last executing test programs: 1.983895699s ago: executing program 0 (id=2976): socket$can_raw(0x1d, 0x3, 0x1) unshare(0x2c020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x48) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2000400) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="2d74202b6e65745f639873202b72646d61202d6d65e3e03e0400000009136f7279202d637078738474200063707561636381202b696f20b6074f07bcae9b78fbdda345564249b23d3c037668a9162933f55825567d2a2c1af0a694a5723a357842439a50b627d7bbf8515dc5bec03897f84e3737fe5cb92bf058f5b2c1cdba96090a79f3141f17d07ab8881faec977c9b16f7c6eb95c747262b9901549e906ca9dadc0e399a56bbc824d35cce58a06f27fc1fb00347ed57ff24450460a5451de9ba9a3ebdab3"], 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0x40806685, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000600e0000001050002000a000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="0100000000050000000002000000050002000a000000"], 0x1c}}, 0x0) 1.579931686s ago: executing program 0 (id=2980): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x58) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x700, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x2a, &(0x7f0000000400)=""/42, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x19e477, 0x10, &(0x7f0000000500), 0x10}, 0x90) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xf, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={r5, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x9ba, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}]}, &(0x7f0000000200)=0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x1b0}}, 0x0) 1.419786107s ago: executing program 3 (id=2983): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) 1.352106575s ago: executing program 2 (id=2984): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001900010000000500000000001d0109004d001280fffbffdd187282c63edaa1b302338fad461472d9970698029295938e3a20c23a79a2404174765b8bb88410e2247554e77adbc729a361e05fb3473db89e064f385ffd722d8f69181605"], 0x64}}, 0x0) 1.350463069s ago: executing program 1 (id=2985): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0f000008", @ANYRES16=0x0, @ANYBLOB="0000000000000000000018000000"], 0x14}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x730}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r1, &(0x7f0000000400), 0x20000000}, 0x20) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x35}]}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2={0x4, 0x5}}}) 1.307020246s ago: executing program 3 (id=2986): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000780)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRES16=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) preadv(r4, &(0x7f0000001380)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x7}, 0x10) close(r7) unshare(0x600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r6, 0x7, 0x0, 0x0, @prog_id}, 0x20) syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b008da30000000000000000000000000000fe8000000000000000000000000000aa06020201", @ANYBLOB="0bfbf6c0e8053f0616a09664c1749787015a251bf487738d697e060324824de75a"], 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) connect$can_bcm(r9, &(0x7f0000000380), 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) 1.256729761s ago: executing program 0 (id=2987): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000100)="05ff030768", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100"/19], 0x1c}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001000000000000000000ffffffff2000000000000000000800000000000000000000000000000000000000000000000000000200000000000000d0aecc0993770b", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000068190001000000000000000000ffffffff000000000000000000000000ffffffff000000000000000000000000000000000018000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc4}}, 0x0) 1.24172163s ago: executing program 4 (id=2988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000090900010073797a30000000004c000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000000a000700726f758a65"], 0x94}}, 0x0) r1 = socket(0xa, 0x6, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000640)=0x1c0, 0x4) syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0x1, &(0x7f0000000400)="a7adb8dc37b84e80b617b259dc78a0c1a9ecb1e9bbe3d694129cd13f5dcfebd836966b0fce16b08672e55cb094c299cf96f46f29fa8f3a17231f38ce856a48300dc60651f8a67266686296b233727c74b62486e0ea25cb48e466e29ba77e591bcb2c77a791c8a0f3f2487219627790b01629608b87e05ce1799c4628ced2b768a798ec5449895b64ac1a0e4f9dfb3277303415d339d77a18838cb6ea1762a2f2424dd022b09bdebbe680404c63a443262914749dc9d0049e38796c3008d8a4a694e76e4cfe6108c09649f1f1a944fcf8659a90f3adee409a9d0abb2c871452bdb1519c95be6915756ebc", &(0x7f00000001c0)=@tcp=r4, 0x4}, 0x20) r6 = socket$inet(0x2, 0x2, 0x1) unshare(0x40400) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r8 = accept4$bt_l2cap(r2, &(0x7f0000000680), &(0x7f00000006c0)=0xe, 0x80000) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000700)={0x10}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x8, 0x900, 0x1000, 0x80, 0x1, 0x0, '\x00', r3, r7, 0x1, 0x5, 0x3}, 0x48) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x280000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) sendmmsg$sock(r2, &(0x7f0000001140), 0x40000a7, 0x40040) 1.19591286s ago: executing program 2 (id=2989): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random='\a\x00'}) 1.176450864s ago: executing program 1 (id=2990): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x0, 0x9}, 0x48) r2 = socket(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x480, 0x0, &(0x7f0000000200)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x73) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xa00, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) 1.092288744s ago: executing program 2 (id=2991): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x400002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f00000ce809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.011815813s ago: executing program 0 (id=2992): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x11, 0x800000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x3, 0x5, 0x4, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES8=r2, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0xfffffffffffffebd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0x0, @multicast1}}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603c40b00000000000000200000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) r6 = socket$alg(0x26, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='flush_foreign\x00', r8}, 0x10) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r10, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r10, &(0x7f0000000140)=@abs, 0x6e) close(r9) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r11 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000005400)=[{{0x0, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000080)="3b464c3bcd2bd7d2b1a92eca79c286a06dffdfeb623ea9e40a2c95cd702350d944237596556c9479bf1521276d845eb45d2cd8e6380fc6ce9c3451c4c197909a89cc640607df2e7a07", 0x2ff80}, {&(0x7f0000000180)="fa302c5276f60e090ecdcd2ab8152552e0ec74a69db872f09ac999fb27496391dbf3d0bc94611c29a7ddbe0b2b272911544465bb22aa", 0x36}, {&(0x7f00000002c0)="87c3752dd3dafc", 0x7}], 0x3}}], 0x4000000000001ee, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r12, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) 923.822958ms ago: executing program 2 (id=2993): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0xf00}, 0x28) 876.920235ms ago: executing program 3 (id=2994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x6, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup, r1, 0x1, 0x8, 0x0, @prog_id}, 0x20) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800c001a80080002800400018006002200c630000008001c"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "18"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 710.435871ms ago: executing program 4 (id=2995): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x78}, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xa000000, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) 651.975783ms ago: executing program 2 (id=2996): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x49b9, 0x4) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, 0x0, 0x7a00}}], 0x1, 0x240080c5) 651.615485ms ago: executing program 1 (id=2997): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf2, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000004000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 646.03881ms ago: executing program 0 (id=2998): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00', @ANYRESDEC, @ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='workqueue_activate_work\x00'}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000001900000008000300", @ANYRES32=r4, @ANYBLOB='#\x00$'], 0x48}}, 0x0) 632.857848ms ago: executing program 3 (id=2999): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x40030000000000, 0xd000000}, 0x0) 563.95822ms ago: executing program 2 (id=3000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000006200000054000000000000009500000000000000ef0285b73eae795b05ad261777db75186baf0b2792ad03f20472662181fe046096c5df696334e2d836395560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafaf33acf7e01a23999fdfb4b490f6cfe5edf2740576acb262e0de2b8e288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2058455e3ba438c9109dd001ad93df3fc235bed"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x10, 0x4000, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) 506.545453ms ago: executing program 4 (id=3001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="970ac4ff00000000691024000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 494.207732ms ago: executing program 1 (id=3002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB="2400f0ff", @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2], 0x24}}, 0x0) 411.883467ms ago: executing program 3 (id=3003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x2, 0x0, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f00000001c0)=@ethtool_coalesce={0xe, 0x105, 0x80000003, 0xfffffff8, 0x6806, 0xf5, 0x2, 0x8, 0x1003, 0x0, 0x40, 0x6, 0x3, 0x1, 0x7, 0x80000, 0x5, 0x81, 0x4e1, 0xf01c, 0x401, 0x0, 0x40}}) pipe(0x0) epoll_create1(0x80000) mmap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x69) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, {0x306, @local}, 0x4a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team_slave_0\x00'}) bind$l2tp6(r6, &(0x7f00000003c0)={0xa, 0x0, 0xd9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x3}, 0x20) r7 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002500)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0xfdef}], 0x1}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x48880) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r9, @ANYBLOB="009c8b210acba9af6c68bfa9199d85b484617864beacb7c3cf0fb8820a6c2c021db30faf7d8f7f489515ff7bc2697d518dc0aacb4bd9f0f626312896ee9951d68a462146c5d7323d08413a7ec2197cdc3e7107cb606d452d018c23178e5e67e817c7b4946dde390b334700560bcec2f385ff28950ceb276ee1d95c1b91c8d5c7be1d80894c386f42478c100f8175db26130a81033b24fd5f267cae3b3c1e685c4c090000000000000024c71da9074db2cb5423978f52ce1dfbfb4a6d"], 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x44, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x14}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x44}}, 0x0) 387.806646ms ago: executing program 4 (id=3004): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x4c}}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000d80)={@private1, 0x0}, &(0x7f0000000dc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'vxcan1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003c40)={0x1, 0x58, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r5, 0x29, 0x6, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003d00)={'syztnl2\x00', &(0x7f0000003c80)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x5, 0x7fff, 0x35, @remote, @private2, 0x7, 0x1, 0x0, 0xbe23}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) sendmmsg$inet(r0, &(0x7f0000004480)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000180)="ca1daa36c000afa9089caf2f0ab2c8d7e6105aa9586b93d81a3549085f6ab001d06a4dd40e950aa0", 0x28}, {&(0x7f0000000200)="637e20768e1214ad080a71df4d4ec82d45ffcdce548c7fcc3f99567936e03253388538091a447389a4550245308e029bb647163b0c88510de94130bf2eb991036ea7ae26c859cd58a2a5278c64afe86c68c79d75880ace34530725e1f072de81740582c3ddbb0c284562bdcfc45493288412a8ee945909e7fb5745786a1365215b5714179dceec2112a24225f882552577be6892d30b3af02e2013fbdeed2430fd7fd58936d1786f0a9b3a2c688739475ba49897f9e7485f0c81bf68df67f242615921244583c9423ea885372621e0062b", 0xd1}, {&(0x7f0000000300)="3d74a732782fc0caf65c4a8bc71e4606b698995b7d3b232c98e189a5e7817d1e27f7df96354e968cf90631f9cc47ae911a0eb8ad85b14a829f83fc5521fb6f5145040c93542a45574db610b271e11df212e234a8654c4e076cce5b75aea7d7635a268ac82c5872396158b65cc67523220348f18660b4289b1a4c24a3e6c49aa17aceb6f1946b13965562b4c6a5c188d9b60631c35506ebc4c94b8d6108c834f5df557c8672ab4be810a1b17ffc5bb2556c416f", 0xb3}, {&(0x7f00000003c0)="614d813cc571f81dd1e34b71be0caf286ec6261bd764eb4ba47d0a0de6ea2f7e5da126ee343fa5b8feb32390b2f3f4fca16a175c02a117c6f4975fc7e4771a1265e27d89a7a846d937d1805e671b0da12bce94f160e1f0b8966c959fd593c065fccaa4df2adddb541100e080cf94aac4d8a3dfcda07367136d3966e70f497554a842ecae7fb0322c1c0f7f1a175053d87b34fa1fe8240efd720898b1c120d05db98b66ce4dc38fc56945bc308d6b6965fbf80f087e8b80616faf4a6b80332198ec4b5397a1bebb302624f26d96c594f6bec803", 0xd3}, {&(0x7f00000004c0)="21073b29b38f7cbefb064b61e41d90fac5728fdc6535d3705dac8022a4fc9ec6e640d24f3953de21dc74f07c77123d67c61297bedebd4e58b2a3938f0613403418a743993d18ca61b2d7b4d3750f883f2c89c12c88d94139f154604e14046fa945277bdb6e30b8f756b2cb65bfaa8586b3bfb488f169afdfcf5f8bd0f6e3aa02ff5bf0d59f6d7f", 0x87}, {&(0x7f0000000580)="c72351ea17d8a0584a6977d09004b3d461dab7c90f275db1de48d159f0d930e5f1402a1914fb1700aa6620ae471ccb35bc87a9dff0e00a53516293495d55f8d80fa256da25132a71b0af7c40e33a5091", 0x50}], 0x6}}, {{&(0x7f0000000680)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)="97a62a02b681b725e65184906d0669c24032aa1b1c76df785e4cffbf3f839158802dc023d0e9415e9918f5d001dce265a2bf9ade39bdacb3ecf000714d6dbea42d75c31b0b7a4ead52d42d6e03dce9359a07cf43af0ddb3faddc2bb626f8b248be68f3095eccc66d09352ad62d01b4627733ba9c9740dd182a99a265787179", 0x7f}], 0x1, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}}}}], 0x38}}, {{&(0x7f00000007c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000800)="5d792ea12c16ed3f294e032444d655775ebabf82107588c8ec09b4e05b6401d8834ce5d5d14f099d2dba2bc10b980a2e0526622e30183a11518837b94124d1c0fa646bf723a7a4", 0x47}, {&(0x7f0000000880)="16cbc1de454f51d3a4a04c5ccc8f118e3569f3d6aca1adea36cf7e3071617a0c15787a37e67fb673780a2af91194d035c39a2379415b49fa6ef4f214727d3423ce3cf599f132efe1f32ea2ccc46866b85fc6462822d24c05479fb8a4c3f56f8cf2afdd6eee98f6f63ca4669901e976ec2a34020e27089d95d8a5cca44217f9b3d82e34dbfb4de4b2056518275126c5259ba09190c8ad072bfa44c0ffbd2638684cb943c856ae100c929f931e12ee44d7f1947a24f3de19b98dc547c1", 0xbc}, {&(0x7f0000000940)="ef6d4a636b7c5311be2c0555ff8cfdc8697a8ce5715e2eb898ac14e35e8a8c38954edc5c37d331917ba398a1370fb422b46eea76948973dde5f5c2b9010e1ebc538893a916c43f407422bbbe47", 0x4d}, {&(0x7f00000009c0)="8f5c6f152a5615df558678022614969f39ebe6473ba80592871a1bc1bf5b8a7675231523e15894c6d23fadc7b2a3f185b03f17eb850d8ab99ff34704946a4da3484e3feda51631162a31855653b474c17b9a35926606785e56abd5314d7e5ca3d499f02f7414189bac78f3c94deb857ae4f394f64340d224b90cb71e2af042d638366a86b409bc71b59b46c3b24046f7c6017e06334f628c41e8a6f7adf0bd9886d60b5e703e1aca1b86e1", 0xab}, {&(0x7f0000000a80)="405c48b4dac9152bc322c9c76905f49de0d674e81f9221d36f5d708bf2735f35b6d3f66a2fef5da519cb50d8892d0df82cf2b107c7f9b769bee8bc1e45337d3f7fdea397d4ff975feb4eff98266fc60dca735f7359d2e55e21b96f154ed2ac8721ddaeb3a1456aa1b4cf9fd897ee8aef009f541a474b48142b52785dec6bca5c8945a1372eae2e0f5dbb29016fc501c3f479bd6a803cbd4607ef249616eea9282109ba130f1d32f46805bacb7ee122e3c602f6e48e0b3e08b46395262a05a3aff868b94d132815f4cb8c13b6a2eddbe1bbbb3d7e160e389f89cc92aeffcb91a82565a5752c0378e6f99d64e33e13871aa6ff", 0xf2}, {&(0x7f0000000b80)="a628069b68d4e0a04abba35f4a8a35b4794c09341106c0ed7b4fce682d867cb6e8f01ec858fa6f930d470c9693afa21dfb8e6fb82262d5a41ac485fadc6f97fcbfb70aad44c594", 0x47}, {&(0x7f0000000c00)="3430953f6a4b90506679ca7b5bb163466b8457cf3712f8f27678a5dcc5dfe723e55bbae0aad6c54e396fe0e5756b4e5ea94f8a583a9913a4995a4c7bb3bcf679162796ed30767f1e7aa5a7f510ff237a7e7e3db38badc337a2ed42b0ebbb70d41f7f480150149700fc867b11df545ee737d4b16629293a7448d3be8c33cda4f5b98200eedd2ccab3449b3c7db0e7ea602d256e8cce70f580aabb9ecbc07e5590cc676cfa55699b1bc35828bfdab39336de4c6db4e462d119a9fd24cfea3992c7fcdb22998b1faeaca165f214a911eec9184733e37b64288e65a4e089fa893a66d5494c201b73f929c242", 0xea}], 0x7, &(0x7f0000000e00)=[@ip_retopts={{0x90, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xab, [@rand_addr=0x64010100, @private=0xa010101, @broadcast, @local, @remote]}, @cipso={0x86, 0x18, 0x3, [{0x1, 0xc, "96e06bd8e8ca83157d46"}, {0x6, 0x6, "aa2505e1"}]}, @timestamp_prespec={0x44, 0x1c, 0xa6, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010100, 0x3}, {@local, 0x1d}]}, @timestamp_addr={0x44, 0x34, 0x57, 0x1, 0x1, [{@rand_addr=0x64010101, 0x3}, {@local, 0x7}, {@loopback, 0xfff}, {@empty, 0x100}, {@rand_addr=0x64010100, 0x5}, {@private=0xa010100, 0xffffffff}]}]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@end, @rr={0x7, 0xb, 0xe3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x13, 0xcf, [@rand_addr=0x64010100, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x35}]}, @generic={0x89, 0x10, "1da1b8ffe84550fcbc2071010ad3"}, @end, @timestamp={0x44, 0x24, 0x30, 0x0, 0xa, [0x1, 0x8, 0x6, 0xc2, 0xbdc8, 0x46ba, 0x3, 0x1]}, @timestamp_addr={0x44, 0x34, 0x2e, 0x1, 0x9, [{@loopback, 0x4}, {@local, 0x8a}, {@empty}, {@local, 0x7}, {@loopback, 0xfffffffa}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x24, 0x8e, 0x1, 0x1, [{@private=0xa010101, 0x101}, {@dev={0xac, 0x14, 0x14, 0x3a}}, {@private=0xa010102, 0x5dd2ddb7}, {@loopback, 0x10001}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff262}}], 0x1a0}}, {{&(0x7f0000000fc0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001280)=[{&(0x7f0000001000)="82abff290fe2c2300dcff1ec2323d7f8be7915817731838d8adc34d2446ef0db4fafe3f8b4feb391a36da6c9374bb523b7308a8e841c4c23a45f6fd440689c9d9714e0bb8060310ad5d35148527b6ae30532de783ecdaf0ad469bcbbbcb4886f74453fbe529bc4ea62849b92011749be9ea24f664db8cd40cfda7b2156fd98542e97cb060573ccd6a7920ca515e4c6f6f83a670ff410afb35dd75b0fa4", 0x9d}, {&(0x7f00000010c0)="35137c8f448222a9fc73c78bb930c9466e7353c73126287b89f4e7f4d4d193e19a99081d084077952bfb31bf9f2452e54dc76815f0908de8fcafdd97a0d831dffbed2adc2bf9327889a298e409b3d95f30230e131ab9a8136d579e40d99ff50dd75e0d1486b86ecfa824d8a8d02a3a6637ecc7b170f95688d5c84c8ff10189bb98faff959afc76a864066e5bb567216d9a26783fb40be7b91266703b8fb9fa6d1304fce604121b1f2bccf7cd8ba26c97b6d6c3945842e1318bcd77cb65ac6e227b311943945f5e36d50a9268546f435da0d8c35e25768b4c2e59a13d4a", 0xdd}, {&(0x7f00000011c0)="0f9a5f6fd84fc2a18ff46e415801800322fb4e13f0dd6524c2c756226b1860fe4b36126075b2c4fefd1f6a4c549143e68e35668e70601a8e1bbd6e93f30a10c2fc7e66ff18af1815587b3bc9f53ad2be205926d31b277bbfd91441ac5400cb30a3c566f2fdd7e2ba42e4305b523ca0ff91b6ada8430552a5021bc20a166fb574ca2dd11fbd4f4d15d06b73b16e1014", 0x8f}], 0x3, &(0x7f0000001300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xe3, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7f}, {@broadcast, 0x3}, {@empty, 0x3}, {@empty, 0x9}]}, @timestamp_prespec={0x44, 0x2c, 0x4a, 0x3, 0xc, [{@private=0xa010102, 0x8}, {@local, 0x6}, {@remote, 0xec}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x2}, {@multicast2, 0xaef4}]}, @timestamp_addr={0x44, 0x54, 0x32, 0x1, 0x4, [{@empty, 0xeb}, {@local, 0x7ff}, {@private=0xa010102, 0x1000}, {@multicast2, 0x1}, {@rand_addr=0x64010100, 0x7ff}, {@private=0xa010101, 0x4}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0x15a83226}, {@local, 0x10000}]}, @timestamp={0x44, 0x8, 0x2a, 0x0, 0x4, [0xffff]}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x4, "e66a"}, {0x6, 0x11, "e7d902c21c8cb5d0d25367ab535fb6"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xde, [@loopback, @local, @rand_addr=0x64010102, @local]}, @ra={0x94, 0x4}]}}}], 0x1a0}}, {{&(0x7f00000014c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001500)="83449219952a10b292846e37bcbc802df6a8449e34f7cc5452168d55efdb971012555473086edf75550cf877974a6d43b18c5b92a3fa222e96443aa08ff02c192fb58179d6b4f59a70abccd849c4bcbd037a877edd5f15f5944791b1fca3ff4f09ac0cc0eaa909256ff11943f97d6b490cc7ab885efcea4766d38da80b789cb75244f5ca0d", 0x85}, {&(0x7f00000015c0)="864ba2b2a24d1d0db15ffb22514681548255bf1308491163a864bab286f1b44d7b0f1addc3f5e5e342d12b60025e1413237a0153d3395d14d7a50cae6e22c0499169cc4763d9f77ec4309229ed01396c4f9b976bfb0d0d67c0bd1fa28309c89fe41e72cf4754694aa5ee4b7f71fe4edd8ebd178430cef55b8158a9e0a00881e5b044dd7b9214ae97cb977a7bd7fa1128db8cbac707b37b7d2997", 0x9a}], 0x2}}, {{&(0x7f00000016c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001700)="854555f0c109ceb3fa3a94094adbe25c9e756f9d80d1f974e1d84724606889f236e43b4ef98d7e9b95638c7272a848e276e2877da60ebeeb325faab3b3737372f2e704d4fa52a7fb6c56496da8cf996fc95f13423924eb24668ab976ff32c6ec9dc107825cf709d750f908fe8701d5f3a147ebf6eed948e2115615ff6776584ba6870d984049456872d285e8974fe891cd11bdfdf533a4b93d501361192c887b86f52479159efb29478db36558db3d648e079de14c49bb6d414bbaa9428ef662982fcfaa7c830c891e1c02c32dbf58bac30c793832e627df51daa33a01a048c22cab0996d32b353d2e7ae553528a911424190802d5389736125d4e2cec30f3e7f5e1e0bd0383a6e97708dfdc725f7bddcfcefda2fc6ca547ac3761302f9869ce1ef064f0031310f226c791cce8e6ebcd845079655eab200209cc2049f29f9ff12614177f4afb60d578884e864bc485c9c765ef73b470a8b4f3e4ed93dbec8025cb5c020d6468ba305f061aaaa219617c6e1697bc77f767b5a42843cdba4405507a20254a0be46d8f74c253b8feb78005576672b7a166b93681b6cc0353e15caf3c5670b9e73d9a7846e55b8cfed07ecd705102acd7af2546ccf9300183658d9d5fb159e363a1cb112d555304baa5375b1d4ab5c15fcaff1ca4fce0f7a811012ae5230ed84d4509a2e1a5addd971578eecedb1a2b571dbc9f0976debe4bd14ec1a64d06093b418833cd7e585c3a53f1b0069865e986a267c45c47503445bd0569294f40fbf1d9fb635e316830268a1ac177fe916c71e8c454cfa259a67b7fb28347002873778687acbcd0d4d3c46fc937a23b110ab9872ef2da49933e345aef0b0e1c55b17c8323a2ee88ed386fbe481f9b3af983de5edc9c08a62a7b122c0b9860aa65914af692fd18319ab57603277b33029dcb59cad0a0ef1e76072c722a72ec5b3b6c0a4961258dcb2375d2ec50250e4f98a9ddd3620002005c5bbfc4bd1b8e78d35fa3e1877540d4f8b70359592ee54aa747bcab84dc684254bb7a13f1dde22be3f60aa53272ef2ae5784790a3cf3ca221030bf2ff47f2f506c7092091ffe4f3542fca5347032cbddc36998935ddc9432e5352f7afca7e88279aea30b689e0d543e26d922c86e15e0a7ef39e77c976a28873e119b94c3d026b69d06e4d466d81956597a625f2cfb4f6ac300d93d69d4f03fdac0ebc99090bfdc004b757bf1883f8148d6071a6fbb925069eb038bfd90bbf521e22cacfda50b81cd1d88c670fff2afc96ee50036399731362fef990e9d910c33d6af99cc9387a8d5415f44d8f4a81e7c6ba9f48283ea4c1cbb13bf1d7dccef0dcb2fe55097b5ffe6153121b82115dfd129803c1071daaff7420402b3226344b570b962c9e83a1b3fc08a9d34e0a95b32c293bf89fbcfb5373fa18484454e2855dc3dcb428bc2d385aa340e025ac5c0940a56a452d4e82059888ed0150e79f2cdfef9913fd5dbf5f9c2626948f222792f41d09dc1fd28ce240218cd4d49697a3ad6cafd083c255b390f4c95ded847bd6b9ebbb9af2ebe0037f495d1b2287aced8254462f69ae72417d7fce3a23a3593f3f35428a1761683714f5685e577e6c7eb7f525cded4cee6bc3a31a610f1a06b02b198629014280dea7eb9a0465a16c9ce55b431fa6bd40ee9214824190114d874ac416b66c9d0c3efd1e4c9789a1543b6ff4ad7991bb7cd91cbbbc490e2d8e4b73ff55edddf6b3cebdaa72ad567c943b5bef350b673298bd2b80b9a1d597b87e42ea08af5d393818b62383ddd6ecd6ee7dfcc92b1715c327c59d6d05a480c1eccebee8697f4b310025aac94e2fbe563adca3a66d4689a941c955a37c7a2447430e6664d9e8f514c2b8f5550bdf376ae43e78fa721f738d06f631ff6effb78ca148dfdf9efa683a9c4433c405ff0e8886c8b833ae90f9b2ea241048420f77b67640ca5873ec45e40ccab25d977d52f7ab37eeffc1123ffb5368ca7f48349b60da11e37c062bf8cae1093a6d9004978ee8cae466c42b6dab514df4320785fb0604430a4d13d39c6970fb26ea1f91930ffa96075d1fc16a5d10f554dd651a81b5e29be09aa833b7c11a8a547a9654cd7fac6e3ecf2f3d961384a7491182ad80782b2aacf299a5da45fabb2510a27ae55bf5e93b86d2e7d8c68d2dab71132757d49ca81d45f169bbd78fd9018f45e273709d9fcd13f2e5de4a925438c64b608cbc68d2df64ad8af0881e620a81d6a3ae709e4ea493035d8aa811ca62c9a41674ea960d7a719a2e1ac701010f7a43c3e23de9642494075a28a194408413eab15c18c92c33fe60fc12fe4b7212129929afa39566dade56d0aba48132f047ecb9a5e5ecc940ca1e939e223c75f49f54decb3e0e47c0b4ffc981ac5bd6d2975a157f6d47d4857f58af0c702b9bab10548f32e88958893ab7c246dde7efca600ec2ead34e2fd89275812aa272065eb335e387006dd8c0ad88f5212284bea4b689b15b7eabc6f467d071be75bb70424d7723191c5d866ecc9956e5c9d80e3d66a1b3c86da6b9fff1f36ff416c4ab7a42fab57c9343915696d7ade695f34a964a9d7271bfe49df4baf1e998ad073cc6e61cc7f4c8185808ebcce023adb49e1bab576d5b2db2885653f13c95a25f344e3fa090ec636893d7a588aff2428d9f6f151ec384ce0ca84d8d13538c29c63f09d243a90896f46cd2a144e9a554c8a0168e8cbd71f2b1fccbb3c64be46e5d7788fc272423892364c4b2e99221a5186d74639e0c6b6c86ed265fae67031ef08e9bd897699e0636ff0733105262f6953ce3ed1fcc45a82953b1fc26fca652a89a4c62de61ba960a3c2f99a4b47d7d0a3c86a6e7d14461115054c7d981c0032cbf2c35ba213f4448902db8933e1d0fc2b0a24ad3722a1d6068d482a035c056c4fef95cf835c2c303ad161fb35dcd040c1989df5d7c6a5f2e242cfeca8e6e011f48c52d9f6af21e2d226c24f887fd1d55514e48939d4020f3c44ba191a6251d69d9afbd263dc85016ee0f293bc90323d00aa56266f765880c85d8c90e4486821b8e2eb4f79233226ed9bc3f72f29d1e7dfe065433d0657169d4d1802c3472c4b6d222ec313b2d0f405690ce1051f4f539bf412c129c0fba979dd65ee1045922a727e7b827804955d1aa812dbad708985e74a28589f38167326afe68302250ad69a74e7c17cf6fdb0f033107ccd2a1288598e1391c8446a65f4a074d2d43d6b9f2ffdcda85b30f52a9d20454905a2d1bdaff57874b3a8e8719ce108668a0ae49ab6ec0f7d9055bb476e9a28b44e613a7458f5f071fe30811f3db408ca0ddff3f0b6accbfc3e47cd837eed2b5f4ecb1f2c0c3fe4edefbe99ee4228a3d96b6fcb88e979fc56cadba9ea66291e4f87670fd2ca7405171efaa6e0916df02982fdfc7cf4a4da017e38ba81a621cb076f5d97accb1d9cb27695117bf6294ad280b9fa55b43e5231c27997ec971bf9d614fe22662d17e795a8d68e09897aa810aa6f4532a88ffe1bdfeff774e6e425e0dd446e6c1163d067bab4f55fd1e3895804600cfd76747e62e918a76d4050b4252d577184e8035db3a88c121d8dab7f853b141fe9f0d95095d400d690b23fdf0df4ee9ef2766637ae6f01f9640cf32b3bb94781daa75d7eef0e940c586210220d8cb9744858e5be0c31fae840827e5c988eb39bb4192f13e69da79134d2275e4401e5a0a7c9111b49008468e288bb6ab36b4efddb2ecf9b9701e40322e12db1e7bb3c6bf6830e1723897ca1a077ae53119b8cc34fc2503388634b2ad1c203593606634ece0592aaa1d8242b9cd4661e73fe5f6f8c292de79361a877e3a2b878c352529f5f7aa8c78c05c478d4214135044866d4c00128fa5b623de7fcea8c1e64a0ec9c45ed0eb65d922870cfd263851a394566175efca3598afcebd2eb95eab871e657dceddbc7ab69402f34aa5863877c49a2deb716c67166798027868a9c84a47a77abee03aa8a56cfaa406e181dff4397191170f1f8afb2f45f141c2fded8ac42cd6914cfb61e27251732f84893243297800ebd40b73af33fbbd883a2fb29c2914be5423cb0dc2af80d95e546fa22817d74d0a586b9667a05bef612de0470664cfcadc097344f3ffa55a013f9943be2afd712d2827bb77944c4103aa062a172d6012c45b2d231c8f45a5895cacd6705fa64057ad18ee8f9a5a79a89ffb55d3f0d8b6bcc0e1bd751fb86ca1c5691d4332deb78c9670f9257bfbeeefd3f80bc7b4849af3406300946192e895aeab59162ad5990fab71024964cba26f1ad7af467c0e23134ebbf29ee9c78d20c26787b727c4c1c1b301d8a25012cc640a42e78759ebfdff69eac6f57f48319a23eab36e3e9bd102bdc1f8a7a5e4491349408fb33b2032a754159a364b84430f7a577e348b94043ed9322af36de825793bc7db08ba41c78021af45fb7055d4973f338263de28b3cce92d294dcf198bfc5b454ff01106feb46dd3528786369cbf93e19cdb7e81793fb4f8642d34c42c7b035f710e556e82008909eadb25185468e9748e1550e8a2a4b59a97fd95a292c8ff41edf4cb6a23d16861a9f7d62883055e4a3209c3cd8aa3b57951dcb652e77e7ce3e4d10af146e76e09a890f0950268d40512c394e981c0f779ea34460fae08ca410bc04a16b6f23a568e858b1d98e9d00116943d74d1b5f2c8f10c256801b9a74e9cade11cbc6b4d2bc135e9dd55e0785b866ef5a5eb0f8f0ea1ead3fe16d95b0934c23803faa1ed239b1b2eb1e16f4b9ae324099d95227289ae4a0408b3fc6e26df9c990962e2fa53e9bef66033cb00733ea0a2e82c38ed89c6ad9473cd3d40077dca0a58e6940791d2954874206c7e3b3a8961a21e0ed3f8cf81cc77775ebc816c60075513c63a15dbd67fa7f4b10535a29a875659560bfdb81dd6e2a08e979b10b7290f3cc670c35c467e6e00e637a16a04cc18747c3dffc84953c68ab1e5a55096d98daa9316fa6d508210532617bfa20ece7c1f6f0f29803ddc3199ac6efe1c3f24a6addcee1a957a79ec980bb5a1b16b678b6d640a29e628e005c537e526d5066cf4319196b03d11c4920ac722c592ce8b98a952dc47513c30d8cc29d983223bf38f982b738fa3027cbb93c584b51f5e98d113a612f06cffe6d120fc47fae15f322db0e4dd6427981191297564f5dd07615bca16e3d3f539d1c2c53d0ee7fb988c9fe89623b47e46f5c50df027f476bc66db5ba456ff397779918769ad0eee75a9944a73236d2e1a050f87f2b63ab5f7f50b93ecf9640848bfa5203078e13e5ddc4fd77a0651f92972aa7ae0c11affeee0dddb26f399112c60096b5c2c87927c0bcbcce2508f864f7fef851e938181cf1853cd5e8b7b28a115ae8c568589cef87d507ca979fa04a655319a8220fd146d27c64b637785182a1c0cb4974da3967dd58a5dd6c5b320bc51630a2482172f98d4f797e70be88cf364ab1086aa06969cc0d280175b85d841d23240a12eeb47b624744f90a45ec4e9112ac45e0690756a744ec44dfca076f81c7fbaf1fd5d8f1ed403e2a3adcf704d01134ad1c400a2be241dc71842a409df1627a23d989456f03e77af77a5c59e51440c9f68fa5bb6aebf607d49c8f11b68295b01d2049032f8123fb7bdfcd1b73323b90cf51896d74f0057ed8e40e323fea8f27020a4b682e0450988c503ccfe8d9c40e8bbe73fe40a47c772e2b8c52f59a08076ea976610f41f2ad99fda1f1152c7f74e429fffe288242b1907736751a748095f918c2824564ed6a788a63117db88f6c0311e31b43e7c648cbc26d3cc96", 0x1000}, {&(0x7f0000002700)="ec39b7a863954a079ad58efd7382db15f0cad3ae09267f8aaee179390e04b7d228464c156418df429041dcc2b4736bdeafa04b2b6b5dd2513daa3ad83ed6aa367900b8fbddf5e2b3ce76e2c956fde2b69f17d363fc1206957953eae135df0bda6c9656cf2d57cd70a35f93e139b7e3517cc0bbd04980d6a3230748c81a0cd8d2231d1aba4f80d2068f3934f002394a5748cde5f06525c3249522246ac9c44d2e70ebf59d39aacb6dd162351cf4c06e2f7e089f4f0e802d9fac7a8113f452a9310fb05dfb4ae5a36bc8e2f13da8eb27e923f886dbba88699dfd0d093a17624fe9047c54f7d794b818136c7baf104c693ad872ca", 0xf3}, {&(0x7f0000002800)="2651adda9f5b8a8603d6814c1d20951c588b7f5637ff2ca0047a1f74cb33b42e622d572a5bde7c6207faa8724ba2c65cf3dd1629091a4ebd900e58b2144492b59589bb8a468217e60dedffacb5b95331a935c8c2c364f54a8b42841d9635d16852b87982969f1bba080739b7476b38f3aaeda161e0de45e1f09184732cf38f00d7e5cc2837d5b36cf8857f680871f4bdcf674881cc32da45d037d8b493842f9e44200330af", 0xa5}, {&(0x7f00000028c0)="f33b55a65d04c5690866d16493726bdc0f1ef3718db4c25771e3af766b15331c63abc8135f908d8630a4457118d35701f2122c6b670cbbab63ec33b9fd596704edfaeeb42a7feefa3f279acfc53c5ed06f45019b54a3f72f824759f68f7a5802bc8ade8ff5abcb0a2deb547ad82df7cb6ebebec13127675c8e3b434585919fac16", 0x81}], 0x4, &(0x7f00000029c0)=[@ip_retopts={{0x44, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x6d, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x40, 0x3, 0x6, [{@rand_addr=0x64010100, 0x1}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x6b0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}], 0x48}}, {{&(0x7f0000002a40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000003b80)=[{&(0x7f0000002a80)="1f4ba825cb9373cfc70f0d1182590a08847c4a3791af707a11511396e6fa062aef389252280a5917cbff82b9bc46c85276b67cb44940bb0b8fc715434357a5cd166ddf6c83e3a810", 0x48}, {&(0x7f0000002b00)="ac8d3933e030d3152f4626b68d8db2f32668aaff92b15c36c8d3a590a5b11ed549bf398e00abffe030f7398d4ec29d53aa8f12843ac6323b937ede032cf8a9d965d68dcd80a1fd7e6e1cbc7c0d0ac8561d3582", 0x53}, {&(0x7f0000002b80)="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", 0x1000}], 0x3, &(0x7f0000004680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @local}}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @loopback}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@cipso={0x86, 0x4b, 0x0, [{0x5, 0x9, "99c61b7841b49f"}, {0x2, 0xd, "aab6094385ce02fbdab60b"}, {0x4, 0xe, "2b054cecf19e629a330eae1f"}, {0x5, 0xc, "7d905f4375dd2608b8e8"}, {0x7, 0x5, "2a72ab"}, {0x7, 0x10, "36a8a836e123388f92bdc3a17ec1"}]}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x28}, 0xd3}]}, @timestamp={0x44, 0x8, 0x10, 0x0, 0x3, [0x800]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x5d, 0x0, 0x3, [0xfffffff8, 0x8, 0x2]}, @noop, @ra={0x94, 0x4}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x1a, 0x2, [{0x5, 0x12, "d0d0dd1c99813fe864e1eb60a84e26d3"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x36, 0x1, 0x5, [{@broadcast, 0x4}, {@rand_addr=0x64010100, 0xffff}, {@remote, 0xbec}, {@multicast2, 0x5}, {@private=0xa010101, 0x1}]}]}}}], 0x180}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000003ec0)="3be226d861e4786d85839b10d45a0d9cc9a5a1636c336bac1a24e4797974f52fa2de3af3c0c7aaa40db3864540ef66cfb0a1b32b", 0x34}, {&(0x7f0000003f00)="a474b2b05cb4c5833b45ab6ed7bb77a8310747c6d04ae84896af9106b03276060d7637bd02e0f1c828e266e9a3f1da8ac3586a5639064f5350821dbc8408498fc388b3c3a96a62e23d86de50cdfef425ace0fec23fed9e8f2159a6096b2f5be16e390df357aec45332adcab97b9371f2a1fa7c7377a27b357a745cdfd87cc50b5399657ec6f731357bb854", 0x8b}, {&(0x7f0000003fc0)="f5a3e20eacd36ebbfdbda99775838ca775186b3faed89ec77cf62f76f9e2523ddb7765d2f79ff63c518a554bb46e62930faa0b2d7295e277fedd58085ce0bd0da6f3b2f3fe749746151b309b718ace0e4308b1fc17415fb1521cac2642691f049b385988af8f0bd4c68bc3c5e48a5642e0b2df612dd70a7ba2d767f72bde6bc00ff36b7624", 0x85}, {&(0x7f0000004080)="754a05", 0x3}, {&(0x7f00000040c0)="a9e365ce31f45452495835624f16cd97b1ba6a5e86b14e250654875ab8b4ea02cea2f0cfd49a2052d82257d0d9a652388f8e1bdc96b943451f1cf8b63faa0ceb72652675a68faf4fac5fdca525864a39485a7d54ebeeef4471e9daaa3422d51e568c287ee5d0db0618d14eb17b7e867f08bc24a41f0d0a05ebb4a6dc86e128ba4f27b062671f543bb47b6a0d75ac2d39bea783f42302bd9404310bbdf6dc47c9bf6ed65db64e36d88a57e49fb1289674595a26731b2573db2e51d63df01dffc31344b69ef53db70368116ade8fb94d62", 0xd0}, {&(0x7f00000041c0)="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", 0xfd}, {&(0x7f00000042c0)="98aca21126be66cf1375053dd90969e3687807ba6414e8c300d1d2489fb7d422dda1c5fd411983012235a8a0c2eba42cc9db539448f6cb0d444df699e91cda97fb85451d86d9bb190945f772d97374960dcf6cf7ef1679c112f76e5fd7349f1e7f9e283aa29c65070e7ce0204521a3492bf60a5e2be1349ff01eac59c53e9dc08536740713a27030a51988bbc2c70cb7404cd1409fd9cef8f889224e3eb5d61de63c1948b247acbc6ab7789cda1b0100eb85f7a100366538fe4686d1ca99a32ee2a17018f1d06704d78f6f50a45cdfb9f3ecf3b58ff305f83012b254fef2e66e73e01d7567fe1d73", 0xe8}, {&(0x7f00000043c0)="dfec4e85b045483339d980c9b707dd9b8e102b15c4858618868fee783c0d331efee7bcfa6b4fb801ddc5a2297444bfa33efb818c5e066b359bbf961fa6b9dc18", 0x40}], 0x8}}], 0x8, 0x20040805) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000090000004400038008000300000000001400020076657468315f746f5f7465616d00000008000100010000000500080001000000140006"], 0x58}}, 0x20000000) 353.159452ms ago: executing program 1 (id=3005): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x24, r3, 0x201, 0x400300, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 343.598123ms ago: executing program 0 (id=3006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000090900010073797a30000000004c000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000000a000700726f758a65"], 0x94}}, 0x0) r1 = socket(0xa, 0x6, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000640)=0x1c0, 0x4) syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0x1, &(0x7f0000000400)="a7adb8dc37b84e80b617b259dc78a0c1a9ecb1e9bbe3d694129cd13f5dcfebd836966b0fce16b08672e55cb094c299cf96f46f29fa8f3a17231f38ce856a48300dc60651f8a67266686296b233727c74b62486e0ea25cb48e466e29ba77e591bcb2c77a791c8a0f3f2487219627790b01629608b87e05ce1799c4628ced2b768a798ec5449895b64ac1a0e4f9dfb3277303415d339d77a18838cb6ea1762a2f2424dd022b09bdebbe680404c63a443262914749dc9d0049e38796c3008d8a4a694e76e4cfe6108c09649f1f1a944fcf8659a90f3adee409a9d0abb2c871452bdb1519c95be6915756ebc", &(0x7f00000001c0)=@tcp=r4, 0x4}, 0x20) r6 = socket$inet(0x2, 0x2, 0x1) unshare(0x40400) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r8 = accept4$bt_l2cap(r2, &(0x7f0000000680), &(0x7f00000006c0)=0xe, 0x80000) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000700)={0x10}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x8, 0x900, 0x1000, 0x80, 0x1, 0x0, '\x00', r3, r7, 0x1, 0x5, 0x3}, 0x48) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x280000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) sendmmsg$sock(r2, &(0x7f0000001140), 0x40000a7, 0x40040) 203.919674ms ago: executing program 4 (id=3007): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000480140004800800020000000000080001"], 0x3c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x39}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 165.146971ms ago: executing program 1 (id=3008): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc028020000300114c0500e1000c1e030f001a000000", 0x33a) 83.260772ms ago: executing program 3 (id=3009): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x6, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r3, r1, 0x1, 0x8, 0x0, @prog_id}, 0x20) recvfrom(r2, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800c001a80080002800400018006002200c630000008001c"], 0x60}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "18"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 0s ago: executing program 4 (id=3010): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x2000, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): nterface deactivated: batadv_slave_0 [ 214.941116][ T9783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.987272][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.019329][ T9783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.786618][ T9823] netlink: 'syz.1.1544': attribute type 10 has an invalid length. [ 215.816068][ T9823] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 215.838646][ T9827] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 215.866108][ T9827] bridge0: port 3(batadv0) entered blocking state [ 215.901311][ T9827] bridge0: port 3(batadv0) entered disabled state [ 215.959759][ T9827] batadv0: entered allmulticast mode [ 216.007732][ T9827] batadv0: entered promiscuous mode [ 216.047045][ T9827] bridge0: port 3(batadv0) entered blocking state [ 216.054147][ T9827] bridge0: port 3(batadv0) entered forwarding state [ 216.096958][ T6697] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 216.107214][ T6697] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 216.517177][ T9861] sit0: entered promiscuous mode [ 216.546427][ T9861] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 216.578040][ T9861] __nla_validate_parse: 7 callbacks suppressed [ 216.578063][ T9861] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1557'. [ 216.627347][ T9866] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1557'. [ 216.657504][ T9868] netlink: 'syz.2.1560': attribute type 10 has an invalid length. [ 216.689989][ T9868] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1560'. [ 216.739875][ T9871] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 216.970126][ T9887] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1567'. [ 217.312267][ T9911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1580'. [ 217.384257][ T9913] dccp_invalid_packet: P.Data Offset(4) too small [ 217.390531][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 217.621210][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1590'. [ 217.725785][ T9937] netlink: 'syz.4.1591': attribute type 9 has an invalid length. [ 217.729352][ T9938] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1593'. [ 217.758355][ T9937] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1591'. [ 217.891073][ T9947] netlink: 'syz.4.1591': attribute type 10 has an invalid length. [ 217.951174][ T9947] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1591'. [ 218.080268][ T9962] netlink: 'syz.4.1598': attribute type 11 has an invalid length. [ 219.277856][T10027] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 219.326222][T10028] vlan2: entered promiscuous mode [ 219.335123][T10028] vlan2: entered allmulticast mode [ 219.633755][T10048] netlink: 'syz.3.1633': attribute type 10 has an invalid length. [ 219.694010][T10048] team0: Port device syz_tun added [ 219.751397][T10054] FAULT_INJECTION: forcing a failure. [ 219.751397][T10054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.756320][T10050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.773166][T10050] IPv6: NLM_F_CREATE should be set when creating new route [ 219.781107][T10050] IPv6: NLM_F_CREATE should be set when creating new route [ 219.788488][T10050] IPv6: NLM_F_CREATE should be set when creating new route [ 219.809765][T10054] CPU: 1 PID: 10054 Comm: syz.4.1634 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 219.820010][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 219.830119][T10054] Call Trace: [ 219.833503][T10054] [ 219.836472][T10054] dump_stack_lvl+0x241/0x360 [ 219.841216][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.846579][T10054] ? __pfx__printk+0x10/0x10 [ 219.851333][T10054] should_fail_ex+0x3b0/0x4e0 [ 219.856106][T10054] prepare_alloc_pages+0x1da/0x5d0 [ 219.861308][T10054] __alloc_pages_noprof+0x166/0x6c0 [ 219.866588][T10054] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 219.872789][T10054] alloc_pages_mpol_noprof+0x3e8/0x680 [ 219.878579][T10054] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 219.884637][T10054] ? xas_load+0x59b/0x5c0 [ 219.889003][T10054] ? mpol_shared_policy_lookup+0x148/0x1f0 [ 219.894973][T10054] shmem_alloc_and_add_folio+0x24d/0xdb0 [ 219.900756][T10054] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 219.907033][T10054] ? filemap_map_pages+0x24f/0x1e70 [ 219.912286][T10054] ? __pfx_lock_release+0x10/0x10 [ 219.917424][T10054] shmem_get_folio_gfp+0x82d/0x1f50 [ 219.922732][T10054] ? do_raw_spin_unlock+0x13c/0x8b0 [ 219.927967][T10054] ? filemap_map_pages+0x18e0/0x1e70 [ 219.933292][T10054] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 219.939033][T10054] shmem_fault+0x252/0x6f0 [ 219.943791][T10054] ? __pfx_shmem_fault+0x10/0x10 [ 219.949018][T10054] ? __pfx_lock_release+0x10/0x10 [ 219.954081][T10054] ? pte_offset_map_nolock+0x137/0x1f0 [ 219.960276][T10054] ? __lock_acquire+0x1346/0x1fd0 [ 219.965437][T10054] __do_fault+0x135/0x460 [ 219.970095][T10054] ? handle_pte_fault+0x222c/0x7090 [ 219.975421][T10054] handle_pte_fault+0x3d15/0x7090 [ 219.980494][T10054] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 219.986419][T10054] ? __pfx_lock_acquire+0x10/0x10 [ 219.991471][T10054] ? __pfx_handle_pte_fault+0x10/0x10 [ 219.996864][T10054] ? do_raw_spin_lock+0x14f/0x370 [ 220.002162][T10054] ? follow_page_pte+0x292/0x1d90 [ 220.007249][T10054] ? follow_page_pte+0x859/0x1d90 [ 220.012559][T10054] ? __pfx_lock_release+0x10/0x10 [ 220.017638][T10054] ? do_raw_spin_unlock+0x13c/0x8b0 [ 220.022871][T10054] handle_mm_fault+0x10df/0x1ba0 [ 220.027864][T10054] ? __pfx_handle_mm_fault+0x10/0x10 [ 220.033198][T10054] __get_user_pages+0x6ef/0x1590 [ 220.038170][T10054] ? mt_find+0x62d/0x850 [ 220.042534][T10054] ? __pfx___get_user_pages+0x10/0x10 [ 220.047952][T10054] populate_vma_page_range+0x264/0x330 [ 220.053446][T10054] ? __pfx_populate_vma_page_range+0x10/0x10 [ 220.059485][T10054] ? userfaultfd_unmap_complete+0x30c/0x360 [ 220.065408][T10054] ? do_mmap+0x915/0xfa0 [ 220.070119][T10054] __mm_populate+0x27a/0x460 [ 220.074781][T10054] ? __pfx___mm_populate+0x10/0x10 [ 220.080020][T10054] vm_mmap_pgoff+0x2c3/0x3d0 [ 220.084635][T10054] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 220.090207][T10054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.096591][T10054] ? do_syscall_64+0x100/0x230 [ 220.101470][T10054] ? ksys_mmap_pgoff+0xdf/0x720 [ 220.106453][T10054] ? __x64_sys_mmap+0x7f/0x140 [ 220.111332][T10054] do_syscall_64+0xf3/0x230 [ 220.115957][T10054] ? clear_bhb_loop+0x35/0x90 [ 220.120692][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.126786][T10054] RIP: 0033:0x7fca9ef75bd9 [ 220.131304][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.151117][T10054] RSP: 002b:00007fca9fc94048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 220.159559][T10054] RAX: ffffffffffffffda RBX: 00007fca9f104038 RCX: 00007fca9ef75bd9 [ 220.168415][T10054] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 220.176938][T10054] RBP: 00007fca9fc940a0 R08: ffffffffffffffff R09: 0000000000000000 [ 220.185356][T10054] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 220.193373][T10054] R13: 000000000000006e R14: 00007fca9f104038 R15: 00007fffa3b5d578 [ 220.201402][T10054] [ 220.380052][T10062] netlink: 'syz.0.1639': attribute type 4 has an invalid length. [ 220.481193][T10069] netlink: 'syz.0.1639': attribute type 4 has an invalid length. [ 221.023517][T10092] unknown channel width for channel at 909000KHz? [ 221.039183][T10092] unknown channel width for channel at 909000KHz? [ 221.352173][T10110] SET target dimension over the limit! [ 221.370666][T10110] macvtap0: entered promiscuous mode [ 221.387200][T10110] macvtap0: entered allmulticast mode [ 221.404311][T10110] veth0_macvtap: entered allmulticast mode [ 221.828121][T10133] __nla_validate_parse: 10 callbacks suppressed [ 221.828147][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 221.882862][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1667'. [ 221.998370][T10144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1668'. [ 222.095528][T10147] netlink: 'syz.4.1673': attribute type 1 has an invalid length. [ 222.735792][T10176] netlink: 'syz.4.1680': attribute type 64 has an invalid length. [ 222.758968][T10176] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1680'. [ 223.324783][T10200] FAULT_INJECTION: forcing a failure. [ 223.324783][T10200] name failslab, interval 1, probability 0, space 0, times 0 [ 223.372375][T10200] CPU: 0 PID: 10200 Comm: syz.0.1690 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 223.382700][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 223.393162][T10200] Call Trace: [ 223.396484][T10200] [ 223.399455][T10200] dump_stack_lvl+0x241/0x360 [ 223.404276][T10200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.409619][T10200] ? __pfx__printk+0x10/0x10 [ 223.414626][T10200] ? kasan_save_track+0x51/0x80 [ 223.419587][T10200] ? __kasan_kmalloc+0x98/0xb0 [ 223.424410][T10200] ? sctp_datamsg_from_user+0x88/0xf20 [ 223.430017][T10200] ? sctp_sendmsg+0x1bc3/0x3520 [ 223.434951][T10200] ? ____sys_sendmsg+0x525/0x7d0 [ 223.440030][T10200] should_fail_ex+0x3b0/0x4e0 [ 223.444766][T10200] ? __alloc_skb+0x1c3/0x440 [ 223.449431][T10200] should_failslab+0x9/0x20 [ 223.453983][T10200] kmem_cache_alloc_node_noprof+0x71/0x320 [ 223.459918][T10200] __alloc_skb+0x1c3/0x440 [ 223.464945][T10200] ? __pfx___alloc_skb+0x10/0x10 [ 223.470022][T10200] _sctp_make_chunk+0x58/0x460 [ 223.474837][T10200] sctp_make_datafrag_empty+0xa6/0x510 [ 223.481072][T10200] ? sctp_association_free+0x1f0/0x7b0 [ 223.486713][T10200] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 223.492205][T10200] ? sctp_auth_send_cid+0x69/0x250 [ 223.497801][T10200] sctp_datamsg_from_user+0x740/0xf20 [ 223.503210][T10200] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 223.508534][T10200] ? __asan_memcpy+0x40/0x70 [ 223.513141][T10200] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 223.518845][T10200] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 223.524605][T10200] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 223.530085][T10200] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 223.535951][T10200] ? sctp_sendmsg+0xbb9/0x3520 [ 223.541362][T10200] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 223.547362][T10200] ? security_sctp_bind_connect+0x90/0xb0 [ 223.553801][T10200] sctp_sendmsg+0x1bc3/0x3520 [ 223.558804][T10200] ? __pfx_sctp_sendmsg+0x10/0x10 [ 223.564524][T10200] ? __pfx_aa_sk_perm+0x10/0x10 [ 223.569693][T10200] ? inet_sendmsg+0x330/0x390 [ 223.575008][T10200] __sock_sendmsg+0x1a6/0x270 [ 223.579710][T10200] ____sys_sendmsg+0x525/0x7d0 [ 223.584528][T10200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.589866][T10200] __sys_sendmsg+0x2b0/0x3a0 [ 223.594746][T10200] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.599891][T10200] ? vfs_write+0x7c4/0xc90 [ 223.604408][T10200] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.611110][T10200] ? do_syscall_64+0x100/0x230 [ 223.615924][T10200] ? do_syscall_64+0xb6/0x230 [ 223.620900][T10200] do_syscall_64+0xf3/0x230 [ 223.625521][T10200] ? clear_bhb_loop+0x35/0x90 [ 223.631610][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.637872][T10200] RIP: 0033:0x7fcc16d75bd9 [ 223.642304][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.662625][T10200] RSP: 002b:00007fcc17a92048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.671854][T10200] RAX: ffffffffffffffda RBX: 00007fcc16f03f60 RCX: 00007fcc16d75bd9 [ 223.679934][T10200] RDX: 00000000000003e8 RSI: 00000000200004c0 RDI: 0000000000000006 [ 223.688360][T10200] RBP: 00007fcc17a920a0 R08: 0000000000000000 R09: 0000000000000000 [ 223.696766][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.705299][T10200] R13: 000000000000000b R14: 00007fcc16f03f60 R15: 00007fff1f10d0f8 [ 223.713659][T10200] [ 223.900287][T10204] netlink: 4620 bytes leftover after parsing attributes in process `syz.1.1692'. [ 224.140682][T10223] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1698'. [ 224.209736][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 224.406884][T10241] FAULT_INJECTION: forcing a failure. [ 224.406884][T10241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.442732][T10241] CPU: 1 PID: 10241 Comm: syz.2.1706 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 224.454048][T10241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 224.464154][T10241] Call Trace: [ 224.467648][T10241] [ 224.470711][T10241] dump_stack_lvl+0x241/0x360 [ 224.475447][T10241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.480796][T10241] ? __pfx__printk+0x10/0x10 [ 224.485450][T10241] ? __pfx_lock_release+0x10/0x10 [ 224.490567][T10241] should_fail_ex+0x3b0/0x4e0 [ 224.495552][T10241] _copy_to_iter+0x43a/0x1960 [ 224.500643][T10241] ? __virt_addr_valid+0x183/0x520 [ 224.505830][T10241] ? __pfx__copy_to_iter+0x10/0x10 [ 224.511011][T10241] ? __virt_addr_valid+0x183/0x520 [ 224.516272][T10241] ? __virt_addr_valid+0x183/0x520 [ 224.521967][T10241] ? __virt_addr_valid+0x44e/0x520 [ 224.527516][T10241] ? __check_object_size+0x49c/0x900 [ 224.532961][T10241] __skb_datagram_iter+0x110/0x8c0 [ 224.538154][T10241] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 224.544047][T10241] ? __lock_acquire+0x1346/0x1fd0 [ 224.549140][T10241] skb_copy_datagram_iter+0xd1/0x250 [ 224.554939][T10241] netlink_recvmsg+0x2d0/0x11d0 [ 224.559870][T10241] ? __pfx_netlink_recvmsg+0x10/0x10 [ 224.565222][T10241] ? __pfx_lock_acquire+0x10/0x10 [ 224.570302][T10241] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.575237][T10241] ? aa_sock_msg_perm+0x91/0x160 [ 224.576598][T10247] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 224.580338][T10241] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 224.580369][T10241] ? security_socket_recvmsg+0x90/0xb0 [ 224.580397][T10241] ? __pfx_netlink_recvmsg+0x10/0x10 [ 224.607366][T10249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 224.612591][T10241] sock_recvmsg+0x22f/0x280 [ 224.612633][T10241] sock_read_iter+0x2ca/0x3e0 [ 224.612661][T10241] ? __pfx_sock_read_iter+0x10/0x10 [ 224.612707][T10241] do_iter_readv_writev+0x5a4/0x800 [ 224.612745][T10241] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 224.612787][T10241] ? bpf_lsm_file_permission+0x9/0x10 [ 224.612815][T10241] ? security_file_permission+0x7f/0xa0 [ 224.612850][T10241] ? rw_verify_area+0x520/0x6b0 [ 224.671415][T10241] vfs_readv+0x2b6/0xa90 [ 224.675742][T10241] ? __pfx_vfs_readv+0x10/0x10 [ 224.680567][T10241] ? vfs_write+0x7c4/0xc90 [ 224.685054][T10241] ? __fget_files+0x29/0x470 [ 224.689814][T10241] do_readv+0x1b1/0x350 [ 224.694135][T10241] ? __pfx_do_readv+0x10/0x10 [ 224.699051][T10241] ? do_syscall_64+0x100/0x230 [ 224.703880][T10241] ? do_syscall_64+0xb6/0x230 [ 224.708619][T10241] do_syscall_64+0xf3/0x230 [ 224.713444][T10241] ? clear_bhb_loop+0x35/0x90 [ 224.718187][T10241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.724140][T10241] RIP: 0033:0x7fd539975bd9 [ 224.728611][T10241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.748612][T10241] RSP: 002b:00007fd53a6ef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 224.757530][T10241] RAX: ffffffffffffffda RBX: 00007fd539b03f60 RCX: 00007fd539975bd9 [ 224.765665][T10241] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 224.773745][T10241] RBP: 00007fd53a6ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 224.782644][T10241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.790955][T10241] R13: 000000000000000b R14: 00007fd539b03f60 R15: 00007ffff62fcff8 [ 224.799801][T10241] [ 225.074453][T10265] netlink: 'syz.3.1716': attribute type 9 has an invalid length. [ 225.107401][T10265] FAULT_INJECTION: forcing a failure. [ 225.107401][T10265] name failslab, interval 1, probability 0, space 0, times 0 [ 225.134973][T10265] CPU: 0 PID: 10265 Comm: syz.3.1716 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 225.145325][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 225.155513][T10265] Call Trace: [ 225.158830][T10265] [ 225.161798][T10265] dump_stack_lvl+0x241/0x360 [ 225.166537][T10265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.172050][T10265] ? __pfx__printk+0x10/0x10 [ 225.176772][T10265] ? dev_prep_valid_name+0x916/0xa40 [ 225.182133][T10265] should_fail_ex+0x3b0/0x4e0 [ 225.186883][T10265] ? register_netdevice+0x59c/0x1b00 [ 225.192339][T10265] should_failslab+0x9/0x20 [ 225.196920][T10265] kmalloc_trace_noprof+0x6c/0x2c0 [ 225.202293][T10265] register_netdevice+0x59c/0x1b00 [ 225.207572][T10265] ? __pfx__get_random_bytes+0x10/0x10 [ 225.213106][T10265] ? __pfx_register_netdevice+0x10/0x10 [ 225.218728][T10265] ? dev_addr_mod+0xbd/0x330 [ 225.223480][T10265] macvlan_common_newlink+0x1189/0x1930 [ 225.229089][T10265] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 225.234553][T10265] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 225.240476][T10265] ? rtnl_create_link+0x91c/0xc20 [ 225.245570][T10265] ? __pfx_macvlan_newlink+0x10/0x10 [ 225.250974][T10265] rtnl_newlink+0x1591/0x20a0 [ 225.255881][T10265] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.260939][T10265] ? __pfx___mutex_trylock_common+0x10/0x10 [ 225.266874][T10265] ? rcu_is_watching+0x15/0xb0 [ 225.271648][T10265] ? trace_contention_end+0x3c/0x120 [ 225.276953][T10265] ? __mutex_lock+0x2ef/0xd70 [ 225.281658][T10265] ? __pfx_lock_release+0x10/0x10 [ 225.286797][T10265] ? __pfx_rtnl_newlink+0x10/0x10 [ 225.291862][T10265] rtnetlink_rcv_msg+0x89b/0x1180 [ 225.297100][T10265] ? rtnetlink_rcv_msg+0x208/0x1180 [ 225.302399][T10265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.307898][T10265] ? __local_bh_enable_ip+0x168/0x200 [ 225.313578][T10265] ? lockdep_hardirqs_on+0x99/0x150 [ 225.318835][T10265] ? __local_bh_enable_ip+0x168/0x200 [ 225.324240][T10265] ? dev_hard_start_xmit+0x773/0x7e0 [ 225.329550][T10265] ? __dev_queue_xmit+0x2da/0x3e90 [ 225.334696][T10265] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 225.340528][T10265] ? __dev_queue_xmit+0x2da/0x3e90 [ 225.345766][T10265] ? __dev_queue_xmit+0x1763/0x3e90 [ 225.351075][T10265] ? kasan_save_track+0x51/0x80 [ 225.356490][T10265] ? do_syscall_64+0xf3/0x230 [ 225.361219][T10265] ? __dev_queue_xmit+0x2da/0x3e90 [ 225.366452][T10265] ? __pfx___dev_queue_xmit+0x10/0x10 [ 225.371879][T10265] ? ref_tracker_free+0x643/0x7e0 [ 225.376955][T10265] netlink_rcv_skb+0x1e3/0x430 [ 225.381747][T10265] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.387227][T10265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.392556][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.397795][T10265] netlink_unicast+0x7f0/0x990 [ 225.402603][T10265] ? __pfx_netlink_unicast+0x10/0x10 [ 225.407932][T10265] ? __virt_addr_valid+0x183/0x520 [ 225.413078][T10265] ? __check_object_size+0x49c/0x900 [ 225.418418][T10265] ? bpf_lsm_netlink_send+0x9/0x10 [ 225.423558][T10265] netlink_sendmsg+0x8e4/0xcb0 [ 225.428365][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.433703][T10265] ? __import_iovec+0x536/0x820 [ 225.438567][T10265] ? aa_sock_msg_perm+0x91/0x160 [ 225.443667][T10265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 225.449005][T10265] ? security_socket_sendmsg+0x87/0xb0 [ 225.454511][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.459902][T10265] __sock_sendmsg+0x221/0x270 [ 225.464602][T10265] ____sys_sendmsg+0x525/0x7d0 [ 225.469482][T10265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.474800][T10265] __sys_sendmsg+0x2b0/0x3a0 [ 225.479515][T10265] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.484731][T10265] ? vfs_write+0x7c4/0xc90 [ 225.489200][T10265] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.495567][T10265] ? do_syscall_64+0x100/0x230 [ 225.500453][T10265] ? do_syscall_64+0xb6/0x230 [ 225.505162][T10265] do_syscall_64+0xf3/0x230 [ 225.510047][T10265] ? clear_bhb_loop+0x35/0x90 [ 225.515183][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.521186][T10265] RIP: 0033:0x7eff85175bd9 [ 225.525815][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.546056][T10265] RSP: 002b:00007eff85f33048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.554503][T10265] RAX: ffffffffffffffda RBX: 00007eff85303f60 RCX: 00007eff85175bd9 [ 225.563118][T10265] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 225.571108][T10265] RBP: 00007eff85f330a0 R08: 0000000000000000 R09: 0000000000000000 [ 225.579121][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.587726][T10265] R13: 000000000000000b R14: 00007eff85303f60 R15: 00007ffec7c4cc98 [ 225.595763][T10265] [ 225.783567][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 225.945787][T10290] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1725'. [ 225.982550][T10290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1725'. [ 226.178526][T10311] netlink: 'syz.4.1732': attribute type 5 has an invalid length. [ 226.430855][T10326] FAULT_INJECTION: forcing a failure. [ 226.430855][T10326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.461667][T10326] CPU: 1 PID: 10326 Comm: syz.3.1740 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 226.471905][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 226.482284][T10326] Call Trace: [ 226.485699][T10326] [ 226.488666][T10326] dump_stack_lvl+0x241/0x360 [ 226.493390][T10326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.498725][T10326] ? __pfx__printk+0x10/0x10 [ 226.503381][T10326] ? __pfx_lock_release+0x10/0x10 [ 226.508562][T10326] should_fail_ex+0x3b0/0x4e0 [ 226.513482][T10326] _copy_to_user+0x2f/0xb0 [ 226.517946][T10326] bpf_test_finish+0x593/0x8b0 [ 226.522766][T10326] ? __pfx_bpf_test_finish+0x10/0x10 [ 226.528138][T10326] ? _copy_from_user+0xa6/0xe0 [ 226.532952][T10326] ? bpf_test_init+0x15a/0x180 [ 226.537741][T10326] bpf_prog_test_run_xdp+0x905/0x11b0 [ 226.543228][T10326] ? __pfx_lock_release+0x10/0x10 [ 226.548297][T10326] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.554118][T10326] ? __fget_files+0x29/0x470 [ 226.558757][T10326] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 226.564611][T10326] bpf_prog_test_run+0x33a/0x3b0 [ 226.569662][T10326] __sys_bpf+0x48d/0x810 [ 226.575255][T10326] ? __pfx___sys_bpf+0x10/0x10 [ 226.580138][T10326] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.586136][T10326] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.592504][T10326] ? do_syscall_64+0x100/0x230 [ 226.597575][T10326] __x64_sys_bpf+0x7c/0x90 [ 226.602059][T10326] do_syscall_64+0xf3/0x230 [ 226.606592][T10326] ? clear_bhb_loop+0x35/0x90 [ 226.611315][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.617230][T10326] RIP: 0033:0x7eff85175bd9 [ 226.621749][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.641407][T10326] RSP: 002b:00007eff85f33048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.649839][T10326] RAX: ffffffffffffffda RBX: 00007eff85303f60 RCX: 00007eff85175bd9 [ 226.657822][T10326] RDX: 0000000000000050 RSI: 0000000020000500 RDI: 000000000000000a [ 226.665997][T10326] RBP: 00007eff85f330a0 R08: 0000000000000000 R09: 0000000000000000 [ 226.673984][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.682073][T10326] R13: 000000000000000b R14: 00007eff85303f60 R15: 00007ffec7c4cc98 [ 226.690340][T10326] [ 226.860126][T10340] netlink: 'syz.1.1745': attribute type 3 has an invalid length. [ 227.000132][T10347] __nla_validate_parse: 1 callbacks suppressed [ 227.000154][T10347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1748'. [ 227.024625][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 227.070168][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 227.646964][T10381] x_tables: unsorted entry at hook 1 [ 228.533659][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 228.714690][T10432] netlink: 'syz.1.1778': attribute type 15 has an invalid length. [ 228.826979][T10439] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1780'. [ 230.118312][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1807'. [ 233.853124][T10574] FAULT_INJECTION: forcing a failure. [ 233.853124][T10574] name failslab, interval 1, probability 0, space 0, times 0 [ 233.919622][T10574] CPU: 1 PID: 10574 Comm: syz.0.1831 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 233.930040][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 233.941031][T10574] Call Trace: [ 233.944356][T10574] [ 233.947417][T10574] dump_stack_lvl+0x241/0x360 [ 233.952241][T10574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.957760][T10574] ? __pfx__printk+0x10/0x10 [ 233.962418][T10574] ? validate_chain+0x11e/0x5900 [ 233.967430][T10574] should_fail_ex+0x3b0/0x4e0 [ 233.972177][T10574] ? __alloc_skb+0x1c3/0x440 [ 233.976908][T10574] should_failslab+0x9/0x20 [ 233.981463][T10574] kmem_cache_alloc_node_noprof+0x71/0x320 [ 233.987336][T10574] __alloc_skb+0x1c3/0x440 [ 233.991801][T10574] ? __pfx_validate_chain+0x10/0x10 [ 233.997138][T10574] ? __pfx___alloc_skb+0x10/0x10 [ 234.002127][T10574] ? __lock_acquire+0x1346/0x1fd0 [ 234.007194][T10574] alloc_skb_with_frags+0xc3/0x770 [ 234.012383][T10574] sock_alloc_send_pskb+0x91a/0xa60 [ 234.017667][T10574] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 234.023450][T10574] ? dev_get_by_index+0x23/0x2d0 [ 234.028442][T10574] packet_sendmsg+0x3e19/0x6710 [ 234.033352][T10574] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 234.038884][T10574] ? __pfx___might_resched+0x10/0x10 [ 234.044257][T10574] ? aa_sk_perm+0x967/0xab0 [ 234.048900][T10574] ? __pfx_packet_sendmsg+0x10/0x10 [ 234.054248][T10574] ? __fget_files+0x29/0x470 [ 234.059069][T10574] ? aa_sock_msg_perm+0x91/0x160 [ 234.064061][T10574] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 234.069386][T10574] ? security_socket_sendmsg+0x87/0xb0 [ 234.074893][T10574] ? __pfx_packet_sendmsg+0x10/0x10 [ 234.080137][T10574] __sock_sendmsg+0x221/0x270 [ 234.084861][T10574] __sys_sendto+0x3a4/0x4f0 [ 234.089459][T10574] ? __pfx___sys_sendto+0x10/0x10 [ 234.094555][T10574] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 234.100602][T10574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.107073][T10574] __x64_sys_sendto+0xde/0x100 [ 234.111892][T10574] do_syscall_64+0xf3/0x230 [ 234.116442][T10574] ? clear_bhb_loop+0x35/0x90 [ 234.121170][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.127123][T10574] RIP: 0033:0x7fcc16d75bd9 [ 234.131670][T10574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.151511][T10574] RSP: 002b:00007fcc17a92048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 234.160141][T10574] RAX: ffffffffffffffda RBX: 00007fcc16f03f60 RCX: 00007fcc16d75bd9 [ 234.168154][T10574] RDX: 0000000000000034 RSI: 0000000020000100 RDI: 0000000000000003 [ 234.176321][T10574] RBP: 00007fcc17a920a0 R08: 0000000020000000 R09: 0000000000000014 [ 234.184311][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.192382][T10574] R13: 000000000000000b R14: 00007fcc16f03f60 R15: 00007fff1f10d0f8 [ 234.200638][T10574] [ 234.248378][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'. [ 234.326867][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 234.330386][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1839'. [ 234.376423][T10600] vlan2: entered promiscuous mode [ 234.421475][T10600] team0: entered promiscuous mode [ 234.442535][T10600] team_slave_0: entered promiscuous mode [ 234.470653][T10600] team_slave_1: entered promiscuous mode [ 234.821852][T10628] IPVS: set_ctl: invalid protocol: 13922 224.0.0.2:20002 [ 234.983257][T10609] syz.4.1839 (10609) used greatest stack depth: 18384 bytes left [ 235.039002][T10640] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 236.098579][T10700] netem: change failed [ 236.121947][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1870'. [ 236.132052][T10700] nbd: must specify at least one socket [ 236.475883][T10717] netlink: 'syz.4.1876': attribute type 2 has an invalid length. [ 236.491288][T10717] netlink: 'syz.4.1876': attribute type 1 has an invalid length. [ 237.282630][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.297131][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.306501][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.308076][ T5700] team0: Port device syz_tun removed [ 237.323697][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.332609][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 237.340242][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.480096][ T6702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.491125][ T6702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.507447][T10748] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.638683][ T6702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.654043][ T6702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.737685][ T6702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.749746][ T6702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.808310][ T6702] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 237.874575][ T6702] batman_adv: batadv1: Removing interface: netdevsim0 [ 237.886658][ T6702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.898304][ T6702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.917579][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 237.934531][T10772] vlan2: entered promiscuous mode [ 237.950488][T10749] chnl_net:caif_netlink_parms(): no params data found [ 238.132476][T10749] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.140464][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.158409][T10749] bridge_slave_0: entered allmulticast mode [ 238.166962][T10749] bridge_slave_0: entered promiscuous mode [ 238.177621][T10749] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.185079][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.192675][T10749] bridge_slave_1: entered allmulticast mode [ 238.200830][T10749] bridge_slave_1: entered promiscuous mode [ 238.234858][T10783] sctp: [Deprecated]: syz.1.1895 (pid 10783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.234858][T10783] Use struct sctp_sack_info instead [ 238.262432][T10784] sctp: [Deprecated]: syz.1.1895 (pid 10784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.262432][T10784] Use struct sctp_sack_info instead [ 238.357348][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.384925][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.534072][ T6702] batadv0: left allmulticast mode [ 238.550341][ T6702] batadv0: left promiscuous mode [ 238.568081][ T6702] bridge0: port 3(batadv0) entered disabled state [ 238.584560][ T6702] bridge_slave_1: left allmulticast mode [ 238.594025][ T6702] bridge_slave_1: left promiscuous mode [ 238.605284][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.632441][ T6702] bridge_slave_0: left allmulticast mode [ 238.638606][ T6702] bridge_slave_0: left promiscuous mode [ 238.645184][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.106130][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 239.160262][ T6702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.182772][ T6702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.200269][ T6702] bond0 (unregistering): Released all slaves [ 239.223717][ T6702] bond1 (unregistering): Released all slaves [ 239.264216][T10749] team0: Port device team_slave_0 added [ 239.366330][T10749] team0: Port device team_slave_1 added [ 239.422130][ T5104] Bluetooth: hci0: command tx timeout [ 239.475156][T10813] Bluetooth: MGMT ver 1.22 [ 239.496815][ T6702] tipc: Left network mode [ 239.572642][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.587463][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.626272][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.749669][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.767117][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.816309][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.102935][ T6702] hsr_slave_0: left promiscuous mode [ 240.119064][ T6702] hsr_slave_1: left promiscuous mode [ 240.132529][T10848] netlink: 'syz.3.1918': attribute type 11 has an invalid length. [ 240.146499][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.154259][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.164017][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.185554][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.239320][ T6702] veth1_macvtap: left promiscuous mode [ 240.254509][ T6702] veth0_macvtap: left promiscuous mode [ 240.266718][ T6702] veth1_vlan: left promiscuous mode [ 240.273638][ T6702] veth0_vlan: left promiscuous mode [ 240.987780][T10874] syz.4.1928[10874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.987982][T10874] syz.4.1928[10874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.263751][ T6702] team0 (unregistering): Port device team_slave_1 removed [ 241.320849][ T6702] team0 (unregistering): Port device team_slave_0 removed [ 241.501600][ T5104] Bluetooth: hci0: command tx timeout [ 241.739792][T10749] hsr_slave_0: entered promiscuous mode [ 241.753752][T10749] hsr_slave_1: entered promiscuous mode [ 241.787998][T10868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1926'. [ 242.216408][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 242.416806][T10906] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1940'. [ 242.608027][T10911] syzkaller1: entered promiscuous mode [ 242.636763][T10911] syzkaller1: entered allmulticast mode [ 243.014558][T10936] FAULT_INJECTION: forcing a failure. [ 243.014558][T10936] name failslab, interval 1, probability 0, space 0, times 0 [ 243.066580][T10937] nlmon0: entered promiscuous mode [ 243.069504][T10936] CPU: 0 PID: 10936 Comm: syz.3.1950 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 243.076188][T10937] vlan2: entered promiscuous mode [ 243.082471][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 243.082504][T10936] Call Trace: [ 243.082515][T10936] [ 243.082526][T10936] dump_stack_lvl+0x241/0x360 [ 243.082560][T10936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.082585][T10936] ? __pfx__printk+0x10/0x10 [ 243.088397][T10937] vlan2: entered allmulticast mode [ 243.097664][T10936] ? __asan_memset+0x23/0x50 [ 243.097700][T10936] ? lockdep_init_map_type+0xa1/0x910 [ 243.097728][T10936] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 243.097756][T10936] should_fail_ex+0x3b0/0x4e0 [ 243.097794][T10936] ? slab_build_skb+0x52/0x450 [ 243.101750][T10937] nlmon0: entered allmulticast mode [ 243.104005][T10936] should_failslab+0x9/0x20 [ 243.158855][T10936] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 243.164304][T10936] slab_build_skb+0x52/0x450 [ 243.168998][T10936] ? sock_init_data_uid+0x5cd/0x830 [ 243.174297][T10936] bpf_prog_test_run_skb+0x3b6/0x13b0 [ 243.179717][T10936] ? __pfx_lock_release+0x10/0x10 [ 243.184796][T10936] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 243.190622][T10936] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 243.196445][T10936] bpf_prog_test_run+0x33a/0x3b0 [ 243.201425][T10936] __sys_bpf+0x48d/0x810 [ 243.205697][T10936] ? __pfx___sys_bpf+0x10/0x10 [ 243.210495][T10936] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 243.216585][T10936] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.222930][T10936] ? do_syscall_64+0x100/0x230 [ 243.227722][T10936] __x64_sys_bpf+0x7c/0x90 [ 243.232172][T10936] do_syscall_64+0xf3/0x230 [ 243.236701][T10936] ? clear_bhb_loop+0x35/0x90 [ 243.241397][T10936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.247311][T10936] RIP: 0033:0x7eff85175bd9 [ 243.251746][T10936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.271542][T10936] RSP: 002b:00007eff85f33048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.279974][T10936] RAX: ffffffffffffffda RBX: 00007eff85303f60 RCX: 00007eff85175bd9 [ 243.287977][T10936] RDX: 0000000000000028 RSI: 00000000200000c0 RDI: 000000000000000a [ 243.295974][T10936] RBP: 00007eff85f330a0 R08: 0000000000000000 R09: 0000000000000000 [ 243.304136][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.312301][T10936] R13: 000000000000000b R14: 00007eff85303f60 R15: 00007ffec7c4cc98 [ 243.320324][T10936] [ 243.325388][T10937] nlmon0: left allmulticast mode [ 243.331901][T10937] nlmon0: left promiscuous mode [ 243.489445][T10946] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1955'. [ 243.581801][ T5104] Bluetooth: hci0: command tx timeout [ 243.626385][T10749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.688363][T10749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.721235][T10749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.732600][T10951] Cannot find set identified by id 0 to match [ 243.758779][T10749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.876161][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1961'. [ 244.041604][T10973] netlink: 'syz.0.1965': attribute type 5 has an invalid length. [ 244.076231][T10973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1965'. [ 244.108850][T10749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.124739][T10979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1966'. [ 244.180684][T10749] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.207238][T10983] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1968'. [ 244.209589][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.223448][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.306023][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.313555][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.365898][T10749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.853126][T10749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.989748][T10749] veth0_vlan: entered promiscuous mode [ 245.025254][T10749] veth1_vlan: entered promiscuous mode [ 245.144785][T10749] veth0_macvtap: entered promiscuous mode [ 245.196936][T10749] veth1_macvtap: entered promiscuous mode [ 245.253875][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.278702][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.280498][T11029] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1983'. [ 245.314127][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.349085][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.368901][T10749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.391914][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.407248][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.418032][T10749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.429039][T10749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.443630][T10749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.452414][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 245.479727][T11040] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 245.562249][T10749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.588660][T10749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.601234][T10749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.611193][T10749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.672712][ T5104] Bluetooth: hci0: command tx timeout [ 245.839481][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.902560][ T6702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.910470][ T6702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.039546][ T6702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.063585][ T6702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.072940][T11070] sctp: [Deprecated]: syz.3.1995 (pid 11070) Use of int in max_burst socket option deprecated. [ 246.072940][T11070] Use struct sctp_assoc_value instead [ 246.322265][T11083] netlink: 'syz.3.2001': attribute type 2 has an invalid length. [ 246.342364][T11083] netlink: 'syz.3.2001': attribute type 2 has an invalid length. [ 246.908238][T11110] __nla_validate_parse: 6 callbacks suppressed [ 246.908264][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2011'. [ 247.103741][T11127] FAULT_INJECTION: forcing a failure. [ 247.103741][T11127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.169453][T11127] CPU: 0 PID: 11127 Comm: syz.2.2014 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 247.179695][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.189800][T11127] Call Trace: [ 247.193131][T11127] [ 247.196110][T11127] dump_stack_lvl+0x241/0x360 [ 247.200843][T11127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.206092][T11127] ? __pfx__printk+0x10/0x10 [ 247.210779][T11127] should_fail_ex+0x3b0/0x4e0 [ 247.215556][T11127] _copy_from_user+0x2f/0xe0 [ 247.220289][T11127] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 247.225546][T11127] map_delete_elem+0x214/0x5e0 [ 247.230457][T11127] ? bpf_lsm_bpf+0x9/0x10 [ 247.234835][T11127] ? security_bpf+0x87/0xb0 [ 247.239486][T11127] __sys_bpf+0x598/0x810 [ 247.243794][T11127] ? __pfx___sys_bpf+0x10/0x10 [ 247.248632][T11127] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.254663][T11127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.261052][T11127] ? do_syscall_64+0x100/0x230 [ 247.265878][T11127] __x64_sys_bpf+0x7c/0x90 [ 247.270362][T11127] do_syscall_64+0xf3/0x230 [ 247.274925][T11127] ? clear_bhb_loop+0x35/0x90 [ 247.279634][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.285549][T11127] RIP: 0033:0x7f120f375bd9 [ 247.289980][T11127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.309802][T11127] RSP: 002b:00007f121007f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.318265][T11127] RAX: ffffffffffffffda RBX: 00007f120f503f60 RCX: 00007f120f375bd9 [ 247.326455][T11127] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000003 [ 247.334985][T11127] RBP: 00007f121007f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 247.342974][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.350958][T11127] R13: 000000000000000b R14: 00007f120f503f60 R15: 00007fff0a8f6228 [ 247.358961][T11127] [ 247.427017][T11128] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2016'. [ 247.466876][T11137] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2019'. [ 247.507353][T11137] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 247.548777][T11142] sch_tbf: peakrate 3 is lower than or equals to rate 7694164499349936757 ! [ 247.667700][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'. [ 247.693469][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'. [ 247.742078][ T5104] Bluetooth: hci0: command tx timeout [ 247.810404][T11156] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.960244][T11165] FAULT_INJECTION: forcing a failure. [ 247.960244][T11165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.013627][T11165] CPU: 1 PID: 11165 Comm: syz.4.2031 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 248.023866][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 248.033970][T11165] Call Trace: [ 248.037291][T11165] [ 248.040259][T11165] dump_stack_lvl+0x241/0x360 [ 248.044988][T11165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.050208][T11165] ? __pfx__printk+0x10/0x10 [ 248.054832][T11165] ? __pfx_lock_release+0x10/0x10 [ 248.059879][T11165] should_fail_ex+0x3b0/0x4e0 [ 248.064591][T11165] _copy_from_user+0x2f/0xe0 [ 248.069209][T11165] copy_msghdr_from_user+0xae/0x680 [ 248.074429][T11165] ? __pfx___might_resched+0x10/0x10 [ 248.079735][T11165] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 248.085568][T11165] ? __might_fault+0xaa/0x120 [ 248.090267][T11165] do_recvmmsg+0x40f/0xae0 [ 248.094716][T11165] ? __pfx_lock_release+0x10/0x10 [ 248.099758][T11165] ? __pfx_do_recvmmsg+0x10/0x10 [ 248.104749][T11165] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 248.110660][T11165] ? ksys_write+0x23e/0x2c0 [ 248.115179][T11165] ? __pfx_lock_release+0x10/0x10 [ 248.120221][T11165] ? vfs_write+0x7c4/0xc90 [ 248.124655][T11165] ? __mutex_unlock_slowpath+0x21d/0x750 [ 248.130320][T11165] ? __fget_files+0x3f6/0x470 [ 248.135036][T11165] __x64_sys_recvmmsg+0x199/0x250 [ 248.140088][T11165] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 248.145754][T11165] ? do_syscall_64+0x100/0x230 [ 248.150540][T11165] ? do_syscall_64+0xb6/0x230 [ 248.155241][T11165] do_syscall_64+0xf3/0x230 [ 248.159790][T11165] ? clear_bhb_loop+0x35/0x90 [ 248.164492][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.170399][T11165] RIP: 0033:0x7fca9ef75bd9 [ 248.174831][T11165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.194850][T11165] RSP: 002b:00007fca9fcb5048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 248.203365][T11165] RAX: ffffffffffffffda RBX: 00007fca9f103f60 RCX: 00007fca9ef75bd9 [ 248.211350][T11165] RDX: 000000000000073d RSI: 0000000020000500 RDI: 0000000000000004 [ 248.219333][T11165] RBP: 00007fca9fcb50a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.227447][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.235445][T11165] R13: 000000000000000b R14: 00007fca9f103f60 R15: 00007fffa3b5d578 [ 248.243446][T11165] [ 248.428283][T11183] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2038'. [ 248.738176][T11196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2042'. [ 248.874035][T11205] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 249.133703][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'. [ 249.150044][T11217] sch_fq: defrate 0 ignored. [ 249.193895][T11219] xt_CT: No such helper "netbios-ns" [ 249.263982][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'. [ 250.303940][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2073'. [ 250.329597][T11279] FAULT_INJECTION: forcing a failure. [ 250.329597][T11279] name failslab, interval 1, probability 0, space 0, times 0 [ 250.379036][T11279] CPU: 1 PID: 11279 Comm: syz.1.2072 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 250.389366][T11279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 250.399733][T11279] Call Trace: [ 250.403055][T11279] [ 250.406015][T11279] dump_stack_lvl+0x241/0x360 [ 250.410735][T11279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.415978][T11279] ? __pfx__printk+0x10/0x10 [ 250.420883][T11279] ? __pfx___might_resched+0x10/0x10 [ 250.426225][T11279] should_fail_ex+0x3b0/0x4e0 [ 250.430961][T11279] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 250.436727][T11279] should_failslab+0x9/0x20 [ 250.441280][T11279] __kmalloc_noprof+0xd8/0x400 [ 250.446100][T11279] ? kfree+0x4e/0x360 [ 250.450141][T11279] tomoyo_realpath_from_path+0xcf/0x5e0 [ 250.455754][T11279] tomoyo_path_number_perm+0x23a/0x880 [ 250.461285][T11279] ? tomoyo_path_number_perm+0x208/0x880 [ 250.467052][T11279] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.473127][T11279] ? __fget_files+0x29/0x470 [ 250.477741][T11279] ? __fget_files+0x3f6/0x470 [ 250.482438][T11279] ? __fget_files+0x29/0x470 [ 250.487054][T11279] security_file_ioctl+0x75/0xb0 [ 250.492107][T11279] __se_sys_ioctl+0x47/0x170 [ 250.496722][T11279] do_syscall_64+0xf3/0x230 [ 250.501253][T11279] ? clear_bhb_loop+0x35/0x90 [ 250.505958][T11279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.511871][T11279] RIP: 0033:0x7fc492775bd9 [ 250.516307][T11279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.535940][T11279] RSP: 002b:00007fc493607048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.544378][T11279] RAX: ffffffffffffffda RBX: 00007fc492903f60 RCX: 00007fc492775bd9 [ 250.552367][T11279] RDX: 0000000020000180 RSI: 00000000400454d1 RDI: 0000000000000003 [ 250.560399][T11279] RBP: 00007fc4936070a0 R08: 0000000000000000 R09: 0000000000000000 [ 250.568400][T11279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.576390][T11279] R13: 000000000000000b R14: 00007fc492903f60 R15: 00007ffe85d867e8 [ 250.584403][T11279] [ 250.605686][T11279] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.029280][T11308] IPv6: sit2: Disabled Multicast RS [ 251.304121][T11328] Cannot find set identified by id 0 to match [ 251.958156][T11381] __nla_validate_parse: 2 callbacks suppressed [ 251.958179][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 252.150831][T11391] IPv6: NLM_F_REPLACE set, but no existing node found! [ 252.161701][T11391] FAULT_INJECTION: forcing a failure. [ 252.161701][T11391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.196065][T11391] CPU: 1 PID: 11391 Comm: syz.0.2114 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 252.206306][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 252.216514][T11391] Call Trace: [ 252.219839][T11391] [ 252.222810][T11391] dump_stack_lvl+0x241/0x360 [ 252.227543][T11391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.232793][T11391] ? __pfx__printk+0x10/0x10 [ 252.237448][T11391] ? snprintf+0xda/0x120 [ 252.241753][T11391] should_fail_ex+0x3b0/0x4e0 [ 252.246504][T11391] _copy_to_user+0x2f/0xb0 [ 252.250976][T11391] simple_read_from_buffer+0xca/0x150 [ 252.256402][T11391] proc_fail_nth_read+0x1e9/0x250 [ 252.261489][T11391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.267089][T11391] ? rw_verify_area+0x520/0x6b0 [ 252.272269][T11391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.277865][T11391] vfs_read+0x204/0xbc0 [ 252.282083][T11391] ? __pfx_lock_release+0x10/0x10 [ 252.287163][T11391] ? __pfx_vfs_read+0x10/0x10 [ 252.291896][T11391] ? __fget_files+0x29/0x470 [ 252.296537][T11391] ? __fget_files+0x3f6/0x470 [ 252.301709][T11391] ksys_read+0x1a0/0x2c0 [ 252.305999][T11391] ? __pfx_ksys_read+0x10/0x10 [ 252.310783][T11391] ? do_syscall_64+0x100/0x230 [ 252.315565][T11391] ? do_syscall_64+0xb6/0x230 [ 252.320262][T11391] do_syscall_64+0xf3/0x230 [ 252.324778][T11391] ? clear_bhb_loop+0x35/0x90 [ 252.329473][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.335380][T11391] RIP: 0033:0x7fcc16d746bc [ 252.339806][T11391] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 252.359448][T11391] RSP: 002b:00007fcc17a92040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.367901][T11391] RAX: ffffffffffffffda RBX: 00007fcc16f03f60 RCX: 00007fcc16d746bc [ 252.375936][T11391] RDX: 000000000000000f RSI: 00007fcc17a920b0 RDI: 0000000000000006 [ 252.383936][T11391] RBP: 00007fcc17a920a0 R08: 0000000000000000 R09: 0000000000000000 [ 252.391921][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.399903][T11391] R13: 000000000000004d R14: 00007fcc16f03f60 R15: 00007fff1f10d0f8 [ 252.407905][T11391] [ 252.595449][T11411] sctp: [Deprecated]: syz.2.2118 (pid 11411) Use of int in max_burst socket option deprecated. [ 252.595449][T11411] Use struct sctp_assoc_value instead [ 252.801227][T11423] netlink: 'syz.0.2127': attribute type 3 has an invalid length. [ 252.821042][T11423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2127'. [ 252.825389][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2126'. [ 252.852520][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2126'. [ 252.938240][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2131'. [ 253.132437][T11444] netlink: 54 bytes leftover after parsing attributes in process `syz.0.2134'. [ 253.454419][T11461] vlan2: entered allmulticast mode [ 253.459624][T11461] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 253.500155][T11463] netlink: 'syz.4.2144': attribute type 309 has an invalid length. [ 253.527410][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 253.577603][T11463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2144'. [ 254.116946][T11509] netlink: 'syz.3.2158': attribute type 9 has an invalid length. [ 254.146880][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 254.280482][T11518] netlink: 'syz.2.2161': attribute type 10 has an invalid length. [ 254.353225][T11518] team0: Port device netdevsim0 added [ 254.411694][T11518] netlink: 'syz.2.2161': attribute type 10 has an invalid length. [ 254.460536][T11518] team0: Port device netdevsim0 removed [ 254.487498][T11518] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 254.506574][T11529] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 254.506579][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2165'. [ 255.333292][T11577] netlink: 'syz.2.2182': attribute type 29 has an invalid length. [ 255.351742][T11577] netlink: 'syz.2.2182': attribute type 29 has an invalid length. [ 255.376198][T11576] netlink: 'syz.2.2182': attribute type 29 has an invalid length. [ 255.418306][T11591] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 255.443749][T11591] x_tables: ip_tables: osf match: only valid for protocol 6 [ 256.043221][T11628] netlink: 'syz.2.2199': attribute type 5 has an invalid length. [ 256.114355][T11630] team0: No ports can be present during mode change [ 256.129195][T11630] netlink: 'syz.0.2200': attribute type 11 has an invalid length. [ 256.147928][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.290428][T11635] pimreg: entered allmulticast mode [ 256.884018][T11665] veth0_vlan: entered allmulticast mode [ 257.040582][T11670] openvswitch: netlink: Message has 4 unknown bytes. [ 257.253426][T11681] __nla_validate_parse: 3 callbacks suppressed [ 257.253448][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'. [ 257.512718][T11695] sctp: [Deprecated]: syz.2.2222 (pid 11695) Use of int in maxseg socket option. [ 257.512718][T11695] Use struct sctp_assoc_value instead [ 258.700668][T11740] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2244'. [ 258.755034][T11746] netlink: 'syz.4.2245': attribute type 3 has an invalid length. [ 258.774730][T11746] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2245'. [ 259.375590][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 259.423836][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'. [ 259.441717][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2255'. [ 259.580327][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2259'. [ 259.590282][T11784] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2260'. [ 259.592590][T11785] netlink: 'syz.1.2259': attribute type 25 has an invalid length. [ 259.640206][T11785] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.649356][T11785] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.658189][T11785] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.667145][T11785] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.707084][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'. [ 259.807214][T11793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.814570][T11793] IPv6: NLM_F_CREATE should be set when creating new route [ 260.036857][T11802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2266'. [ 260.367353][T11817] x_tables: duplicate underflow at hook 1 [ 260.420973][T11811] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 261.985847][T11889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.104452][T11889] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 262.190552][T11902] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 262.358666][T11897] __nla_validate_parse: 8 callbacks suppressed [ 262.358689][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2294'. [ 262.921869][T11940] ip6t_rpfilter: unknown options [ 263.144096][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2314'. [ 263.345686][T11966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2321'. [ 263.377233][T11971] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 263.563352][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 263.696284][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2322'. [ 263.743541][T11978] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2322'. [ 263.779755][T11978] netlink: 'syz.2.2322': attribute type 2 has an invalid length. [ 263.980154][T12004] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2330'. [ 264.817771][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2347'. [ 264.908220][T12052] team0: entered promiscuous mode [ 264.914190][T12052] team_slave_0: entered promiscuous mode [ 264.920149][T12052] team_slave_1: entered promiscuous mode [ 264.943161][T12052] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 264.968119][T12052] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 265.069698][T12064] FAULT_INJECTION: forcing a failure. [ 265.069698][T12064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.087815][T12064] CPU: 1 PID: 12064 Comm: syz.4.2350 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 265.096170][T12065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.098011][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 265.117960][T12064] Call Trace: [ 265.121381][T12064] [ 265.124346][T12064] dump_stack_lvl+0x241/0x360 [ 265.129044][T12064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.134260][T12064] ? __pfx__printk+0x10/0x10 [ 265.138870][T12064] ? __pfx_lock_release+0x10/0x10 [ 265.143912][T12064] ? rcu_is_watching+0x15/0xb0 [ 265.148718][T12064] should_fail_ex+0x3b0/0x4e0 [ 265.153442][T12064] _copy_from_iter+0x1f6/0x1960 [ 265.158333][T12064] ? alloc_pages_mpol_noprof+0x417/0x680 [ 265.163992][T12064] ? __pfx__copy_from_iter+0x10/0x10 [ 265.169309][T12064] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 265.175317][T12064] ? alloc_pages_noprof+0xef/0x170 [ 265.180443][T12064] ? page_copy_sane+0x46/0x260 [ 265.185245][T12064] copy_page_from_iter+0x7a/0x100 [ 265.190308][T12064] tun_get_user+0x1f7d/0x4720 [ 265.195008][T12064] ? tun_get_user+0x871/0x4720 [ 265.199792][T12064] ? __lock_acquire+0x1346/0x1fd0 [ 265.204836][T12064] ? __pfx_tun_get_user+0x10/0x10 [ 265.209908][T12064] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 265.215390][T12064] ? tun_get+0x1e/0x2f0 [ 265.219563][T12064] ? __pfx_lock_release+0x10/0x10 [ 265.224613][T12064] ? tun_get+0x1e/0x2f0 [ 265.228789][T12064] ? tun_get+0x27d/0x2f0 [ 265.233053][T12064] tun_chr_write_iter+0x113/0x1f0 [ 265.238123][T12064] vfs_write+0xa72/0xc90 [ 265.242399][T12064] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 265.247975][T12064] ? __pfx_vfs_write+0x10/0x10 [ 265.252778][T12064] ksys_write+0x1a0/0x2c0 [ 265.257237][T12064] ? __pfx_ksys_write+0x10/0x10 [ 265.262104][T12064] ? do_syscall_64+0x100/0x230 [ 265.266905][T12064] ? do_syscall_64+0xb6/0x230 [ 265.271597][T12064] do_syscall_64+0xf3/0x230 [ 265.276112][T12064] ? clear_bhb_loop+0x35/0x90 [ 265.280805][T12064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.286707][T12064] RIP: 0033:0x7fca9ef7475f [ 265.291130][T12064] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 265.310753][T12064] RSP: 002b:00007fca9fcb5010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 265.319178][T12064] RAX: ffffffffffffffda RBX: 00007fca9f103f60 RCX: 00007fca9ef7475f [ 265.327201][T12064] RDX: 000000000000006e RSI: 00000000200003c0 RDI: 00000000000000c8 [ 265.335184][T12064] RBP: 00007fca9fcb50a0 R08: 0000000000000000 R09: 0000000000000000 [ 265.343164][T12064] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 265.351156][T12064] R13: 000000000000000b R14: 00007fca9f103f60 R15: 00007fffa3b5d578 [ 265.359171][T12064] [ 265.494212][T12065] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 265.534736][T12065] team0: Cannot enslave team device to itself [ 265.667538][T12080] tipc: Can't bind to reserved service type 0 [ 265.718551][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 265.909110][T12097] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 265.918686][T12097] FAULT_INJECTION: forcing a failure. [ 265.918686][T12097] name failslab, interval 1, probability 0, space 0, times 0 [ 265.931380][T12097] CPU: 0 PID: 12097 Comm: syz.4.2361 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 265.941580][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 265.951654][T12097] Call Trace: [ 265.954943][T12097] [ 265.957881][T12097] dump_stack_lvl+0x241/0x360 [ 265.962632][T12097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.967856][T12097] ? __pfx__printk+0x10/0x10 [ 265.972474][T12097] ? rcu_is_watching+0x15/0xb0 [ 265.977253][T12097] ? inet_reqsk_alloc+0xa8/0x800 [ 265.982226][T12097] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 265.987621][T12097] should_fail_ex+0x3b0/0x4e0 [ 265.992321][T12097] ? tcp_v4_route_req+0x276/0x4f0 [ 265.997448][T12097] should_failslab+0x9/0x20 [ 266.002067][T12097] __kmalloc_noprof+0xd8/0x400 [ 266.006885][T12097] tcp_v4_route_req+0x276/0x4f0 [ 266.011855][T12097] tcp_conn_request+0xf58/0x3490 [ 266.016835][T12097] ? __pfx_tcp_conn_request+0x10/0x10 [ 266.022246][T12097] ? tcp_v4_conn_request+0x177/0x1d0 [ 266.027547][T12097] ? tcp_rcv_state_process+0x20a/0x4570 [ 266.033280][T12097] tcp_rcv_state_process+0x1bd7/0x4570 [ 266.038751][T12097] ? __ip_vs_conn_in_get+0xc05/0xc60 [ 266.044056][T12097] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 266.049872][T12097] ? sk_filter_trim_cap+0x5bf/0xa80 [ 266.055167][T12097] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 266.060557][T12097] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 266.066123][T12097] tcp_v4_do_rcv+0x77d/0xc70 [ 266.070730][T12097] ? tcp_v4_fill_cb+0x1de/0x460 [ 266.075607][T12097] tcp_v4_rcv+0x2afd/0x37f0 [ 266.080249][T12097] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 266.085121][T12097] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 266.089981][T12097] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 266.094844][T12097] ip_protocol_deliver_rcu+0x22b/0x440 [ 266.100321][T12097] ? ip_local_deliver_finish+0x230/0x5f0 [ 266.105969][T12097] ip_local_deliver_finish+0x341/0x5f0 [ 266.111457][T12097] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 266.117622][T12097] NF_HOOK+0x3a4/0x450 [ 266.121709][T12097] ? NF_HOOK+0x9a/0x450 [ 266.125888][T12097] ? __pfx_NF_HOOK+0x10/0x10 [ 266.130490][T12097] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 266.136514][T12097] ? ip_rcv_finish+0x406/0x560 [ 266.141309][T12097] ? __pfx_ip_rcv_finish+0x10/0x10 [ 266.146433][T12097] NF_HOOK+0x3a4/0x450 [ 266.150532][T12097] ? NF_HOOK+0x9a/0x450 [ 266.154718][T12097] ? __pfx_NF_HOOK+0x10/0x10 [ 266.159320][T12097] ? ip_rcv_core+0x801/0xd10 [ 266.163945][T12097] ? __pfx_ip_rcv_finish+0x10/0x10 [ 266.169093][T12097] ? __pfx_ip_rcv+0x10/0x10 [ 266.173614][T12097] __netif_receive_skb+0x2bf/0x650 [ 266.178847][T12097] ? __pfx_lock_acquire+0x10/0x10 [ 266.184052][T12097] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 266.190409][T12097] ? __pfx___netif_receive_skb+0x10/0x10 [ 266.196153][T12097] ? __kasan_slab_alloc+0x66/0x80 [ 266.201200][T12097] ? read_tsc+0x9/0x20 [ 266.205285][T12097] ? timekeeping_get_ns+0x2c0/0x420 [ 266.210506][T12097] ? netif_receive_skb+0x131/0x890 [ 266.215634][T12097] ? netif_receive_skb+0x131/0x890 [ 266.220765][T12097] netif_receive_skb+0x1e8/0x890 [ 266.225725][T12097] ? tun_rx_batched+0x160/0x8f0 [ 266.230593][T12097] ? __pfx_netif_receive_skb+0x10/0x10 [ 266.236080][T12097] ? tun_rx_batched+0x160/0x8f0 [ 266.241034][T12097] tun_rx_batched+0x1b7/0x8f0 [ 266.245727][T12097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.252077][T12097] ? __pfx_lock_acquire+0x10/0x10 [ 266.257109][T12097] ? __pfx_tun_rx_batched+0x10/0x10 [ 266.262342][T12097] tun_get_user+0x2f84/0x4720 [ 266.267048][T12097] ? tun_get_user+0x2a78/0x4720 [ 266.271961][T12097] ? __lock_acquire+0x1346/0x1fd0 [ 266.277004][T12097] ? __pfx_tun_get_user+0x10/0x10 [ 266.282060][T12097] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 266.287539][T12097] ? tun_get+0x1e/0x2f0 [ 266.291884][T12097] ? __pfx_lock_release+0x10/0x10 [ 266.296931][T12097] ? tun_get+0x1e/0x2f0 [ 266.301196][T12097] ? tun_get+0x27d/0x2f0 [ 266.305456][T12097] tun_chr_write_iter+0x113/0x1f0 [ 266.310500][T12097] vfs_write+0xa72/0xc90 [ 266.314761][T12097] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 266.320333][T12097] ? __pfx_vfs_write+0x10/0x10 [ 266.325132][T12097] ksys_write+0x1a0/0x2c0 [ 266.329480][T12097] ? __pfx_ksys_write+0x10/0x10 [ 266.334355][T12097] ? do_syscall_64+0x100/0x230 [ 266.339133][T12097] ? do_syscall_64+0xb6/0x230 [ 266.343823][T12097] do_syscall_64+0xf3/0x230 [ 266.348337][T12097] ? clear_bhb_loop+0x35/0x90 [ 266.353027][T12097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.359018][T12097] RIP: 0033:0x7fca9ef7475f [ 266.363441][T12097] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 266.383238][T12097] RSP: 002b:00007fca9fcb5010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 266.391677][T12097] RAX: ffffffffffffffda RBX: 00007fca9f103f60 RCX: 00007fca9ef7475f [ 266.399840][T12097] RDX: 000000000000003a RSI: 0000000020000080 RDI: 00000000000000c8 [ 266.407992][T12097] RBP: 00007fca9fcb50a0 R08: 0000000000000000 R09: 0000000000000000 [ 266.415975][T12097] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 266.423952][T12097] R13: 000000000000000b R14: 00007fca9f103f60 R15: 00007fffa3b5d578 [ 266.431948][T12097] [ 266.851468][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 267.367967][T12139] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 267.388526][T12139] __nla_validate_parse: 1 callbacks suppressed [ 267.388552][T12139] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2377'. [ 267.809299][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 267.841116][T12164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2385'. [ 268.134390][T12179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.234092][T12247] netlink: 'syz.4.2414': attribute type 21 has an invalid length. [ 269.248966][T12247] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2414'. [ 270.024429][T12277] netlink: 'syz.0.2423': attribute type 4 has an invalid length. [ 270.087160][T12277] netlink: 'syz.0.2423': attribute type 4 has an invalid length. [ 270.090648][T12286] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 270.283361][T12296] syz.4.2429[12296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.283642][T12296] syz.4.2429[12296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.425580][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'. [ 270.487435][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2432'. [ 270.540304][T12304] ipvlan2: entered allmulticast mode [ 270.664382][T12313] sit1: entered promiscuous mode [ 271.095623][T12334] syz.4.2445: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 271.124588][T12334] CPU: 1 PID: 12334 Comm: syz.4.2445 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 271.134810][T12334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 271.144910][T12334] Call Trace: [ 271.148228][T12334] [ 271.151192][T12334] dump_stack_lvl+0x241/0x360 [ 271.155919][T12334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.161170][T12334] ? __pfx__printk+0x10/0x10 [ 271.165818][T12334] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 271.172283][T12334] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 271.178843][T12334] warn_alloc+0x278/0x410 [ 271.183234][T12334] ? __pfx_warn_alloc+0x10/0x10 [ 271.188156][T12334] ? xskq_create+0xb6/0x170 [ 271.192719][T12334] ? __get_vm_area_node+0x23d/0x270 [ 271.197978][T12334] __vmalloc_node_range_noprof+0x69f/0x1460 [ 271.203963][T12334] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.210346][T12334] ? __kasan_kmalloc+0x98/0xb0 [ 271.215161][T12334] ? xskq_create+0x54/0x170 [ 271.219723][T12334] vmalloc_user_noprof+0x74/0x80 [ 271.224708][T12334] ? xskq_create+0xb6/0x170 [ 271.229273][T12334] xskq_create+0xb6/0x170 [ 271.233666][T12334] xsk_init_queue+0xa1/0x100 [ 271.238324][T12334] xsk_setsockopt+0x4ea/0x950 [ 271.243069][T12334] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.248339][T12334] ? __pfx_lock_acquire+0x10/0x10 [ 271.253409][T12334] ? aa_sock_opt_perm+0x79/0x120 [ 271.258406][T12334] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 271.264002][T12334] ? security_socket_setsockopt+0x87/0xb0 [ 271.269780][T12334] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.275036][T12334] do_sock_setsockopt+0x3af/0x720 [ 271.280138][T12334] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 271.285998][T12334] ? __fget_files+0x29/0x470 [ 271.290635][T12334] ? __fget_files+0x3f6/0x470 [ 271.295391][T12334] __sys_setsockopt+0x1ae/0x250 [ 271.300307][T12334] __x64_sys_setsockopt+0xb5/0xd0 [ 271.305391][T12334] do_syscall_64+0xf3/0x230 [ 271.309942][T12334] ? clear_bhb_loop+0x35/0x90 [ 271.314674][T12334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.320614][T12334] RIP: 0033:0x7fca9ef75bd9 [ 271.325075][T12334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.344987][T12334] RSP: 002b:00007fca9fcb5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.353416][T12334] RAX: ffffffffffffffda RBX: 00007fca9f103f60 RCX: 00007fca9ef75bd9 [ 271.361418][T12334] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 271.369418][T12334] RBP: 00007fca9efe4aa1 R08: 0000000000000004 R09: 0000000000000000 [ 271.377394][T12334] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 271.385374][T12334] R13: 000000000000000b R14: 00007fca9f103f60 R15: 00007fffa3b5d578 [ 271.393399][T12334] [ 271.397726][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802be07400: rx timeout, send abort [ 271.408289][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d926400: rx timeout, send abort [ 271.445619][T12334] Mem-Info: [ 271.448892][T12334] active_anon:3120 inactive_anon:0 isolated_anon:0 [ 271.448892][T12334] active_file:1553 inactive_file:38219 isolated_file:0 [ 271.448892][T12334] unevictable:768 dirty:303 writeback:0 [ 271.448892][T12334] slab_reclaimable:9313 slab_unreclaimable:97967 [ 271.448892][T12334] mapped:13216 shmem:1244 pagetables:658 [ 271.448892][T12334] sec_pagetables:0 bounce:0 [ 271.448892][T12334] kernel_misc_reclaimable:0 [ 271.448892][T12334] free:1403646 free_pcp:1867 free_cma:0 [ 271.515198][T12334] Node 0 active_anon:12180kB inactive_anon:0kB active_file:6212kB inactive_file:152804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52864kB dirty:1212kB writeback:0kB shmem:3440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10220kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no [ 271.552154][T12334] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 271.585927][T12334] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.617969][T12334] lowmem_reserve[]: 0 2571 2571 0 0 [ 271.623457][T12334] Node 0 DMA32 free:1656468kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:12236kB inactive_anon:0kB active_file:6212kB inactive_file:152496kB unevictable:1536kB writepending:912kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:5060kB local_pcp:4160kB free_cma:0kB [ 271.654170][T12334] lowmem_reserve[]: 0 0 0 0 0 [ 271.658961][T12334] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 271.691143][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2450'. [ 271.729869][T12354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2450'. [ 271.752142][T12334] lowmem_reserve[]: 0 0 0 0 0 [ 271.761202][T12334] Node 1 Normal free:3943308kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:2260kB local_pcp:1256kB free_cma:0kB [ 271.822018][T12334] lowmem_reserve[]: 0 0 0 0 0 [ 271.830986][T12334] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 271.861035][T12334] Node 0 DMA32: 334*4kB (UME) 389*8kB (UME) 240*16kB (UME) 147*32kB (UME) 64*64kB (UME) 48*128kB (UME) 43*256kB (UME) 25*512kB (UME) 15*1024kB (UME) 2*2048kB (UM) 388*4096kB (UM) = 1655744kB [ 271.907319][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802be07400: abort rx timeout. Force session deactivation [ 271.917793][T12334] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 271.919210][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802d926400: abort rx timeout. Force session deactivation [ 271.942366][T12334] Node 1 Normal: 2*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (UM) 2*128kB (U) 4*256kB (UM) 1*512kB (M) 1*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3943360kB [ 272.000440][T12334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.032918][T12334] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.059310][T12334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.108630][T12334] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.128674][T12334] 41016 total pagecache pages [ 272.139476][T12334] 0 pages in swap cache [ 272.160087][T12334] Free swap = 124996kB [ 272.164551][T12334] Total swap = 124996kB [ 272.168867][T12334] 2097051 pages RAM [ 272.173232][T12334] 0 pages HighMem/MovableOnly [ 272.178099][T12334] 400874 pages reserved [ 272.193509][T12377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.225279][T12334] 0 pages cma reserved [ 272.313581][T12381] raw_sendmsg: syz.3.2458 forgot to set AF_INET. Fix it! [ 272.352670][T12384] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2459'. [ 272.468477][T12395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2462'. [ 272.489867][T12385] ip6tnl2: entered promiscuous mode [ 272.500468][T12385] ip6tnl2: entered allmulticast mode [ 272.865978][T12414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2467'. [ 272.894272][T12414] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2467'. [ 273.219365][T12428] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2473'. [ 273.546477][T12436] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.928728][T12451] xt_limit: Overflow, try lower: 0/0 [ 273.972121][T12451] netlink: 'syz.0.2480': attribute type 8 has an invalid length. [ 273.992717][T12451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.037706][T12454] netlink: 'syz.4.2481': attribute type 23 has an invalid length. [ 274.465130][T12484] FAULT_INJECTION: forcing a failure. [ 274.465130][T12484] name failslab, interval 1, probability 0, space 0, times 0 [ 274.494356][T12484] CPU: 1 PID: 12484 Comm: syz.1.2493 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 274.504599][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 274.514701][T12484] Call Trace: [ 274.518003][T12484] [ 274.520965][T12484] dump_stack_lvl+0x241/0x360 [ 274.525688][T12484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.530935][T12484] ? __pfx__printk+0x10/0x10 [ 274.535587][T12484] ? netlink_insert+0x10b7/0x14b0 [ 274.540663][T12484] should_fail_ex+0x3b0/0x4e0 [ 274.545396][T12484] ? __alloc_skb+0x1c3/0x440 [ 274.550029][T12484] should_failslab+0x9/0x20 [ 274.554581][T12484] kmem_cache_alloc_node_noprof+0x71/0x320 [ 274.560452][T12484] __alloc_skb+0x1c3/0x440 [ 274.564928][T12484] ? __pfx___alloc_skb+0x10/0x10 [ 274.569921][T12484] ? netlink_autobind+0xd6/0x2f0 [ 274.574911][T12484] ? netlink_autobind+0x2b0/0x2f0 [ 274.579989][T12484] netlink_sendmsg+0x638/0xcb0 [ 274.584813][T12484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.590155][T12484] ? __import_iovec+0x536/0x820 [ 274.595051][T12484] ? aa_sock_msg_perm+0x91/0x160 [ 274.600042][T12484] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 274.605342][T12484] ? security_socket_sendmsg+0x87/0xb0 [ 274.610822][T12484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.616212][T12484] __sock_sendmsg+0x221/0x270 [ 274.620912][T12484] ____sys_sendmsg+0x525/0x7d0 [ 274.625709][T12484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.631027][T12484] __sys_sendmsg+0x2b0/0x3a0 [ 274.635633][T12484] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.640760][T12484] ? vfs_write+0x7c4/0xc90 [ 274.645221][T12484] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.651563][T12484] ? do_syscall_64+0x100/0x230 [ 274.656338][T12484] ? do_syscall_64+0xb6/0x230 [ 274.661027][T12484] do_syscall_64+0xf3/0x230 [ 274.665540][T12484] ? clear_bhb_loop+0x35/0x90 [ 274.670235][T12484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.676145][T12484] RIP: 0033:0x7fc492775bd9 [ 274.680570][T12484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.700210][T12484] RSP: 002b:00007fc493607048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.708648][T12484] RAX: ffffffffffffffda RBX: 00007fc492903f60 RCX: 00007fc492775bd9 [ 274.716729][T12484] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000003 [ 274.724747][T12484] RBP: 00007fc4936070a0 R08: 0000000000000000 R09: 0000000000000000 [ 274.732728][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.740710][T12484] R13: 000000000000000b R14: 00007fc492903f60 R15: 00007ffe85d867e8 [ 274.748720][T12484] [ 274.952662][T12495] hsr0: entered promiscuous mode [ 274.963951][T12495] macsec1: entered promiscuous mode [ 274.981260][T12495] macsec1: entered allmulticast mode [ 274.987685][T12495] hsr0: entered allmulticast mode [ 274.996749][T12495] hsr_slave_0: entered allmulticast mode [ 275.003818][T12495] hsr_slave_1: entered allmulticast mode [ 275.022791][T12495] hsr0: left allmulticast mode [ 275.032538][T12495] hsr_slave_0: left allmulticast mode [ 275.039040][T12495] hsr_slave_1: left allmulticast mode [ 275.300240][T12517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2507'. [ 275.416056][T12524] netlink: 'syz.2.2509': attribute type 5 has an invalid length. [ 275.626341][T12537] IPv4: Oversized IP packet from 127.202.26.0 [ 275.659349][T12541] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 275.722699][T12542] netlink: 'syz.1.2515': attribute type 23 has an invalid length. [ 276.353368][T12579] bond0: entered promiscuous mode [ 276.370698][T12579] bond_slave_0: entered promiscuous mode [ 276.381139][T12579] bond_slave_1: entered promiscuous mode [ 276.399236][T12579] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 276.636954][T12594] netem: incorrect ge model size [ 276.646182][T12594] netem: change failed [ 276.888133][T12604] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 277.320026][T12629] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 277.472238][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2553'. [ 277.637814][T12649] tipc: Enabled bearer , priority 0 [ 277.864311][T12662] netlink: 'syz.1.2561': attribute type 4 has an invalid length. [ 277.891983][T12662] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2561'. [ 278.045706][T12675] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2564'. [ 278.083464][T12675] netlink: zone id is out of range [ 278.103233][T12675] netlink: zone id is out of range [ 278.109185][T12675] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2564'. [ 278.139938][T12675] netlink: zone id is out of range [ 278.146840][T12675] netlink: zone id is out of range [ 278.162030][T12675] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2564'. [ 278.194850][T12675] netlink: zone id is out of range [ 278.208956][T12675] netlink: zone id is out of range [ 278.271884][T12675] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2564'. [ 278.311545][T12675] netlink: zone id is out of range [ 278.317204][T12675] netlink: zone id is out of range [ 278.347945][T12675] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2564'. [ 278.383621][T12675] netlink: zone id is out of range [ 278.402023][T12675] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2564'. [ 278.445318][T12675] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2564'. [ 278.471391][T12698] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2572'. [ 278.643208][T12705] netlink: 'syz.0.2575': attribute type 2 has an invalid length. [ 278.739697][T12710] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 279.482880][T12795] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 279.649488][T12802] veth0_macvtap: left allmulticast mode [ 279.663876][T12802] veth0_macvtap: left promiscuous mode [ 279.689066][T12806] netlink: 'syz.3.2599': attribute type 1 has an invalid length. [ 280.939836][T12876] team0: entered promiscuous mode [ 280.951376][T12872] xt_socket: unknown flags 0x8 [ 280.956341][T12876] team_slave_0: entered promiscuous mode [ 280.985456][T12876] team_slave_1: entered promiscuous mode [ 281.011276][T12876] syz_tun: entered promiscuous mode [ 281.118002][T12886] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 281.194018][T12886] batman_adv: batadv0: Adding interface: ip6gretap1 [ 281.209923][T12886] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.263631][T12886] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 281.317924][T12882] team0: left promiscuous mode [ 281.332728][T12882] team_slave_0: left promiscuous mode [ 281.354570][T12882] team_slave_1: left promiscuous mode [ 281.360501][T12882] syz_tun: left promiscuous mode [ 281.578531][T12899] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.410155][T12940] net_ratelimit: 60 callbacks suppressed [ 282.410180][T12940] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 282.626657][T12955] netlink: 'syz.4.2649': attribute type 13 has an invalid length. [ 283.361721][T12996] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 283.556139][T13006] __nla_validate_parse: 34 callbacks suppressed [ 283.556163][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 283.983877][T13029] netlink: 'syz.0.2678': attribute type 3 has an invalid length. [ 283.998201][T13029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2678'. [ 284.145671][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 284.172435][T13037] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2680'. [ 284.217731][T13036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2680'. [ 284.251601][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2680'. [ 284.446245][T13057] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 284.472254][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2689'. [ 284.507093][T13056] netlink: 'syz.2.2689': attribute type 5 has an invalid length. [ 284.522596][T13063] xt_TCPMSS: Only works on TCP SYN packets [ 284.563281][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2689'. [ 284.659796][T13065] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 284.792514][T13080] FAULT_INJECTION: forcing a failure. [ 284.792514][T13080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.867961][T13080] CPU: 0 PID: 13080 Comm: syz.2.2696 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 284.878447][T13080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 284.888632][T13080] Call Trace: [ 284.891950][T13080] [ 284.894913][T13080] dump_stack_lvl+0x241/0x360 [ 284.899737][T13080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.904961][T13080] ? __pfx__printk+0x10/0x10 [ 284.909590][T13080] should_fail_ex+0x3b0/0x4e0 [ 284.914394][T13080] strncpy_from_user+0x36/0x2f0 [ 284.919267][T13080] bpf_raw_tp_link_attach+0x21d/0x6e0 [ 284.924665][T13080] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 284.930815][T13080] bpf_raw_tracepoint_open+0x1c2/0x240 [ 284.936294][T13080] __sys_bpf+0x3c0/0x810 [ 284.940645][T13080] ? __pfx___sys_bpf+0x10/0x10 [ 284.945450][T13080] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 284.951479][T13080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 284.957835][T13080] ? do_syscall_64+0x100/0x230 [ 284.962629][T13080] __x64_sys_bpf+0x7c/0x90 [ 284.967065][T13080] do_syscall_64+0xf3/0x230 [ 284.971604][T13080] ? clear_bhb_loop+0x35/0x90 [ 284.976298][T13080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.982203][T13080] RIP: 0033:0x7f120f375bd9 [ 284.986625][T13080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.006334][T13080] RSP: 002b:00007f121007f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.014778][T13080] RAX: ffffffffffffffda RBX: 00007f120f503f60 RCX: 00007f120f375bd9 [ 285.022763][T13080] RDX: 0000000000000010 RSI: 0000000020000500 RDI: 0000000000000011 [ 285.030744][T13080] RBP: 00007f121007f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 285.038725][T13080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.046965][T13080] R13: 000000000000000b R14: 00007f120f503f60 R15: 00007fff0a8f6228 [ 285.054958][T13080] [ 285.153721][T13086] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2697'. [ 285.266758][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2699'. [ 285.894364][T13128] netlink: 'syz.0.2715': attribute type 309 has an invalid length. [ 286.208869][T13148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.147296][T13204] IPVS: length: 178 != 8 [ 287.322053][T13218] netlink: 'syz.2.2748': attribute type 4 has an invalid length. [ 287.463423][T13228] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.524227][T13233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.667133][T13238] netlink: 'syz.4.2757': attribute type 2 has an invalid length. [ 288.036140][T13258] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 288.275938][T13269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.463136][T13278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.756609][T13285] IPv6: NLM_F_REPLACE set, but no existing node found! [ 289.238246][T13317] __nla_validate_parse: 39 callbacks suppressed [ 289.238267][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2787'. [ 289.509066][T13338] IPv6: NLM_F_REPLACE set, but no existing node found! [ 289.531128][T13338] FAULT_INJECTION: forcing a failure. [ 289.531128][T13338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.544755][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'. [ 289.557726][T13338] CPU: 1 PID: 13338 Comm: syz.0.2794 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 289.565934][T13335] nbd: couldn't find a device at index 0 [ 289.567921][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 289.583743][T13338] Call Trace: [ 289.587052][T13338] [ 289.590009][T13338] dump_stack_lvl+0x241/0x360 [ 289.594735][T13338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.600020][T13338] ? __pfx__printk+0x10/0x10 [ 289.604761][T13338] ? snprintf+0xda/0x120 [ 289.609057][T13338] should_fail_ex+0x3b0/0x4e0 [ 289.613802][T13338] _copy_to_user+0x2f/0xb0 [ 289.618407][T13338] simple_read_from_buffer+0xca/0x150 [ 289.623821][T13338] proc_fail_nth_read+0x1e9/0x250 [ 289.628858][T13338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.634417][T13338] ? rw_verify_area+0x520/0x6b0 [ 289.639295][T13338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.644858][T13338] vfs_read+0x204/0xbc0 [ 289.649028][T13338] ? __pfx_lock_release+0x10/0x10 [ 289.654239][T13338] ? __pfx_vfs_read+0x10/0x10 [ 289.658945][T13338] ? __fget_files+0x29/0x470 [ 289.663546][T13338] ? __fget_files+0x3f6/0x470 [ 289.668249][T13338] ksys_read+0x1a0/0x2c0 [ 289.672508][T13338] ? __pfx_ksys_read+0x10/0x10 [ 289.677284][T13338] ? do_syscall_64+0x100/0x230 [ 289.682062][T13338] ? do_syscall_64+0xb6/0x230 [ 289.686750][T13338] do_syscall_64+0xf3/0x230 [ 289.691282][T13338] ? clear_bhb_loop+0x35/0x90 [ 289.696011][T13338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.701930][T13338] RIP: 0033:0x7fcc16d746bc [ 289.706360][T13338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 289.726102][T13338] RSP: 002b:00007fcc17a92040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.734635][T13338] RAX: ffffffffffffffda RBX: 00007fcc16f03f60 RCX: 00007fcc16d746bc [ 289.742615][T13338] RDX: 000000000000000f RSI: 00007fcc17a920b0 RDI: 0000000000000005 [ 289.750595][T13338] RBP: 00007fcc17a920a0 R08: 0000000000000000 R09: 0000000000000000 [ 289.758584][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.766693][T13338] R13: 000000000000004d R14: 00007fcc16f03f60 R15: 00007fff1f10d0f8 [ 289.774715][T13338] [ 289.793317][T13346] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 290.338604][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 290.513928][T13377] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 290.538177][T13377] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 290.565890][T13380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.580171][T13384] IPv6: sit2: Disabled Multicast RS [ 290.709141][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 290.729126][T13391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.738314][T13391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.765339][T13391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.780557][T13391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.804837][T13391] batman_adv: batadv0: Removing interface: ip6gretap1 [ 291.753346][T13412] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 291.776042][T13410] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 291.809884][T13410] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2819'. [ 291.840664][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2823'. [ 291.871319][T13406] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.2819'. [ 291.882324][T13406] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 291.891112][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'. [ 291.907680][T13418] netlink: 'syz.0.2821': attribute type 5 has an invalid length. [ 291.963259][T13418] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.973029][T13418] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.985352][T13418] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.994268][T13418] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.032143][T13418] vxlan0: entered promiscuous mode [ 292.075094][T13416] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 292.084786][T13416] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 292.096921][T13424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.558616][T13456] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 292.632478][T13457] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 293.556061][T13502] ieee802154 phy0 wpan0: encryption failed: -90 [ 293.802098][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 293.891230][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'. [ 294.016104][T13520] IPv6: sit3: Disabled Multicast RS [ 294.116188][T13521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.158756][T13521] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 294.209278][T13517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.360201][T13534] __nla_validate_parse: 1 callbacks suppressed [ 294.360224][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 294.423406][T13467] Cannot find add_set index 0 as target [ 295.084365][T13556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2871'. [ 296.015897][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2877'. [ 296.140193][T13587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2879'. [ 296.244249][T13589] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 296.280703][T13589] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 296.315331][T13584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.698656][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'. [ 297.123242][T13622] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2891'. [ 297.301138][T13629] netlink: 'syz.2.2892': attribute type 4 has an invalid length. [ 297.373591][T13633] netlink: 'syz.2.2892': attribute type 4 has an invalid length. [ 298.303288][T13664] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 298.336895][T13664] dvmrp1: linktype set to 512 [ 298.863243][T13682] FAULT_INJECTION: forcing a failure. [ 298.863243][T13682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.911310][T13682] CPU: 1 PID: 13682 Comm: syz.2.2907 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 298.921544][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 298.931643][T13682] Call Trace: [ 298.934961][T13682] [ 298.937919][T13682] dump_stack_lvl+0x241/0x360 [ 298.942647][T13682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.947899][T13682] ? __pfx__printk+0x10/0x10 [ 298.952564][T13682] should_fail_ex+0x3b0/0x4e0 [ 298.957307][T13682] prepare_alloc_pages+0x1da/0x5d0 [ 298.962482][T13682] __alloc_pages_noprof+0x166/0x6c0 [ 298.967759][T13682] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 298.973581][T13682] alloc_pages_mpol_noprof+0x3e8/0x680 [ 298.979184][T13682] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 298.985216][T13682] ? xas_load+0x59b/0x5c0 [ 298.989697][T13682] ? mpol_shared_policy_lookup+0x148/0x1f0 [ 298.995568][T13682] shmem_alloc_and_add_folio+0x24d/0xdb0 [ 299.001270][T13682] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 299.007480][T13682] ? filemap_map_pages+0x24f/0x1e70 [ 299.012726][T13682] ? __pfx_lock_release+0x10/0x10 [ 299.017803][T13682] shmem_get_folio_gfp+0x82d/0x1f50 [ 299.023047][T13682] ? do_raw_spin_unlock+0x13c/0x8b0 [ 299.028310][T13682] ? filemap_map_pages+0x18e0/0x1e70 [ 299.033667][T13682] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 299.039365][T13682] shmem_fault+0x252/0x6f0 [ 299.043849][T13682] ? __pfx_shmem_fault+0x10/0x10 [ 299.048845][T13682] ? __pfx_lock_release+0x10/0x10 [ 299.053929][T13682] ? pte_offset_map_nolock+0x137/0x1f0 [ 299.059452][T13682] ? __lock_acquire+0x1346/0x1fd0 [ 299.064527][T13682] __do_fault+0x135/0x460 [ 299.068900][T13682] ? handle_pte_fault+0x222c/0x7090 [ 299.074144][T13682] handle_pte_fault+0x3d15/0x7090 [ 299.079249][T13682] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 299.085111][T13682] ? __pfx_lock_acquire+0x10/0x10 [ 299.090192][T13682] ? __pfx_handle_pte_fault+0x10/0x10 [ 299.095877][T13682] ? do_raw_spin_lock+0x14f/0x370 [ 299.100973][T13682] ? follow_page_pte+0x292/0x1d90 [ 299.106040][T13682] ? follow_page_pte+0x859/0x1d90 [ 299.111284][T13682] ? __pfx_lock_release+0x10/0x10 [ 299.116354][T13682] ? do_raw_spin_unlock+0x13c/0x8b0 [ 299.121614][T13682] handle_mm_fault+0x10df/0x1ba0 [ 299.126634][T13682] ? __pfx_handle_mm_fault+0x10/0x10 [ 299.131985][T13682] ? __pfx_find_vma+0x10/0x10 [ 299.136712][T13682] ? vma_is_secretmem+0xd/0x50 [ 299.141514][T13682] ? check_vma_flags+0x500/0x5a0 [ 299.146503][T13682] __get_user_pages+0x6ef/0x1590 [ 299.151517][T13682] ? mt_find+0x62d/0x850 [ 299.155817][T13682] ? __pfx___get_user_pages+0x10/0x10 [ 299.161261][T13682] populate_vma_page_range+0x264/0x330 [ 299.166781][T13682] ? __pfx_populate_vma_page_range+0x10/0x10 [ 299.172830][T13682] ? userfaultfd_unmap_complete+0x30c/0x360 [ 299.178779][T13682] ? do_mmap+0x915/0xfa0 [ 299.183095][T13682] __mm_populate+0x27a/0x460 [ 299.187744][T13682] ? __pfx___mm_populate+0x10/0x10 [ 299.192923][T13682] vm_mmap_pgoff+0x2c3/0x3d0 [ 299.197564][T13682] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 299.202815][T13682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.209192][T13682] ? do_syscall_64+0x100/0x230 [ 299.213998][T13682] ? ksys_mmap_pgoff+0xdf/0x720 [ 299.218904][T13682] ? __x64_sys_mmap+0x7f/0x140 [ 299.223720][T13682] do_syscall_64+0xf3/0x230 [ 299.228280][T13682] ? clear_bhb_loop+0x35/0x90 [ 299.233023][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.238959][T13682] RIP: 0033:0x7f120f375bd9 [ 299.243415][T13682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.259724][T13683] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 299.263039][T13682] RSP: 002b:00007f121005e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 299.263173][T13682] RAX: ffffffffffffffda RBX: 00007f120f504038 RCX: 00007f120f375bd9 [ 299.263192][T13682] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 299.263208][T13682] RBP: 00007f121005e0a0 R08: ffffffffffffffff R09: 0000000000000000 [ 299.263225][T13682] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 299.263240][T13682] R13: 000000000000006e R14: 00007f120f504038 R15: 00007fff0a8f6228 [ 299.263282][T13682] [ 299.628583][T13706] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2911'. [ 300.170166][T13719] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.425917][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2921'. [ 300.731219][ T25] IPVS: starting estimator thread 0... [ 300.831663][T13757] IPVS: using max 19 ests per chain, 45600 per kthread [ 300.940813][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 301.099167][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2932'. [ 301.186473][T13780] FAULT_INJECTION: forcing a failure. [ 301.186473][T13780] name failslab, interval 1, probability 0, space 0, times 0 [ 301.199856][T13780] CPU: 1 PID: 13780 Comm: syz.1.2934 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 301.210550][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 301.220655][T13780] Call Trace: [ 301.223976][T13780] [ 301.226948][T13780] dump_stack_lvl+0x241/0x360 [ 301.231857][T13780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.237183][T13780] ? __pfx__printk+0x10/0x10 [ 301.241842][T13780] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 301.247794][T13780] should_fail_ex+0x3b0/0x4e0 [ 301.252539][T13780] ? once_disable_jump+0x52/0x1a0 [ 301.257615][T13780] should_failslab+0x9/0x20 [ 301.262174][T13780] kmalloc_trace_noprof+0x6c/0x2c0 [ 301.267355][T13780] once_disable_jump+0x52/0x1a0 [ 301.272269][T13780] update_or_create_fnhe+0x16db/0x16e0 [ 301.277792][T13780] ? __pfx_update_or_create_fnhe+0x10/0x10 [ 301.283662][T13780] ? fib_select_path+0x1e6/0x300 [ 301.288660][T13780] __ip_rt_update_pmtu+0x790/0xa50 [ 301.293913][T13780] ? __ip_rt_update_pmtu+0x5d7/0xa50 [ 301.299264][T13780] ? __pfx___ip_rt_update_pmtu+0x10/0x10 [ 301.304954][T13780] ? make_kuid+0x204/0x710 [ 301.309428][T13780] ? __pfx_make_kuid+0x10/0x10 [ 301.314238][T13780] ? ip_route_output_key_hash+0xdf/0x2b0 [ 301.319927][T13780] ip_rt_update_pmtu+0xd88/0x1480 [ 301.325013][T13780] ? __pfx_ip_rt_update_pmtu+0x10/0x10 [ 301.330519][T13780] ? ip_route_output_key_hash+0x226/0x2b0 [ 301.336300][T13780] ? ipv4_mtu+0x2bc/0x3d0 [ 301.340681][T13780] ? __pfx_ip_rt_update_pmtu+0x10/0x10 [ 301.346191][T13780] tnl_update_pmtu+0x57d/0x1210 [ 301.351110][T13780] ip_tunnel_xmit+0xf1f/0x2950 [ 301.355968][T13780] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 301.361248][T13780] ? gre_build_header+0x341/0xb30 [ 301.366381][T13780] ? __pfx_gre_build_header+0x10/0x10 [ 301.371805][T13780] ? validate_chain+0x11e/0x5900 [ 301.376800][T13780] ? __pfx_validate_chain+0x10/0x10 [ 301.382061][T13780] __gre_xmit+0x1cf/0x260 [ 301.386482][T13780] ? __pfx___gre_xmit+0x10/0x10 [ 301.391385][T13780] ? erspan_build_header+0x174/0x360 [ 301.396728][T13780] erspan_xmit+0xabe/0x1310 [ 301.401306][T13780] ? __pfx_erspan_xmit+0x10/0x10 [ 301.406297][T13780] ? __pfx_lock_acquire+0x10/0x10 [ 301.411381][T13780] dev_hard_start_xmit+0x27a/0x7e0 [ 301.416566][T13780] sch_direct_xmit+0x2b6/0x5f0 [ 301.421399][T13780] ? __pfx_sch_direct_xmit+0x10/0x10 [ 301.426751][T13780] __dev_queue_xmit+0x1a7f/0x3e90 [ 301.432032][T13780] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.438155][T13780] ? __dev_queue_xmit+0x2da/0x3e90 [ 301.443340][T13780] ? __pfx___dev_queue_xmit+0x10/0x10 [ 301.448781][T13780] ? neigh_resolve_output+0x450/0x740 [ 301.454214][T13780] ? read_seqbegin+0x157/0x2b0 [ 301.459045][T13780] ? lockdep_hardirqs_on+0x99/0x150 [ 301.464316][T13780] ? read_seqbegin+0x208/0x2b0 [ 301.469148][T13780] ? __pfx_read_seqbegin+0x10/0x10 [ 301.474406][T13780] ? neigh_resolve_output+0x2e5/0x740 [ 301.479840][T13780] ? eth_header+0x11c/0x1f0 [ 301.484409][T13780] ? __asan_memcpy+0x40/0x70 [ 301.489084][T13780] ? ip_finish_output2+0x45f/0x1390 [ 301.494336][T13780] ? ip_finish_output2+0x45f/0x1390 [ 301.499577][T13780] ip_finish_output2+0xe70/0x1390 [ 301.504639][T13780] ? ip_finish_output2+0x45f/0x1390 [ 301.509861][T13780] ? __pfx_ip_finish_output+0x10/0x10 [ 301.515277][T13780] ? __pfx_ip_finish_output2+0x10/0x10 [ 301.520754][T13780] ? ip_mc_finish_output+0x20d/0x570 [ 301.526065][T13780] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 301.530939][T13780] ? __ip_finish_output+0x349/0x400 [ 301.536168][T13780] __ip_queue_xmit+0x118c/0x1b80 [ 301.541138][T13780] ? __ip_queue_xmit+0x5f/0x1b80 [ 301.546103][T13780] sctp_packet_transmit+0x26af/0x2ca0 [ 301.551530][T13780] sctp_packet_singleton+0x22c/0x320 [ 301.556837][T13780] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 301.562690][T13780] ? sctp_outq_select_transport+0x474/0x580 [ 301.568619][T13780] ? sctp_transport_burst_limited+0x18c/0x270 [ 301.574723][T13780] sctp_outq_flush+0x6d5/0x3e20 [ 301.579598][T13780] ? rcu_is_watching+0x15/0xb0 [ 301.584407][T13780] ? __pfx_sctp_outq_flush+0x10/0x10 [ 301.589716][T13780] ? sctp_outq_tail+0x67a/0x930 [ 301.594585][T13780] ? sctp_outq_uncork+0x4f/0xb0 [ 301.599463][T13780] sctp_do_sm+0x59cc/0x60c0 [ 301.603998][T13780] ? stack_depot_save_flags+0x29/0x830 [ 301.609491][T13780] ? kasan_save_track+0x51/0x80 [ 301.614363][T13780] ? __kasan_kmalloc+0x98/0xb0 [ 301.619145][T13780] ? sctp_stream_init_ext+0x56/0x180 [ 301.624454][T13780] ? __pfx_sctp_do_sm+0x10/0x10 [ 301.629392][T13780] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 301.635250][T13780] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 301.640650][T13780] sctp_sendmsg_to_asoc+0xfa5/0x1800 [ 301.645977][T13780] ? __asan_memcpy+0x40/0x70 [ 301.650669][T13780] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 301.656094][T13780] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 301.661853][T13780] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 301.667337][T13780] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 301.673154][T13780] ? sctp_sendmsg+0xbb9/0x3520 [ 301.677944][T13780] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 301.683504][T13780] ? security_sctp_bind_connect+0x90/0xb0 [ 301.689261][T13780] sctp_sendmsg+0x1bc3/0x3520 [ 301.693995][T13780] ? __pfx_sctp_sendmsg+0x10/0x10 [ 301.699051][T13780] ? __pfx_aa_sk_perm+0x10/0x10 [ 301.703947][T13780] ? inet_sendmsg+0x330/0x390 [ 301.708648][T13780] __sock_sendmsg+0x1a6/0x270 [ 301.713349][T13780] ____sys_sendmsg+0x525/0x7d0 [ 301.718147][T13780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.723478][T13780] __sys_sendmsg+0x2b0/0x3a0 [ 301.728098][T13780] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.733244][T13780] ? vfs_write+0x7c4/0xc90 [ 301.737731][T13780] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.744078][T13780] ? do_syscall_64+0x100/0x230 [ 301.748865][T13780] ? do_syscall_64+0xb6/0x230 [ 301.753588][T13780] do_syscall_64+0xf3/0x230 [ 301.758120][T13780] ? clear_bhb_loop+0x35/0x90 [ 301.762823][T13780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.768767][T13780] RIP: 0033:0x7fc492775bd9 [ 301.773194][T13780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.793003][T13780] RSP: 002b:00007fc493607048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.801613][T13780] RAX: ffffffffffffffda RBX: 00007fc492903f60 RCX: 00007fc492775bd9 [ 301.809685][T13780] RDX: 00000000000003e8 RSI: 00000000200004c0 RDI: 0000000000000006 [ 301.817666][T13780] RBP: 00007fc4936070a0 R08: 0000000000000000 R09: 0000000000000000 [ 301.825739][T13780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.833723][T13780] R13: 000000000000000b R14: 00007fc492903f60 R15: 00007ffe85d867e8 [ 301.841728][T13780] [ 302.011108][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2935'. [ 302.054625][T13786] tipc: Enabling not permitted [ 302.070665][T13786] tipc: Enabling of bearer rejected, failed to enable media [ 302.135371][T13798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2938'. [ 302.188099][T13799] netlink: 'syz.3.2939': attribute type 10 has an invalid length. [ 302.209628][T13799] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2939'. [ 302.760443][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 302.841687][T13832] netlink: 'syz.4.2949': attribute type 20 has an invalid length. [ 302.899747][T13836] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 303.025049][T13843] FAULT_INJECTION: forcing a failure. [ 303.025049][T13843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.057980][T13843] CPU: 1 PID: 13843 Comm: syz.2.2953 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 303.068215][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 303.078315][T13843] Call Trace: [ 303.081633][T13843] [ 303.084598][T13843] dump_stack_lvl+0x241/0x360 [ 303.089331][T13843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.094574][T13843] ? __pfx__printk+0x10/0x10 [ 303.099226][T13843] ? __pfx_lock_release+0x10/0x10 [ 303.104323][T13843] should_fail_ex+0x3b0/0x4e0 [ 303.109084][T13843] _copy_to_iter+0x43a/0x1960 [ 303.113871][T13843] ? __virt_addr_valid+0x183/0x520 [ 303.119050][T13843] ? __pfx__copy_to_iter+0x10/0x10 [ 303.124224][T13843] ? __virt_addr_valid+0x183/0x520 [ 303.129386][T13843] ? __virt_addr_valid+0x183/0x520 [ 303.134542][T13843] ? __virt_addr_valid+0x44e/0x520 [ 303.139689][T13843] ? __check_object_size+0x49c/0x900 [ 303.144999][T13843] __skb_datagram_iter+0x110/0x8c0 [ 303.150249][T13843] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 303.155941][T13843] ? __lock_acquire+0x1346/0x1fd0 [ 303.160991][T13843] skb_copy_datagram_iter+0xd1/0x250 [ 303.166347][T13843] netlink_recvmsg+0x2d0/0x11d0 [ 303.171274][T13843] ? __pfx_netlink_recvmsg+0x10/0x10 [ 303.176592][T13843] ? __pfx_lock_acquire+0x10/0x10 [ 303.181640][T13843] ? __pfx_aa_sk_perm+0x10/0x10 [ 303.186600][T13843] ? aa_sock_msg_perm+0x91/0x160 [ 303.191560][T13843] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 303.196859][T13843] ? security_socket_recvmsg+0x90/0xb0 [ 303.202332][T13843] ? __pfx_netlink_recvmsg+0x10/0x10 [ 303.207634][T13843] sock_recvmsg+0x22f/0x280 [ 303.212158][T13843] sock_read_iter+0x2ca/0x3e0 [ 303.216850][T13843] ? __pfx_sock_read_iter+0x10/0x10 [ 303.222182][T13843] do_iter_readv_writev+0x5a4/0x800 [ 303.227406][T13843] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 303.233150][T13843] ? bpf_lsm_file_permission+0x9/0x10 [ 303.238538][T13843] ? security_file_permission+0x7f/0xa0 [ 303.244115][T13843] ? rw_verify_area+0x520/0x6b0 [ 303.249073][T13843] vfs_readv+0x2b6/0xa90 [ 303.253439][T13843] ? __pfx_vfs_readv+0x10/0x10 [ 303.258232][T13843] ? vfs_write+0x7c4/0xc90 [ 303.262782][T13843] ? __fget_files+0x29/0x470 [ 303.267583][T13843] do_readv+0x1b1/0x350 [ 303.271785][T13843] ? __pfx_do_readv+0x10/0x10 [ 303.276490][T13843] ? do_syscall_64+0x100/0x230 [ 303.281269][T13843] ? do_syscall_64+0xb6/0x230 [ 303.285961][T13843] do_syscall_64+0xf3/0x230 [ 303.290484][T13843] ? clear_bhb_loop+0x35/0x90 [ 303.295184][T13843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.301093][T13843] RIP: 0033:0x7f120f375bd9 [ 303.305517][T13843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.325137][T13843] RSP: 002b:00007f121005e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 303.333588][T13843] RAX: ffffffffffffffda RBX: 00007f120f504038 RCX: 00007f120f375bd9 [ 303.341573][T13843] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 303.349557][T13843] RBP: 00007f121005e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 303.357540][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.365523][T13843] R13: 000000000000006e R14: 00007f120f504038 R15: 00007fff0a8f6228 [ 303.373528][T13843] [ 303.446815][T13850] tipc: Started in network mode [ 303.467101][T13850] tipc: Node identity ac1414aa, cluster identity 4711 [ 303.485134][T13850] tipc: Enabling of bearer rejected, failed to enable media [ 303.565939][T13858] netlink: 'syz.0.2961': attribute type 9 has an invalid length. [ 303.575107][T13858] FAULT_INJECTION: forcing a failure. [ 303.575107][T13858] name failslab, interval 1, probability 0, space 0, times 0 [ 303.614542][T13858] CPU: 1 PID: 13858 Comm: syz.0.2961 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 303.625199][T13858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 303.635359][T13858] Call Trace: [ 303.638650][T13858] [ 303.641595][T13858] dump_stack_lvl+0x241/0x360 [ 303.646325][T13858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.651539][T13858] ? __pfx__printk+0x10/0x10 [ 303.656153][T13858] ? ref_tracker_alloc+0x332/0x490 [ 303.661289][T13858] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 303.666769][T13858] should_fail_ex+0x3b0/0x4e0 [ 303.671470][T13858] ? skb_clone+0x20c/0x390 [ 303.675905][T13858] should_failslab+0x9/0x20 [ 303.680426][T13858] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 303.685822][T13858] skb_clone+0x20c/0x390 [ 303.690087][T13858] __netlink_deliver_tap+0x3cc/0x7c0 [ 303.695491][T13858] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.700702][T13858] netlink_deliver_tap+0x19d/0x1b0 [ 303.705999][T13858] netlink_sendskb+0x68/0x140 [ 303.710688][T13858] netlink_unicast+0x39d/0x990 [ 303.715465][T13858] ? __asan_memcpy+0x40/0x70 [ 303.720075][T13858] ? __pfx_netlink_unicast+0x10/0x10 [ 303.725408][T13858] netlink_rcv_skb+0x262/0x430 [ 303.730189][T13858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.735810][T13858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.741162][T13858] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.746401][T13858] netlink_unicast+0x7f0/0x990 [ 303.751529][T13858] ? __pfx_netlink_unicast+0x10/0x10 [ 303.756826][T13858] ? __virt_addr_valid+0x183/0x520 [ 303.761959][T13858] ? __check_object_size+0x49c/0x900 [ 303.767262][T13858] ? bpf_lsm_netlink_send+0x9/0x10 [ 303.772408][T13858] netlink_sendmsg+0x8e4/0xcb0 [ 303.777289][T13858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.782597][T13858] ? __import_iovec+0x536/0x820 [ 303.787485][T13858] ? aa_sock_msg_perm+0x91/0x160 [ 303.792448][T13858] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 303.797752][T13858] ? security_socket_sendmsg+0x87/0xb0 [ 303.803404][T13858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.809250][T13858] __sock_sendmsg+0x221/0x270 [ 303.813953][T13858] ____sys_sendmsg+0x525/0x7d0 [ 303.818745][T13858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.824073][T13858] __sys_sendmsg+0x2b0/0x3a0 [ 303.828688][T13858] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.833817][T13858] ? vfs_write+0x7c4/0xc90 [ 303.838285][T13858] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 303.844629][T13858] ? do_syscall_64+0x100/0x230 [ 303.849411][T13858] ? do_syscall_64+0xb6/0x230 [ 303.854108][T13858] do_syscall_64+0xf3/0x230 [ 303.858624][T13858] ? clear_bhb_loop+0x35/0x90 [ 303.863435][T13858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.869378][T13858] RIP: 0033:0x7fcc16d75bd9 [ 303.873823][T13858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.893448][T13858] RSP: 002b:00007fcc17a92048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.901885][T13858] RAX: ffffffffffffffda RBX: 00007fcc16f03f60 RCX: 00007fcc16d75bd9 [ 303.909904][T13858] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 303.917990][T13858] RBP: 00007fcc17a920a0 R08: 0000000000000000 R09: 0000000000000000 [ 303.925973][T13858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.933954][T13858] R13: 000000000000004d R14: 00007fcc16f03f60 R15: 00007fff1f10d0f8 [ 303.941955][T13858] [ 304.007971][T13860] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 304.061179][T13865] delete_channel: no stack [ 304.244103][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2967'. [ 304.504106][ T5104] Bluetooth: hci0: link tx timeout [ 304.509744][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.532231][ T5104] Bluetooth: hci0: link tx timeout [ 304.537423][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.560659][T13898] FAULT_INJECTION: forcing a failure. [ 304.560659][T13898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.574588][ T5104] Bluetooth: hci0: link tx timeout [ 304.579758][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.590989][T13898] CPU: 0 PID: 13898 Comm: syz.1.2975 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 304.601242][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 304.611348][T13898] Call Trace: [ 304.614665][T13898] [ 304.617632][T13898] dump_stack_lvl+0x241/0x360 [ 304.622358][T13898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.627593][T13898] ? __pfx__printk+0x10/0x10 [ 304.632328][T13898] ? snprintf+0xda/0x120 [ 304.636646][T13898] should_fail_ex+0x3b0/0x4e0 [ 304.641384][T13898] _copy_to_user+0x2f/0xb0 [ 304.645851][T13898] simple_read_from_buffer+0xca/0x150 [ 304.651281][T13898] proc_fail_nth_read+0x1e9/0x250 [ 304.656363][T13898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.661951][T13898] ? rw_verify_area+0x520/0x6b0 [ 304.666852][T13898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.672447][T13898] vfs_read+0x204/0xbc0 [ 304.676738][T13898] ? __pfx_lock_release+0x10/0x10 [ 304.681814][T13898] ? __pfx_vfs_read+0x10/0x10 [ 304.686539][T13898] ? bpf_prog_test_run+0x352/0x3b0 [ 304.691696][T13898] ? __fget_files+0x29/0x470 [ 304.696338][T13898] ? __fget_files+0x3f6/0x470 [ 304.697824][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 304.701057][T13898] ksys_read+0x1a0/0x2c0 [ 304.701100][T13898] ? __pfx_ksys_read+0x10/0x10 [ 304.701128][T13898] ? do_syscall_64+0x100/0x230 [ 304.701157][T13898] ? do_syscall_64+0xb6/0x230 [ 304.701185][T13898] do_syscall_64+0xf3/0x230 [ 304.701210][T13898] ? clear_bhb_loop+0x35/0x90 [ 304.701242][T13898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.701276][T13898] RIP: 0033:0x7fc4927746bc [ 304.701298][T13898] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 304.701319][T13898] RSP: 002b:00007fc493607040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.701347][T13898] RAX: ffffffffffffffda RBX: 00007fc492903f60 RCX: 00007fc4927746bc [ 304.701366][T13898] RDX: 000000000000000f RSI: 00007fc4936070b0 RDI: 0000000000000005 [ 304.701383][T13898] RBP: 00007fc4936070a0 R08: 0000000000000000 R09: 0000000000000000 [ 304.701399][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.701414][T13898] R13: 000000000000000b R14: 00007fc492903f60 R15: 00007ffe85d867e8 [ 304.701451][T13898] [ 304.703042][ T5104] Bluetooth: hci0: link tx timeout [ 304.825232][T13907] netlink: 9392 bytes leftover after parsing attributes in process `syz.4.2974'. [ 304.831031][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 304.862839][T13907] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 305.196881][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 305.674333][T13958] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2990'. [ 305.694557][ T5104] Bluetooth: hci0: link tx timeout [ 305.699828][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.708779][ T5104] Bluetooth: hci0: link tx timeout [ 305.714139][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.722197][ T5104] Bluetooth: hci0: link tx timeout [ 305.727408][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.019143][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 306.199439][T13987] veth0_vlan: entered allmulticast mode [ 306.455546][T14002] netlink: 'syz.1.3008': attribute type 15 has an invalid length. [ 306.504579][ T5104] Bluetooth: hci0: link tx timeout [ 306.510473][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.518586][ T5104] Bluetooth: hci0: link tx timeout [ 306.523973][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.533309][ T5104] Bluetooth: hci0: link tx timeout [ 306.538572][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.546894][ T5104] Bluetooth: hci0: link tx timeout [ 306.552191][ T5104] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.562362][ T5104] ================================================================== [ 306.570482][ T5104] BUG: KASAN: slab-use-after-free in hci_disconnect+0x208/0x2d0 [ 306.578164][ T5104] Read of size 1 at addr ffff88802d03003b by task kworker/u9:4/5104 [ 306.586184][ T5104] [ 306.588540][ T5104] CPU: 0 PID: 5104 Comm: kworker/u9:4 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 306.598814][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 306.608907][ T5104] Workqueue: hci0 hci_tx_work [ 306.613629][ T5104] Call Trace: [ 306.616938][ T5104] [ 306.619902][ T5104] dump_stack_lvl+0x241/0x360 [ 306.624621][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.629864][ T5104] ? __pfx__printk+0x10/0x10 [ 306.634506][ T5104] ? _printk+0xd5/0x120 [ 306.638717][ T5104] ? __virt_addr_valid+0x183/0x520 [ 306.643872][ T5104] ? __virt_addr_valid+0x183/0x520 [ 306.649029][ T5104] print_report+0x169/0x550 [ 306.653578][ T5104] ? __virt_addr_valid+0x183/0x520 [ 306.658772][ T5104] ? __virt_addr_valid+0x183/0x520 [ 306.664019][ T5104] ? __virt_addr_valid+0x44e/0x520 [ 306.669352][ T5104] ? __phys_addr+0xba/0x170 [ 306.673907][ T5104] ? hci_disconnect+0x208/0x2d0 [ 306.678815][ T5104] kasan_report+0x143/0x180 [ 306.683369][ T5104] ? hci_disconnect+0x208/0x2d0 [ 306.688284][ T5104] hci_disconnect+0x208/0x2d0 [ 306.693020][ T5104] ? __pfx_hci_disconnect+0x10/0x10 [ 306.698288][ T5104] ? hci_sched_esco+0x336/0x440 [ 306.703194][ T5104] ? __rcu_read_unlock+0xa1/0x110 [ 306.708362][ T5104] ? __check_timeout+0x184/0x560 [ 306.713339][ T5104] __check_timeout+0x3a8/0x560 [ 306.718159][ T5104] ? __check_timeout+0x184/0x560 [ 306.723248][ T5104] hci_tx_work+0xb9e/0x1590 [ 306.727799][ T5104] ? __pfx_lock_acquire+0x10/0x10 [ 306.732864][ T5104] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 306.738975][ T5104] ? __pfx_hci_tx_work+0x10/0x10 [ 306.744151][ T5104] ? process_scheduled_works+0x945/0x1830 [ 306.749925][ T5104] process_scheduled_works+0xa2c/0x1830 [ 306.755587][ T5104] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.761621][ T5104] ? assign_work+0x364/0x3d0 [ 306.766255][ T5104] worker_thread+0x86d/0xd50 [ 306.770938][ T5104] ? __kthread_parkme+0x169/0x1d0 [ 306.776015][ T5104] ? __pfx_worker_thread+0x10/0x10 [ 306.781182][ T5104] kthread+0x2f0/0x390 [ 306.785299][ T5104] ? __pfx_worker_thread+0x10/0x10 [ 306.790454][ T5104] ? __pfx_kthread+0x10/0x10 [ 306.795173][ T5104] ret_from_fork+0x4b/0x80 [ 306.799606][ T5104] ? __pfx_kthread+0x10/0x10 [ 306.804207][ T5104] ret_from_fork_asm+0x1a/0x30 [ 306.808996][ T5104] [ 306.812100][ T5104] [ 306.814436][ T5104] Allocated by task 5104: [ 306.818786][ T5104] kasan_save_track+0x3f/0x80 [ 306.823586][ T5104] __kasan_kmalloc+0x98/0xb0 [ 306.828208][ T5104] kmalloc_trace_noprof+0x19c/0x2c0 [ 306.833443][ T5104] __hci_conn_add+0x2f9/0x1850 [ 306.838245][ T5104] le_conn_complete_evt+0x2f6/0x12e0 [ 306.843569][ T5104] hci_le_conn_complete_evt+0x18c/0x420 [ 306.849186][ T5104] hci_event_packet+0xa55/0x1540 [ 306.854173][ T5104] hci_rx_work+0x3e8/0xca0 [ 306.858638][ T5104] process_scheduled_works+0xa2c/0x1830 [ 306.864215][ T5104] worker_thread+0x86d/0xd50 [ 306.868836][ T5104] kthread+0x2f0/0x390 [ 306.873529][ T5104] ret_from_fork+0x4b/0x80 [ 306.877977][ T5104] ret_from_fork_asm+0x1a/0x30 [ 306.882776][ T5104] [ 306.885111][ T5104] Freed by task 5102: [ 306.889091][ T5104] kasan_save_track+0x3f/0x80 [ 306.893791][ T5104] kasan_save_free_info+0x40/0x50 [ 306.898838][ T5104] poison_slab_object+0xe0/0x150 [ 306.903784][ T5104] __kasan_slab_free+0x37/0x60 [ 306.908549][ T5104] kfree+0x149/0x360 [ 306.912454][ T5104] device_release+0x99/0x1c0 [ 306.917074][ T5104] kobject_put+0x22f/0x480 [ 306.921592][ T5104] hci_conn_del+0x8c4/0xc40 [ 306.926145][ T5104] hci_abort_conn_sync+0x583/0xde0 [ 306.931294][ T5104] hci_cmd_sync_work+0x22b/0x400 [ 306.936252][ T5104] process_scheduled_works+0xa2c/0x1830 [ 306.941816][ T5104] worker_thread+0x86d/0xd50 [ 306.946429][ T5104] kthread+0x2f0/0x390 [ 306.950528][ T5104] ret_from_fork+0x4b/0x80 [ 306.954998][ T5104] ret_from_fork_asm+0x1a/0x30 [ 306.959784][ T5104] [ 306.962128][ T5104] The buggy address belongs to the object at ffff88802d030000 [ 306.962128][ T5104] which belongs to the cache kmalloc-8k of size 8192 [ 306.977076][ T5104] The buggy address is located 59 bytes inside of [ 306.977076][ T5104] freed 8192-byte region [ffff88802d030000, ffff88802d032000) [ 306.991010][ T5104] [ 306.993363][ T5104] The buggy address belongs to the physical page: [ 306.999791][ T5104] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d030 [ 307.008558][ T5104] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 307.017061][ T5104] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 307.025056][ T5104] page_type: 0xffffefff(slab) [ 307.029784][ T5104] raw: 00fff00000000040 ffff888015042280 ffffea00017e7000 dead000000000005 [ 307.038385][ T5104] raw: 0000000000000000 0000000000020002 00000001ffffefff 0000000000000000 [ 307.046991][ T5104] head: 00fff00000000040 ffff888015042280 ffffea00017e7000 dead000000000005 [ 307.055671][ T5104] head: 0000000000000000 0000000000020002 00000001ffffefff 0000000000000000 [ 307.064533][ T5104] head: 00fff00000000003 ffffea0000b40c01 ffffffffffffffff 0000000000000000 [ 307.073217][ T5104] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 307.081912][ T5104] page dumped because: kasan: bad access detected [ 307.088360][ T5104] page_owner tracks the page as allocated [ 307.094146][ T5104] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4760, tgid 4760 (dhcpcd), ts 48152936254, free_ts 48111512909 [ 307.114837][ T5104] post_alloc_hook+0x1f3/0x230 [ 307.119644][ T5104] get_page_from_freelist+0x2e4c/0x2f10 [ 307.125218][ T5104] __alloc_pages_noprof+0x256/0x6c0 [ 307.130503][ T5104] alloc_slab_page+0x5f/0x120 [ 307.135211][ T5104] allocate_slab+0x5a/0x2f0 [ 307.139738][ T5104] ___slab_alloc+0xcd1/0x14b0 [ 307.144427][ T5104] __slab_alloc+0x58/0xa0 [ 307.148800][ T5104] kmalloc_node_track_caller_noprof+0x281/0x440 [ 307.155163][ T5104] kmalloc_reserve+0x111/0x2a0 [ 307.159937][ T5104] __alloc_skb+0x1f3/0x440 [ 307.164384][ T5104] netlink_dump+0x1f7/0xd80 [ 307.168918][ T5104] __netlink_dump_start+0x59f/0x780 [ 307.174132][ T5104] rtnetlink_rcv_msg+0xda5/0x1180 [ 307.179184][ T5104] netlink_rcv_skb+0x1e3/0x430 [ 307.183966][ T5104] netlink_unicast+0x7f0/0x990 [ 307.188756][ T5104] netlink_sendmsg+0x8e4/0xcb0 [ 307.193544][ T5104] page last free pid 4842 tgid 4842 stack trace: [ 307.199897][ T5104] free_unref_page+0xd22/0xea0 [ 307.204680][ T5104] __put_partials+0xeb/0x130 [ 307.209287][ T5104] put_cpu_partial+0x17c/0x250 [ 307.214083][ T5104] __slab_free+0x2ea/0x3d0 [ 307.218526][ T5104] qlist_free_all+0x9e/0x140 [ 307.223129][ T5104] kasan_quarantine_reduce+0x14f/0x170 [ 307.228619][ T5104] __kasan_slab_alloc+0x23/0x80 [ 307.233511][ T5104] kmalloc_node_track_caller_noprof+0x1cd/0x440 [ 307.239794][ T5104] krealloc_noprof+0x7d/0x120 [ 307.244509][ T5104] ima_collect_measurement+0x5d5/0xb30 [ 307.249990][ T5104] process_measurement+0x1357/0x1fb0 [ 307.255315][ T5104] ima_file_check+0xf2/0x170 [ 307.259935][ T5104] security_file_post_open+0x6d/0xa0 [ 307.265231][ T5104] path_openat+0x2c54/0x35f0 [ 307.269827][ T5104] do_filp_open+0x235/0x490 [ 307.274353][ T5104] do_sys_openat2+0x13e/0x1d0 [ 307.279064][ T5104] [ 307.281404][ T5104] Memory state around the buggy address: [ 307.287044][ T5104] ffff88802d02ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 307.295109][ T5104] ffff88802d02ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 307.303174][ T5104] >ffff88802d030000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 307.311253][ T5104] ^ [ 307.317150][ T5104] ffff88802d030080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 307.325271][ T5104] ffff88802d030100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 307.333360][ T5104] ================================================================== [ 307.347777][ T5104] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 307.355030][ T5104] CPU: 0 PID: 5104 Comm: kworker/u9:4 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 307.365303][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 307.375386][ T5104] Workqueue: hci0 hci_tx_work [ 307.380090][ T5104] Call Trace: [ 307.383380][ T5104] [ 307.386315][ T5104] dump_stack_lvl+0x241/0x360 [ 307.391009][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.396217][ T5104] ? __pfx__printk+0x10/0x10 [ 307.400823][ T5104] ? preempt_schedule+0xe1/0xf0 [ 307.405707][ T5104] ? vscnprintf+0x5d/0x90 [ 307.410047][ T5104] panic+0x349/0x860 [ 307.413958][ T5104] ? check_panic_on_warn+0x21/0xb0 [ 307.419205][ T5104] ? __pfx_panic+0x10/0x10 [ 307.423640][ T5104] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 307.429808][ T5104] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.436151][ T5104] ? print_report+0x502/0x550 [ 307.440851][ T5104] check_panic_on_warn+0x86/0xb0 [ 307.445807][ T5104] ? hci_disconnect+0x208/0x2d0 [ 307.450765][ T5104] end_report+0x77/0x160 [ 307.455022][ T5104] kasan_report+0x154/0x180 [ 307.459543][ T5104] ? hci_disconnect+0x208/0x2d0 [ 307.464418][ T5104] hci_disconnect+0x208/0x2d0 [ 307.469133][ T5104] ? __pfx_hci_disconnect+0x10/0x10 [ 307.474452][ T5104] ? hci_sched_esco+0x336/0x440 [ 307.479323][ T5104] ? __rcu_read_unlock+0xa1/0x110 [ 307.484364][ T5104] ? __check_timeout+0x184/0x560 [ 307.489316][ T5104] __check_timeout+0x3a8/0x560 [ 307.494099][ T5104] ? __check_timeout+0x184/0x560 [ 307.499077][ T5104] hci_tx_work+0xb9e/0x1590 [ 307.503598][ T5104] ? __pfx_lock_acquire+0x10/0x10 [ 307.508638][ T5104] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.514627][ T5104] ? __pfx_hci_tx_work+0x10/0x10 [ 307.519593][ T5104] ? process_scheduled_works+0x945/0x1830 [ 307.525340][ T5104] process_scheduled_works+0xa2c/0x1830 [ 307.530917][ T5104] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.536917][ T5104] ? assign_work+0x364/0x3d0 [ 307.541524][ T5104] worker_thread+0x86d/0xd50 [ 307.546132][ T5104] ? __kthread_parkme+0x169/0x1d0 [ 307.551168][ T5104] ? __pfx_worker_thread+0x10/0x10 [ 307.556297][ T5104] kthread+0x2f0/0x390 [ 307.560380][ T5104] ? __pfx_worker_thread+0x10/0x10 [ 307.565498][ T5104] ? __pfx_kthread+0x10/0x10 [ 307.570110][ T5104] ret_from_fork+0x4b/0x80 [ 307.574648][ T5104] ? __pfx_kthread+0x10/0x10 [ 307.579570][ T5104] ret_from_fork_asm+0x1a/0x30 [ 307.584369][ T5104] [ 307.587785][ T5104] Kernel Offset: disabled [ 307.592231][ T5104] Rebooting in 86400 seconds..