last executing test programs: 5.452075791s ago: executing program 0 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.276345488s ago: executing program 0 (id=1270): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x6e}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x5, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x10, 0x3, 0x74000000}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x147e, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/132, 0x84}, {0x0}], 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x4}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002400200029bd70000600040000000000060066da112edc3c489223f9f72a8c80"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40088c1) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.37972312s ago: executing program 0 (id=1280): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000a00)="96dde633800b99dfc32083baf6e832c6b83f533376191b567c3a2ad1953a65e12b453db77c7fdffea765696f93c7368a78bde6cee4d21ac6acada3024c5ad280716e0dfea422bf9459d2a44af45d87fedf3a103e2bbb917e90bdbe6c29cecc09afb2c60c6350ca4664b8e3881c0100d85a2c45f8b7402f5ead1c82fd807a2be292eeb1438bd58883fac62371e38d9130a786635d5ed4affd6704d3bc6f8f8de4f1ae60e3a57cf8934778da4280ffa31b57e0c2cb8c8f49e5e15e", 0xba) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000003c0)=0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000a0ec000000000000a0ccc56a711217000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42", 0x41}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e", 0x43}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4", 0x28}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd", 0x46}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="b5d383823677f0", 0x7}], 0x1}}], 0x3, 0xc0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x14}}, 0x40008c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.936277699s ago: executing program 1 (id=1285): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107800765a6d"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe9, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="fde26e625c42711bd850b935679c21b4b5ea86cfaa80925290", @ANYRES32, @ANYRES16=r1, @ANYRES8=r1, @ANYRES16, @ANYRESDEC], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000aa0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x80000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a000000110001800600028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000bb3c0003800c00028005000100000000002c00018014000300fc0000000000000000000000000000c08630c300fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0x3b, 0x12) sendfile(r6, r6, 0x0, 0x80000000) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) sendfile(r9, r8, 0x0, 0x10000) 2.812244015s ago: executing program 3 (id=1286): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x6e}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x5, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x10, 0x3, 0x74000000}}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x147e, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/132, 0x84}, {0x0}], 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x4}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002400200029bd70000600040000000000060066da112edc3c489223f9f72a8c80"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40088c1) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.382131159s ago: executing program 3 (id=1288): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='nilfs2_segment_usage_freed\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e92a2f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 2.378819957s ago: executing program 0 (id=1289): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000a00)="96dde633800b99dfc32083baf6e832c6b83f533376191b567c3a2ad1953a65e12b453db77c7fdffea765696f93c7368a78bde6cee4d21ac6acada3024c5ad280716e0dfea422bf9459d2a44af45d87fedf3a103e2bbb917e90bdbe6c29cecc09afb2c60c6350ca4664b8e3881c0100d85a2c45f8b7402f5ead1c82fd807a2be292eeb1438bd58883fac62371e38d9130a786635d5ed4affd6704d3bc6f8f8de4f1ae60e3a57cf8934778da4280ffa31b57e0c2cb8c8f49e5e15e", 0xba) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000003c0)=0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000a0ec000000000000a0ccc56a711217000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c9", 0x7b}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a2184", 0x81}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e", 0x43}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4", 0x28}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd", 0x46}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="b5d383823677f0", 0x7}], 0x1}}], 0x3, 0xc0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x14}}, 0x40008c0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000240)="be39bb6eb4ef615107ecb4788745ef25f8f9633a976ef712b80d773539d97427b1af2137f20a", 0x26}], 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.98165011s ago: executing program 1 (id=1292): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x20, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {0x8, 0x4}]}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x38, 0x0, 0x1, 0xfff, 0x0, @void, @value}, 0x28) 1.948147726s ago: executing program 3 (id=1293): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) listen(r0, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000a80)}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x89, &(0x7f0000000bc0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x53, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"b2ba2b437cc44ac8ca3e91089a20b2d0f5e8e931ecaf0a7382584e6b0f8ed7f8572c64e9506c882225cdb296c747e16d0eeb6657bd1cd4b7bd0b51aab6b561"}}}}}}}, 0x0) 1.898254327s ago: executing program 1 (id=1294): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {0x8, 0x4}]}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x38, 0x0, 0x1, 0xfff, 0x0, @void, @value}, 0x28) (fail_nth: 7) 1.821139929s ago: executing program 3 (id=1295): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0xffff, @broadcast}, 0x10) syz_emit_ethernet(0x146, &(0x7f0000000300)={@remote, @empty, @void, {@ipv4={0x800, @udp={{0x4b, 0x4, 0x0, 0x0, 0x138, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x2, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xfe, 0x1, 0x9, [{@local, 0x5}]}, @generic={0x89, 0xc, "73b10dd55c109fd4c115"}, @timestamp={0x44, 0x8, 0x9f, 0x0, 0x1, [0xd95]}, @lsrr={0x83, 0x3, 0xd1}, @end, @timestamp_addr={0x44, 0x3c, 0x86, 0x1, 0x4, [{@multicast2, 0x8000}, {@empty, 0x3}, {@empty, 0x5}, {@empty, 0x583d}, {@local, 0x5}, {@empty}, {@broadcast, 0xff}]}, @timestamp_addr={0x44, 0x44, 0x8f, 0x1, 0x2, [{@private=0xa010101, 0x4}, {@remote, 0xb}, {@loopback, 0x262}, {@empty, 0x1}, {@broadcast, 0x6}, {@loopback, 0x6}, {@local, 0x9}, {@remote, 0x8000}]}, @rr={0x7, 0x2b, 0xb7, [@remote, @broadcast, @broadcast, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @local, @local, @empty]}, @rr={0x7, 0xf, 0xb7, [@broadcast, @multicast2, @multicast2]}, @cipso={0x86, 0x39, 0x0, [{0x7, 0xa, "c04bb33aa146b55b"}, {0x6, 0xe, "94679c8119d1a3760041d76b"}, {0x6, 0xe, "1ab29a256db96de8edb69dc8"}, {0x0, 0xd, "98f49468d746c1d60ee437"}]}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.728275992s ago: executing program 1 (id=1296): r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000400)='veth1_to_batadv\x00', 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4aa}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100200018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x700, 0x8080, 0x0, 0x1, {{0x36, 0x4, 0x1, 0x2, 0xd8, 0x64, 0x0, 0x19, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @generic={0x83, 0x2}, @ssrr={0x89, 0x1f, 0xe5, [@rand_addr=0x64010102, @remote, @local, @private=0xa010101, @rand_addr=0x64010101, @loopback, @loopback]}, @cipso={0x86, 0x37, 0x3, [{0x0, 0x10, "c919676d55250ec57e6b9942162d"}, {0x7, 0x2}, {0x0, 0x8, "12d00dfb053f"}, {0x0, 0x9, "188b95bd4d19b1"}, {0x0, 0x8, "ef6c28c907e4"}, {0x2, 0x6, "3c7b1a44"}]}, @timestamp={0x44, 0xc, 0xc1, 0x0, 0x7, [0x779, 0x6]}, @timestamp_prespec={0x44, 0x3c, 0xae, 0x3, 0x2, [{@private=0xa010101, 0x5}, {@multicast2, 0x7}, {@remote, 0x1}, {@empty}, {@private=0xa010100}, {@broadcast, 0x84}, {@broadcast, 0x3}]}, @lsrr={0x83, 0x7, 0x74, [@private=0xa010100]}, @timestamp={0x44, 0x10, 0x9e, 0x0, 0xd, [0xff, 0x3, 0x3]}, @generic={0x44, 0xb, "322f884196506179b0"}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_deladdr={0x20, 0x15, 0x400, 0x70bd26, 0x25dfdbff, {0x2, 0x38, 0x0, 0xfe, r4}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'bond0\x00'}) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4) 1.727688672s ago: executing program 2 (id=1297): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x6e}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x5, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x10, 0x3, 0x74000000}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x147e, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/132, 0x84}, {0x0}], 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x4}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.633769683s ago: executing program 1 (id=1298): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x6e}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x5, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x10, 0x3, 0x74000000}}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x147e, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/132, 0x84}, {0x0}], 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x4}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002400200029bd70000600040000000000060066da112edc3c489223f9f72a8c80"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40088c1) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.611287446s ago: executing program 3 (id=1299): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000a00)="96dde633800b99dfc32083baf6e832c6b83f533376191b567c3a2ad1953a65e12b453db77c7fdffea765696f93c7368a78bde6cee4d21ac6acada3024c5ad280716e0dfea422bf9459d2a44af45d87fedf3a103e2bbb917e90bdbe6c29cecc09afb2c60c6350ca4664b8e3881c0100d85a2c45f8b7402f5ead1c82fd807a2be292eeb1438bd58883fac62371e38d9130a786635d5ed4affd6704d3bc6f8f8de4f1ae60e3a57cf8934778da4280ffa31b57e0c2cb8c8f49e5e15e", 0xba) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000003c0)=0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000a0ec000000000000a0ccc56a711217000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42", 0x41}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e", 0x43}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4", 0x28}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd", 0x46}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="b5d383823677f0", 0x7}], 0x1}}], 0x3, 0xc0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}}, 0x14}}, 0x40008c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.519665758s ago: executing program 2 (id=1301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xf0, &(0x7f0000000440)={@local, @local, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@x25={0x805, {0x2, 0x3, 0xfb, "b58f0b367eaac84c0ff37058160e6663c5c0e9c7f129e75dd25f9ab4dc2ded233cb6146fff0152e93cd2a551e22068a23a61609ecde94dca35bb7aac534bf9922fffc394943b59dfd1ad902227dfbe426e36fd536ebe6808b231eb0b17a6334d8ed642191647a4cbf94a1043a9f88ed0262e0fe098c4f0dab495f78e427910b49814ca3fd7f77b0f1493e1c0a0f416c96b82f7dd54208705d1bee433442a8e0017acdd0acf9a85b98cdf611e5fbde09b97f1b3721c3b1f2ceb16b68129154ccb1eecff44737a1f8638b4152c63606a257e5c6ede6223426ac39c65"}}}}, &(0x7f0000000100)={0x1, 0x4, [0x8f8, 0x3e9, 0x6f3, 0xb9f]}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000001019b6904713ab6af3b00020000000000018000018008000100ac1414bb08000200ac0314bb0c00028005000100000000002400028014000180080001000000000c00fd028005000100000000000800074000000000100017000000000000000800000000001000164000000000ffffffff00"/132], 0x84}, 0x1, 0x0, 0x0, 0x8020}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095", @ANYBLOB="26cc4d73b46f55f0e97724f7625b7afc654247aef46e0d3b8dff7513fbf812d3386037bb85a5447c3c5096937cdc99e5129d973a8cbe89fd3b5f37680f87667e831978f55ffc19c9b305ade03dae27065567a88625962151f53c5cbf4be8a7a79748c74aa77845bff9755bd8d8f2603fe1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x7}, 0x1c) 1.382697561s ago: executing program 2 (id=1302): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000700)="604000090404000086b3d7a188a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x50) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x10) socket$rds(0x15, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x3930) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) 1.281822006s ago: executing program 4 (id=1303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="6159e3f0443d80d5106b8b55dec8fd0c945fe099b54778de22f615025baeb2cc16dc9a8a4ad1741d641a366686c0bda8b843583a90e9281c1f20c75e61957c3e787043c96fbd71848a098ac2dca6c02820ea31edf2340aa79ca16ec0aa50cb829529e550ebde519a2bbaa16071a3503dced2f90d1be80cff0059bb784115ce1ae45090051e337ef1c14466f51863cc54741f6bc747370c65af9b7d37d926a72e00a238cdc5abbbb7", 0xa8}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}, 0x24000840) sendto$inet(r2, &(0x7f0000000e80)='`}', 0x2, 0x1, 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="6159e3f0443d80d5106b8b55dec8fd0c945fe099b54778de22f615025baeb2cc16dc9a8a4ad1741d641a366686c0bda8b843583a90e9281c1f20c75e61957c3e787043c96fbd71848a098ac2dca6c02820ea31edf2340aa79ca16ec0aa50cb829529e550ebde519a2bbaa16071a3503dced2f90d1be80cff0059bb784115ce1ae45090051e337ef1c14466f51863cc54741f6bc747370c65af9b7d37d926a72e00a238cdc5abbbb7", 0xa8}], 0x1, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}, 0x24000840) (async) sendto$inet(r2, &(0x7f0000000e80)='`}', 0x2, 0x1, 0x0, 0x0) (async) close(r0) (async) 1.280199154s ago: executing program 0 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r2) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000240)={0x2, 'veth0\x00', 0x4}, 0x18) recvfrom(0xffffffffffffffff, &(0x7f00000005c0)=""/4096, 0x1000, 0x2141, &(0x7f0000000000)=@l2={0x1f, 0x6, @none, 0x9}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000040)=0xf2b, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000f0000000850000009b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000180)="00feffffff000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x0, 0x3, "5815e620957c589b7e1114cbd3d47ece2cc02bd2dcd6d451853442f1b883a8bedddf96b194cfa11b4ab6f0b0a91773e4a02f0cff16c16f6a621ef088922b6868c349fddc16c496eda0213cce2cd516d1660c34416804dc74d1bb7cd34a7b6dab4b9d446a762939fa1164d99ccfe686cf74476f0976c103fee08e043a02871a97d7be71fa67711469ee171b9894f30591ccba4318c12c6be15b9420731e87d2ba69991617a5881d9b90933fa209cbc6b8bb187303aae852ee280ea07a682ff348d56bf7bad5a7aa316d6e2e6c0fe600b5"}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xffffffffffffff06}, 0x1, 0x0, 0x0, 0x20048051}, 0x20048851) 1.242930242s ago: executing program 1 (id=1305): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c3b0000", @ANYRES16=r6, @ANYRESHEX, @ANYRESHEX=r4, @ANYBLOB], 0x1c}}, 0xa52cf1d0dc906d1e) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x625}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x20020000) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x3ed}}, @mangle={0x20, 'mangle\x00', 0x0, {@mac=@random="e071c360e504", @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, 0xffffff00, 0x0, 0xff, 0x1, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @broadcast, @multicast1, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x459) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r1, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4044001}, 0x4044010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r8 = socket(0xa, 0x3, 0x7) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0xfffe, 0x0, @mcast2, 0x42}, 0x0, {[0x0, 0x1]}}, 0x5c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x80}, 0x42) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 1.152459016s ago: executing program 2 (id=1306): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0xfe}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x80}]}}}]}, 0x50}}, 0x40) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r3, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/138, 0x8a}], 0x1}, 0x805}], 0x1, 0x100, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000001, 0x6e073, 0xffffffffffffffff, 0x0) 1.151900615s ago: executing program 4 (id=1307): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @loopback}], 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c941132d35e14d725d6f71510910bce5dd3448a44f3796523fe8d9c712aa1c9f02895b28e042b5119d84c5981a6c5ca1bacc78fa40f022823f283be96121e99b991529bdfd3a81ef819274472d5f1ae4a672f3bebf1b38cd97cb986ed05dac2d4f165edb468c7e4fb7019801e650e0e27a03778ffc2711daf55a35bd7d55e3466b310ed357ccc8e2974916eb8eebced7d1979697564ec714c94086dfe7281ac65101a6238053c492868e19f7d2de5360b9ccde05eef48a9297f7a55a9644cdaddae0898b43100bef0a5f61672b6fedba339a3ec6d6787dd2bb55ada82f71b5d2b0f6b86960c3dbcb3213e19ae02ff7c78c744bd1fc1dece6dd13196dcf49f1b7e6c8374305b2d249c1ca745238200ec1bb7042b7389252a40fc3fb128db74d98850f3075606d1215a97f6", @ANYRES16=r3, @ANYBLOB="00082dbd7000fedbdf252500000008000300", @ANYRES32=r5, @ANYBLOB="0a00340002020202020200000a00060050505050505000001f00340031a9490f391a6e72ba18bdc89aa99660ab7d3fd4969e259578c7a000"], 0x54}}, 0x810) sendto$inet(r0, &(0x7f0000000700)="ab", 0x1, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 994.022215ms ago: executing program 4 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000085c0)={0x1c, 0x43, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x148}]}]}, 0x1c}}, 0x48844) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x8}}]}, 0x3c}}, 0x80) 908.30759ms ago: executing program 4 (id=1309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xfff1}, {0x0, 0xffff}, {0xfff3, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_qfg={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x98}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x10048000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r6, 0x403, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40004) 560.646005ms ago: executing program 4 (id=1310): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="14b872b6355c8488147d33769f38511ce258e01a3d", 0x15}, {&(0x7f00000001c0)="404f9ff61c10d6a956e4d3c239827b1123e5f842bf6e359e18e232fb03b5c4b80d6bf6097f8a0cd251ef6a1e8926609a29684b0ca0fd74542a6e05b8002b1877e314cdefa5454e2c26a5312dd7076fdfd27477e4588632b96c4b904df8888a25baab72d041179495eefa63", 0x6b}], 0x2, 0x0, 0x0, 0x4}, 0x20008081) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/236, 0xec}, 0x10}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x5f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 558.717021ms ago: executing program 3 (id=1311): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x256b5c06d61fe660, 0x0, 0x5}}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="925bb68c5eb20f124884c51a84722c1134881932d90f5986e0158d033974fcc1990a334a0ead1aff9c72b90996402316ebf385d08b56aca0dd9d7554e51b1af00d9b4c021c157ac6bb0759373af59ab6c9e6ce1209050c16621195f51fd0595199df0c641b4705f3753ec25f5ec3250bfdafb6cb945cd534ec8bde5098c01909e6dc8b4cf590861864c888e97852dd46001f013ef59aa079a68ce027eba94d9b", 0xa0}, 0x1, 0x0, 0x0, 0xb9fb632c8619d8b9}, 0xee) close(r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x1f, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) (fail_nth: 10) 505.594304ms ago: executing program 4 (id=1312): sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000000003"], 0x114}], 0x1}, 0x0) 318.862542ms ago: executing program 0 (id=1313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd700279dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r1) (fail_nth: 13) 195.106497ms ago: executing program 2 (id=1314): socket(0x2b, 0x1, 0x1) syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "3571a6", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x2c}]}}}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) 0s ago: executing program 2 (id=1315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x6e}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x5, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x10, 0x3, 0x74000000}}) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x147e, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/132, 0x84}, {0x0}], 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="030000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0x4}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002400200029bd70000600040000000000060066da112edc3c489223f9f72a8c80"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40088c1) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000040122000b00000001000000", @ANYRES32, @ANYBLOB="00000000000000000000cab877ff2c86f35530270900ff67fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r0}, 0x38) kernel console output (not intermixed with test programs): of int in max_burst socket option. [ 129.533042][ T7785] Use struct sctp_assoc_value instead [ 129.567874][ T7779] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 129.593014][ T7779] veth0_vlan: left promiscuous mode [ 129.603786][ T7779] veth0_vlan: entered promiscuous mode [ 129.611644][ T7779] team0: Device veth0_vlan failed to register rx_handler [ 129.631756][ T7785] netlink: 'syz.2.643': attribute type 10 has an invalid length. [ 129.642394][ T7785] veth0_vlan: left promiscuous mode [ 129.649696][ T7785] veth0_vlan: entered promiscuous mode [ 129.756599][ T7785] team0: Device veth0_vlan failed to register rx_handler [ 130.501398][ T7797] tipc: Enabling of bearer rejected, failed to enable media [ 130.529963][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 130.634055][ T7805] sctp: [Deprecated]: syz.0.651 (pid 7805) Use of int in max_burst socket option. [ 130.634055][ T7805] Use struct sctp_assoc_value instead [ 130.657531][ T7805] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 130.666347][ T7805] veth0_vlan: left promiscuous mode [ 130.673079][ T7805] veth0_vlan: entered promiscuous mode [ 130.679724][ T7805] team0: Device veth0_vlan failed to register rx_handler [ 130.779024][ T7809] netlink: 1136 bytes leftover after parsing attributes in process `syz.4.653'. [ 130.809129][ T7811] netlink: 7596 bytes leftover after parsing attributes in process `syz.1.654'. [ 131.104865][ T7818] netlink: 'syz.2.656': attribute type 10 has an invalid length. [ 131.128393][ T7818] team0: Device veth1_macvtap failed to register rx_handler [ 131.303362][ T7822] sctp: [Deprecated]: syz.1.660 (pid 7822) Use of int in max_burst socket option. [ 131.303362][ T7822] Use struct sctp_assoc_value instead [ 131.353889][ T7822] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 131.362416][ T7822] veth0_vlan: left promiscuous mode [ 131.369995][ T7822] veth0_vlan: entered promiscuous mode [ 131.382175][ T7822] team0: Device veth0_vlan failed to register rx_handler [ 131.669311][ T7824] tipc: Enabling of bearer rejected, failed to enable media [ 131.733184][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 131.770771][ T7831] sctp: [Deprecated]: syz.0.662 (pid 7831) Use of int in max_burst socket option. [ 131.770771][ T7831] Use struct sctp_assoc_value instead [ 131.800807][ T7831] netlink: 'syz.0.662': attribute type 10 has an invalid length. [ 131.809129][ T7831] veth0_vlan: left promiscuous mode [ 131.818896][ T7831] veth0_vlan: entered promiscuous mode [ 131.828038][ T7831] team0: Device veth0_vlan failed to register rx_handler [ 132.271867][ T7839] tipc: Enabling of bearer rejected, failed to enable media [ 132.315924][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 132.396180][ T7847] netlink: 300 bytes leftover after parsing attributes in process `syz.1.669'. [ 132.501514][ T7850] netlink: 7596 bytes leftover after parsing attributes in process `syz.2.671'. [ 132.811732][ T7861] sctp: [Deprecated]: syz.3.673 (pid 7861) Use of int in max_burst socket option. [ 132.811732][ T7861] Use struct sctp_assoc_value instead [ 132.863916][ T7863] sctp: [Deprecated]: syz.0.682 (pid 7863) Use of int in max_burst socket option. [ 132.863916][ T7863] Use struct sctp_assoc_value instead [ 132.902656][ T7861] netlink: 'syz.3.673': attribute type 10 has an invalid length. [ 132.910926][ T7861] veth0_vlan: left promiscuous mode [ 132.919029][ T7861] veth0_vlan: entered promiscuous mode [ 132.935267][ T7861] team0: Device veth0_vlan failed to register rx_handler [ 133.007710][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.014259][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.073591][ T7863] netlink: 'syz.0.682': attribute type 10 has an invalid length. [ 133.207974][ T7863] veth0_vlan: left promiscuous mode [ 133.325596][ T7863] veth0_vlan: entered promiscuous mode [ 133.356428][ T7868] netlink: 'syz.4.675': attribute type 10 has an invalid length. [ 133.366530][ T7863] team0: Device veth0_vlan failed to register rx_handler [ 133.381487][ T7868] team0: Device veth1_macvtap failed to register rx_handler [ 133.676561][ T7875] tipc: Enabling of bearer rejected, failed to enable media [ 133.698274][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 133.835738][ T7886] sctp: [Deprecated]: syz.0.679 (pid 7886) Use of int in max_burst socket option. [ 133.835738][ T7886] Use struct sctp_assoc_value instead [ 133.892298][ T7887] tipc: Enabling of bearer rejected, failed to enable media [ 133.906654][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 134.016572][ T7886] veth0_vlan: left promiscuous mode [ 134.104208][ T7886] veth0_vlan: entered promiscuous mode [ 134.154591][ T7886] team0: Device veth0_vlan failed to register rx_handler [ 134.361527][ T7899] netlink: 208 bytes leftover after parsing attributes in process `syz.3.686'. [ 134.858651][ T7918] sctp: [Deprecated]: syz.4.691 (pid 7918) Use of int in max_burst socket option. [ 134.858651][ T7918] Use struct sctp_assoc_value instead [ 134.896172][ T7919] sctp: [Deprecated]: syz.2.690 (pid 7919) Use of int in max_burst socket option. [ 134.896172][ T7919] Use struct sctp_assoc_value instead [ 134.991530][ T7919] validate_nla: 1 callbacks suppressed [ 134.991548][ T7919] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 135.011415][ T7919] veth0_vlan: left promiscuous mode [ 135.024714][ T7918] netlink: 'syz.4.691': attribute type 10 has an invalid length. [ 135.026672][ T7919] veth0_vlan: entered promiscuous mode [ 135.054736][ T7919] team0: Device veth0_vlan failed to register rx_handler [ 135.196646][ T7918] veth0_vlan: left promiscuous mode [ 135.203602][ T7918] veth0_vlan: entered promiscuous mode [ 135.212124][ T7918] team0: Device veth0_vlan failed to register rx_handler [ 135.412035][ T7927] tipc: Enabling of bearer rejected, failed to enable media [ 135.455349][ T7931] netlink: 'syz.0.697': attribute type 10 has an invalid length. [ 135.467863][ T7931] team0: Device veth1_macvtap failed to register rx_handler [ 135.598524][ T7934] tipc: Enabling of bearer rejected, failed to enable media [ 135.610300][ T7934] __nla_validate_parse: 1 callbacks suppressed [ 135.610315][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 136.013045][ T7950] sctp: [Deprecated]: syz.3.703 (pid 7950) Use of int in max_burst socket option. [ 136.013045][ T7950] Use struct sctp_assoc_value instead [ 136.045903][ T7950] netlink: 'syz.3.703': attribute type 10 has an invalid length. [ 136.054637][ T7950] veth0_vlan: left promiscuous mode [ 136.061869][ T7950] veth0_vlan: entered promiscuous mode [ 136.071538][ T7950] team0: Device veth0_vlan failed to register rx_handler [ 136.718334][ T7967] tipc: Enabling of bearer rejected, failed to enable media [ 136.824831][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 136.964206][ T7973] sctp: [Deprecated]: syz.4.712 (pid 7973) Use of int in max_burst socket option. [ 136.964206][ T7973] Use struct sctp_assoc_value instead [ 136.997326][ T7973] netlink: 'syz.4.712': attribute type 10 has an invalid length. [ 137.008131][ T7973] veth0_vlan: left promiscuous mode [ 137.019504][ T7973] veth0_vlan: entered promiscuous mode [ 137.028540][ T7973] team0: Device veth0_vlan failed to register rx_handler [ 137.304630][ T7989] netlink: 'syz.3.716': attribute type 10 has an invalid length. [ 137.343632][ T7989] team0: Device veth1_macvtap failed to register rx_handler [ 137.374375][ T7983] tipc: Enabling of bearer rejected, failed to enable media [ 137.435473][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 138.002507][ T8011] tipc: Enabling of bearer rejected, failed to enable media [ 138.055349][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 138.077340][ T8013] sctp: [Deprecated]: syz.2.725 (pid 8013) Use of int in max_burst socket option. [ 138.077340][ T8013] Use struct sctp_assoc_value instead [ 138.181906][ T8013] netlink: 'syz.2.725': attribute type 10 has an invalid length. [ 138.226175][ T8013] veth0_vlan: left promiscuous mode [ 138.265606][ T8013] veth0_vlan: entered promiscuous mode [ 138.404555][ T8013] team0: Device veth0_vlan failed to register rx_handler [ 138.639374][ T8025] x_tables: duplicate underflow at hook 2 [ 139.047344][ T8033] sctp: [Deprecated]: syz.0.733 (pid 8033) Use of int in max_burst socket option. [ 139.047344][ T8033] Use struct sctp_assoc_value instead [ 139.080411][ T8033] netlink: 'syz.0.733': attribute type 10 has an invalid length. [ 139.088771][ T8033] veth0_vlan: left promiscuous mode [ 139.094905][ T8033] veth0_vlan: entered promiscuous mode [ 139.140402][ T8033] team0: Device veth0_vlan failed to register rx_handler [ 139.597359][ T8047] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 139.621643][ T8047] team0: Device veth1_macvtap failed to register rx_handler [ 139.781077][ T8052] tipc: Enabling of bearer rejected, failed to enable media [ 139.796928][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 139.836398][ T8055] netlink: 104 bytes leftover after parsing attributes in process `syz.1.741'. [ 140.216454][ T8071] FAULT_INJECTION: forcing a failure. [ 140.216454][ T8071] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.256049][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.1.748 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 140.256073][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.256086][ T8071] Call Trace: [ 140.256092][ T8071] [ 140.256099][ T8071] dump_stack_lvl+0x241/0x360 [ 140.256132][ T8071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.256149][ T8071] ? __pfx__printk+0x10/0x10 [ 140.256171][ T8071] ? snprintf+0xda/0x120 [ 140.256196][ T8071] should_fail_ex+0x40a/0x550 [ 140.256222][ T8071] _copy_to_user+0x31/0xb0 [ 140.256245][ T8071] simple_read_from_buffer+0xca/0x150 [ 140.256269][ T8071] proc_fail_nth_read+0x1e9/0x250 [ 140.256307][ T8071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.256331][ T8071] ? rw_verify_area+0x243/0x630 [ 140.256347][ T8071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.256368][ T8071] vfs_read+0x1f8/0xb40 [ 140.256385][ T8071] ? do_sock_setsockopt+0x3e2/0x720 [ 140.256403][ T8071] ? do_sock_setsockopt+0x3e2/0x720 [ 140.256419][ T8071] ? __pfx_vfs_read+0x10/0x10 [ 140.256436][ T8071] ? __pfx_packet_setsockopt+0x10/0x10 [ 140.256455][ T8071] ? do_sock_setsockopt+0x3e2/0x720 [ 140.256476][ T8071] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 140.256499][ T8071] ksys_read+0x18f/0x2b0 [ 140.256518][ T8071] ? __pfx_ksys_read+0x10/0x10 [ 140.256535][ T8071] ? do_syscall_64+0x100/0x230 [ 140.256556][ T8071] ? do_syscall_64+0xb6/0x230 [ 140.256576][ T8071] do_syscall_64+0xf3/0x230 [ 140.256594][ T8071] ? clear_bhb_loop+0x35/0x90 [ 140.256617][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.256640][ T8071] RIP: 0033:0x7f142a18bb7c [ 140.256658][ T8071] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.256670][ T8071] RSP: 002b:00007f142b026030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.256694][ T8071] RAX: ffffffffffffffda RBX: 00007f142a3a5fa0 RCX: 00007f142a18bb7c [ 140.256705][ T8071] RDX: 000000000000000f RSI: 00007f142b0260a0 RDI: 0000000000000004 [ 140.256715][ T8071] RBP: 00007f142b026090 R08: 0000000000000000 R09: 0000000000000000 [ 140.256725][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.256734][ T8071] R13: 0000000000000000 R14: 00007f142a3a5fa0 R15: 00007fff7b881dc8 [ 140.256760][ T8071] [ 140.686134][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 140.737780][ T8084] netlink: 52 bytes leftover after parsing attributes in process `syz.1.753'. [ 140.752635][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.752'. [ 140.955621][ T8086] netlink: 'syz.2.754': attribute type 29 has an invalid length. [ 141.000468][ T8093] sctp: [Deprecated]: syz.3.755 (pid 8093) Use of int in max_burst socket option. [ 141.000468][ T8093] Use struct sctp_assoc_value instead [ 141.060382][ T8097] netlink: 'syz.3.755': attribute type 10 has an invalid length. [ 141.086938][ T8091] tipc: Enabling of bearer rejected, failed to enable media [ 141.096824][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 141.113199][ T8097] veth0_vlan: left promiscuous mode [ 141.153856][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.758'. [ 141.163912][ T8097] veth0_vlan: entered promiscuous mode [ 141.187595][ T8097] team0: Device veth0_vlan failed to register rx_handler [ 141.307473][ T8104] bridge_slave_0: left allmulticast mode [ 141.320630][ T8104] bridge_slave_0: left promiscuous mode [ 141.328476][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.360277][ T8104] bridge_slave_1: left allmulticast mode [ 141.368038][ T8104] bridge_slave_1: left promiscuous mode [ 141.374679][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.390711][ T8104] bond0: (slave bond_slave_0): Releasing backup interface [ 141.403567][ T8104] bond0: (slave bond_slave_1): Releasing backup interface [ 141.437692][ T8104] team0: Port device team_slave_0 removed [ 141.459886][ T8104] team0: Port device team_slave_1 removed [ 141.514226][ T8119] netlink: 'syz.1.764': attribute type 10 has an invalid length. [ 141.562041][ T8119] team0: Device veth1_macvtap failed to register rx_handler [ 141.611656][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 142.091370][ T8144] tipc: Enabling of bearer rejected, failed to enable media [ 142.101318][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 142.412366][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'. [ 142.534999][ T8163] FAULT_INJECTION: forcing a failure. [ 142.534999][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 142.593864][ T8163] CPU: 1 UID: 0 PID: 8163 Comm: syz.4.779 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 142.593887][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.593897][ T8163] Call Trace: [ 142.593903][ T8163] [ 142.593910][ T8163] dump_stack_lvl+0x241/0x360 [ 142.593936][ T8163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.593954][ T8163] ? __pfx__printk+0x10/0x10 [ 142.593972][ T8163] ? kmem_cache_alloc_noprof+0x48/0x380 [ 142.593995][ T8163] ? __pfx___might_resched+0x10/0x10 [ 142.594020][ T8163] should_fail_ex+0x40a/0x550 [ 142.594047][ T8163] should_failslab+0xac/0x100 [ 142.594067][ T8163] ? alloc_empty_file+0x9e/0x1d0 [ 142.594086][ T8163] kmem_cache_alloc_noprof+0x70/0x380 [ 142.594110][ T8163] alloc_empty_file+0x9e/0x1d0 [ 142.594130][ T8163] alloc_file_pseudo+0x204/0x320 [ 142.594156][ T8163] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 142.594176][ T8163] ? _raw_spin_unlock+0x28/0x50 [ 142.594199][ T8163] sock_alloc_file+0xb7/0x2e0 [ 142.594219][ T8163] __sys_socket+0x1dd/0x3c0 [ 142.594247][ T8163] ? __pfx___sys_socket+0x10/0x10 [ 142.594270][ T8163] ? rcu_is_watching+0x15/0xb0 [ 142.594291][ T8163] __x64_sys_socket+0x7a/0x90 [ 142.594310][ T8163] do_syscall_64+0xf3/0x230 [ 142.594327][ T8163] ? clear_bhb_loop+0x35/0x90 [ 142.594349][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.594367][ T8163] RIP: 0033:0x7f2f41f8d169 [ 142.594381][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.594392][ T8163] RSP: 002b:00007f2f42e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 142.594408][ T8163] RAX: ffffffffffffffda RBX: 00007f2f421a5fa0 RCX: 00007f2f41f8d169 [ 142.594418][ T8163] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 142.594427][ T8163] RBP: 00007f2f42e33090 R08: 0000000000000000 R09: 0000000000000000 [ 142.594435][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.594444][ T8163] R13: 0000000000000000 R14: 00007f2f421a5fa0 R15: 00007ffd035d12e8 [ 142.594469][ T8163] [ 142.808668][ T8168] sctp: [Deprecated]: syz.0.780 (pid 8168) Use of int in max_burst socket option. [ 142.808668][ T8168] Use struct sctp_assoc_value instead [ 142.868978][ T8167] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 142.924857][ T8171] FAULT_INJECTION: forcing a failure. [ 142.924857][ T8171] name failslab, interval 1, probability 0, space 0, times 0 [ 142.938645][ T8171] CPU: 1 UID: 0 PID: 8171 Comm: syz.4.784 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 142.938667][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.938676][ T8171] Call Trace: [ 142.938682][ T8171] [ 142.938689][ T8171] dump_stack_lvl+0x241/0x360 [ 142.938715][ T8171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.938733][ T8171] ? __pfx__printk+0x10/0x10 [ 142.938752][ T8171] ? __kmalloc_cache_noprof+0x48/0x390 [ 142.938774][ T8171] ? __pfx___might_resched+0x10/0x10 [ 142.938793][ T8171] ? dev_add_physical_location+0x119/0x460 [ 142.938819][ T8171] should_fail_ex+0x40a/0x550 [ 142.938845][ T8171] should_failslab+0xac/0x100 [ 142.938867][ T8171] __kmalloc_cache_noprof+0x70/0x390 [ 142.938886][ T8171] ? kobject_uevent_env+0x28b/0x8e0 [ 142.938909][ T8171] ? __pfx_dev_uevent_name+0x10/0x10 [ 142.938926][ T8171] kobject_uevent_env+0x28b/0x8e0 [ 142.938944][ T8171] ? bus_add_device+0xde/0x460 [ 142.938969][ T8171] device_add+0x63b/0xbf0 [ 142.938996][ T8171] wakeup_source_sysfs_add+0x1aa/0x270 [ 142.939021][ T8171] wakeup_source_register+0x171/0x250 [ 142.939045][ T8171] ep_insert+0xd99/0x1ab0 [ 142.939077][ T8171] ? __pfx_ep_insert+0x10/0x10 [ 142.939107][ T8171] ? bpf_lsm_capable+0x9/0x10 [ 142.939136][ T8171] do_epoll_ctl+0x8bc/0xf80 [ 142.939172][ T8171] __x64_sys_epoll_ctl+0x161/0x1a0 [ 142.939193][ T8171] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 142.939213][ T8171] ? do_syscall_64+0x100/0x230 [ 142.939234][ T8171] ? do_syscall_64+0xb6/0x230 [ 142.939254][ T8171] do_syscall_64+0xf3/0x230 [ 142.939272][ T8171] ? clear_bhb_loop+0x35/0x90 [ 142.939295][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.939313][ T8171] RIP: 0033:0x7f2f41f8d169 [ 142.939328][ T8171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.939341][ T8171] RSP: 002b:00007f2f42e33038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 142.939358][ T8171] RAX: ffffffffffffffda RBX: 00007f2f421a5fa0 RCX: 00007f2f41f8d169 [ 142.939370][ T8171] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 142.939379][ T8171] RBP: 00007f2f42e33090 R08: 0000000000000000 R09: 0000000000000000 [ 142.939388][ T8171] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000002 [ 142.939398][ T8171] R13: 0000000000000000 R14: 00007f2f421a5fa0 R15: 00007ffd035d12e8 [ 142.939424][ T8171] [ 143.210161][ T8167] veth0_vlan: left promiscuous mode [ 143.216674][ T8167] veth0_vlan: entered promiscuous mode [ 143.226702][ T8167] team0: Device veth0_vlan failed to register rx_handler [ 143.480893][ T8185] netlink: 'syz.4.787': attribute type 10 has an invalid length. [ 143.566981][ T8185] team0: Device veth1_macvtap failed to register rx_handler [ 143.618103][ T8190] tipc: Enabling of bearer rejected, failed to enable media [ 143.659871][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 143.711572][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 143.871826][ T8205] Cannot find add_set index 0 as target [ 144.202390][ T8225] sctp: [Deprecated]: syz.3.799 (pid 8225) Use of int in max_burst socket option. [ 144.202390][ T8225] Use struct sctp_assoc_value instead [ 144.235864][ T8225] netlink: 'syz.3.799': attribute type 10 has an invalid length. [ 144.248652][ T8225] veth0_vlan: left promiscuous mode [ 144.255189][ T8225] veth0_vlan: entered promiscuous mode [ 144.262591][ T8225] team0: Device veth0_vlan failed to register rx_handler [ 144.779782][ T8245] dummy0: entered promiscuous mode [ 144.883382][ T8252] tipc: Enabling of bearer rejected, failed to enable media [ 145.175235][ T8268] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 145.211705][ T8268] team0: Device veth1_macvtap failed to register rx_handler [ 145.221954][ T8270] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.432365][ T8283] netlink: 'syz.1.822': attribute type 9 has an invalid length. [ 145.459048][ T8283] netlink: 'syz.1.822': attribute type 7 has an invalid length. [ 145.474106][ T8283] netlink: 'syz.1.822': attribute type 8 has an invalid length. [ 145.736145][ T8292] __nla_validate_parse: 4 callbacks suppressed [ 145.736164][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 145.816383][ T8294] sctp: [Deprecated]: syz.3.826 (pid 8294) Use of int in max_burst socket option. [ 145.816383][ T8294] Use struct sctp_assoc_value instead [ 145.870200][ T8294] veth0_vlan: left promiscuous mode [ 145.880603][ T8296] FAULT_INJECTION: forcing a failure. [ 145.880603][ T8296] name failslab, interval 1, probability 0, space 0, times 0 [ 145.908548][ T8294] veth0_vlan: entered promiscuous mode [ 145.919684][ T8294] team0: Device veth0_vlan failed to register rx_handler [ 145.998983][ T8296] CPU: 1 UID: 0 PID: 8296 Comm: syz.4.828 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 145.999008][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.999017][ T8296] Call Trace: [ 145.999023][ T8296] [ 145.999031][ T8296] dump_stack_lvl+0x241/0x360 [ 145.999057][ T8296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.999075][ T8296] ? __pfx__printk+0x10/0x10 [ 145.999101][ T8296] ? __kmalloc_cache_noprof+0x48/0x390 [ 145.999124][ T8296] ? __pfx___might_resched+0x10/0x10 [ 145.999150][ T8296] should_fail_ex+0x40a/0x550 [ 145.999177][ T8296] should_failslab+0xac/0x100 [ 145.999199][ T8296] __kmalloc_cache_noprof+0x70/0x390 [ 145.999218][ T8296] ? hash_ipmark_create+0x3b9/0x1190 [ 145.999241][ T8296] hash_ipmark_create+0x3b9/0x1190 [ 145.999264][ T8296] ? __kasan_kmalloc+0x98/0xb0 [ 145.999288][ T8296] ? __pfx_hash_ipmark_create+0x10/0x10 [ 145.999306][ T8296] ip_set_create+0xa78/0x1960 [ 145.999327][ T8296] ? ip_set_create+0x48a/0x1960 [ 145.999349][ T8296] ? __pfx_ip_set_create+0x10/0x10 [ 145.999398][ T8296] ? nfnetlink_rcv_msg+0x225/0x1180 [ 145.999416][ T8296] nfnetlink_rcv_msg+0xbec/0x1180 [ 145.999432][ T8296] ? nfnetlink_rcv_msg+0x225/0x1180 [ 145.999472][ T8296] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 145.999487][ T8296] ? stack_trace_save+0x118/0x1d0 [ 145.999531][ T8296] ? dev_hard_start_xmit+0x27a/0x7d0 [ 145.999548][ T8296] ? __dev_queue_xmit+0x1b73/0x3f40 [ 145.999564][ T8296] ? __netlink_deliver_tap+0x561/0x7f0 [ 145.999583][ T8296] ? netlink_deliver_tap+0x19d/0x1b0 [ 145.999602][ T8296] ? netlink_unicast+0x7c4/0x990 [ 145.999619][ T8296] ? netlink_sendmsg+0x8de/0xcb0 [ 145.999638][ T8296] ? __sock_sendmsg+0x221/0x270 [ 145.999656][ T8296] ? ____sys_sendmsg+0x53a/0x860 [ 145.999671][ T8296] ? __sys_sendmsg+0x269/0x350 [ 145.999702][ T8296] netlink_rcv_skb+0x206/0x480 [ 145.999723][ T8296] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 145.999743][ T8296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.999778][ T8296] ? apparmor_capable+0x13b/0x1b0 [ 145.999798][ T8296] ? bpf_lsm_capable+0x9/0x10 [ 145.999818][ T8296] ? security_capable+0x7e/0x2d0 [ 145.999846][ T8296] nfnetlink_rcv+0x297/0x2ab0 [ 145.999869][ T8296] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 145.999894][ T8296] ? __dev_queue_xmit+0x2f4/0x3f40 [ 145.999914][ T8296] ? __dev_queue_xmit+0x1775/0x3f40 [ 145.999931][ T8296] ? kasan_save_track+0x51/0x80 [ 145.999953][ T8296] ? ____sys_sendmsg+0x53a/0x860 [ 145.999973][ T8296] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 145.999989][ T8296] ? __dev_queue_xmit+0x2f4/0x3f40 [ 146.000011][ T8296] ? __pfx___dev_queue_xmit+0x10/0x10 [ 146.000047][ T8296] ? ref_tracker_free+0x643/0x7e0 [ 146.000063][ T8296] ? __asan_memcpy+0x40/0x70 [ 146.000078][ T8296] ? __pfx_ref_tracker_free+0x10/0x10 [ 146.000104][ T8296] ? __skb_clone+0x5c/0x6c0 [ 146.000137][ T8296] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.000156][ T8296] ? skb_clone+0x240/0x390 [ 146.000173][ T8296] ? __pfx_lock_release+0x10/0x10 [ 146.000196][ T8296] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 146.000227][ T8296] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.000250][ T8296] netlink_unicast+0x7f6/0x990 [ 146.000276][ T8296] ? __pfx_netlink_unicast+0x10/0x10 [ 146.000293][ T8296] ? __virt_addr_valid+0x45f/0x530 [ 146.000309][ T8296] ? __phys_addr_symbol+0x2f/0x70 [ 146.000323][ T8296] ? __check_object_size+0x47a/0x730 [ 146.000348][ T8296] netlink_sendmsg+0x8de/0xcb0 [ 146.000381][ T8296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.000406][ T8296] ? aa_sock_msg_perm+0x91/0x160 [ 146.000434][ T8296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.000452][ T8296] __sock_sendmsg+0x221/0x270 [ 146.000476][ T8296] ____sys_sendmsg+0x53a/0x860 [ 146.000502][ T8296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.000517][ T8296] ? __fget_files+0x2a/0x410 [ 146.000541][ T8296] ? __fget_files+0x2a/0x410 [ 146.000572][ T8296] __sys_sendmsg+0x269/0x350 [ 146.000594][ T8296] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.000625][ T8296] ? do_sys_openat2+0x17a/0x1d0 [ 146.000674][ T8296] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.000698][ T8296] ? do_syscall_64+0x100/0x230 [ 146.000721][ T8296] ? do_syscall_64+0xb6/0x230 [ 146.000742][ T8296] do_syscall_64+0xf3/0x230 [ 146.000760][ T8296] ? clear_bhb_loop+0x35/0x90 [ 146.000785][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.000804][ T8296] RIP: 0033:0x7f2f41f8d169 [ 146.000820][ T8296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.000833][ T8296] RSP: 002b:00007f2f42e33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.000851][ T8296] RAX: ffffffffffffffda RBX: 00007f2f421a5fa0 RCX: 00007f2f41f8d169 [ 146.000862][ T8296] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 146.000873][ T8296] RBP: 00007f2f42e33090 R08: 0000000000000000 R09: 0000000000000000 [ 146.000883][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.000892][ T8296] R13: 0000000000000000 R14: 00007f2f421a5fa0 R15: 00007ffd035d12e8 [ 146.000920][ T8296] [ 146.676910][ T8300] tipc: Enabling of bearer rejected, failed to enable media [ 146.691087][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 146.896932][ T5847] Bluetooth: hci4: link tx timeout [ 146.902326][ T5847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.258693][ T5887] IPVS: starting estimator thread 0... [ 147.319358][ T8340] validate_nla: 1 callbacks suppressed [ 147.319374][ T8340] netlink: 'syz.2.839': attribute type 10 has an invalid length. [ 147.333786][ T8340] team0: Device veth1_macvtap failed to register rx_handler [ 147.364161][ T8335] IPVS: using max 22 ests per chain, 52800 per kthread [ 147.463085][ T8344] tipc: Enabling of bearer rejected, failed to enable media [ 147.478895][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 147.550113][ T8352] sctp: [Deprecated]: syz.4.844 (pid 8352) Use of int in max_burst socket option. [ 147.550113][ T8352] Use struct sctp_assoc_value instead [ 147.572164][ T8352] netlink: 'syz.4.844': attribute type 10 has an invalid length. [ 147.580309][ T8352] veth0_vlan: left promiscuous mode [ 147.587243][ T8352] veth0_vlan: entered promiscuous mode [ 147.603794][ T8352] team0: Device veth0_vlan failed to register rx_handler [ 148.108724][ T8371] 8021q: VLANs not supported on ip6gre0 [ 148.176894][ T29] audit: type=1107 audit(1741332527.980:2): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àï' [ 148.419191][ T8384] FAULT_INJECTION: forcing a failure. [ 148.419191][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 148.432089][ T8384] CPU: 0 UID: 0 PID: 8384 Comm: syz.4.857 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 148.432107][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.432115][ T8384] Call Trace: [ 148.432120][ T8384] [ 148.432126][ T8384] dump_stack_lvl+0x241/0x360 [ 148.432147][ T8384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.432160][ T8384] ? __pfx__printk+0x10/0x10 [ 148.432182][ T8384] should_fail_ex+0x40a/0x550 [ 148.432204][ T8384] should_failslab+0xac/0x100 [ 148.432221][ T8384] ? skb_clone+0x20c/0x390 [ 148.432233][ T8384] kmem_cache_alloc_noprof+0x70/0x380 [ 148.432255][ T8384] skb_clone+0x20c/0x390 [ 148.432266][ T8384] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 148.432286][ T8384] dev_queue_xmit_nit+0x249/0xca0 [ 148.432305][ T8384] ? dev_queue_xmit_nit+0x2b/0xca0 [ 148.432324][ T8384] ? validate_xmit_skb+0x9b8/0xff0 [ 148.432341][ T8384] dev_hard_start_xmit+0x15f/0x7d0 [ 148.432356][ T8384] ? __pfx_validate_xmit_skb+0x10/0x10 [ 148.432377][ T8384] __dev_queue_xmit+0x1b73/0x3f40 [ 148.432390][ T8384] ? kasan_save_track+0x51/0x80 [ 148.432408][ T8384] ? ____sys_sendmsg+0x53a/0x860 [ 148.432425][ T8384] ? __dev_queue_xmit+0x2f4/0x3f40 [ 148.432442][ T8384] ? __pfx___dev_queue_xmit+0x10/0x10 [ 148.432468][ T8384] ? __copy_skb_header+0xa7/0x5a0 [ 148.432482][ T8384] ? __asan_memcpy+0x40/0x70 [ 148.432494][ T8384] ? __skb_clone+0x5c/0x6c0 [ 148.432511][ T8384] ? __skb_clone+0x454/0x6c0 [ 148.432536][ T8384] ? skb_clone+0x240/0x390 [ 148.432557][ T8384] __netlink_deliver_tap+0x561/0x7f0 [ 148.432588][ T8384] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.432614][ T8384] netlink_deliver_tap+0x19d/0x1b0 [ 148.432634][ T8384] netlink_unicast+0x7c4/0x990 [ 148.432660][ T8384] ? __pfx_netlink_unicast+0x10/0x10 [ 148.432673][ T8384] ? __virt_addr_valid+0x45f/0x530 [ 148.432686][ T8384] ? __phys_addr_symbol+0x2f/0x70 [ 148.432697][ T8384] ? __check_object_size+0x47a/0x730 [ 148.432717][ T8384] netlink_sendmsg+0x8de/0xcb0 [ 148.432746][ T8384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.432765][ T8384] ? aa_sock_msg_perm+0x91/0x160 [ 148.432787][ T8384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.432802][ T8384] __sock_sendmsg+0x221/0x270 [ 148.432820][ T8384] ____sys_sendmsg+0x53a/0x860 [ 148.432840][ T8384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.432851][ T8384] ? __fget_files+0x2a/0x410 [ 148.432871][ T8384] ? __fget_files+0x2a/0x410 [ 148.432894][ T8384] __sys_sendmsg+0x269/0x350 [ 148.432911][ T8384] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.432934][ T8384] ? do_sys_openat2+0x17a/0x1d0 [ 148.432972][ T8384] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.432990][ T8384] ? do_syscall_64+0x100/0x230 [ 148.433007][ T8384] ? do_syscall_64+0xb6/0x230 [ 148.433023][ T8384] do_syscall_64+0xf3/0x230 [ 148.433037][ T8384] ? clear_bhb_loop+0x35/0x90 [ 148.433058][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.433076][ T8384] RIP: 0033:0x7f2f41f8d169 [ 148.433088][ T8384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.433098][ T8384] RSP: 002b:00007f2f42e33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.433113][ T8384] RAX: ffffffffffffffda RBX: 00007f2f421a5fa0 RCX: 00007f2f41f8d169 [ 148.433122][ T8384] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 148.433129][ T8384] RBP: 00007f2f42e33090 R08: 0000000000000000 R09: 0000000000000000 [ 148.433137][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.433144][ T8384] R13: 0000000000000000 R14: 00007f2f421a5fa0 R15: 00007ffd035d12e8 [ 148.433165][ T8384] [ 148.916452][ T8386] tipc: Enabling of bearer rejected, failed to enable media [ 148.924433][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 148.930989][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 148.938647][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.089005][ T8401] FAULT_INJECTION: forcing a failure. [ 149.089005][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 149.168101][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'. [ 149.177437][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.4.862 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 149.177457][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.177467][ T8401] Call Trace: [ 149.177472][ T8401] [ 149.177480][ T8401] dump_stack_lvl+0x241/0x360 [ 149.177505][ T8401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.177522][ T8401] ? __pfx__printk+0x10/0x10 [ 149.177550][ T8401] ? __kmalloc_noprof+0xb5/0x4c0 [ 149.177571][ T8401] ? __pfx___might_resched+0x10/0x10 [ 149.177595][ T8401] should_fail_ex+0x40a/0x550 [ 149.177621][ T8401] should_failslab+0xac/0x100 [ 149.177643][ T8401] __kmalloc_noprof+0xdd/0x4c0 [ 149.177663][ T8401] ? bpf_test_init+0xc3/0x160 [ 149.177685][ T8401] bpf_test_init+0xc3/0x160 [ 149.177707][ T8401] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 149.177732][ T8401] ? __pfx_lock_release+0x10/0x10 [ 149.177761][ T8401] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 149.177782][ T8401] ? __fget_files+0x2a/0x410 [ 149.177805][ T8401] ? __fget_files+0x2a/0x410 [ 149.177828][ T8401] ? fput+0x21b/0x290 [ 149.177846][ T8401] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 149.177868][ T8401] bpf_prog_test_run+0x2e4/0x360 [ 149.177893][ T8401] __sys_bpf+0x487/0x820 [ 149.177912][ T8401] ? __pfx___sys_bpf+0x10/0x10 [ 149.177945][ T8401] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 149.177969][ T8401] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.177993][ T8401] ? do_syscall_64+0x100/0x230 [ 149.178014][ T8401] __x64_sys_bpf+0x7c/0x90 [ 149.178033][ T8401] do_syscall_64+0xf3/0x230 [ 149.178050][ T8401] ? clear_bhb_loop+0x35/0x90 [ 149.178072][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.178090][ T8401] RIP: 0033:0x7f2f41f8d169 [ 149.178104][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.178116][ T8401] RSP: 002b:00007f2f42e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.178133][ T8401] RAX: ffffffffffffffda RBX: 00007f2f421a5fa0 RCX: 00007f2f41f8d169 [ 149.178144][ T8401] RDX: 0000000000000050 RSI: 0000400000000000 RDI: 000000000000000a [ 149.178154][ T8401] RBP: 00007f2f42e33090 R08: 0000000000000000 R09: 0000000000000000 [ 149.178164][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.178173][ T8401] R13: 0000000000000000 R14: 00007f2f421a5fa0 R15: 00007ffd035d12e8 [ 149.178197][ T8401] [ 149.437001][ T8407] netlink: 'syz.2.863': attribute type 10 has an invalid length. [ 149.544060][ T8407] team0: Device veth1_macvtap failed to register rx_handler [ 149.562328][ T8409] tipc: Enabled bearer , priority 0 [ 149.592367][ T8393] tipc: Resetting bearer [ 149.670293][ T8419] sctp: [Deprecated]: syz.4.868 (pid 8419) Use of int in max_burst socket option. [ 149.670293][ T8419] Use struct sctp_assoc_value instead [ 149.713555][ T8419] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 150.594181][ T5866] tipc: Node number set to 3758096386 [ 151.601331][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 152.155437][ T8393] tipc: Disabling bearer [ 152.165681][ T8419] veth0_vlan: left promiscuous mode [ 152.172059][ T8419] veth0_vlan: entered promiscuous mode [ 152.179707][ T8419] team0: Device veth0_vlan failed to register rx_handler [ 152.218990][ T8441] tipc: Enabling of bearer rejected, failed to enable media [ 152.574906][ T8466] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 152.591018][ T8467] netlink: 'syz.3.882': attribute type 10 has an invalid length. [ 152.599676][ T8466] netlink: 224 bytes leftover after parsing attributes in process `syz.0.884'. [ 152.614685][ T8467] team0: Device veth1_macvtap failed to register rx_handler [ 152.662251][ T8466] bridge0: entered promiscuous mode [ 152.677291][ T8466] macvlan2: entered promiscuous mode [ 152.691146][ T8466] bridge0: port 3(macvlan2) entered blocking state [ 152.711005][ T8466] bridge0: port 3(macvlan2) entered disabled state [ 152.722507][ T8466] macvlan2: entered allmulticast mode [ 152.736127][ T8466] bridge0: entered allmulticast mode [ 152.744663][ T8466] macvlan2: left allmulticast mode [ 152.750042][ T8466] bridge0: left allmulticast mode [ 152.767345][ T8466] bridge0: left promiscuous mode [ 152.865536][ T8477] FAULT_INJECTION: forcing a failure. [ 152.865536][ T8477] name failslab, interval 1, probability 0, space 0, times 0 [ 152.878311][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.4.889 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 152.878332][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.878341][ T8477] Call Trace: [ 152.878348][ T8477] [ 152.878355][ T8477] dump_stack_lvl+0x241/0x360 [ 152.878380][ T8477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.878398][ T8477] ? __pfx__printk+0x10/0x10 [ 152.878434][ T8477] should_fail_ex+0x40a/0x550 [ 152.878462][ T8477] should_failslab+0xac/0x100 [ 152.878483][ T8477] ? skb_clone+0x20c/0x390 [ 152.878499][ T8477] kmem_cache_alloc_noprof+0x70/0x380 [ 152.878526][ T8477] skb_clone+0x20c/0x390 [ 152.878542][ T8477] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 152.878568][ T8477] dev_queue_xmit_nit+0x249/0xca0 [ 152.878593][ T8477] ? dev_queue_xmit_nit+0x2b/0xca0 [ 152.878616][ T8477] ? validate_xmit_skb+0x9b8/0xff0 [ 152.878639][ T8477] dev_hard_start_xmit+0x15f/0x7d0 [ 152.878658][ T8477] ? __pfx_validate_xmit_skb+0x10/0x10 [ 152.878688][ T8477] __dev_queue_xmit+0x1b73/0x3f40 [ 152.878705][ T8477] ? kasan_save_track+0x51/0x80 [ 152.878729][ T8477] ? ____sys_sendmsg+0x53a/0x860 [ 152.878751][ T8477] ? __dev_queue_xmit+0x2f4/0x3f40 [ 152.878774][ T8477] ? __pfx___dev_queue_xmit+0x10/0x10 [ 152.878809][ T8477] ? __copy_skb_header+0xa7/0x5a0 [ 152.878829][ T8477] ? __asan_memcpy+0x40/0x70 [ 152.878845][ T8477] ? __skb_clone+0x5c/0x6c0 [ 152.878867][ T8477] ? __skb_clone+0x454/0x6c0 [ 152.878893][ T8477] ? skb_clone+0x240/0x390 [ 152.878914][ T8477] __netlink_deliver_tap+0x561/0x7f0 [ 152.878947][ T8477] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.878966][ T8477] netlink_deliver_tap+0x19d/0x1b0 [ 152.878988][ T8477] netlink_unicast+0x7c4/0x990 [ 152.879015][ T8477] ? __pfx_netlink_unicast+0x10/0x10 [ 152.879032][ T8477] ? __virt_addr_valid+0x45f/0x530 [ 152.879049][ T8477] ? __phys_addr_symbol+0x2f/0x70 [ 152.879063][ T8477] ? __check_object_size+0x47a/0x730 [ 152.879088][ T8477] netlink_sendmsg+0x8de/0xcb0 [ 152.879120][ T8477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.879146][ T8477] ? aa_sock_msg_perm+0x91/0x160 [ 152.879174][ T8477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.879193][ T8477] __sock_sendmsg+0x221/0x270 [ 152.879217][ T8477] ____sys_sendmsg+0x53a/0x860 [ 152.879243][ T8477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.879258][ T8477] ? __fget_files+0x2a/0x410 [ 152.879282][ T8477] ? __fget_files+0x2a/0x410 [ 152.879312][ T8477] __sys_sendmsg+0x269/0x350 [ 152.879335][ T8477] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.879366][ T8477] ? do_sys_openat2+0x17a/0x1d0 [ 152.879422][ T8477] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.879447][ T8477] ? do_syscall_64+0x100/0x230 [ 152.879470][ T8477] ? do_syscall_64+0xb6/0x230 [ 152.879491][ T8477] do_syscall_64+0xf3/0x230 [ 152.879510][ T8477] ? clear_bhb_loop+0x35/0x90 [ 152.879534][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.879553][ T8477] RIP: 0033:0x7f2f41f8d169 [ 152.879568][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.879581][ T8477] RSP: 002b:00007f2f42e12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.879598][ T8477] RAX: ffffffffffffffda RBX: 00007f2f421a6080 RCX: 00007f2f41f8d169 [ 152.879609][ T8477] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000007 [ 152.879619][ T8477] RBP: 00007f2f42e12090 R08: 0000000000000000 R09: 0000000000000000 [ 152.879630][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.879640][ T8477] R13: 0000000000000000 R14: 00007f2f421a6080 R15: 00007ffd035d12e8 [ 152.879669][ T8477] [ 153.490158][ T8490] sctp: [Deprecated]: syz.0.891 (pid 8490) Use of int in max_burst socket option. [ 153.490158][ T8490] Use struct sctp_assoc_value instead [ 153.515456][ T8486] tipc: Enabling of bearer rejected, failed to enable media [ 153.525273][ T8490] netlink: 'syz.0.891': attribute type 10 has an invalid length. [ 153.525280][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 153.651576][ T8488] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.660824][ T8488] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.670404][ T8488] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.679680][ T8488] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.693539][ T8490] veth0_vlan: left promiscuous mode [ 153.699516][ T8490] veth0_vlan: entered promiscuous mode [ 153.707846][ T8490] team0: Device veth0_vlan failed to register rx_handler [ 154.081261][ T8515] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 154.093982][ T8515] team0: Device veth1_macvtap failed to register rx_handler [ 154.121691][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 154.320612][ T8524] netlink: 76 bytes leftover after parsing attributes in process `syz.0.906'. [ 154.467431][ T8529] netlink: 76 bytes leftover after parsing attributes in process `syz.0.906'. [ 154.507669][ T8526] tipc: Enabling of bearer rejected, failed to enable media [ 154.518931][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 154.799250][ T8542] netlink: 'syz.3.909': attribute type 2 has an invalid length. [ 155.143589][ T8560] sctp: [Deprecated]: syz.2.916 (pid 8560) Use of int in max_burst socket option. [ 155.143589][ T8560] Use struct sctp_assoc_value instead [ 155.218262][ T8560] netlink: 'syz.2.916': attribute type 10 has an invalid length. [ 155.226299][ T8560] veth0_vlan: left promiscuous mode [ 155.233120][ T8560] veth0_vlan: entered promiscuous mode [ 155.265245][ T8560] team0: Device veth0_vlan failed to register rx_handler [ 155.665739][ T8573] tipc: Enabling of bearer rejected, failed to enable media [ 155.678508][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 155.898149][ T8584] netlink: 'syz.0.925': attribute type 10 has an invalid length. [ 155.907079][ T8584] team0: Device veth1_macvtap failed to register rx_handler [ 156.026116][ T8591] FAULT_INJECTION: forcing a failure. [ 156.026116][ T8591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.044317][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.1.930 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 156.044341][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.044350][ T8591] Call Trace: [ 156.044356][ T8591] [ 156.044364][ T8591] dump_stack_lvl+0x241/0x360 [ 156.044389][ T8591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.044407][ T8591] ? __pfx__printk+0x10/0x10 [ 156.044426][ T8591] ? __pfx_lock_release+0x10/0x10 [ 156.044457][ T8591] should_fail_ex+0x40a/0x550 [ 156.044485][ T8591] _copy_from_user+0x2d/0xb0 [ 156.044505][ T8591] sk_getsockopt+0x1cb/0x31f0 [ 156.044530][ T8591] ? __pfx_sk_getsockopt+0x10/0x10 [ 156.044566][ T8591] ? __pfx___might_resched+0x10/0x10 [ 156.044587][ T8591] ? __might_fault+0xaa/0x120 [ 156.044604][ T8591] ? __pfx_lock_release+0x10/0x10 [ 156.044637][ T8591] ? __might_fault+0xaa/0x120 [ 156.044652][ T8591] ? __might_fault+0xc6/0x120 [ 156.044672][ T8591] do_sock_getsockopt+0x29f/0x740 [ 156.044696][ T8591] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 156.044711][ T8591] ? __fget_files+0x2a/0x410 [ 156.044734][ T8591] ? __fget_files+0x395/0x410 [ 156.044752][ T8591] ? __fget_files+0x2a/0x410 [ 156.044780][ T8591] __x64_sys_getsockopt+0x2a1/0x370 [ 156.044804][ T8591] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 156.044823][ T8591] ? do_syscall_64+0x100/0x230 [ 156.044851][ T8591] ? do_syscall_64+0xb6/0x230 [ 156.044871][ T8591] do_syscall_64+0xf3/0x230 [ 156.044889][ T8591] ? clear_bhb_loop+0x35/0x90 [ 156.044912][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.044932][ T8591] RIP: 0033:0x7f142a18d169 [ 156.044947][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.044961][ T8591] RSP: 002b:00007f142b026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 156.044979][ T8591] RAX: ffffffffffffffda RBX: 00007f142a3a5fa0 RCX: 00007f142a18d169 [ 156.044991][ T8591] RDX: 0000000000000023 RSI: 0000000000000001 RDI: 0000000000000003 [ 156.045001][ T8591] RBP: 00007f142b026090 R08: 00004000000002c0 R09: 0000000000000000 [ 156.045012][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.045022][ T8591] R13: 0000000000000000 R14: 00007f142a3a5fa0 R15: 00007fff7b881dc8 [ 156.045049][ T8591] [ 156.753516][ T8607] tipc: Enabled bearer , priority 0 [ 156.776912][ T8602] tipc: Resetting bearer [ 156.839545][ T8618] ax25_connect(): syz.2.938 uses autobind, please contact jreuter@yaina.de [ 156.910608][ T8620] sctp: [Deprecated]: syz.0.940 (pid 8620) Use of int in max_burst socket option. [ 156.910608][ T8620] Use struct sctp_assoc_value instead [ 156.944038][ T8620] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 156.953157][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 157.772852][ T5887] tipc: Node number set to 3758096386 [ 157.809680][ T8637] Bluetooth: MGMT ver 1.23 [ 157.816549][ T8637] FAULT_INJECTION: forcing a failure. [ 157.816549][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 157.832368][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.2.946 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 157.832391][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.832401][ T8637] Call Trace: [ 157.832407][ T8637] [ 157.832414][ T8637] dump_stack_lvl+0x241/0x360 [ 157.832440][ T8637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.832458][ T8637] ? __pfx__printk+0x10/0x10 [ 157.832477][ T8637] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 157.832500][ T8637] ? __pfx___might_resched+0x10/0x10 [ 157.832531][ T8637] should_fail_ex+0x40a/0x550 [ 157.832558][ T8637] should_failslab+0xac/0x100 [ 157.832581][ T8637] kmem_cache_alloc_node_noprof+0x77/0x380 [ 157.832601][ T8637] ? __alloc_skb+0x1c3/0x440 [ 157.832621][ T8637] __alloc_skb+0x1c3/0x440 [ 157.832642][ T8637] ? __pfx___alloc_skb+0x10/0x10 [ 157.832673][ T8637] ? __asan_memset+0x23/0x50 [ 157.832688][ T8637] ? lockdep_init_map_type+0xa1/0x910 [ 157.832715][ T8637] mgmt_cmd_status+0x42/0x4d0 [ 157.832743][ T8637] set_external_config+0x268/0x710 [ 157.832766][ T8637] ? __pfx_set_external_config+0x10/0x10 [ 157.832787][ T8637] ? mgmt_init_hdev+0x444/0x470 [ 157.832810][ T8637] hci_mgmt_cmd+0xa1f/0xf10 [ 157.832843][ T8637] hci_sock_sendmsg+0x7b8/0x11c0 [ 157.832867][ T8637] ? __pfx_aa_sk_perm+0x10/0x10 [ 157.832888][ T8637] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 157.832906][ T8637] ? __pfx_aa_file_perm+0x10/0x10 [ 157.832920][ T8637] ? aa_sock_msg_perm+0x91/0x160 [ 157.832948][ T8637] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 157.832964][ T8637] __sock_sendmsg+0x221/0x270 [ 157.832988][ T8637] sock_write_iter+0x2d7/0x3f0 [ 157.833011][ T8637] ? __pfx_sock_write_iter+0x10/0x10 [ 157.833042][ T8637] ? bpf_lsm_file_permission+0x9/0x10 [ 157.833072][ T8637] vfs_write+0xacf/0xd10 [ 157.833093][ T8637] ? __pfx_sock_write_iter+0x10/0x10 [ 157.833113][ T8637] ? __pfx_vfs_write+0x10/0x10 [ 157.833126][ T8637] ? do_sys_openat2+0x17a/0x1d0 [ 157.833151][ T8637] ? __fget_files+0x2a/0x410 [ 157.833175][ T8637] ? __fget_files+0x2a/0x410 [ 157.833205][ T8637] ksys_write+0x18f/0x2b0 [ 157.833224][ T8637] ? __pfx_ksys_write+0x10/0x10 [ 157.833242][ T8637] ? do_syscall_64+0x100/0x230 [ 157.833264][ T8637] ? do_syscall_64+0xb6/0x230 [ 157.833285][ T8637] do_syscall_64+0xf3/0x230 [ 157.833303][ T8637] ? clear_bhb_loop+0x35/0x90 [ 157.833327][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.833348][ T8637] RIP: 0033:0x7f9c37d8d169 [ 157.833363][ T8637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.833376][ T8637] RSP: 002b:00007f9c38c43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.833394][ T8637] RAX: ffffffffffffffda RBX: 00007f9c37fa5fa0 RCX: 00007f9c37d8d169 [ 157.833406][ T8637] RDX: 0000000000000007 RSI: 0000400000000000 RDI: 0000000000000004 [ 157.833416][ T8637] RBP: 00007f9c38c43090 R08: 0000000000000000 R09: 0000000000000000 [ 157.833426][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.833436][ T8637] R13: 0000000000000000 R14: 00007f9c37fa5fa0 R15: 00007ffdca032c48 [ 157.833464][ T8637] [ 158.669054][ T8602] tipc: Disabling bearer [ 158.684415][ T8611] tipc: Enabling of bearer rejected, failed to enable media [ 158.696035][ T8620] veth0_vlan: left promiscuous mode [ 158.701988][ T8620] veth0_vlan: entered promiscuous mode [ 158.717229][ T8620] team0: Device veth0_vlan failed to register rx_handler [ 158.747069][ T8623] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 159.002200][ T8656] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 159.027024][ T8656] team0: Device veth1_macvtap failed to register rx_handler [ 159.267999][ T8663] tipc: Enabling of bearer rejected, failed to enable media [ 159.280249][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 159.403910][ T8674] sctp: [Deprecated]: syz.3.957 (pid 8674) Use of int in max_burst socket option. [ 159.403910][ T8674] Use struct sctp_assoc_value instead [ 159.436322][ T8674] netlink: 'syz.3.957': attribute type 10 has an invalid length. [ 159.445173][ T8674] veth0_vlan: left promiscuous mode [ 159.455650][ T8674] veth0_vlan: entered promiscuous mode [ 159.467404][ T8674] team0: Device veth0_vlan failed to register rx_handler [ 159.487426][ T8677] sctp: [Deprecated]: syz.1.958 (pid 8677) Use of int in max_burst socket option. [ 159.487426][ T8677] Use struct sctp_assoc_value instead [ 159.513954][ T8677] netlink: 'syz.1.958': attribute type 10 has an invalid length. [ 159.532077][ T8677] veth0_vlan: left promiscuous mode [ 159.556637][ T8677] veth0_vlan: entered promiscuous mode [ 159.667709][ T8677] team0: Device veth0_vlan failed to register rx_handler [ 159.756899][ T8682] sctp: [Deprecated]: syz.4.960 (pid 8682) Use of int in max_burst socket option. [ 159.756899][ T8682] Use struct sctp_assoc_value instead [ 159.935798][ T8682] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 159.994010][ T8686] tipc: Enabling of bearer rejected, failed to enable media [ 160.035416][ T8682] veth0_vlan: left promiscuous mode [ 160.056205][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 160.082405][ T8682] veth0_vlan: entered promiscuous mode [ 160.096914][ T8682] team0: Device veth0_vlan failed to register rx_handler [ 160.182281][ T8692] sctp: [Deprecated]: syz.2.962 (pid 8692) Use of int in max_burst socket option. [ 160.182281][ T8692] Use struct sctp_assoc_value instead [ 160.278767][ T8692] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 160.326700][ T8692] veth0_vlan: left promiscuous mode [ 160.332855][ T8692] veth0_vlan: entered promiscuous mode [ 160.346915][ T8692] team0: Device veth0_vlan failed to register rx_handler [ 160.427127][ T8698] sctp: [Deprecated]: syz.0.963 (pid 8698) Use of int in max_burst socket option. [ 160.427127][ T8698] Use struct sctp_assoc_value instead [ 160.469747][ T8698] netlink: 'syz.0.963': attribute type 10 has an invalid length. [ 160.503012][ T8698] veth0_vlan: left promiscuous mode [ 160.544920][ T8698] veth0_vlan: entered promiscuous mode [ 160.593611][ T8698] team0: Device veth0_vlan failed to register rx_handler [ 160.737351][ T8707] sctp: [Deprecated]: syz.3.966 (pid 8707) Use of int in max_burst socket option. [ 160.737351][ T8707] Use struct sctp_assoc_value instead [ 160.781238][ T8707] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 160.791059][ T8707] veth0_vlan: left promiscuous mode [ 160.806429][ T8707] veth0_vlan: entered promiscuous mode [ 160.815725][ T8707] team0: Device veth0_vlan failed to register rx_handler [ 161.132922][ T8716] tipc: Enabling of bearer rejected, failed to enable media [ 161.157590][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 161.512808][ T8728] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 161.525923][ T8725] tipc: Enabling of bearer rejected, failed to enable media [ 161.537025][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 161.560469][ T8727] tipc: Enabling of bearer rejected, failed to enable media [ 161.571846][ T8728] team0: Device veth1_macvtap failed to register rx_handler [ 161.631145][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.975'. [ 161.762180][ T8740] sctp: [Deprecated]: syz.3.976 (pid 8740) Use of int in max_burst socket option. [ 161.762180][ T8740] Use struct sctp_assoc_value instead [ 161.868023][ T8740] netlink: 'syz.3.976': attribute type 10 has an invalid length. [ 161.890753][ T8740] veth0_vlan: left promiscuous mode [ 161.897398][ T8740] veth0_vlan: entered promiscuous mode [ 161.905932][ T8740] team0: Device veth0_vlan failed to register rx_handler [ 162.042910][ T8743] tipc: Enabling of bearer rejected, failed to enable media [ 162.071046][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 162.430118][ T8759] sctp: [Deprecated]: syz.4.982 (pid 8759) Use of int in max_burst socket option. [ 162.430118][ T8759] Use struct sctp_assoc_value instead [ 162.506629][ T8761] sctp: [Deprecated]: syz.1.984 (pid 8761) Use of int in max_burst socket option. [ 162.506629][ T8761] Use struct sctp_assoc_value instead [ 162.514355][ T8759] netlink: 'syz.4.982': attribute type 10 has an invalid length. [ 162.529506][ T8759] veth0_vlan: left promiscuous mode [ 162.535988][ T8759] veth0_vlan: entered promiscuous mode [ 162.550574][ T8759] team0: Device veth0_vlan failed to register rx_handler [ 162.568845][ T8761] veth0_vlan: left promiscuous mode [ 162.604597][ T8761] veth0_vlan: entered promiscuous mode [ 162.846806][ T8761] team0: Device veth0_vlan failed to register rx_handler [ 163.085652][ T8773] sctp: [Deprecated]: syz.2.986 (pid 8773) Use of int in max_burst socket option. [ 163.085652][ T8773] Use struct sctp_assoc_value instead [ 163.120820][ T8773] veth0_vlan: left promiscuous mode [ 163.128148][ T8773] veth0_vlan: entered promiscuous mode [ 163.136793][ T8773] team0: Device veth0_vlan failed to register rx_handler [ 163.519474][ T8775] tipc: Enabling of bearer rejected, failed to enable media [ 163.537373][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 163.949366][ T8784] tipc: Enabling of bearer rejected, failed to enable media [ 163.983556][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 164.054785][ T8786] tipc: Enabling of bearer rejected, failed to enable media [ 164.094880][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 164.158927][ T8797] validate_nla: 2 callbacks suppressed [ 164.158943][ T8797] netlink: 'syz.4.993': attribute type 10 has an invalid length. [ 164.182260][ T8797] team0: Device veth1_macvtap failed to register rx_handler [ 164.500845][ T8807] tipc: Enabling of bearer rejected, failed to enable media [ 164.511511][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 164.592469][ T8815] sctp: [Deprecated]: syz.0.1000 (pid 8815) Use of int in max_burst socket option. [ 164.592469][ T8815] Use struct sctp_assoc_value instead [ 164.618851][ T8815] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 164.628996][ T8815] veth0_vlan: left promiscuous mode [ 164.635355][ T8815] veth0_vlan: entered promiscuous mode [ 164.646892][ T8815] team0: Device veth0_vlan failed to register rx_handler [ 165.199766][ T8820] tipc: Enabling of bearer rejected, failed to enable media [ 165.200099][ T8825] sctp: [Deprecated]: syz.4.1003 (pid 8825) Use of int in max_burst socket option. [ 165.200099][ T8825] Use struct sctp_assoc_value instead [ 165.210252][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 165.356461][ T8825] netlink: 'syz.4.1003': attribute type 10 has an invalid length. [ 165.465999][ T8825] veth0_vlan: left promiscuous mode [ 165.479028][ T8825] veth0_vlan: entered promiscuous mode [ 165.488155][ T8825] team0: Device veth0_vlan failed to register rx_handler [ 165.634779][ T8835] sctp: [Deprecated]: syz.3.1004 (pid 8835) Use of int in max_burst socket option. [ 165.634779][ T8835] Use struct sctp_assoc_value instead [ 165.662955][ T8835] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 165.754636][ T8844] sctp: [Deprecated]: syz.0.1018 (pid 8844) Use of int in max_burst socket option. [ 165.754636][ T8844] Use struct sctp_assoc_value instead [ 165.808963][ T8835] veth0_vlan: left promiscuous mode [ 165.847493][ T8835] veth0_vlan: entered promiscuous mode [ 165.874056][ T8835] team0: Device veth0_vlan failed to register rx_handler [ 165.902112][ T8844] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 165.950894][ T8838] tipc: Enabling of bearer rejected, failed to enable media [ 165.976012][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 166.030637][ T8844] veth0_vlan: left promiscuous mode [ 166.037509][ T8844] veth0_vlan: entered promiscuous mode [ 166.047952][ T8844] team0: Device veth0_vlan failed to register rx_handler [ 166.226485][ T8835] syz.3.1004 (8835) used greatest stack depth: 18512 bytes left [ 166.322111][ T8858] sctp: [Deprecated]: syz.2.1011 (pid 8858) Use of int in max_burst socket option. [ 166.322111][ T8858] Use struct sctp_assoc_value instead [ 166.343998][ T8859] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 166.353388][ T8859] team0: Device veth1_macvtap failed to register rx_handler [ 166.402484][ T8858] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 166.427856][ T8858] veth0_vlan: left promiscuous mode [ 166.439142][ T8858] veth0_vlan: entered promiscuous mode [ 166.464080][ T8858] team0: Device veth0_vlan failed to register rx_handler [ 166.531934][ T8866] netlink: 'syz.3.1015': attribute type 10 has an invalid length. [ 166.554128][ T8866] team0: Device veth1_macvtap failed to register rx_handler [ 166.564073][ T8867] sctp: [Deprecated]: syz.1.1013 (pid 8867) Use of int in max_burst socket option. [ 166.564073][ T8867] Use struct sctp_assoc_value instead [ 166.589600][ T8867] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 166.647729][ T8867] veth0_vlan: left promiscuous mode [ 166.698494][ T8867] veth0_vlan: entered promiscuous mode [ 166.717184][ T8867] team0: Device veth0_vlan failed to register rx_handler [ 167.468978][ T8876] tipc: Enabling of bearer rejected, failed to enable media [ 167.482505][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 167.692152][ T8892] sctp: [Deprecated]: syz.3.1023 (pid 8892) Use of int in max_burst socket option. [ 167.692152][ T8892] Use struct sctp_assoc_value instead [ 167.721193][ T8892] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 167.731901][ T8892] veth0_vlan: left promiscuous mode [ 167.742202][ T8892] veth0_vlan: entered promiscuous mode [ 167.751325][ T8892] team0: Device veth0_vlan failed to register rx_handler [ 168.216556][ T8903] sctp: [Deprecated]: syz.4.1028 (pid 8903) Use of int in max_burst socket option. [ 168.216556][ T8903] Use struct sctp_assoc_value instead [ 168.288196][ T8903] veth0_vlan: left promiscuous mode [ 168.295352][ T8903] veth0_vlan: entered promiscuous mode [ 168.303279][ T8903] team0: Device veth0_vlan failed to register rx_handler [ 168.738155][ T8912] team0: Device veth1_macvtap failed to register rx_handler [ 169.040582][ T8915] tipc: Enabling of bearer rejected, failed to enable media [ 169.050996][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 169.336377][ T8924] tipc: Enabling of bearer rejected, failed to enable media [ 169.346835][ T8927] sctp: [Deprecated]: syz.4.1033 (pid 8927) Use of int in max_burst socket option. [ 169.346835][ T8927] Use struct sctp_assoc_value instead [ 169.383536][ T8927] validate_nla: 2 callbacks suppressed [ 169.383553][ T8927] netlink: 'syz.4.1033': attribute type 10 has an invalid length. [ 169.398128][ T8927] veth0_vlan: left promiscuous mode [ 169.412177][ T8927] veth0_vlan: entered promiscuous mode [ 169.421519][ T8927] team0: Device veth0_vlan failed to register rx_handler [ 169.474560][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 169.808640][ T8941] sctp: [Deprecated]: syz.3.1038 (pid 8941) Use of int in max_burst socket option. [ 169.808640][ T8941] Use struct sctp_assoc_value instead [ 169.834164][ T8941] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 169.842290][ T8941] veth0_vlan: left promiscuous mode [ 169.849554][ T8941] veth0_vlan: entered promiscuous mode [ 169.858284][ T8941] team0: Device veth0_vlan failed to register rx_handler [ 169.933643][ T8940] tipc: Enabling of bearer rejected, failed to enable media [ 169.946837][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 170.949169][ T8960] sctp: [Deprecated]: syz.3.1044 (pid 8960) Use of int in max_burst socket option. [ 170.949169][ T8960] Use struct sctp_assoc_value instead [ 171.020503][ T8960] netlink: 'syz.3.1044': attribute type 10 has an invalid length. [ 171.121126][ T8960] veth0_vlan: left promiscuous mode [ 171.165908][ T8960] veth0_vlan: entered promiscuous mode [ 171.204488][ T8960] team0: Device veth0_vlan failed to register rx_handler [ 171.466457][ T8973] netlink: 'syz.0.1047': attribute type 10 has an invalid length. [ 171.543424][ T8973] team0: Device veth1_macvtap failed to register rx_handler [ 171.582165][ T8977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1051'. [ 171.623018][ T8975] tipc: Enabling of bearer rejected, failed to enable media [ 171.687907][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 172.263397][ T8991] sctp: [Deprecated]: syz.2.1064 (pid 8991) Use of int in max_burst socket option. [ 172.263397][ T8991] Use struct sctp_assoc_value instead [ 172.295774][ T8991] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 172.304031][ T8991] veth0_vlan: left promiscuous mode [ 172.310620][ T8991] veth0_vlan: entered promiscuous mode [ 172.320088][ T8991] team0: Device veth0_vlan failed to register rx_handler [ 172.426501][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 172.448668][ T8993] tipc: Enabling of bearer rejected, failed to enable media [ 172.467521][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1056'. [ 172.469455][ T8997] netlink: 'syz.0.1067': attribute type 10 has an invalid length. [ 172.534357][ T8997] team0: Device veth1_macvtap failed to register rx_handler [ 172.681003][ T9002] tipc: Enabling of bearer rejected, failed to enable media [ 172.713256][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 173.008307][ T9009] sctp: [Deprecated]: syz.1.1059 (pid 9009) Use of int in max_burst socket option. [ 173.008307][ T9009] Use struct sctp_assoc_value instead [ 173.041154][ T9009] netlink: 'syz.1.1059': attribute type 10 has an invalid length. [ 173.050989][ T9009] veth0_vlan: left promiscuous mode [ 173.060927][ T9009] veth0_vlan: entered promiscuous mode [ 173.076540][ T9009] team0: Device veth0_vlan failed to register rx_handler [ 173.414610][ T9019] netlink: 'syz.0.1062': attribute type 10 has an invalid length. [ 173.491749][ T9019] team0: Port device wlan1 added [ 173.504251][ T9017] tipc: Enabling of bearer rejected, failed to enable media [ 173.620857][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1063'. [ 173.655666][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 173.824499][ T9031] tipc: Enabling of bearer rejected, failed to enable media [ 173.861300][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 173.885458][ T9028] tipc: Enabling of bearer rejected, failed to enable media [ 174.046537][ T9036] tipc: Enabling of bearer rejected, failed to enable media [ 174.115891][ T9041] sctp: [Deprecated]: syz.2.1081 (pid 9041) Use of int in max_burst socket option. [ 174.115891][ T9041] Use struct sctp_assoc_value instead [ 174.263388][ T9041] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 174.271522][ T9041] veth0_vlan: left promiscuous mode [ 174.278480][ T9041] veth0_vlan: entered promiscuous mode [ 174.314506][ T9041] team0: Device veth0_vlan failed to register rx_handler [ 174.343559][ T9049] netlink: 'syz.4.1074': attribute type 10 has an invalid length. [ 174.414840][ T9049] team0: Device veth1_macvtap failed to register rx_handler [ 174.532436][ T9052] netlink: 'syz.3.1075': attribute type 10 has an invalid length. [ 174.559674][ T9052] team0: Device veth1_macvtap failed to register rx_handler [ 174.651047][ T9057] netlink: 'syz.1.1077': attribute type 10 has an invalid length. [ 174.662071][ T9057] team0: Device veth1_macvtap failed to register rx_handler [ 175.020969][ T9063] sctp: [Deprecated]: syz.2.1078 (pid 9063) Use of int in max_burst socket option. [ 175.020969][ T9063] Use struct sctp_assoc_value instead [ 175.063308][ T9063] netlink: 'syz.2.1078': attribute type 10 has an invalid length. [ 175.071327][ T9063] veth0_vlan: left promiscuous mode [ 175.077899][ T9063] veth0_vlan: entered promiscuous mode [ 175.087750][ T9063] team0: Device veth0_vlan failed to register rx_handler [ 175.477439][ T9069] netlink: 'syz.3.1080': attribute type 10 has an invalid length. [ 175.488927][ T9069] team0: Device veth1_macvtap failed to register rx_handler [ 175.999067][ T9077] sctp: [Deprecated]: syz.0.1082 (pid 9077) Use of int in max_burst socket option. [ 175.999067][ T9077] Use struct sctp_assoc_value instead [ 176.026975][ T9077] netlink: 'syz.0.1082': attribute type 10 has an invalid length. [ 176.083118][ T9077] veth0_vlan: left promiscuous mode [ 176.089290][ T9077] veth0_vlan: entered promiscuous mode [ 176.104172][ T9077] team0: Device veth0_vlan failed to register rx_handler [ 176.387682][ T9085] sctp: [Deprecated]: syz.4.1084 (pid 9085) Use of int in max_burst socket option. [ 176.387682][ T9085] Use struct sctp_assoc_value instead [ 176.411663][ T9085] netlink: 'syz.4.1084': attribute type 10 has an invalid length. [ 176.431700][ T9085] veth0_vlan: left promiscuous mode [ 176.458943][ T9085] veth0_vlan: entered promiscuous mode [ 176.476280][ T9085] team0: Device veth0_vlan failed to register rx_handler [ 177.323446][ T9102] sctp: [Deprecated]: syz.4.1088 (pid 9102) Use of int in max_burst socket option. [ 177.323446][ T9102] Use struct sctp_assoc_value instead [ 177.354513][ T9102] netlink: 'syz.4.1088': attribute type 10 has an invalid length. [ 177.363416][ T9102] veth0_vlan: left promiscuous mode [ 177.369852][ T9102] veth0_vlan: entered promiscuous mode [ 177.378056][ T9102] team0: Device veth0_vlan failed to register rx_handler [ 178.245725][ T9115] sctp: [Deprecated]: syz.3.1090 (pid 9115) Use of int in max_burst socket option. [ 178.245725][ T9115] Use struct sctp_assoc_value instead [ 178.271918][ T9115] netlink: 'syz.3.1090': attribute type 10 has an invalid length. [ 178.282009][ T9115] veth0_vlan: left promiscuous mode [ 178.288698][ T9115] veth0_vlan: entered promiscuous mode [ 178.302381][ T9115] team0: Device veth0_vlan failed to register rx_handler [ 178.892369][ T9131] sctp: [Deprecated]: syz.1.1097 (pid 9131) Use of int in max_burst socket option. [ 178.892369][ T9131] Use struct sctp_assoc_value instead [ 178.945510][ T9131] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 179.162141][ T9131] veth0_vlan: left promiscuous mode [ 179.190337][ T9131] veth0_vlan: entered promiscuous mode [ 179.198695][ T9131] team0: Device veth0_vlan failed to register rx_handler [ 179.299187][ T9140] sctp: [Deprecated]: syz.3.1100 (pid 9140) Use of int in max_burst socket option. [ 179.299187][ T9140] Use struct sctp_assoc_value instead [ 179.378996][ T9140] netlink: 'syz.3.1100': attribute type 10 has an invalid length. [ 179.394895][ T9140] veth0_vlan: left promiscuous mode [ 179.401867][ T9140] veth0_vlan: entered promiscuous mode [ 179.410513][ T9140] team0: Device veth0_vlan failed to register rx_handler [ 179.666834][ T9147] sctp: [Deprecated]: syz.4.1104 (pid 9147) Use of int in max_burst socket option. [ 179.666834][ T9147] Use struct sctp_assoc_value instead [ 179.690846][ T9147] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 179.700095][ T9147] veth0_vlan: left promiscuous mode [ 179.707319][ T9147] veth0_vlan: entered promiscuous mode [ 179.741324][ T9147] team0: Device veth0_vlan failed to register rx_handler [ 179.898464][ T9152] netlink: 'syz.0.1105': attribute type 10 has an invalid length. [ 179.950553][ T9152] team0: Device veth1_macvtap failed to register rx_handler [ 180.504863][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 180.547600][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 180.557876][ T9165] sctp: [Deprecated]: syz.2.1109 (pid 9165) Use of int in max_burst socket option. [ 180.557876][ T9165] Use struct sctp_assoc_value instead [ 180.599798][ T9165] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 180.634525][ T9165] veth0_vlan: left promiscuous mode [ 180.651476][ T9165] veth0_vlan: entered promiscuous mode [ 180.656754][ T9168] FAULT_INJECTION: forcing a failure. [ 180.656754][ T9168] name failslab, interval 1, probability 0, space 0, times 0 [ 180.659393][ T9165] team0: Device veth0_vlan failed to register rx_handler [ 180.669818][ T9168] CPU: 0 UID: 0 PID: 9168 Comm: syz.0.1112 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 180.669839][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.669849][ T9168] Call Trace: [ 180.669855][ T9168] [ 180.669862][ T9168] dump_stack_lvl+0x241/0x360 [ 180.669886][ T9168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.669904][ T9168] ? __pfx__printk+0x10/0x10 [ 180.669921][ T9168] ? __kmalloc_noprof+0xb5/0x4c0 [ 180.669942][ T9168] ? __pfx___might_resched+0x10/0x10 [ 180.669967][ T9168] should_fail_ex+0x40a/0x550 [ 180.669993][ T9168] should_failslab+0xac/0x100 [ 180.670013][ T9168] __kmalloc_noprof+0xdd/0x4c0 [ 180.670031][ T9168] ? sock_kmalloc+0xd7/0x160 [ 180.670053][ T9168] sock_kmalloc+0xd7/0x160 [ 180.670072][ T9168] ____sys_sendmsg+0x231/0x860 [ 180.670097][ T9168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.670111][ T9168] ? __fget_files+0x2a/0x410 [ 180.670134][ T9168] ? __fget_files+0x2a/0x410 [ 180.670162][ T9168] __sys_sendmsg+0x269/0x350 [ 180.670183][ T9168] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.670210][ T9168] ? do_sys_openat2+0x17a/0x1d0 [ 180.670255][ T9168] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.670278][ T9168] ? do_syscall_64+0x100/0x230 [ 180.670299][ T9168] ? do_syscall_64+0xb6/0x230 [ 180.670319][ T9168] do_syscall_64+0xf3/0x230 [ 180.670336][ T9168] ? clear_bhb_loop+0x35/0x90 [ 180.670358][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.670377][ T9168] RIP: 0033:0x7fcdcfb8d169 [ 180.670391][ T9168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.670405][ T9168] RSP: 002b:00007fcdd090a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.670423][ T9168] RAX: ffffffffffffffda RBX: 00007fcdcfda5fa0 RCX: 00007fcdcfb8d169 [ 180.670434][ T9168] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 180.670444][ T9168] RBP: 00007fcdd090a090 R08: 0000000000000000 R09: 0000000000000000 [ 180.670454][ T9168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.670463][ T9168] R13: 0000000000000000 R14: 00007fcdcfda5fa0 R15: 00007ffc76d3d518 [ 180.670488][ T9168] [ 180.922866][ T9162] ipvlan2: entered promiscuous mode [ 181.010109][ T9174] netlink: 'syz.0.1113': attribute type 10 has an invalid length. [ 181.054541][ T9174] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1113'. [ 181.113485][ T9174] team0: Port device virt_wifi0 added [ 181.349176][ T9186] sctp: [Deprecated]: syz.3.1115 (pid 9186) Use of int in max_burst socket option. [ 181.349176][ T9186] Use struct sctp_assoc_value instead [ 181.406471][ T9186] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 181.414893][ T9186] veth0_vlan: left promiscuous mode [ 181.422005][ T9186] veth0_vlan: entered promiscuous mode [ 181.436350][ T9186] team0: Device veth0_vlan failed to register rx_handler [ 181.671409][ T9189] tipc: Enabling of bearer rejected, failed to enable media [ 181.690922][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 182.737742][ T9215] ip6gre1: entered allmulticast mode [ 182.827519][ T9221] sctp: [Deprecated]: syz.4.1126 (pid 9221) Use of int in max_burst socket option. [ 182.827519][ T9221] Use struct sctp_assoc_value instead [ 182.849791][ T9221] netlink: 'syz.4.1126': attribute type 10 has an invalid length. [ 182.976788][ T9221] veth0_vlan: left promiscuous mode [ 182.985333][ T9221] veth0_vlan: entered promiscuous mode [ 183.009573][ T9221] team0: Device veth0_vlan failed to register rx_handler [ 183.424586][ T9226] ax25_connect(): syz.3.1127 uses autobind, please contact jreuter@yaina.de [ 184.103229][ T9242] tipc: Enabling of bearer rejected, failed to enable media [ 184.112923][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 184.278619][ T9248] sctp: [Deprecated]: syz.4.1135 (pid 9248) Use of int in max_burst socket option. [ 184.278619][ T9248] Use struct sctp_assoc_value instead [ 184.330588][ T9248] netlink: 'syz.4.1135': attribute type 10 has an invalid length. [ 184.363848][ T9248] veth0_vlan: left promiscuous mode [ 184.393419][ T9248] veth0_vlan: entered promiscuous mode [ 184.406203][ T9248] team0: Device veth0_vlan failed to register rx_handler [ 184.641524][ T9255] netlink: 'syz.2.1139': attribute type 10 has an invalid length. [ 184.680403][ T9255] team0: Device veth1_macvtap failed to register rx_handler [ 185.276965][ T9259] tipc: Enabling of bearer rejected, failed to enable media [ 185.319555][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 185.443523][ T9261] tipc: Enabling of bearer rejected, failed to enable media [ 185.508136][ T9199] Set syz1 is full, maxelem 65536 reached [ 185.523724][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 185.677092][ T9269] tipc: Enabling of bearer rejected, failed to enable media [ 185.693453][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 185.718585][ T9274] sctp: [Deprecated]: syz.2.1142 (pid 9274) Use of int in max_burst socket option. [ 185.718585][ T9274] Use struct sctp_assoc_value instead [ 185.747202][ T9274] netlink: 'syz.2.1142': attribute type 10 has an invalid length. [ 185.760279][ T9274] veth0_vlan: left promiscuous mode [ 185.780494][ T9274] veth0_vlan: entered promiscuous mode [ 185.858301][ T9274] team0: Device veth0_vlan failed to register rx_handler [ 186.055481][ T9285] FAULT_INJECTION: forcing a failure. [ 186.055481][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 186.096955][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.1.1147 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 186.096982][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.096997][ T9285] Call Trace: [ 186.097003][ T9285] [ 186.097011][ T9285] dump_stack_lvl+0x241/0x360 [ 186.097046][ T9285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.097063][ T9285] ? __pfx__printk+0x10/0x10 [ 186.097082][ T9285] ? kmem_cache_alloc_noprof+0x48/0x380 [ 186.097104][ T9285] ? __pfx___might_resched+0x10/0x10 [ 186.097129][ T9285] should_fail_ex+0x40a/0x550 [ 186.097156][ T9285] should_failslab+0xac/0x100 [ 186.097177][ T9285] ? alloc_vfsmnt+0x23/0x490 [ 186.097194][ T9285] kmem_cache_alloc_noprof+0x70/0x380 [ 186.097220][ T9285] alloc_vfsmnt+0x23/0x490 [ 186.097239][ T9285] clone_mnt+0x6b/0xc90 [ 186.097255][ T9285] ? do_raw_spin_unlock+0x13c/0x8b0 [ 186.097276][ T9285] ? attach_mnt+0x4ed/0x600 [ 186.097297][ T9285] copy_tree+0x482/0x940 [ 186.097322][ T9285] ? copy_mnt_ns+0x185/0x960 [ 186.097345][ T9285] copy_mnt_ns+0x185/0x960 [ 186.097362][ T9285] ? rcu_is_watching+0x15/0xb0 [ 186.097381][ T9285] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 186.097400][ T9285] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 186.097426][ T9285] create_new_namespaces+0xd3/0x7b0 [ 186.097450][ T9285] ? bpf_lsm_capable+0x9/0x10 [ 186.097471][ T9285] ? security_capable+0x7e/0x2d0 [ 186.097499][ T9285] unshare_nsproxy_namespaces+0x124/0x180 [ 186.097523][ T9285] ksys_unshare+0x57d/0xa70 [ 186.097553][ T9285] ? __pfx_ksys_unshare+0x10/0x10 [ 186.097574][ T9285] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.097597][ T9285] ? do_syscall_64+0x100/0x230 [ 186.097623][ T9285] __x64_sys_unshare+0x38/0x40 [ 186.097643][ T9285] do_syscall_64+0xf3/0x230 [ 186.097661][ T9285] ? clear_bhb_loop+0x35/0x90 [ 186.097686][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.097706][ T9285] RIP: 0033:0x7f142a18d169 [ 186.097726][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.097740][ T9285] RSP: 002b:00007f142b026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 186.097765][ T9285] RAX: ffffffffffffffda RBX: 00007f142a3a5fa0 RCX: 00007f142a18d169 [ 186.097777][ T9285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000060480 [ 186.097788][ T9285] RBP: 00007f142b026090 R08: 0000000000000000 R09: 0000000000000000 [ 186.097798][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.097814][ T9285] R13: 0000000000000000 R14: 00007f142a3a5fa0 R15: 00007fff7b881dc8 [ 186.097843][ T9285] [ 186.352434][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 186.362178][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 186.368726][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 186.375339][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 186.440354][ T9283] tipc: Enabling of bearer rejected, failed to enable media [ 186.542264][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 186.646169][ T9293] sctp: [Deprecated]: syz.1.1149 (pid 9293) Use of int in max_burst socket option. [ 186.646169][ T9293] Use struct sctp_assoc_value instead [ 186.673186][ T9293] netlink: 'syz.1.1149': attribute type 10 has an invalid length. [ 186.682125][ T9293] veth0_vlan: left promiscuous mode [ 186.690020][ T9293] veth0_vlan: entered promiscuous mode [ 186.699134][ T9293] team0: Device veth0_vlan failed to register rx_handler [ 186.766550][ T9300] sctp: [Deprecated]: syz.0.1160 (pid 9300) Use of int in max_burst socket option. [ 186.766550][ T9300] Use struct sctp_assoc_value instead [ 186.806023][ T9300] netlink: 'syz.0.1160': attribute type 10 has an invalid length. [ 186.814329][ T9300] veth0_vlan: left promiscuous mode [ 186.820895][ T9300] veth0_vlan: entered promiscuous mode [ 186.830284][ T9300] team0: Device veth0_vlan failed to register rx_handler [ 187.010525][ T9304] sctp: [Deprecated]: syz.4.1152 (pid 9304) Use of int in max_burst socket option. [ 187.010525][ T9304] Use struct sctp_assoc_value instead [ 187.046055][ T9304] netlink: 'syz.4.1152': attribute type 10 has an invalid length. [ 187.057277][ T9304] veth0_vlan: left promiscuous mode [ 187.084213][ T9304] veth0_vlan: entered promiscuous mode [ 187.107461][ T9304] team0: Device veth0_vlan failed to register rx_handler [ 187.722076][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 187.938982][ T9318] bridge_slave_1: left allmulticast mode [ 187.944872][ T9318] bridge_slave_1: left promiscuous mode [ 187.971017][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.007719][ T9318] bridge_slave_0: left allmulticast mode [ 188.024139][ T9318] bridge_slave_0: left promiscuous mode [ 188.040123][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.765133][ T9343] tipc: Enabling of bearer rejected, failed to enable media [ 188.777201][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 188.939399][ T9351] sctp: [Deprecated]: syz.1.1167 (pid 9351) Use of int in max_burst socket option. [ 188.939399][ T9351] Use struct sctp_assoc_value instead [ 189.042192][ T9351] netlink: 'syz.1.1167': attribute type 10 has an invalid length. [ 189.123305][ T9351] veth0_vlan: left promiscuous mode [ 189.135426][ T9351] veth0_vlan: entered promiscuous mode [ 189.150835][ T9351] team0: Device veth0_vlan failed to register rx_handler [ 189.246920][ T9360] tipc: Enabling of bearer rejected, failed to enable media [ 189.296823][ T9362] sctp: [Deprecated]: syz.0.1168 (pid 9362) Use of int in max_burst socket option. [ 189.296823][ T9362] Use struct sctp_assoc_value instead [ 189.333746][ T9362] netlink: 'syz.0.1168': attribute type 10 has an invalid length. [ 189.343336][ T9362] veth0_vlan: left promiscuous mode [ 189.349679][ T9362] veth0_vlan: entered promiscuous mode [ 189.357608][ T9362] team0: Device veth0_vlan failed to register rx_handler [ 189.463429][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 189.574227][ T9366] tipc: Enabling of bearer rejected, failed to enable media [ 189.872278][ T9375] tipc: Enabling of bearer rejected, failed to enable media [ 189.893621][ T9382] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 189.899182][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 190.091307][ T9377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.121532][ T9388] tipc: Enabling of bearer rejected, failed to enable media [ 190.158958][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 190.168469][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1181'. [ 190.192673][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 190.449747][ T9409] tipc: Enabling of bearer rejected, failed to enable media [ 190.551540][ T9415] __nla_validate_parse: 1 callbacks suppressed [ 190.551556][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1185'. [ 190.700260][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 190.788435][ T9432] vcan0: Master is either lo or non-ether device [ 190.941981][ T9444] ip6gre1: entered allmulticast mode [ 191.181742][ T9451] tipc: Enabling of bearer rejected, failed to enable media [ 191.227094][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 191.246647][ T9468] sctp: [Deprecated]: syz.1.1196 (pid 9468) Use of int in max_burst socket option. [ 191.246647][ T9468] Use struct sctp_assoc_value instead [ 191.291477][ T9468] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 191.321846][ T9465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 191.347844][ T9468] veth0_vlan: left promiscuous mode [ 191.365332][ T9468] veth0_vlan: entered promiscuous mode [ 191.391842][ T9468] team0: Device veth0_vlan failed to register rx_handler [ 191.467953][ T9474] lo: entered promiscuous mode [ 191.473962][ T9474] tunl0: entered promiscuous mode [ 191.480276][ T9474] gre0: entered promiscuous mode [ 191.492213][ T9474] gretap0: entered promiscuous mode [ 191.499768][ T9474] erspan0: entered promiscuous mode [ 191.507139][ T9474] ip_vti0: entered promiscuous mode [ 191.516075][ T9474] ip6_vti0: entered promiscuous mode [ 191.523863][ T9474] sit0: entered promiscuous mode [ 191.530660][ T9474] ip6tnl0: entered promiscuous mode [ 191.538557][ T9474] ip6gre0: entered promiscuous mode [ 191.588985][ T9474] syz_tun: entered promiscuous mode [ 191.621596][ T9474] ip6gretap0: entered promiscuous mode [ 191.669462][ T9474] bridge0: entered promiscuous mode [ 191.696855][ T9474] vcan0: entered promiscuous mode [ 191.749840][ T9474] bond0: entered promiscuous mode [ 191.777922][ T9474] bond_slave_0: entered promiscuous mode [ 191.817508][ T9474] bond_slave_1: entered promiscuous mode [ 191.843644][ T9474] team0: entered promiscuous mode [ 191.858883][ T9474] team_slave_0: entered promiscuous mode [ 191.866294][ T9474] team_slave_1: entered promiscuous mode [ 191.872305][ T9474] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 191.888947][ T9474] nlmon0: entered promiscuous mode [ 191.902885][ T9474] caif0: entered promiscuous mode [ 191.913273][ T9474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.015031][ T9492] tipc: Enabling of bearer rejected, failed to enable media [ 192.239695][ T9506] No such timeout policy "syz0" [ 192.385826][ T9513] bond0: (slave bond_slave_0): Releasing backup interface [ 192.406056][ T9513] bond0: (slave bond_slave_1): Releasing backup interface [ 192.468511][ T9513] team0: Port device team_slave_0 removed [ 192.491248][ T9513] team0: Port device team_slave_1 removed [ 192.507646][ T9513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.523106][ T9513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.560877][ T9513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.582152][ T9513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.669941][ T9529] FAULT_INJECTION: forcing a failure. [ 192.669941][ T9529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.686103][ T9530] sctp: [Deprecated]: syz.0.1208 (pid 9530) Use of int in max_burst socket option. [ 192.686103][ T9530] Use struct sctp_assoc_value instead [ 192.725797][ T9530] netlink: 'syz.0.1208': attribute type 10 has an invalid length. [ 192.733945][ T9529] CPU: 1 UID: 0 PID: 9529 Comm: syz.2.1209 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 192.733968][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.733979][ T9529] Call Trace: [ 192.733985][ T9529] [ 192.733992][ T9529] dump_stack_lvl+0x241/0x360 [ 192.734018][ T9529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.734035][ T9529] ? __pfx__printk+0x10/0x10 [ 192.734052][ T9529] ? aa_label_sk_perm+0x4f3/0x6c0 [ 192.734082][ T9529] should_fail_ex+0x40a/0x550 [ 192.734109][ T9529] _copy_from_user+0x2d/0xb0 [ 192.734130][ T9529] copy_from_sockptr+0x63/0xa0 [ 192.734154][ T9529] packet_setsockopt+0x716/0x1870 [ 192.734177][ T9529] ? __pfx_packet_setsockopt+0x10/0x10 [ 192.734196][ T9529] ? __lock_acquire+0x1397/0x2100 [ 192.734229][ T9529] ? aa_sk_perm+0x96d/0xab0 [ 192.734257][ T9529] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.734279][ T9529] ? __pfx_lock_acquire+0x10/0x10 [ 192.734299][ T9529] ? aa_sock_opt_perm+0x79/0x120 [ 192.734325][ T9529] ? __pfx_packet_setsockopt+0x10/0x10 [ 192.734343][ T9529] do_sock_setsockopt+0x3af/0x720 [ 192.734367][ T9529] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 192.734388][ T9529] ? __fget_files+0x395/0x410 [ 192.734408][ T9529] ? __fget_files+0x2a/0x410 [ 192.734443][ T9529] __x64_sys_setsockopt+0x1ee/0x280 [ 192.734466][ T9529] do_syscall_64+0xf3/0x230 [ 192.734485][ T9529] ? clear_bhb_loop+0x35/0x90 [ 192.734508][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.734529][ T9529] RIP: 0033:0x7f9c37d8d169 [ 192.734543][ T9529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.734557][ T9529] RSP: 002b:00007f9c38c43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.734574][ T9529] RAX: ffffffffffffffda RBX: 00007f9c37fa5fa0 RCX: 00007f9c37d8d169 [ 192.734586][ T9529] RDX: 000000000000000e RSI: 0000000000000107 RDI: 0000000000000003 [ 192.734595][ T9529] RBP: 00007f9c38c43090 R08: 0000000000000004 R09: 0000000000000000 [ 192.734605][ T9529] R10: 00004000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 192.734615][ T9529] R13: 0000000000000000 R14: 00007f9c37fa5fa0 R15: 00007ffdca032c48 [ 192.734639][ T9529] [ 192.998062][ T9530] veth0_vlan: left promiscuous mode [ 193.004773][ T9530] veth0_vlan: entered promiscuous mode [ 193.011826][ T9530] team0: Device veth0_vlan failed to register rx_handler [ 193.033532][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 193.081027][ T9526] tipc: Enabling of bearer rejected, failed to enable media [ 193.151501][ T9538] Bluetooth: MGMT ver 1.23 [ 193.247561][ T9543] veth3: entered promiscuous mode [ 193.268772][ T9543] veth3: entered allmulticast mode [ 193.374503][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 193.452875][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1214'. [ 193.464928][ T9554] FAULT_INJECTION: forcing a failure. [ 193.464928][ T9554] name failslab, interval 1, probability 0, space 0, times 0 [ 193.477667][ T9554] CPU: 0 UID: 0 PID: 9554 Comm: syz.1.1216 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 193.477688][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.477698][ T9554] Call Trace: [ 193.477704][ T9554] [ 193.477711][ T9554] dump_stack_lvl+0x241/0x360 [ 193.477737][ T9554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.477756][ T9554] ? __pfx__printk+0x10/0x10 [ 193.477784][ T9554] should_fail_ex+0x40a/0x550 [ 193.477812][ T9554] should_failslab+0xac/0x100 [ 193.477834][ T9554] ? skb_clone+0x20c/0x390 [ 193.477850][ T9554] kmem_cache_alloc_noprof+0x70/0x380 [ 193.477877][ T9554] skb_clone+0x20c/0x390 [ 193.477893][ T9554] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 193.477919][ T9554] dev_queue_xmit_nit+0x249/0xca0 [ 193.477944][ T9554] ? dev_queue_xmit_nit+0x2b/0xca0 [ 193.477967][ T9554] ? validate_xmit_skb+0x9b8/0xff0 [ 193.477991][ T9554] dev_hard_start_xmit+0x15f/0x7d0 [ 193.478010][ T9554] ? __pfx_validate_xmit_skb+0x10/0x10 [ 193.478039][ T9554] __dev_queue_xmit+0x1b73/0x3f40 [ 193.478057][ T9554] ? kasan_save_track+0x51/0x80 [ 193.478080][ T9554] ? ____sys_sendmsg+0x53a/0x860 [ 193.478101][ T9554] ? __dev_queue_xmit+0x2f4/0x3f40 [ 193.478124][ T9554] ? __pfx___dev_queue_xmit+0x10/0x10 [ 193.478160][ T9554] ? __copy_skb_header+0xa7/0x5a0 [ 193.478179][ T9554] ? __asan_memcpy+0x40/0x70 [ 193.478195][ T9554] ? __skb_clone+0x5c/0x6c0 [ 193.478217][ T9554] ? __skb_clone+0x454/0x6c0 [ 193.478242][ T9554] ? skb_clone+0x240/0x390 [ 193.478263][ T9554] __netlink_deliver_tap+0x561/0x7f0 [ 193.478297][ T9554] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.478324][ T9554] netlink_deliver_tap+0x19d/0x1b0 [ 193.478344][ T9554] netlink_unicast+0x7c4/0x990 [ 193.478371][ T9554] ? __pfx_netlink_unicast+0x10/0x10 [ 193.478388][ T9554] ? __virt_addr_valid+0x45f/0x530 [ 193.478404][ T9554] ? __phys_addr_symbol+0x2f/0x70 [ 193.478419][ T9554] ? __check_object_size+0x47a/0x730 [ 193.478444][ T9554] netlink_sendmsg+0x8de/0xcb0 [ 193.478477][ T9554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.478503][ T9554] ? aa_sock_msg_perm+0x91/0x160 [ 193.478530][ T9554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.478547][ T9554] __sock_sendmsg+0x221/0x270 [ 193.478569][ T9554] ____sys_sendmsg+0x53a/0x860 [ 193.478595][ T9554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.478609][ T9554] ? __fget_files+0x2a/0x410 [ 193.478633][ T9554] ? __fget_files+0x2a/0x410 [ 193.478661][ T9554] __sys_sendmsg+0x269/0x350 [ 193.478683][ T9554] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.478714][ T9554] ? do_sys_openat2+0x17a/0x1d0 [ 193.478761][ T9554] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.478785][ T9554] ? do_syscall_64+0x100/0x230 [ 193.478806][ T9554] ? do_syscall_64+0xb6/0x230 [ 193.478827][ T9554] do_syscall_64+0xf3/0x230 [ 193.478844][ T9554] ? clear_bhb_loop+0x35/0x90 [ 193.478867][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.478887][ T9554] RIP: 0033:0x7f142a18d169 [ 193.478902][ T9554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.478915][ T9554] RSP: 002b:00007f142b026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.478932][ T9554] RAX: ffffffffffffffda RBX: 00007f142a3a5fa0 RCX: 00007f142a18d169 [ 193.478945][ T9554] RDX: 0000000000000000 RSI: 00004000000012c0 RDI: 0000000000000003 [ 193.478955][ T9554] RBP: 00007f142b026090 R08: 0000000000000000 R09: 0000000000000000 [ 193.478965][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.478976][ T9554] R13: 0000000000000000 R14: 00007f142a3a5fa0 R15: 00007fff7b881dc8 [ 193.479004][ T9554] [ 193.860131][ T9559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1218'. [ 193.871888][ T9559] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1218'. [ 193.887597][ T9562] sctp: [Deprecated]: syz.2.1215 (pid 9562) Use of int in max_burst socket option. [ 193.887597][ T9562] Use struct sctp_assoc_value instead [ 193.929509][ T9562] netlink: 'syz.2.1215': attribute type 10 has an invalid length. [ 193.952052][ T9562] veth0_vlan: left promiscuous mode [ 193.958749][ T9562] veth0_vlan: entered promiscuous mode [ 193.966985][ T9562] team0: Device veth0_vlan failed to register rx_handler [ 194.210125][ T9567] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 194.221527][ T9567] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 194.416429][ T9579] sctp: [Deprecated]: syz.3.1221 (pid 9579) Use of int in max_burst socket option. [ 194.416429][ T9579] Use struct sctp_assoc_value instead [ 194.438664][ T9579] netlink: 'syz.3.1221': attribute type 10 has an invalid length. [ 194.459368][ T9579] veth0_vlan: left promiscuous mode [ 194.465816][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.478615][ T9579] veth0_vlan: entered promiscuous mode [ 194.486356][ T9579] team0: Device veth0_vlan failed to register rx_handler [ 194.552425][ T9576] tipc: Enabling of bearer rejected, failed to enable media [ 194.564662][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 194.602179][ T9589] sctp: [Deprecated]: syz.4.1224 (pid 9589) Use of int in max_burst socket option. [ 194.602179][ T9589] Use struct sctp_assoc_value instead [ 194.630892][ T9589] netlink: 'syz.4.1224': attribute type 10 has an invalid length. [ 194.639138][ T9589] veth0_vlan: left promiscuous mode [ 194.653611][ T9589] veth0_vlan: entered promiscuous mode [ 194.661908][ T9589] team0: Device veth0_vlan failed to register rx_handler [ 194.895550][ T9593] FAULT_INJECTION: forcing a failure. [ 194.895550][ T9593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.909307][ T9593] CPU: 0 UID: 0 PID: 9593 Comm: syz.2.1225 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 194.909321][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.909327][ T9593] Call Trace: [ 194.909331][ T9593] [ 194.909335][ T9593] dump_stack_lvl+0x241/0x360 [ 194.909353][ T9593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.909364][ T9593] ? __pfx__printk+0x10/0x10 [ 194.909375][ T9593] ? __lock_acquire+0x1397/0x2100 [ 194.909394][ T9593] should_fail_ex+0x40a/0x550 [ 194.909411][ T9593] prepare_alloc_pages+0x1da/0x5b0 [ 194.909426][ T9593] __alloc_frozen_pages_noprof+0x16f/0x710 [ 194.909439][ T9593] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.909461][ T9593] alloc_pages_mpol+0x311/0x660 [ 194.909477][ T9593] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 194.909495][ T9593] vma_alloc_folio_noprof+0x12b/0x260 [ 194.909509][ T9593] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 194.909523][ T9593] ? do_raw_spin_unlock+0x13c/0x8b0 [ 194.909538][ T9593] folio_prealloc+0x2e/0x170 [ 194.909549][ T9593] do_wp_page+0x1253/0x49b0 [ 194.909571][ T9593] ? __pfx_do_wp_page+0x10/0x10 [ 194.909585][ T9593] ? __pfx_validate_chain+0x10/0x10 [ 194.909597][ T9593] ? __pfx_lock_acquire+0x10/0x10 [ 194.909610][ T9593] ? rcu_is_watching+0x15/0xb0 [ 194.909622][ T9593] ? do_raw_spin_lock+0x14f/0x370 [ 194.909636][ T9593] ? __pfx____pte_offset_map+0x10/0x10 [ 194.909674][ T9593] __handle_mm_fault+0x24d5/0x70f0 [ 194.909696][ T9593] ? mark_lock+0x9a/0x360 [ 194.909737][ T9593] ? __pfx___handle_mm_fault+0x10/0x10 [ 194.909766][ T9593] ? __pfx_lock_acquire+0x10/0x10 [ 194.909791][ T9593] ? do_raw_spin_lock+0x14f/0x370 [ 194.909828][ T9593] ? follow_page_pte+0xdd3/0x1460 [ 194.909845][ T9593] ? follow_page_pte+0xe54/0x1460 [ 194.909855][ T9593] ? __pfx_lock_release+0x10/0x10 [ 194.909872][ T9593] ? do_raw_spin_unlock+0x13c/0x8b0 [ 194.909893][ T9593] ? __pfx___might_resched+0x10/0x10 [ 194.909908][ T9593] handle_mm_fault+0x3e5/0x8d0 [ 194.909930][ T9593] __get_user_pages+0x1a92/0x4140 [ 194.909952][ T9593] ? mark_lock+0x9a/0x360 [ 194.909974][ T9593] ? __pfx___get_user_pages+0x10/0x10 [ 194.909991][ T9593] ? __pfx_down_read_killable+0x10/0x10 [ 194.910006][ T9593] ? __pfx_lock_acquire+0x10/0x10 [ 194.910020][ T9593] ? try_get_folio+0xf1/0x6f0 [ 194.910031][ T9593] ? __pfx_lock_release+0x10/0x10 [ 194.910049][ T9593] __gup_longterm_locked+0xe64/0x17f0 [ 194.910065][ T9593] ? mark_lock+0x9a/0x360 [ 194.910076][ T9593] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.910090][ T9593] ? __pfx___gup_longterm_locked+0x10/0x10 [ 194.910101][ T9593] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 194.910121][ T9593] gup_fast_fallback+0x2266/0x29c0 [ 194.910130][ T9593] ? mark_lock+0x9a/0x360 [ 194.910154][ T9593] ? __pfx_gup_fast_fallback+0x10/0x10 [ 194.910166][ T9593] ? mark_lock+0x9a/0x360 [ 194.910183][ T9593] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 194.910199][ T9593] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.910216][ T9593] ? lockdep_hardirqs_on+0x99/0x150 [ 194.910228][ T9593] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.910237][ T9593] ? stack_trace_save+0x118/0x1d0 [ 194.910250][ T9593] ? is_valid_gup_args+0x124/0x200 [ 194.910261][ T9593] pin_user_pages_fast+0xcc/0x160 [ 194.910272][ T9593] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 194.910287][ T9593] iov_iter_extract_pages+0x3bb/0x5c0 [ 194.910305][ T9593] extract_iter_to_sg+0xea6/0x2650 [ 194.910323][ T9593] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 194.910343][ T9593] ? __asan_memset+0x23/0x50 [ 194.910354][ T9593] af_alg_get_rsgl+0x41e/0x850 [ 194.910377][ T9593] skcipher_recvmsg+0x3f8/0x1230 [ 194.910401][ T9593] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 194.910415][ T9593] ? aa_sock_msg_perm+0x91/0x160 [ 194.910431][ T9593] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 194.910442][ T9593] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 194.910457][ T9593] sock_recvmsg+0x22f/0x280 [ 194.910474][ T9593] ____sys_recvmsg+0x1c6/0x480 [ 194.910489][ T9593] ? __pfx_____sys_recvmsg+0x10/0x10 [ 194.910512][ T9593] __sys_recvmsg+0x291/0x390 [ 194.910525][ T9593] ? __pfx___sys_recvmsg+0x10/0x10 [ 194.910543][ T9593] ? __fget_files+0x2a/0x410 [ 194.910565][ T9593] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.910579][ T9593] ? do_syscall_64+0x100/0x230 [ 194.910593][ T9593] ? do_syscall_64+0xb6/0x230 [ 194.910606][ T9593] do_syscall_64+0xf3/0x230 [ 194.910617][ T9593] ? clear_bhb_loop+0x35/0x90 [ 194.910633][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.910646][ T9593] RIP: 0033:0x7f9c37d8d169 [ 194.910656][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.910664][ T9593] RSP: 002b:00007f9c38c22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 194.910675][ T9593] RAX: ffffffffffffffda RBX: 00007f9c37fa6080 RCX: 00007f9c37d8d169 [ 194.910682][ T9593] RDX: 0000000020000253 RSI: 00004000000005c0 RDI: 000000000000000a [ 194.910688][ T9593] RBP: 00007f9c38c22090 R08: 0000000000000000 R09: 0000000000000000 [ 194.910694][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.910699][ T9593] R13: 0000000000000000 R14: 00007f9c37fa6080 R15: 00007ffdca032c48 [ 194.910714][ T9593] [ 195.618049][ T9596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.642867][ T9599] openvswitch: netlink: IPv4 tunnel dst address is zero [ 195.681101][ T9600] FAULT_INJECTION: forcing a failure. [ 195.681101][ T9600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.722372][ T9600] CPU: 1 UID: 0 PID: 9600 Comm: syz.4.1227 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 195.722393][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.722402][ T9600] Call Trace: [ 195.722407][ T9600] [ 195.722413][ T9600] dump_stack_lvl+0x241/0x360 [ 195.722437][ T9600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.722452][ T9600] ? __pfx__printk+0x10/0x10 [ 195.722468][ T9600] ? __pfx_lock_release+0x10/0x10 [ 195.722496][ T9600] should_fail_ex+0x40a/0x550 [ 195.722521][ T9600] _copy_from_iter+0x1df/0x1c40 [ 195.722543][ T9600] ? __virt_addr_valid+0x183/0x530 [ 195.722558][ T9600] ? __pfx_lock_release+0x10/0x10 [ 195.722584][ T9600] ? __alloc_skb+0x28f/0x440 [ 195.722598][ T9600] ? __pfx__copy_from_iter+0x10/0x10 [ 195.722616][ T9600] ? __virt_addr_valid+0x183/0x530 [ 195.722630][ T9600] ? __virt_addr_valid+0x183/0x530 [ 195.722643][ T9600] ? __virt_addr_valid+0x45f/0x530 [ 195.722658][ T9600] ? __phys_addr_symbol+0x2f/0x70 [ 195.722672][ T9600] ? __check_object_size+0x47a/0x730 [ 195.722696][ T9600] netlink_sendmsg+0x742/0xcb0 [ 195.722728][ T9600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.722760][ T9600] ? aa_sock_msg_perm+0x91/0x160 [ 195.722788][ T9600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.722806][ T9600] __sock_sendmsg+0x221/0x270 [ 195.722858][ T9600] ____sys_sendmsg+0x53a/0x860 [ 195.722878][ T9600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.722891][ T9600] ? __fget_files+0x2a/0x410 [ 195.722909][ T9600] ? __fget_files+0x2a/0x410 [ 195.722932][ T9600] __sys_sendmsg+0x269/0x350 [ 195.722951][ T9600] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.722974][ T9600] ? do_sys_openat2+0x17a/0x1d0 [ 195.723011][ T9600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.723030][ T9600] ? do_syscall_64+0x100/0x230 [ 195.723050][ T9600] ? do_syscall_64+0xb6/0x230 [ 195.723068][ T9600] do_syscall_64+0xf3/0x230 [ 195.723083][ T9600] ? clear_bhb_loop+0x35/0x90 [ 195.723106][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.723124][ T9600] RIP: 0033:0x7f2f41f8d169 [ 195.723138][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.723150][ T9600] RSP: 002b:00007f2f42e12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.723168][ T9600] RAX: ffffffffffffffda RBX: 00007f2f421a6080 RCX: 00007f2f41f8d169 [ 195.723179][ T9600] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 195.723189][ T9600] RBP: 00007f2f42e12090 R08: 0000000000000000 R09: 0000000000000000 [ 195.723199][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.723208][ T9600] R13: 0000000000000001 R14: 00007f2f421a6080 R15: 00007ffd035d12e8 [ 195.723233][ T9600] [ 196.024831][ T9596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.041098][ T9601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.115477][ T9596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.186720][ T9596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.271163][ T9596] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.286939][ T9596] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.302256][ T9596] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.319011][ T9596] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.386880][ T9604] netlink: 'syz.4.1229': attribute type 9 has an invalid length. [ 196.408827][ T9604] netlink: 'syz.4.1229': attribute type 6 has an invalid length. [ 196.695653][ T9615] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 196.706194][ T9615] team0: Device veth1_macvtap failed to register rx_handler [ 196.788155][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 196.804602][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1231'. [ 196.942854][ T9625] tipc: Enabling of bearer rejected, failed to enable media [ 196.957125][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 197.077218][ T9628] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 197.092596][ T9628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1237'. [ 197.117194][ T9628] bridge0: entered promiscuous mode [ 197.123277][ T9628] macvlan2: entered promiscuous mode [ 197.155276][ T9628] bridge0: port 1(macvlan2) entered blocking state [ 197.161859][ T9628] bridge0: port 1(macvlan2) entered disabled state [ 197.194722][ T9628] macvlan2: entered allmulticast mode [ 197.200142][ T9628] bridge0: entered allmulticast mode [ 197.257299][ T9628] macvlan2: left allmulticast mode [ 197.262491][ T9628] bridge0: left allmulticast mode [ 197.305452][ T9628] bridge0: left promiscuous mode [ 197.673325][ T9639] sctp: [Deprecated]: syz.1.1238 (pid 9639) Use of int in max_burst socket option. [ 197.673325][ T9639] Use struct sctp_assoc_value instead [ 197.696618][ T9639] netlink: 'syz.1.1238': attribute type 10 has an invalid length. [ 197.704771][ T9639] veth0_vlan: left promiscuous mode [ 197.711116][ T9639] veth0_vlan: entered promiscuous mode [ 197.718664][ T9639] team0: Device veth0_vlan failed to register rx_handler [ 197.871623][ T9577] Set syz1 is full, maxelem 65536 reached [ 198.259627][ T9663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1245'. [ 198.383299][ T9672] tipc: Enabling of bearer rejected, failed to enable media [ 198.395611][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 198.552007][ T9679] tipc: Enabling of bearer rejected, failed to enable media [ 198.653697][ T9687] sctp: [Deprecated]: syz.4.1250 (pid 9687) Use of int in max_burst socket option. [ 198.653697][ T9687] Use struct sctp_assoc_value instead [ 198.707763][ T9691] FAULT_INJECTION: forcing a failure. [ 198.707763][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 198.714092][ T9687] netlink: 'syz.4.1250': attribute type 10 has an invalid length. [ 198.729077][ T9687] veth0_vlan: left promiscuous mode [ 198.742084][ T9691] CPU: 1 UID: 0 PID: 9691 Comm: syz.3.1253 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 198.742107][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.742117][ T9691] Call Trace: [ 198.742123][ T9691] [ 198.742129][ T9691] dump_stack_lvl+0x241/0x360 [ 198.742154][ T9691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.742172][ T9691] ? __pfx__printk+0x10/0x10 [ 198.742198][ T9691] should_fail_ex+0x40a/0x550 [ 198.742224][ T9691] should_failslab+0xac/0x100 [ 198.742247][ T9691] __kmalloc_cache_noprof+0x70/0x390 [ 198.742267][ T9691] ? sctp_add_bind_addr+0x89/0x3a0 [ 198.742291][ T9691] sctp_add_bind_addr+0x89/0x3a0 [ 198.742312][ T9691] sctp_copy_local_addr_list+0x311/0x500 [ 198.742333][ T9691] ? sctp_copy_local_addr_list+0xab/0x500 [ 198.742352][ T9691] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 198.742373][ T9691] ? sctp_v6_is_any+0x60/0x70 [ 198.742393][ T9691] ? sctp_copy_one_addr+0x94/0x360 [ 198.742416][ T9691] sctp_bind_addr_copy+0xad/0x3b0 [ 198.742434][ T9691] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 198.742462][ T9691] sctp_connect_new_asoc+0x2f3/0x6c0 [ 198.742487][ T9691] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 198.742507][ T9691] ? sctp_sendmsg+0xf1a/0x35d0 [ 198.742537][ T9691] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 198.742555][ T9691] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 198.742579][ T9691] sctp_sendmsg+0x1f64/0x35d0 [ 198.742615][ T9691] ? __pfx_sctp_sendmsg+0x10/0x10 [ 198.742638][ T9691] ? aa_sk_perm+0x96d/0xab0 [ 198.742675][ T9691] ? inet_sendmsg+0x330/0x390 [ 198.742697][ T9691] __sock_sendmsg+0x1a6/0x270 [ 198.742721][ T9691] ____sys_sendmsg+0x53a/0x860 [ 198.742747][ T9691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.742762][ T9691] ? __fget_files+0x2a/0x410 [ 198.742792][ T9691] ? __fget_files+0x2a/0x410 [ 198.742823][ T9691] __sys_sendmmsg+0x36a/0x720 [ 198.742853][ T9691] ? __pfx___sys_sendmmsg+0x10/0x10 [ 198.742885][ T9691] ? __pfx_lock_release+0x10/0x10 [ 198.742905][ T9691] ? kstrtouint_from_user+0x128/0x190 [ 198.742950][ T9691] ? ksys_write+0x22a/0x2b0 [ 198.742967][ T9691] ? __pfx_lock_release+0x10/0x10 [ 198.742995][ T9691] ? sb_end_write+0xe9/0x1c0 [ 198.743017][ T9691] ? vfs_write+0x7fa/0xd10 [ 198.743036][ T9691] ? __mutex_unlock_slowpath+0x227/0x800 [ 198.743084][ T9691] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 198.743110][ T9691] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.743134][ T9691] ? do_syscall_64+0x100/0x230 [ 198.743157][ T9691] __x64_sys_sendmmsg+0xa0/0xb0 [ 198.743176][ T9691] do_syscall_64+0xf3/0x230 [ 198.743195][ T9691] ? clear_bhb_loop+0x35/0x90 [ 198.743219][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.743239][ T9691] RIP: 0033:0x7f66d138d169 [ 198.743253][ T9691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.743267][ T9691] RSP: 002b:00007f66d11f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 198.743285][ T9691] RAX: ffffffffffffffda RBX: 00007f66d15a5fa0 RCX: 00007f66d138d169 [ 198.743297][ T9691] RDX: 0000000000000002 RSI: 0000400000000780 RDI: 0000000000000003 [ 198.743307][ T9691] RBP: 00007f66d11f9090 R08: 0000000000000000 R09: 0000000000000000 [ 198.743318][ T9691] R10: 000000003404c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 198.743328][ T9691] R13: 0000000000000000 R14: 00007f66d15a5fa0 R15: 00007ffd11bde8d8 [ 198.743357][ T9691] [ 199.083867][ T9687] veth0_vlan: entered promiscuous mode [ 199.090947][ T9687] team0: Device veth0_vlan failed to register rx_handler [ 199.282021][ T9698] netlink: 'syz.2.1252': attribute type 10 has an invalid length. [ 199.354274][ T9698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1252'. [ 199.432981][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 199.442309][ T9698] veth0_vlan: left promiscuous mode [ 199.447604][ T9698] veth0_vlan: entered promiscuous mode [ 199.454279][ T9698] veth0_vlan: entered allmulticast mode [ 199.480582][ T9698] bridge0: port 1(veth0_vlan) entered blocking state [ 199.487789][ T9698] bridge0: port 1(veth0_vlan) entered disabled state [ 199.496674][ T9698] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 199.734658][ T9721] sctp: [Deprecated]: syz.4.1260 (pid 9721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.734658][ T9721] Use struct sctp_sack_info instead [ 199.774698][ T9723] sctp: [Deprecated]: syz.3.1259 (pid 9723) Use of int in max_burst socket option. [ 199.774698][ T9723] Use struct sctp_assoc_value instead [ 199.803084][ T9723] netlink: 'syz.3.1259': attribute type 10 has an invalid length. [ 199.811126][ T9723] veth0_vlan: left promiscuous mode [ 199.818818][ T9723] veth0_vlan: entered promiscuous mode [ 199.824784][ T9724] sctp: [Deprecated]: syz.1.1261 (pid 9724) Use of int in max_burst socket option. [ 199.824784][ T9724] Use struct sctp_assoc_value instead [ 199.826855][ T9723] team0: Device veth0_vlan failed to register rx_handler [ 199.858893][ T9724] netlink: 'syz.1.1261': attribute type 10 has an invalid length. [ 199.981907][ T9724] veth0_vlan: left promiscuous mode [ 199.989013][ T9724] veth0_vlan: entered promiscuous mode [ 200.002142][ T9724] team0: Device veth0_vlan failed to register rx_handler [ 200.421416][ T9731] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 200.434535][ T9731] team0: Device veth1_macvtap failed to register rx_handler [ 200.738372][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.746061][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.810044][ T9748] sctp: [Deprecated]: syz.1.1264 (pid 9748) Use of int in max_burst socket option. [ 200.810044][ T9748] Use struct sctp_assoc_value instead [ 200.910065][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1265'. [ 200.953713][ T9733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.981067][ T9733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.167908][ T9733] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.189861][ T9733] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.223044][ T9733] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.272421][ T9733] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.413708][ T9733] ip6gre1: left allmulticast mode [ 201.471589][ T9735] tipc: Enabling of bearer rejected, failed to enable media [ 201.482475][ T9748] veth0_vlan: left promiscuous mode [ 201.492194][ T9748] veth0_vlan: entered promiscuous mode [ 201.504682][ T9748] team0: Device veth0_vlan failed to register rx_handler [ 201.567185][ T9754] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 201.670594][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 201.873386][ T9787] tipc: Enabling of bearer rejected, failed to enable media [ 201.974332][ T9789] validate_nla: 1 callbacks suppressed [ 201.974349][ T9789] netlink: 'syz.3.1275': attribute type 10 has an invalid length. [ 202.043885][ T9789] team0: Device veth1_macvtap failed to register rx_handler [ 202.171288][ T9791] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1277'. [ 202.705401][ T9808] sctp: [Deprecated]: syz.0.1280 (pid 9808) Use of int in max_burst socket option. [ 202.705401][ T9808] Use struct sctp_assoc_value instead [ 202.726408][ T9809] sctp: [Deprecated]: syz.4.1281 (pid 9809) Use of int in max_burst socket option. [ 202.726408][ T9809] Use struct sctp_assoc_value instead [ 202.764463][ T9809] netlink: 'syz.4.1281': attribute type 10 has an invalid length. [ 202.772474][ T9809] veth0_vlan: left promiscuous mode [ 202.779774][ T9809] veth0_vlan: entered promiscuous mode [ 202.788104][ T9809] team0: Device veth0_vlan failed to register rx_handler [ 202.961643][ T9818] tipc: Enabling of bearer rejected, failed to enable media [ 203.052506][ T9819] netlink: 'syz.1.1285': attribute type 4 has an invalid length. [ 203.061728][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1285'. [ 203.237161][ T9821] tipc: Enabling of bearer rejected, failed to enable media [ 203.247331][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 203.601843][ T9830] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 203.688290][ T9830] 8021q: adding VLAN 0 to HW filter on device bond22 [ 203.758485][ T9837] sctp: [Deprecated]: syz.0.1289 (pid 9837) Use of int in max_burst socket option. [ 203.758485][ T9837] Use struct sctp_assoc_value instead [ 203.793496][ T9837] netlink: 'syz.0.1289': attribute type 10 has an invalid length. [ 203.808976][ T9835] bond22: (slave veth3): Enslaving as an active interface with a down link [ 203.857002][ T9837] veth0_vlan: left promiscuous mode [ 203.866228][ T9837] veth0_vlan: entered promiscuous mode [ 203.874322][ T9837] team0: Device veth0_vlan failed to register rx_handler [ 203.945547][ T9830] ip6erspan0: entered promiscuous mode [ 204.007399][ T9830] bond22: (slave ip6erspan0): making interface the new active one [ 204.059774][ T9830] bond22: (slave ip6erspan0): Enslaving as an active interface with an up link [ 204.302897][ T9856] tipc: Enabling of bearer rejected, failed to enable media [ 204.403700][ T9859] tipc: Enabling of bearer rejected, failed to enable media [ 204.404121][ T9862] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1301'. [ 204.430069][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 204.583710][ T9873] sctp: [Deprecated]: syz.3.1299 (pid 9873) Use of int in max_burst socket option. [ 204.583710][ T9873] Use struct sctp_assoc_value instead [ 204.722095][ T9882] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 4, id = 0 [ 204.792220][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 205.381567][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 205.381962][ T9902] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1312'. [ 205.396757][ T9903] FAULT_INJECTION: forcing a failure. [ 205.396757][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 205.399987][ T9902] NCSI netlink: No device for ifindex 0 [ 205.418251][ T9903] CPU: 0 UID: 0 PID: 9903 Comm: syz.3.1311 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 205.418276][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.418287][ T9903] Call Trace: [ 205.418293][ T9903] [ 205.418300][ T9903] dump_stack_lvl+0x241/0x360 [ 205.418327][ T9903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.418345][ T9903] ? __pfx__printk+0x10/0x10 [ 205.418365][ T9903] ? __kmalloc_cache_noprof+0x48/0x390 [ 205.418388][ T9903] ? __pfx___might_resched+0x10/0x10 [ 205.418407][ T9903] ? rcu_is_watching+0x15/0xb0 [ 205.418429][ T9903] should_fail_ex+0x40a/0x550 [ 205.418457][ T9903] should_failslab+0xac/0x100 [ 205.418480][ T9903] __kmalloc_cache_noprof+0x70/0x390 [ 205.418500][ T9903] ? nf_nat_masq_schedule+0x2d5/0x650 [ 205.418524][ T9903] nf_nat_masq_schedule+0x2d5/0x650 [ 205.418547][ T9903] ? __pfx_device_cmp+0x10/0x10 [ 205.418566][ T9903] ? __pfx_nf_nat_masq_schedule+0x10/0x10 [ 205.418586][ T9903] ? nf_tables_netdev_event+0x101/0x740 [ 205.418615][ T9903] masq_device_event+0xa8/0xe0 [ 205.418634][ T9903] notifier_call_chain+0x1a5/0x3f0 [ 205.418663][ T9903] dev_close_many+0x33c/0x4c0 [ 205.418690][ T9903] ? __pfx_dev_close_many+0x10/0x10 [ 205.418712][ T9903] ? __mutex_trylock_common+0x183/0x2e0 [ 205.418730][ T9903] ? __pfx___might_resched+0x10/0x10 [ 205.418754][ T9903] unregister_netdevice_many_notify+0x629/0x24f0 [ 205.418779][ T9903] ? rcu_is_watching+0x15/0xb0 [ 205.418798][ T9903] ? trace_contention_end+0x3c/0x120 [ 205.418817][ T9903] ? __mutex_lock+0x397/0x1010 [ 205.418839][ T9903] ? stack_trace_save+0x118/0x1d0 [ 205.418856][ T9903] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 205.418881][ T9903] ? rtnl_dellink+0x387/0x8c0 [ 205.418907][ T9903] ? unregister_netdevice_queue+0x26b/0x370 [ 205.418933][ T9903] ? __nla_parse+0x40/0x60 [ 205.418950][ T9903] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 205.418971][ T9903] rtnl_dellink+0x526/0x8c0 [ 205.418998][ T9903] ? __pfx_rtnl_dellink+0x10/0x10 [ 205.419028][ T9903] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 205.419068][ T9903] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.419156][ T9903] ? __pfx_rtnl_dellink+0x10/0x10 [ 205.419178][ T9903] rtnetlink_rcv_msg+0x791/0xcf0 [ 205.419197][ T9903] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 205.419220][ T9903] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.419250][ T9903] ? ref_tracker_free+0x643/0x7e0 [ 205.419272][ T9903] netlink_rcv_skb+0x206/0x480 [ 205.419295][ T9903] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.419318][ T9903] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.419361][ T9903] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.419385][ T9903] netlink_unicast+0x7f6/0x990 [ 205.419412][ T9903] ? __pfx_netlink_unicast+0x10/0x10 [ 205.419428][ T9903] ? __virt_addr_valid+0x45f/0x530 [ 205.419446][ T9903] ? __phys_addr_symbol+0x2f/0x70 [ 205.419460][ T9903] ? __check_object_size+0x47a/0x730 [ 205.419486][ T9903] netlink_sendmsg+0x8de/0xcb0 [ 205.419518][ T9903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.419543][ T9903] ? aa_sock_msg_perm+0x91/0x160 [ 205.419573][ T9903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.419592][ T9903] __sock_sendmsg+0x221/0x270 [ 205.419615][ T9903] ____sys_sendmsg+0x53a/0x860 [ 205.419641][ T9903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.419656][ T9903] ? __fget_files+0x2a/0x410 [ 205.419680][ T9903] ? __fget_files+0x2a/0x410 [ 205.419710][ T9903] __sys_sendmsg+0x269/0x350 [ 205.419732][ T9903] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.419762][ T9903] ? do_sys_openat2+0x17a/0x1d0 [ 205.419808][ T9903] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.419832][ T9903] ? do_syscall_64+0x100/0x230 [ 205.419853][ T9903] ? do_syscall_64+0xb6/0x230 [ 205.419874][ T9903] do_syscall_64+0xf3/0x230 [ 205.419892][ T9903] ? clear_bhb_loop+0x35/0x90 [ 205.419917][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.419937][ T9903] RIP: 0033:0x7f66d138d169 [ 205.419952][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.419966][ T9903] RSP: 002b:00007f66d11d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.419984][ T9903] RAX: ffffffffffffffda RBX: 00007f66d15a6080 RCX: 00007f66d138d169 [ 205.419997][ T9903] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 205.420008][ T9903] RBP: 00007f66d11d8090 R08: 0000000000000000 R09: 0000000000000000 [ 205.420018][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.420029][ T9903] R13: 0000000000000001 R14: 00007f66d15a6080 R15: 00007ffd11bde8d8 [ 205.420056][ T9903] [ 205.883068][ T9906] FAULT_INJECTION: forcing a failure. [ 205.883068][ T9906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.919286][ T9906] CPU: 0 UID: 0 PID: 9906 Comm: syz.0.1313 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 205.919312][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.919322][ T9906] Call Trace: [ 205.919329][ T9906] [ 205.919336][ T9906] dump_stack_lvl+0x241/0x360 [ 205.919362][ T9906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.919380][ T9906] ? __pfx__printk+0x10/0x10 [ 205.919403][ T9906] ? snprintf+0xda/0x120 [ 205.919429][ T9906] should_fail_ex+0x40a/0x550 [ 205.919455][ T9906] _copy_to_user+0x31/0xb0 [ 205.919478][ T9906] simple_read_from_buffer+0xca/0x150 [ 205.919503][ T9906] proc_fail_nth_read+0x1e9/0x250 [ 205.919529][ T9906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.919554][ T9906] ? rw_verify_area+0x243/0x630 [ 205.919571][ T9906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.919594][ T9906] vfs_read+0x1f8/0xb40 [ 205.919613][ T9906] ? fdget_pos+0x254/0x320 [ 205.919635][ T9906] ? __pfx___mutex_lock+0x10/0x10 [ 205.919654][ T9906] ? __pfx_vfs_read+0x10/0x10 [ 205.919675][ T9906] ? __fget_files+0x2a/0x410 [ 205.919698][ T9906] ? __fget_files+0x395/0x410 [ 205.919717][ T9906] ? __fget_files+0x2a/0x410 [ 205.919749][ T9906] ksys_read+0x18f/0x2b0 [ 205.919768][ T9906] ? __pfx_ksys_read+0x10/0x10 [ 205.919786][ T9906] ? do_syscall_64+0x100/0x230 [ 205.919807][ T9906] ? do_syscall_64+0xb6/0x230 [ 205.919829][ T9906] do_syscall_64+0xf3/0x230 [ 205.919847][ T9906] ? clear_bhb_loop+0x35/0x90 [ 205.919871][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.919892][ T9906] RIP: 0033:0x7fcdcfb8bb7c [ 205.919907][ T9906] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.919922][ T9906] RSP: 002b:00007fcdcd9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.919939][ T9906] RAX: ffffffffffffffda RBX: 00007fcdcfda6080 RCX: 00007fcdcfb8bb7c [ 205.919951][ T9906] RDX: 000000000000000f RSI: 00007fcdcd9f60a0 RDI: 0000000000000004 [ 205.919962][ T9906] RBP: 00007fcdcd9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 205.919972][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.919982][ T9906] R13: 0000000000000001 R14: 00007fcdcfda6080 R15: 00007ffc76d3d518 [ 205.920010][ T9906] [ 206.201145][ T9913] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000197: 0000 [#1] PREEMPT SMP KASAN PTI [ 206.213771][ T9913] KASAN: null-ptr-deref in range [0x0000000000000cb8-0x0000000000000cbf] [ 206.222192][ T9913] CPU: 1 UID: 0 PID: 9913 Comm: syz.1.1316 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 206.232868][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.242927][ T9913] RIP: 0010:bpf_map_offload_map_alloc+0x19a/0x910 [ 206.249357][ T9913] Code: 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 ac e6 3b 00 48 89 5c 24 18 4c 89 2b 49 8d 9d bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 df 06 00 00 0f b6 1b 31 ff 89 de e8 dd [ 206.268968][ T9913] RSP: 0018:ffffc90002e67bc0 EFLAGS: 00010203 [ 206.275032][ T9913] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: ffff8880307ebc00 [ 206.282990][ T9913] RDX: 0000000000000000 RSI: 0000000067ff0009 RDI: 0000000000000009 [ 206.290950][ T9913] RBP: ffffc90002e67cd8 R08: ffffffff89c99bd3 R09: 1ffffffff207a16e [ 206.298910][ T9913] R10: dffffc0000000000 R11: fffffbfff207a16f R12: dffffc0000000000 [ 206.306866][ T9913] R13: 0000000000000000 R14: ffff888062af0000 R15: 1ffff920005ccf80 [ 206.314822][ T9913] FS: 00007f142b0266c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 206.323738][ T9913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.330307][ T9913] CR2: 00007f142b025f98 CR3: 00000000622c6000 CR4: 00000000003526f0 [ 206.338271][ T9913] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.346231][ T9913] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.354187][ T9913] Call Trace: [ 206.357451][ T9913] [ 206.360366][ T9913] ? __die_body+0x5f/0xb0 [ 206.364694][ T9913] ? die_addr+0xb0/0xe0 [ 206.368840][ T9913] ? exc_general_protection+0x3dd/0x5d0 [ 206.374384][ T9913] ? asm_exc_general_protection+0x26/0x30 [ 206.380092][ T9913] ? __dev_get_by_index+0x93/0x110 [ 206.385194][ T9913] ? bpf_map_offload_map_alloc+0x19a/0x910 [ 206.390989][ T9913] ? __pfx_bpf_map_offload_map_alloc+0x10/0x10 [ 206.397135][ T9913] ? __pfx___might_resched+0x10/0x10 [ 206.402407][ T9913] ? __might_fault+0xaa/0x120 [ 206.407068][ T9913] ? htab_map_alloc_check+0x380/0x470 [ 206.412425][ T9913] map_create+0x946/0x11c0 [ 206.416833][ T9913] __sys_bpf+0x6d3/0x820 [ 206.421064][ T9913] ? __pfx___sys_bpf+0x10/0x10 [ 206.425821][ T9913] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 206.431791][ T9913] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.438110][ T9913] ? exc_page_fault+0x590/0x8b0 [ 206.442949][ T9913] __x64_sys_bpf+0x7c/0x90 [ 206.447352][ T9913] do_syscall_64+0xf3/0x230 [ 206.451840][ T9913] ? clear_bhb_loop+0x35/0x90 [ 206.456508][ T9913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.462389][ T9913] RIP: 0033:0x7f142a18d169 [ 206.466792][ T9913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.486381][ T9913] RSP: 002b:00007f142b026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.494780][ T9913] RAX: ffffffffffffffda RBX: 00007f142a3a5fa0 RCX: 00007f142a18d169 [ 206.502736][ T9913] RDX: 0000000000000048 RSI: 0000400000000000 RDI: 0000000000000000 [ 206.510692][ T9913] RBP: 00007f142a20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 206.518651][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.526605][ T9913] R13: 0000000000000001 R14: 00007f142a3a5fa0 R15: 00007fff7b881dc8 [ 206.534567][ T9913] [ 206.537570][ T9913] Modules linked in: [ 206.541870][ T9913] ---[ end trace 0000000000000000 ]--- [ 206.556323][ T9913] RIP: 0010:bpf_map_offload_map_alloc+0x19a/0x910 [ 206.570346][ T9913] Code: 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 ac e6 3b 00 48 89 5c 24 18 4c 89 2b 49 8d 9d bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 df 06 00 00 0f b6 1b 31 ff 89 de e8 dd [ 206.590149][ T9913] RSP: 0018:ffffc90002e67bc0 EFLAGS: 00010203 [ 206.597977][ T9913] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: ffff8880307ebc00 [ 206.607891][ T9913] RDX: 0000000000000000 RSI: 0000000067ff0009 RDI: 0000000000000009 [ 206.615966][ T9913] RBP: ffffc90002e67cd8 R08: ffffffff89c99bd3 R09: 1ffffffff207a16e [ 206.624721][ T9913] R10: dffffc0000000000 R11: fffffbfff207a16f R12: dffffc0000000000 [ 206.632906][ T9913] R13: 0000000000000000 R14: ffff888062af0000 R15: 1ffff920005ccf80 [ 206.641196][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 206.650591][ T9913] FS: 00007f142b0266c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 206.660373][ T9913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.667078][ T9913] CR2: 00007f9c38c00f98 CR3: 00000000622c6000 CR4: 00000000003526f0 [ 206.675131][ T9913] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.683198][ T9913] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.691238][ T9913] Kernel panic - not syncing: Fatal exception [ 206.697533][ T9913] Kernel Offset: disabled [ 206.701844][ T9913] Rebooting in 86400 seconds..