T12054] bridge3: entered promiscuous mode [ 1558.995543][T12054] bridge3: left promiscuous mode [ 1559.431838][T12020] netlink: 'syz.3.10887': attribute type 178 has an invalid length. [ 1559.680615][T12098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10909'. [ 1559.853469][T12105] netlink: 'syz.2.10919': attribute type 4 has an invalid length. [ 1560.065981][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10921'. [ 1560.086967][T12115] netlink: 'syz.2.10921': attribute type 30 has an invalid length. [ 1560.133122][T12115] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.141803][T12115] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.150324][T12115] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.158634][T12115] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.415089][T12125] IPv6: sit1: Disabled Multicast RS [ 1560.436007][T12125] sit1: entered allmulticast mode [ 1561.686251][T12157] netlink: 'syz.2.10931': attribute type 4 has an invalid length. [ 1561.868862][T12162] x_tables: duplicate underflow at hook 2 [ 1562.022281][T12171] netlink: 'syz.2.10937': attribute type 7 has an invalid length. [ 1562.545602][T12187] netlink: 'syz.0.10943': attribute type 4 has an invalid length. [ 1562.724102][T12189] vlan0: entered allmulticast mode [ 1562.971789][T12191] IPv6: sit1: Disabled Multicast RS [ 1563.001872][T12191] sit1: entered allmulticast mode [ 1563.165120][T12209] x_tables: duplicate underflow at hook 2 [ 1563.274449][T12213] x_tables: duplicate underflow at hook 2 [ 1564.037971][T12249] x_tables: duplicate underflow at hook 2 [ 1564.542454][T12271] netlink: 'syz.2.10971': attribute type 21 has an invalid length. [ 1564.552450][T12271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10971'. [ 1564.634015][T12277] vlan0: entered allmulticast mode [ 1564.735541][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10972'. [ 1564.768341][T12281] netlink: 'syz.4.10972': attribute type 8 has an invalid length. [ 1564.975739][T12289] x_tables: duplicate underflow at hook 2 [ 1565.261501][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10981'. [ 1565.536648][T12311] netlink: 'syz.2.10987': attribute type 21 has an invalid length. [ 1565.545503][T12311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10987'. [ 1565.975316][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10989'. [ 1566.066663][T12335] FAULT_INJECTION: forcing a failure. [ 1566.066663][T12335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.140477][T12335] CPU: 1 UID: 0 PID: 12335 Comm: syz.0.10989 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1566.140511][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1566.140526][T12335] Call Trace: [ 1566.140535][T12335] [ 1566.140545][T12335] dump_stack_lvl+0x241/0x360 [ 1566.140585][T12335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1566.140616][T12335] ? __pfx__printk+0x10/0x10 [ 1566.140658][T12335] should_fail_ex+0x424/0x570 [ 1566.140700][T12335] _copy_to_user+0x31/0xb0 [ 1566.140734][T12335] simple_read_from_buffer+0xc4/0x170 [ 1566.140770][T12335] proc_fail_nth_read+0x1ef/0x260 [ 1566.140808][T12335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.140846][T12335] ? rw_verify_area+0x246/0x630 [ 1566.140868][T12335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1566.140903][T12335] vfs_read+0x21f/0xb90 [ 1566.140933][T12335] ? __pfx___mutex_lock+0x10/0x10 [ 1566.140962][T12335] ? __pfx_vfs_read+0x10/0x10 [ 1566.140989][T12335] ? __fget_files+0x2a/0x420 [ 1566.141022][T12335] ? __fget_files+0x39d/0x420 [ 1566.141051][T12335] ? __fget_files+0x2a/0x420 [ 1566.141094][T12335] ksys_read+0x19d/0x2d0 [ 1566.141120][T12335] ? __pfx_ksys_read+0x10/0x10 [ 1566.141150][T12335] ? do_syscall_64+0xb6/0x230 [ 1566.141182][T12335] do_syscall_64+0xf3/0x230 [ 1566.141210][T12335] ? clear_bhb_loop+0x45/0xa0 [ 1566.141244][T12335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.141266][T12335] RIP: 0033:0x7f0b8878bb7c [ 1566.141286][T12335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1566.141304][T12335] RSP: 002b:00007f0b896d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1566.141328][T12335] RAX: ffffffffffffffda RBX: 00007f0b889a5fa0 RCX: 00007f0b8878bb7c [ 1566.141345][T12335] RDX: 000000000000000f RSI: 00007f0b896d30a0 RDI: 0000000000000004 [ 1566.141359][T12335] RBP: 00007f0b896d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.141372][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.141385][T12335] R13: 0000000000000000 R14: 00007f0b889a5fa0 R15: 00007fff7388deb8 [ 1566.141421][T12335] [ 1566.520289][T12346] x_tables: duplicate underflow at hook 2 [ 1566.803512][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10995'. [ 1566.964029][T12363] gre0: entered allmulticast mode [ 1567.023720][T12363] netlink: 'syz.1.10995': attribute type 8 has an invalid length. [ 1567.219242][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1567.295770][T12381] vlan1: entered allmulticast mode [ 1567.498405][T12395] xt_hashlimit: size too large, truncated to 1048576 [ 1567.550813][T12398] xt_hashlimit: size too large, truncated to 1048576 [ 1568.283077][T12420] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1568.397919][T12420] lo speed is unknown, defaulting to 1000 [ 1568.439470][T12420] lo speed is unknown, defaulting to 1000 [ 1568.447123][T12420] lo speed is unknown, defaulting to 1000 [ 1568.888093][T12457] netlink: 'syz.1.11028': attribute type 4 has an invalid length. [ 1569.203408][T12464] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11031'. [ 1570.088931][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1570.096825][T12487] x_tables: duplicate underflow at hook 2 [ 1570.753204][T12514] netlink: 'syz.4.11051': attribute type 4 has an invalid length. [ 1570.781571][T12516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11052'. [ 1571.516314][T12545] netlink: 'syz.2.11063': attribute type 4 has an invalid length. [ 1572.422563][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1573.077521][T12603] netlink: 'syz.4.11082': attribute type 4 has an invalid length. [ 1573.675188][T12626] vlan0: entered allmulticast mode [ 1573.814500][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11095'. [ 1573.965985][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11100'. [ 1574.385337][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11101'. [ 1574.406523][T12656] gre0: entered allmulticast mode [ 1574.417643][T12656] netlink: 'syz.2.11101': attribute type 8 has an invalid length. [ 1574.429972][T12668] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11103'. [ 1574.499022][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1575.140910][T12687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11112'. [ 1575.491115][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11109'. [ 1575.593965][T12705] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11118'. [ 1575.661352][T12702] gre0: entered allmulticast mode [ 1575.724132][T12702] netlink: 'syz.3.11109': attribute type 8 has an invalid length. [ 1576.204551][T12734] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11129'. [ 1576.433602][T12741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11132'. [ 1576.570045][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1577.090993][T12760] netlink: 'syz.3.11136': attribute type 10 has an invalid length. [ 1577.116292][T12759] vlan0: entered allmulticast mode [ 1577.152550][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11136'. [ 1577.184241][T12766] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11141'. [ 1577.345111][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11143'. [ 1578.158910][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11157'. [ 1579.425190][T12844] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1579.723338][T12853] netlink: 'syz.1.11176': attribute type 21 has an invalid length. [ 1579.732796][T12853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11176'. [ 1580.339914][T12868] FAULT_INJECTION: forcing a failure. [ 1580.339914][T12868] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.353084][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.4.11181 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1580.353117][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1580.353132][T12868] Call Trace: [ 1580.353141][T12868] [ 1580.353151][T12868] dump_stack_lvl+0x241/0x360 [ 1580.353190][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1580.353220][T12868] ? __pfx__printk+0x10/0x10 [ 1580.353254][T12868] ? __pfx___might_resched+0x10/0x10 [ 1580.353284][T12868] should_fail_ex+0x424/0x570 [ 1580.353324][T12868] should_failslab+0xac/0x100 [ 1580.353355][T12868] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 1580.353385][T12868] ? __alloc_skb+0x1c2/0x480 [ 1580.353422][T12868] __alloc_skb+0x1c2/0x480 [ 1580.353460][T12868] ? __pfx___alloc_skb+0x10/0x10 [ 1580.353495][T12868] ? netlink_autobind+0xd6/0x2f0 [ 1580.353523][T12868] ? netlink_autobind+0x2b0/0x2f0 [ 1580.353559][T12868] netlink_sendmsg+0x638/0xcd0 [ 1580.353604][T12868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1580.353639][T12868] ? aa_sock_msg_perm+0x91/0x160 [ 1580.353675][T12868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1580.353702][T12868] __sock_sendmsg+0x221/0x270 [ 1580.353733][T12868] ____sys_sendmsg+0x523/0x860 [ 1580.353766][T12868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1580.353784][T12868] ? __fget_files+0x2a/0x420 [ 1580.353830][T12868] ? __fget_files+0x2a/0x420 [ 1580.353872][T12868] __sys_sendmsg+0x271/0x360 [ 1580.353900][T12868] ? __pfx___sys_sendmsg+0x10/0x10 [ 1580.353986][T12868] ? do_syscall_64+0xb6/0x230 [ 1580.354018][T12868] do_syscall_64+0xf3/0x230 [ 1580.354046][T12868] ? clear_bhb_loop+0x45/0xa0 [ 1580.354074][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.354096][T12868] RIP: 0033:0x7f3210b8d169 [ 1580.354116][T12868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1580.354135][T12868] RSP: 002b:00007f32119e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1580.354159][T12868] RAX: ffffffffffffffda RBX: 00007f3210da5fa0 RCX: 00007f3210b8d169 [ 1580.354175][T12868] RDX: 0000000020000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 1580.354190][T12868] RBP: 00007f32119e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.354204][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.354217][T12868] R13: 0000000000000000 R14: 00007f3210da5fa0 R15: 00007fff0211ce88 [ 1580.354253][T12868] [ 1580.905155][T12884] IPv6: sit2: Disabled Multicast RS [ 1580.921204][T12884] sit2: entered allmulticast mode [ 1581.058299][T12892] netlink: 'syz.4.11187': attribute type 21 has an invalid length. [ 1581.068361][T12892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11187'. [ 1582.050999][T12929] netlink: 'syz.0.11199': attribute type 21 has an invalid length. [ 1582.091896][T12929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11199'. [ 1582.501274][T12954] vlan1: entered allmulticast mode [ 1582.611378][T12958] IPv6: sit1: Disabled Multicast RS [ 1582.617770][T12958] sit1: entered allmulticast mode [ 1583.040699][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11211'. [ 1583.050412][T12974] netlink: 'syz.2.11211': attribute type 8 has an invalid length. [ 1583.870347][T12990] netlink: 'syz.2.11216': attribute type 21 has an invalid length. [ 1583.887657][T12990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11216'. [ 1585.004292][T13027] netlink: 'syz.4.11230': attribute type 21 has an invalid length. [ 1585.015229][T13027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11230'. [ 1585.081842][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11228'. [ 1586.015088][T13071] netlink: 'syz.4.11243': attribute type 21 has an invalid length. [ 1586.024658][T13071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11243'. [ 1586.115804][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11244'. [ 1586.328876][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1587.221390][T13116] IPv6: sit2: Disabled Multicast RS [ 1587.229445][T13116] sit2: entered allmulticast mode [ 1588.169533][T13153] x_tables: duplicate underflow at hook 2 [ 1588.737894][T13177] tipc: Enabling of bearer rejected, already enabled [ 1588.969189][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1588.982691][T13174] IPv6: sit2: Disabled Multicast RS [ 1588.997141][T13174] sit2: entered allmulticast mode [ 1589.269380][T13194] IPv6: sit1: Disabled Multicast RS [ 1589.276149][T13194] sit1: entered allmulticast mode [ 1589.570193][T13202] vlan1: entered allmulticast mode [ 1589.617710][T13204] netlink: 'syz.2.11288': attribute type 21 has an invalid length. [ 1589.626059][T13204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11288'. [ 1589.850986][T13219] x_tables: duplicate underflow at hook 2 [ 1590.260767][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11293'. [ 1590.279203][T13227] netlink: 'syz.2.11293': attribute type 8 has an invalid length. [ 1591.368828][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1591.384745][T13261] IPv6: sit1: Disabled Multicast RS [ 1591.400043][T13261] sit1: entered allmulticast mode [ 1591.482075][T13264] tipc: Enabled bearer , priority 0 [ 1591.535812][T13262] syzkaller0: entered promiscuous mode [ 1591.543743][T13262] syzkaller0: entered allmulticast mode [ 1591.552995][T13262] tipc: Resetting bearer [ 1591.632423][T13258] tipc: Resetting bearer [ 1592.126763][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11309'. [ 1594.077045][T13258] tipc: Disabling bearer [ 1594.094416][T13267] vlan1: entered allmulticast mode [ 1594.329498][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1594.687240][T13319] IPv6: sit1: Disabled Multicast RS [ 1594.694581][T13319] sit1: entered allmulticast mode [ 1594.737979][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11314'. [ 1594.806751][T13321] gre0: entered allmulticast mode [ 1594.822447][T13321] netlink: 'syz.0.11314': attribute type 8 has an invalid length. [ 1594.905352][T13326] IPv6: sit2: Disabled Multicast RS [ 1594.952531][T13326] sit2: entered allmulticast mode [ 1596.510980][T13386] IPv6: sit2: Disabled Multicast RS [ 1596.518281][T13386] sit2: entered allmulticast mode [ 1596.713593][T13389] tipc: Enabled bearer , priority 0 [ 1596.822611][T13397] syzkaller0: entered promiscuous mode [ 1596.828172][T13397] syzkaller0: entered allmulticast mode [ 1596.839604][T13397] tipc: Resetting bearer [ 1597.046902][ T3007] tipc: Resetting bearer [ 1597.075765][T13387] tipc: Resetting bearer [ 1597.295852][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1597.761262][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11346'. [ 1599.615567][T13387] tipc: Disabling bearer [ 1599.641868][T13414] netlink: 'syz.1.11346': attribute type 8 has an invalid length. [ 1599.704935][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11352'. [ 1600.083278][T13448] netlink: 'syz.0.11356': attribute type 21 has an invalid length. [ 1600.119229][T13448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11356'. [ 1600.377094][T13459] IPv6: sit2: Disabled Multicast RS [ 1600.482139][T13459] sit2: entered allmulticast mode [ 1600.710549][T13470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11363'. [ 1601.333623][T13490] x_tables: duplicate underflow at hook 2 [ 1601.341134][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11367'. [ 1601.350785][T13478] netlink: 'syz.2.11367': attribute type 8 has an invalid length. [ 1601.675349][T13504] netlink: 'syz.0.11369': attribute type 10 has an invalid length. [ 1601.722731][T13504] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.11369'. [ 1602.136699][T13521] IPv6: sit2: Disabled Multicast RS [ 1602.372618][T13521] sit2: entered allmulticast mode [ 1604.216820][T13569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11397'. [ 1604.806829][T13603] netlink: 'syz.0.11407': attribute type 21 has an invalid length. [ 1604.816096][T13603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11407'. [ 1605.042893][T13606] x_tables: duplicate underflow at hook 2 [ 1605.233787][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11409'. [ 1605.753898][T13633] netlink: 'syz.2.11418': attribute type 21 has an invalid length. [ 1605.767620][T13633] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11418'. [ 1605.943789][T13641] x_tables: duplicate underflow at hook 2 [ 1606.051958][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11422'. [ 1606.097373][T13653] tipc: Enabling of bearer rejected, already enabled [ 1606.171057][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1606.669026][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11429'. [ 1606.685374][T13676] netlink: 'syz.0.11429': attribute type 8 has an invalid length. [ 1607.682005][T13716] netlink: 'syz.3.11442': attribute type 21 has an invalid length. [ 1607.706778][T13716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11442'. [ 1607.939767][T13728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11447'. [ 1608.056934][T13734] vlan1: entered allmulticast mode [ 1608.331825][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1609.152021][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11459'. [ 1609.370967][T13794] netlink: 'syz.0.11463': attribute type 21 has an invalid length. [ 1609.384906][T13794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11463'. [ 1609.971409][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11474'. [ 1610.569435][T13848] netlink: 'syz.0.11477': attribute type 21 has an invalid length. [ 1610.577605][T13848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11477'. [ 1610.729544][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1611.893628][T13895] x_tables: duplicate underflow at hook 2 [ 1611.944664][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11491'. [ 1612.001693][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11488'. [ 1612.049641][T13899] netlink: 'syz.1.11488': attribute type 8 has an invalid length. [ 1612.429639][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11500'. [ 1612.439255][T13915] netlink: 'syz.2.11500': attribute type 8 has an invalid length. [ 1613.220796][T13949] x_tables: duplicate underflow at hook 2 [ 1613.238398][T13949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11514'. [ 1613.619234][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1613.714371][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11522'. [ 1613.727928][T13972] netlink: 'syz.2.11522': attribute type 8 has an invalid length. [ 1614.080674][T13992] x_tables: duplicate underflow at hook 2 [ 1614.130734][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11529'. [ 1614.930746][T14043] tipc: Enabling of bearer rejected, already enabled [ 1614.980678][T14043] syzkaller0: entered allmulticast mode [ 1615.126229][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11550'. [ 1615.137863][T14053] netlink: 'syz.4.11550': attribute type 8 has an invalid length. [ 1616.002314][T14091] tipc: Enabled bearer , priority 0 [ 1616.076431][T14091] syzkaller0: entered promiscuous mode [ 1616.082671][T14091] syzkaller0: entered allmulticast mode [ 1616.090353][T14091] tipc: Resetting bearer [ 1616.329367][T14084] tipc: Resetting bearer [ 1616.494193][ T1312] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1616.596117][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11575'. [ 1618.874360][T14084] tipc: Disabling bearer [ 1618.883996][T14116] netlink: 'syz.4.11575': attribute type 8 has an invalid length. [ 1620.178083][T14192] x_tables: duplicate underflow at hook 2 [ 1620.192995][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11604'. [ 1620.202382][T14192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11604'. [ 1620.332411][T14197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11591'. [ 1620.341682][T14197] netlink: 'syz.0.11591': attribute type 8 has an invalid length. [ 1620.373761][T14204] netlink: 'syz.3.11602': attribute type 21 has an invalid length. [ 1620.424717][T14204] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11602'. [ 1621.447902][T14248] x_tables: duplicate underflow at hook 2 [ 1621.494053][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11615'. [ 1621.503839][T14248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11615'. [ 1621.632314][T14260] IPv6: sit1: Disabled Multicast RS [ 1621.638996][T14260] sit1: entered allmulticast mode [ 1622.039396][T14277] netlink: 'syz.0.11620': attribute type 21 has an invalid length. [ 1622.075761][T14277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11620'. [ 1622.594788][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11628'. [ 1622.614474][T14301] netlink: 'syz.4.11628': attribute type 8 has an invalid length. [ 1623.263529][T14314] x_tables: duplicate underflow at hook 2 [ 1623.329684][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11632'. [ 1623.338943][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11632'. [ 1623.860322][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11635'. [ 1623.907654][T14331] netlink: 'syz.0.11635': attribute type 8 has an invalid length. [ 1624.678790][T14361] x_tables: duplicate underflow at hook 2 [ 1624.763755][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11647'. [ 1624.915346][T14376] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11644'. [ 1625.101487][T14388] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1625.205325][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11653'. [ 1625.242645][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11654'. [ 1625.259172][T14380] netlink: 'syz.2.11654': attribute type 8 has an invalid length. [ 1627.217615][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11670'. [ 1627.230432][T14446] netlink: 'syz.2.11670': attribute type 8 has an invalid length. [ 1627.594603][T14467] vlan0: entered allmulticast mode [ 1627.819702][T14474] vlan0: entered allmulticast mode [ 1628.196579][T14485] tipc: Enabled bearer , priority 0 [ 1628.210066][T14485] syzkaller0: entered promiscuous mode [ 1629.319051][ T9433] tipc: Node number set to 1596850176 [ 1629.355349][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11689'. [ 1629.379005][T14521] netlink: 'syz.2.11689': attribute type 8 has an invalid length. [ 1629.939462][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11693'. [ 1629.951043][T14531] tipc: Enabling of bearer rejected, already enabled [ 1629.990702][T14532] netlink: 'syz.4.11693': attribute type 8 has an invalid length. [ 1630.396922][T14542] x_tables: duplicate underflow at hook 2 [ 1630.410892][T14542] netlink: 'syz.2.11696': attribute type 16 has an invalid length. [ 1630.419883][T14542] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000055: 0000 [#1] SMP KASAN PTI [ 1630.431831][T14542] KASAN: null-ptr-deref in range [0x00000000000002a8-0x00000000000002af] [ 1630.440262][T14542] CPU: 1 UID: 0 PID: 14542 Comm: syz.2.11696 Not tainted 6.15.0-rc1-syzkaller-00221-gb65999e7238e #0 PREEMPT(full) [ 1630.452429][T14542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1630.462499][T14542] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 1630.468240][T14542] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 4a 0e 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 22 0e 3b f8 45 31 e4 48 83 7d 00 [ 1630.487901][T14542] RSP: 0018:ffffc900039aee70 EFLAGS: 00010206 [ 1630.493993][T14542] RAX: 0000000000000055 RBX: ffff8880511d8008 RCX: 0000000000080000 [ 1630.501972][T14542] RDX: ffffc9000c154000 RSI: 00000000000027ee RDI: 00000000000027ef [ 1630.509956][T14542] RBP: 00000000000002a8 R08: ffffffff89f26ec9 R09: 1ffff92000735dfa [ 1630.517940][T14542] R10: dffffc0000000000 R11: fffff52000735dfb R12: ffff888049b01080 [ 1630.525943][T14542] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880511d8000 [ 1630.533928][T14542] FS: 00007f6c2fed06c0(0000) GS:ffff8881250b0000(0000) knlGS:0000000000000000 [ 1630.542867][T14542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1630.549458][T14542] CR2: 00007f6c2fecff98 CR3: 0000000048808000 CR4: 00000000003526f0 [ 1630.557435][T14542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1630.565413][T14542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1630.573388][T14542] Call Trace: [ 1630.576682][T14542] [ 1630.579625][T14542] rtnl_newlink_create+0x2f2/0xcb0 [ 1630.584796][T14542] ? __mutex_lock+0x380/0x10c0 [ 1630.589577][T14542] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1630.595228][T14542] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1630.600890][T14542] ? __pfx___mutex_lock+0x10/0x10 [ 1630.606555][T14542] ? ns_capable+0x8a/0xf0 [ 1630.610911][T14542] rtnl_newlink+0x18b0/0x1fe0 [ 1630.615754][T14542] ? __pfx_rtnl_newlink+0x10/0x10 [ 1630.620807][T14542] ? dev_hard_start_xmit+0x2d9/0x830 [ 1630.626102][T14542] ? __dev_queue_xmit+0x1b80/0x3f60 [ 1630.631337][T14542] ? __netlink_deliver_tap+0x561/0x7f0 [ 1630.636806][T14542] ? netlink_deliver_tap+0x19d/0x1b0 [ 1630.642117][T14542] ? netlink_unicast+0x7c6/0x9a0 [ 1630.647068][T14542] ? netlink_sendmsg+0x8c3/0xcd0 [ 1630.652019][T14542] ? __sock_sendmsg+0x221/0x270 [ 1630.656918][T14542] ? ____sys_sendmsg+0x523/0x860 [ 1630.661892][T14542] ? __sys_sendmsg+0x271/0x360 [ 1630.666754][T14542] ? do_syscall_64+0xf3/0x230 [ 1630.671445][T14542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.677558][T14542] ? kasan_quarantine_put+0xdc/0x230 [ 1630.682857][T14542] ? lockdep_hardirqs_on+0x9d/0x150 [ 1630.688104][T14542] ? nlmon_xmit+0xaf/0x100 [ 1630.692564][T14542] ? __local_bh_enable_ip+0x168/0x200 [ 1630.697955][T14542] ? lockdep_hardirqs_on+0x9d/0x150 [ 1630.703167][T14542] ? aa_get_newest_label+0x101/0x6f0 [ 1630.708468][T14542] ? __lock_acquire+0xad5/0xd80 [ 1630.713339][T14542] ? __pfx_rtnl_newlink+0x10/0x10 [ 1630.718380][T14542] rtnetlink_rcv_msg+0x80f/0xd70 [ 1630.723331][T14542] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 1630.728455][T14542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1630.733936][T14542] ? ref_tracker_free+0x63e/0x7e0 [ 1630.738975][T14542] netlink_rcv_skb+0x208/0x480 [ 1630.743758][T14542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1630.749232][T14542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1630.754540][T14542] ? netlink_deliver_tap+0x2e/0x1b0 [ 1630.759842][T14542] ? netlink_deliver_tap+0x2e/0x1b0 [ 1630.765062][T14542] netlink_unicast+0x7f8/0x9a0 [ 1630.769842][T14542] ? __pfx_netlink_unicast+0x10/0x10 [ 1630.775163][T14542] ? skb_put+0x114/0x1f0 [ 1630.779424][T14542] netlink_sendmsg+0x8c3/0xcd0 [ 1630.784274][T14542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1630.789571][T14542] ? aa_sock_msg_perm+0x91/0x160 [ 1630.794528][T14542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1630.799827][T14542] __sock_sendmsg+0x221/0x270 [ 1630.804516][T14542] ____sys_sendmsg+0x523/0x860 [ 1630.809291][T14542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1630.814592][T14542] ? __fget_files+0x2a/0x420 [ 1630.819197][T14542] ? __fget_files+0x2a/0x420 [ 1630.823803][T14542] __sys_sendmsg+0x271/0x360 [ 1630.828400][T14542] ? __pfx___sys_sendmsg+0x10/0x10 [ 1630.833870][T14542] ? do_syscall_64+0xb6/0x230 [ 1630.838566][T14542] do_syscall_64+0xf3/0x230 [ 1630.843083][T14542] ? clear_bhb_loop+0x45/0xa0 [ 1630.847855][T14542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.853760][T14542] RIP: 0033:0x7f6c2ef8d169 [ 1630.858213][T14542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1630.877917][T14542] RSP: 002b:00007f6c2fed0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1630.886350][T14542] RAX: ffffffffffffffda RBX: 00007f6c2f1a5fa0 RCX: 00007f6c2ef8d169 [ 1630.894333][T14542] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000010 [ 1630.902319][T14542] RBP: 00007f6c2f00e990 R08: 0000000000000000 R09: 0000000000000000 [ 1630.910302][T14542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1630.918274][T14542] R13: 0000000000000000 R14: 00007f6c2f1a5fa0 R15: 00007ffd0b6afe28 [ 1630.926260][T14542] [ 1630.929281][T14542] Modules linked in: [ 1630.933951][T14542] ---[ end trace 0000000000000000 ]--- [ 1630.956852][T14542] RIP: 0010:rtnl_create_link+0x6af/0xea0 [ 1630.977135][T14542] Code: 24 20 42 80 3c 28 00 74 08 48 89 df e8 4a 0e 3b f8 4c 89 64 24 28 bd a8 02 00 00 48 89 5c 24 08 48 03 2b 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 22 0e 3b f8 45 31 e4 48 83 7d 00 [ 1631.002338][T14542] RSP: 0018:ffffc900039aee70 EFLAGS: 00010206 [ 1631.008599][T14542] RAX: 0000000000000055 RBX: ffff8880511d8008 RCX: 0000000000080000 [ 1631.016798][T14542] RDX: ffffc9000c154000 RSI: 00000000000027ee RDI: 00000000000027ef [ 1631.025899][T14542] RBP: 00000000000002a8 R08: ffffffff89f26ec9 R09: 1ffff92000735dfa [ 1631.034158][T14542] R10: dffffc0000000000 R11: fffff52000735dfb R12: ffff888049b01080 [ 1631.042587][T14542] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880511d8000 [ 1631.051402][T14542] FS: 00007f6c2fed06c0(0000) GS:ffff8881250b0000(0000) knlGS:0000000000000000 [ 1631.060681][T14542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1631.067708][T14542] CR2: 0000555581f84568 CR3: 0000000048808000 CR4: 00000000003526f0 [ 1631.077899][T14542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1631.086361][T14542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1631.094751][T14542] Kernel panic - not syncing: Fatal exception [ 1631.101181][T14542] Kernel Offset: disabled [ 1631.105525][T14542] Rebooting in 86400 seconds..