last executing test programs: 2.903635484s ago: executing program 3 (id=2691): socket$kcm(0x10, 0x2, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0xd3, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7, 0x8000, 0x9, 0x47e}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x50, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) r4 = socket(0x200000000000011, 0x2, 0x10000006) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000540)={0x44, 0x8, 0xc, 0xb, 0x2, 0x81}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.774529442s ago: executing program 3 (id=2693): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x9, 0xf}, {0x4, 0xfff3}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0xc}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x41d}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.699425317s ago: executing program 3 (id=2696): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000021ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000060002000100000008000500", @ANYRES32=r2], 0x54}}, 0x0) 2.546591314s ago: executing program 3 (id=2697): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r5, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x14}}}]}, 0x78}}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3fffe0001, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.856851198s ago: executing program 4 (id=2701): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r1, 0x20000, {0x2, 0xf1, 0x3}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 1.722787537s ago: executing program 0 (id=2702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002500)={r0, 0x0, 0x12, 0x0, &(0x7f0000002440)="a93ae160527860e45d7c62c916b33ad7dd0f", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 1.722390711s ago: executing program 4 (id=2703): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000640)="240000001a005f0214f9f4070009040081000000000300000000008f4ffd46ba2f65ded1", 0x24) 1.706328283s ago: executing program 1 (id=2704): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x141, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0x7, 0xc}}, @cf={0x4, 0x6, {0x4, 0x0, 0x9, 0x1}}, @random={0x6, 0x79, "97c3bb2a8262bfff2ebe828a10a484c2c39cae4e46ac50fb9d443cac053543d3b25831b107964e2d600fbb9cb9a6b8eb4c4cfb1bd4a7b8846d8bdd6581e56f921b3c682b4d02a83af06f9c117fa530cb9aed7ec01f0cee747338f80fb11367b923768a8df5d329a684a9546e5807e1ab8713dc590e0885be64"}, @dsss={0x3, 0x1, 0x7}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0x9, 0x6d, "d0057d7d08b99d6873cc5b954b4317092048879a2f9b14fc24b104335b4f94143888789aa2fb0fc6a6ea89f641fccb43a1c5a6802bab30e10a8ac2487827b9e88ab530950575f469eec0c8556a4e3ffbe92b18dcfb9b5066b393947e8d6afd56c478c5bb21577e8e02512eeae7"}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @challenge={0x10, 0x1, 0x16}, @link_id={0x65, 0x12, {@random="1b656c5902dc", @device_b, @broadcast}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x85, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x8c, 0x4}}, @chsw_timing={0x68, 0x4, {0x1000, 0xe}}, @mic={0x8c, 0x18, {0xdf5, "590a1c5a1e35", @long="9c36ca00174b72434c87dfb3682f4d7f"}}, @challenge={0x10, 0x1, 0xc9}, @random={0xf5, 0x4e, "103bb241151f9d64e05d35bb045f48e13065200d66779cd6b84406d4c2ec29e2bb5c2cf9c25f7158eab6971ed338181beb0ec00c19a3f0e9ed92a93442439dd69fe9e9686f8bd04157b00c2b88ad"}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xba}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000480)={0x169, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x58, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9695e4e278ab"}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x61fea821b6a76be4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x58, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xbc7, 0x26}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000002b80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b40)={&(0x7f00000029c0)={0x144, r6, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6a}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43a29a9c75b0055be0383110097859073dde92d986807a78"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e15e401dce7bb2f6253e09140bb82343663cd7bc6560ad31"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "135578d904183a82f09c84004741c769e86b0c02bb1859c9"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000011) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x2c, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x20004090) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002e00), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002e40)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x60, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x48f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="27a1e31d5b10"}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x801) (async) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)={0x50, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xb, 0x4}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c3de093cda07248f0435f0f992"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x50}}, 0x4044805) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000030c0)={0x0, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000003180)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000031c0)={r9, @in={{0x2, 0x4e24, @multicast2}}, 0x6, 0x5}, 0x90) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x18, 0x1402, 0x400, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x88) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003380)={r0}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route_sched(r0, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)=@deltclass={0x2c, 0x29, 0x0, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x7, 0xfff3}, {0x3, 0x1}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xef, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003500), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x50, r12, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x21, 0xc46]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x2]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4c040) socket$unix(0x1, 0x2, 0x0) 1.6058829s ago: executing program 2 (id=2705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.602782793s ago: executing program 4 (id=2706): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x9, 0xf}, {0x4, 0xfff3}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0xc}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x41d}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.522828991s ago: executing program 1 (id=2707): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) unshare(0x2040400) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x8, 0x5, 0xa, 0xe, 0xb, 0x7, 0x10, 0x9, 0x57, 0x6, 0x4, 0x31, 0x6, 0x91}, 0xe) (async) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x2}) (async) shutdown(r0, 0x1) 1.482619689s ago: executing program 4 (id=2708): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000001880)={0x2, 0x0, @empty}, &(0x7f00000018c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba88", 0x4}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x8, 0xf}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000001940)=ANY=[@ANYRES32=r6, @ANYBLOB="00080000de90cc2cf2ed987f8845601ca07a0800e88bea74ad"], 0x8) r7 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xba02004b, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'caif0\x00', 'veth0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x2}}]}, @common=@SET={0x60}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'wg2\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001780)={'gre0\x00', &(0x7f0000001680)={'syztnl0\x00', 0x0, 0x8000, 0x8766, 0xcba, 0xe, {{0x36, 0x4, 0x3, 0x4, 0xd8, 0x65, 0x0, 0x1, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp={0x44, 0x2c, 0x78, 0x0, 0x0, [0x81, 0x5, 0x80, 0x2, 0x7, 0x1, 0x2, 0x9, 0x9, 0x9]}, @timestamp_prespec={0x44, 0x2c, 0x1c, 0x3, 0x8, [{@private=0xa010102, 0x5676a7d7}, {@rand_addr=0x64010100, 0x600}, {@private=0xa010102, 0x2000000}, {@loopback, 0x9}, {@multicast1, 0xdc}]}, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x15, 0x0, 0x6, [0xfffffff5]}, @generic={0x82, 0xa, "28a703fcdd84ef12"}, @ssrr={0x89, 0x23, 0xbc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}, @timestamp_addr={0x44, 0x14, 0x15, 0x1, 0xe, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xfffffff8}]}, @ssrr={0x89, 0x17, 0xb3, [@dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010100, @empty, @rand_addr=0x64010102, @remote]}]}}}}}) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000001140)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001600)=[{&(0x7f00000011c0)="0c49fb166af0ed97de9cf5086e29d36b4da856e59b28491cb48ca0bf0e87a4d68056f242001dc10311aff0401bb6895115a570cff7f41b5d389b05ed09ab2073663f88046bbe6891a1cfe03c27e7831e5d544ff9c183382a47d7ac05dae58b2142aab00b71705c3db2ff7ff03d4082717abb1c2eb9124b74b17e89dbf38bd7bdc86768b4234cba43f1aede693ae697104ac5574e35c82e05e71fc1453d20bf63e627086a5c5bc86ea591d292e8b14aa885af005876eb", 0xb6}, {&(0x7f0000001280)="6ac9d0675f0ec5cff219f50fa0c630897dcbcb9a857916f7766015dfe3cd6885f9f6c239f18f2057d196f8f00eb8b9b1cf357d214785d000b4d2be9a9e732e15e72894ca08e1f8875c7c2889b3902db693627bcd9edb6144c1da2a7ebab2af46007a6460171ae66e02e844cd546c9af3d743dac52e8f3344e85edc588b95def28426f3aff516f47dfe381fd44061f65753ab14ff68adef60da603544db5cdfe7811bfa0a372ac27c055fdfb6d576988fe52d6143115cf9f70c789cc9c77502fc6e4070eccd4d", 0xc6}, {&(0x7f0000001380)="4cf25f4259eafbf9b450059a221aa4e12632f1a17e66a5d58efa4d790d6a53e46014d3db032fbfedd9e1a2b80ab1be323d023800de372cd9515b46fc4b99dcd45e81af7ce968e170938066", 0x4b}, {&(0x7f0000001400)="50020cdd0ced5693a7ad3b7c0bdd56b8ab423806c4fc1084020faaefb3a24e7e244f5e1ec73d2466df00a9cbd4b3a8c28c0c4a364708cf566b249642784b6d5ded61f11abd4fde34fc95992ba4eddcb6c82aeccf01aa581b23cacf1b8b37b167beca6c1c4e2f1087909a99b6ed9daa85e1155c84bdb7bf5fe3c94ca30649a75d16ec1408ab14789512f72cba61991fba395bf1cb2532723a7cdd898924dea3776ad3ebfb0700f22b252fa53ce8e7e7dd50e94f78ba8aca87b2edae5c", 0xbc}, {&(0x7f00000014c0)="62e7dd1a44e67aa0918600e6befb250e89592ce692f15a3220358512b6e2d0", 0x1f}, {&(0x7f0000001500)="a2de22970c054a076bf2b3c62dd94d5c6f3dae73953d9036abca8e9cc86dc555f8031793faf19be66b4c860b3ee4fb24b9b62f2ac631484285167563a3eda07d02916ecff301f7a4c455e80f720634a62db9ba7a90accaf7b192927d1f5b2d718c64c121097295c135f5fda286113d4f075700ba838068b2c86033b01d04d32c293fcbb2ce12de14198d090c1a57093955c25d2a07e8c156c517bafe736dab3ab4d3f62331e5d5470c5e16abe7412eb993149ebb3b422e297573f9583cfb", 0xbe}, {&(0x7f00000015c0)="857085d7e1b93bf642e9a13ec4117a5318b85073", 0x14}], 0x7, &(0x7f00000017c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @local}}}], 0x50}, 0x60000) 1.450776734s ago: executing program 1 (id=2709): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x40000000002, 0x3, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x9fe99cc7b7e92564, 0x2, 0x9, 0xffffffff, 0xd, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x401, 0x4}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 1.39601425s ago: executing program 4 (id=2710): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x40000000002, 0x3, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x9fe99cc7b7e92564, 0x2, 0x9, 0xffffffff, 0xd, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x401, 0x4}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 1.395266954s ago: executing program 3 (id=2711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}, 0x1, 0xf00}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x3, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2}, 0x40) 650.648034ms ago: executing program 0 (id=2712): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r3, 0x209, 0x1000000, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000000000000100000008000100030000002c0004800500da0bf36c2afe0aea0300000000000500030005000000050003000000000005000300010000000800020002"], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x0, 0x8, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @broadcast, @empty}}}}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x25000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f"], 0x58}}, 0x0) 632.28445ms ago: executing program 2 (id=2713): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="310300000000000000000600000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24044808}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000380)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=0x3) write$cgroup_int(r4, &(0x7f00000003c0)=0x1, 0x12) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000040)={@loopback, @remote}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa7}, @generic={0x5b, 0x0, 0x1, 0x6d3, 0xcc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x2, 0x0, 0x8, 0x1, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0xe5, &(0x7f0000000400)=""/229, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0x1, 0x1, r4, 0x1], &(0x7f00000002c0)=[{0x3, 0x2, 0x6, 0xc}, {0x1, 0x2, 0x4, 0x2}, {0x3, 0x5, 0xa, 0x2}, {0x4, 0x5, 0x4, 0xc}, {0x5, 0x1, 0x5, 0x1}, {0x3, 0x3, 0x2, 0x7}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=r3, 0x35, 0x1, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000740)='netdevsim0\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup=r3, r6, 0x29, 0x30, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000000)={'netdevsim0\x00', 0x100}) write(r0, &(0x7f0000000640)="240000001a005f0214f9f4070009040081000000000300000000008f4ffd46ba2f65ded1", 0x24) 558.333019ms ago: executing program 0 (id=2714): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x1}}], 0x20) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000000)={0x0, 0xffffffffffffff72, 0xfffffffffffffffd, 0x1, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x800) pselect6(0x40, &(0x7f0000000000)={0x5, 0xc895, 0x2b8, 0xfffffffffffffffe, 0x2, 0x7, 0xe, 0x3}, &(0x7f0000000080)={0x80000000, 0x81, 0xffffffffffffffff, 0x3, 0x2, 0xfffffffffffffff8, 0x1, 0x100000001}, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x81]}, 0x8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffff40}]}}]}, 0x38}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000040), &(0x7f0000001880)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x6}}}, 0x24}}, 0x40044) 517.779669ms ago: executing program 3 (id=2715): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='br_fdb_external_learn_add\x00'}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 516.768474ms ago: executing program 1 (id=2716): r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$ax25(r0, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002880)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}, 0x4, 0x2, 0x2, 0x4}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000140)="680e5389e4dc5e87b0766a073534eac2d5cecd643015e8ce5c5341531515d88b92b9c33f35e1ac653b95a2fd3512eb5bf507f728147119dbb66777c1c181ac800c0dac31ab77c800ee2352c1ec35138df5c152fabc4061ed096ea62024f519c30a7816465aa70284ff20cb1abc4aadfdc3c39f606fa504b3f1bb2604d1295c775cbe5c224ef6733698047062b769d0765a64a4fd949fb1a703255aa17fe0a515b2fd62bd351f07fbb909c6b348352b8365f85fd179f2185687b9cfcb5cd44d1acaa18dc85ec9174979602358286d75634bbbe753ebb5c8deee7bbeb30940c497f70f643817b9330a33166f4f380fe8f4", 0xf0}, {&(0x7f0000000240)="1a9c5baf276b4a5ce6775ef2279f6521f5ce33160aa1f9741702d9e1b2282f1a9e7ab882923387cf608e6f5383e4e6f7f256800003d24ec7a210db6fa955c1f29c1bef1e81d0faa6eb8a5bf99ab327142e00c27b2918c423dc281d99fd1ae3ac8574c531ff5c31b6d06917270f6e82c08266e0cc0ad24a435127c7753f5d83b6f7c25bf0ea734be92ae9997946e8180d2da74549388b2e4022cc", 0x9a}, {&(0x7f0000000300)="f1f848cd20b65ed263f937d2d1d06f3e17157ea4ef6935cc40fabd63ba38d850d18e2cda8bda27ce176e", 0x2a}, {&(0x7f0000000340)="d1515d85c116a4b73fdc3476f75a46e1ce84a999e351934bb2c30ce1e30c67e218dc79dd23a6695bb046cbd05b9cf8d872d2e5a87e369443a222429e17602ad6ff1887163ff37964ab000c97779924c06a5f79ab46975ae44abba20e460073cb665d4facbd239b3b26eea416712dc5787439ad2281c3f175cee8bb3ea8ba54b81eea502634b94a4205aa974b4d4a1b232461cdbbdfa20da97fa86e1f6c74e2294a0e020c6d6c9061d24ce176c639ec0554dafddd3be6f0984faf285e149d5866ff5208f821c2ebd96ec02b7f15491e3dd5f56f4ddf40229ec120009f02f001a4782b54389e29f445e8b64cf6b6ba2307e55d64ff6a103ae551563e3be61ae259d3fce2c8e8d587828d5f27eee289542799cf152124218549bbf2cdf09cfb2b703d45e067f606a08abfe95c105246c4d0b28e37de82203a080d5749f12bfd1bd87d8884e30b3c6bb34b9edb4b65caa95f02837d8075116c6b7c0188c66742f6f90d85291b380ef623fc943403329e28e141c9a90a93110f500405dc20d42436053c0c30bc87b9dbaaa8d91cd2adf7f264a012d425c04f55a6f12c15e1a733c179164b0132ddd57141c0894a68948476bb0bfd3631270ce749e4657f684526c85b59d8bee4d52e3d709852817725b6ae33d6a9a8c9ebbedddbf8ef90262600d3793670a897620e41e41aea39c4c3de191e3e764537e4239db976e8137eac86243b2ef4cbe7c0ed761ab15c29897e3842a9cf135a657fdf97e27277d272d70d73eda0dfb72d2f52c8ca93f47dfc30bfc7d6b76837d9b0c32656e8914c554724179440f1a64c5c2710a43dd99743af8eb754b0ce5a120fe5c746db19b549e342b67ab15f083e961ac8ab47b1777f20ae24c47eb71e0d6ccc5aa9e70875180f998140bebaa7ccb0fd6dbf96d0d537bcccfca9d822b4aff31bfc7dcdeb783332d8cdf27c282814183ab300a7fec48d7bccf42cd88ff647ca38babcfc63989068084fdd195aa9f455c2470d37897bf1950a9e3c9506fa3fa7c6a30c5954912a317a6fcc1e27cfdd823601e3858f3bde704124f7db032b87396fb8c08d890aa539a508632d4082b3a475857005575fd9b7988c79152cd207ceb185c5cadaba3d27d79f42fcd70b7c276bb805a29df7e8bbf54a49e3102d976e51f089eb939480ed316340010ba0d602a4080f0d358702106b2bfcf1a5f1105d960c62fb7c157e5e91e78b51939742e7966754a5020797d237694f4ac6812d601b64849e15a1147a4c1e610a5f1f15130d5719924318c85ed36a34cff59829edeb057a17dfc10034d7a47a315c05c0eb5fcf471ba836ddfedc37cf75faa89e2584a530012fc52bd072c502b102aa2f56c05cb6503166ca2f90e990a6c2653d0565124c1214a94f15cc10db48c5c381f982714ce575273e2124de10dff34c8f2dd8dcf3109b70e31232ba3b43dd36095daab0794ad7f19e29b06113616372a9bf8bbe69d685c0a5ff7ff3e652d310a7350c221e184b51e0f4d60b75eba5a1f73b0546b0f533c41ee88f6f80b98ba78fa5af350b732458585e0650a2b6464285f9a05d7ef820b3348935a65af1bd8cb1fdd4b1bebe250694b7a03bb79eabf916217e78d9cc7875dea446250a2f01f4b07f29e6f7791c12d2d44222d5c94238cfd83a6340aadf9860ec7668aa267542f551fe904354af23718fec2c55498b6f15a5b2a5aa61d0f21a1fb556e82f7d393eb8ee30ede279aee5d9f43743b9d01017fcb06a43bec6497564b0d1a74b4d8f163a7325a81ce84b651c1275e8fdfd75b69df5003e375ea95a17ef165a38070764cae0d883f2d428ecaf065f93cb3a2500411766addce26759a6788d7a6e0b58c86b0799f6f3527655af9ebb88ed4c13b76dd9187b73a976835a64a2299cba82232d3ce8cb3f3011345f0d864a84e513e1ff5e70c2947ec992fe676a7de239fae7fa7f1163d657f96bcc16aebc86c3c55b6383997b9879632d6c56e2378eaa282081d9841b77c46031d4ef8f081a5c9862026fb3d18b0e9cff03388324e169183b73e149707532e2a9cc1773594f17859f8b5d608cbf6a2e810277777de8e0ce57ab0d074bad6868c4528905a1afb0aa99591c72cf03848e2932f85541a2d8e5232454c9fc87d78ea849cfe4a09de4777d0240ed3c87dee9803dc08ca64503bd61166c3d1ce66e3ca8364ebf8c54e0a52de96f11d9b2b700f95e7508119576697bc19ecdb7de42ad96ea9009343dd4495e2d7d53ac0a9ca28c21c07a044eb1ce0c3ade25fef19ae897a83874821de84ab0fc092ff867b01423671a48c927baee708cafd7ba9a861cf2425f7bcbe154e3b972b9e8e8e996fcf9eac0fd008f966afa6785a1b2c7ea59570377cbcddc2fa26326c88a7a4e3be249c0436f4894c2ec3e12377b27f6e466fb0654da396a24ef11dcd160429129666cde73716417dcc983733c1c1eb1c5fee5223d2e1628e1f6efd624e7d3c323470d0b779334a2a36129c23f14ebeb1656626c55cd1f84dba8be5e889474dc1f387a1eb17a0a16dfd9c87b928342ecab4f786c6916d532b4186313bb179eedd8885c5e8d37ee0a8d1f5e1b1a5df353609ddaed96b9c2e2a68d662c2be18c7e28b81147bc375481cdeb84d152266f945602be9e96a97701c4686c013b1d5d5c9bf5ff86be93ad89254d1490d48c21cd909dc32ac7ad13034cbb3088f35cb49d02e0c36bd0daead73a1c4ec00bafdb3b60ecac98a649ea4da34ed8d47f00155c3d6db4bca6a168885f53cf9f0f94caab60704256478ef42da7a3eb9d83fa0fa5bf76646270d2bc72640be990ed3536998b9433838c2ff828dc372c070db8b49814f36b3c0575bcc1510278c95b405e9823541cfc9a80ae913b05639975119ffa87165a9bef79af899c161ca0a7f909a6bec90492910bca229b7f6526dc1e43ac1a2c51efe4e6ffb6000cc4701b06c507559ddbe5632ee69fb427787a8ee96178e189cfd243d75c9bc7c9b2baf62868640cd001e12c5dd538f94aedc4bf8fae4d7dd63f7f2b3dee7bbf257ed83f5703cb98432b4e464be88e2f523784a2ae3fd8cd89fc3833d8438a6dc87dce56aa3bf64a98ca53740418bf209849cc14b8b978ddec0e6c12ab989c1caf88b7fa7ef2af45d515ed3128be50d3104fd9cf08fb7abf84d85c9f11b6ae1c18309a743d9595c1b2b9c4de3cb310551e7da279d61ecd95847ff3808dbf8e92d79eb1a8c0809ff16cf6e207d352ec63b4294053d58f9a7a6c155f6ce214717d7a189b149c078360821cae7528e3d378aef2ed01ea8a330c2aa77804f522a6eb1ff3a242facf09ab004f8e1efb0fe0adefe2e957efc9e84e63a8527998d18900dee9b88e7ad477ce44f524a0625b374386283a4f6a04889c87eeb25b3773b411c1c57f48017b599cf643a895016fa393223939f0dd44dc54f4a2b985345576ad8d6d51e296019f75a77692f2f5bae917d4f5a8b0e22863af5ce0878bc886e5aaa4699cf3834d107a9c8ba5158aac5c0488b1c4d457da8da5455bd480dfb2e39ee7a02366f0d58b1883ae9f0ab315036a4da123f728db9775841e899ec813ed2da4df895255117eb9421d263d6bda62dd6bab1eb2bd1cbd0ca6289d836f5bb23f325338d51e81f00bbcc35ced6010bc1568179b952441c7fac5e48c80329b48de613fe022388315c740ad33a7fc1dffde1826015af793e4fd163c5404dbbc60e326b93d29b687ed3c6a6043d328290d8f63785fc92e745b8d29e0e59d4febf84d5f27d0335811c251a11a7fbd25590f3476e7a19e8bad9685eee6288f94b770af5793543fb5e49a792fda05e76cd40a9d2608fb3a430ee329457ab9694e9082b3c98fecd118473533b03d0ce460017f2f9769282ba1d1cae6ba1bb6e204056c818261f01bd82373d1d193a11f696de135d56c43d2a5c9a31514bce2784e3d83cbe71cf7ce331f253040d8928eb68734867671f3420bceef6bc7ae2fd1d507f6126522a69ca46d629222935ac542c02ec28f0c2341d0994174e419636da40f2cd545038cd92bba037ab389c2c93443f0675c04b8b64105199a47332ec0678bb0d67dcacfc1da968450f3f8442756c720140c660d13b951015952cacd26e799a787a7fe8dfcd1b1d4ddaad7550d812263a6404d28babe8c1eedf81a1e75e0cc452e28182a9c6e955897d57d04249f7565609140eb43099d33fd2282539eb9f5d5e987de97750fbbdd281f691a1cc585d409db04de57d5a1e4bd2162994357151241f517b12aa7fa6dc12a63b1b852a7988fbbbc51ce5fb47868738a19d675df1a6fa3264fd9d4453f4b8ba6aed732385557c190ccdaf796ce8210c8635b149c32d8ef1364778f1c488bf66cc4ba7e320b7fc32af7fd773213a7eef7143977265e1663b27213165cb1c42383241783a77a7a7668fbb5b4c23088983c278bdc22709546e5560ec8bfbe5bb76d71999bc9681c829b7c8dde98a32a79917cb48208075368453c2b94a95dbe1daeb82e36a4ae109e4394b23e98ab99c2375788a8ca00c5e5206f603dd3545e9b2cc21b92dfaa5d552973212f52926fd32981dfe0ff598b19ce6aa2caf6da9e5e65557bc7c6853861e6a8c5e96b49060804076907bdd33330ab38376898f285d8a120be9c6649892896b63dd73e805ba753f24670c256f0220ffc06b3fa2ea842797285ab7f7c40779f6192e8b76e84c54510fc68b5ec1fe7ad61e5212cca7fc01dacc35c94cbc941183f05485a0303a7ac4fc8bfeab38ee0b445cf21eb03e43a90177da6595c3383a68517ddba71c58005fc7354067261966e372ed4daf271612bcbde1311a8e707392862dcb72a860ae73f46a192dbce3e283821fb402bc5bed456bf74b1ca965f8b860cc4d51e41d8811c5c3d6379f4132a1cc06c42125f2285008ccb99315cca9ed7b066576e9b92caed29a743b5272725eb4eb8b4a386671850d7a6011465f227e123f3cc502c682b8b3d156f4d2c37efe37a76be48f4de5e12888c6b6413815965f6c38785eba0f716018ae19572a2533324d230d555d9ac7792bbd522e7300e5205a4e7f7502b96172b7b8068031f0e15704ec6e08eede061d6813cbec823c504368605eaece2596004d86fd5c0e1f242e600b61b2d665864a27058796e4a3183a5839a53776e54678c5cc1c8ff5ad280595c1c05fd6c2edd2eacaa5d34f262482ec5a35c0339c486e07b45e997fa6bb0b77e254220f3cfa1bd78ad119ff83626af530ee71abcd20dcee5d3c82d49d19f9d69759941c5fd989f03b8ddf05c0fe0d0829dcaab9c4a10ddae3c2f774220ac9f7025b22509036389f3105f38c3a3b2cae65bdf1d17e4ccd3e0ad547dab2e5276cc518b6ddb2059c2e2c47fec70cca1211322570b2b36e6bb528c314933f1baa3ca17e621186212a9e0353feb9b15756377659fa87e5a8b589115603cb69bb01dfc7e8556b68112dff100b9caeac8d4ffdb98cde893f54969945470ef745bfd6dcf798bc28d0218fd6b22f9fe5797301a248012c381599ed465c6499c7e4738369fb24296f0e0da120cd902409fbb656811cba0cb437c2b45e498c944e25348695b90221d20e688e374460e2bb03971f8118128e9cd439861a72c3cf1533e05479a56f222aad34fb42841074bd4cee87c57db3b1a47c170eca5761a745e933eb5ab750e2bd6672924ee562336b06a8289569babbd0d484a051bcfde9e60fbc4ae0a12219ef16ea44185aa44b309313b174bea9264eef87d97265cb892178c8c0e6325817a902cc2b25584e9fbe70ba120fa38b378eb058bbaec96", 0x1000}, {&(0x7f0000001340)="87642d181beb07c0cf313259a67a5263", 0x10}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="a1cae6666b6f6abe30038ec8724541786f9e4eab983e2e0380b693f838c68680350282af5fcc6e37f52b0015d2dde82fdd4f37bde60d2524f06fba1185d7405cb88af77c44a9daf3553298f35734ecbb29c77b3b8b9fe538b9b78dc8df0b0c035f0026a5465d50eba1a48b6e77733a41e32c6939db48620856015f39dcda24067a85a77edf3793233a93840ca77d72af0f26", 0x92}, {&(0x7f0000002440)="5fae040c8aa262d48d5a8b80944b3fc6861ccf5da395ddb0df3ef6fc87a1ac34cab071219407cccd53fe098c7e064ef33d6b399a0ce7f402f3bca6cc5bfd7ae0a6e5b3a873b599edb8a0b263eaa8ff208cbf76b245cb64b3", 0x58}, {&(0x7f00000024c0)="0c725ee6", 0x4}, {&(0x7f0000002500)="df06553cbac50a1bf92ef1cd0df09735", 0x10}], 0xa, &(0x7f0000002600)=[{0x60, 0x10e, 0x80000000, "34461787faf1bc1571666c1fe744c6feec8313283f04af7fc1c8d3d746c41f508a5c582699489ef771d07cd363fa7daa16839a4c2acda286cad4071679e031ab6ce193b0004036585611f0"}, {0x110, 0x118, 0x8, "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"}, {0xf0, 0x10c, 0x19, "306c3b1735b6f766b61f387cdecf5a24e11eb5207c11d4b70feb4f0936c648ea755c98c51916ce5c75594e5d01c3814c3ee516e01e087abb8c53d8cfd96e061721ea394f6e12844943ab22187b1deeed00d641bcd97d3c0732931b7d0aae79c836e1b383abb0831eebb29e1f22cc1b5503c878d2ac446d2c7cc3d1413ea54e55f04bba92dc89fea349bf43f1350e1e8239c53d5f92bcf56bf8b9531c776d7e1d250baf6b0bd539f46c353d1e16873201191a3cefbd7cea19982fa23d2156ccd896998ac62ed562beefd97403d3dad490b64f1a2fe409c513b4"}], 0x260}, 0x4040041) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000028c0)={'pimreg0\x00', 0x0}) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000002900)=@netrom={'nr', 0x0}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000002940)={0x2, 0x0, @local}, &(0x7f0000002980)=0x10) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000029c0)={@broadcast, @rand_addr=0x64010101, r2}, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000002b00)={r6, r5, 0xfb8b, 0xa2, &(0x7f0000002a40)="0b7f74a860afd9207ee4d4a0cf3466a6ea76f211aa6e5275cc6fb7c67bb5ced3f18e4c60aca6f9891011a0621d0c810177dac10a226eaa9fbcf4038e376d503886264861590b5b1e3ce7b933374e5e716fda86ca234766eb0e78d3a5485066f5df1f03ea3aea86226015e8dd723a8cf0c5a1866a469e8cb6a049fc0586b5f7383831f7e65905f7c524537df13c3849cd42cce3d2412ed7b756a7e9c964350174992a", 0xf, 0x4, 0x2, 0x9d, 0x4, 0x3, 0x1280, 'syz0\x00'}) getsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000002bc0), &(0x7f0000002c00)=0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r7) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x50, r9, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x43}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1e}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002e40)={'sit0\x00', &(0x7f0000002dc0)={'syztnl1\x00', r2, 0x7, 0x80, 0x3, 0x3, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @local, {[@lsrr={0x83, 0x13, 0xfa, [@multicast1, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101]}, @noop, @rr={0x7, 0xb, 0x5e, [@remote, @broadcast]}]}}}}}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000002f80)) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r11, &(0x7f0000002fc0)={0x2, 0x4e24, @empty}, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000003040), r8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x2c, r12, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003440)={0xb, 0xa, &(0x7f00000031c0)=@raw=[@jmp={0x5, 0x1, 0x6, 0x5, 0x5c4b776938639, 0xfffffffffffffff0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000003240)='GPL\x00', 0x9, 0xfe, &(0x7f0000003280)=""/254, 0x41000, 0x0, '\x00', r10, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003380)={0x5, 0xf, 0x77, 0xf7c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000033c0)=[r8, 0x1], &(0x7f0000003400), 0x10, 0x4, @void, @value}, 0x94) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000003580)={0x9, &(0x7f0000003500)=[{0x3, 0x7f, 0x6, 0x4}, {0x5, 0x7, 0x40, 0xfffffffa}, {0x2, 0x7, 0x6, 0x4e}, {0x7, 0x0, 0x7, 0x7}, {0x7, 0xff, 0x0, 0x3}, {0x4, 0x7f, 0x6, 0x7d}, {0x5, 0x7, 0x81, 0xfffffffb}, {0x401, 0x6, 0xf8, 0xc24}, {0xb, 0x0, 0x1, 0x40}]}, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003600), r8) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000003780)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003740)={&(0x7f0000003640)={0xf8, r14, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xf8}}, 0x40) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000003800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003840)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r8, &(0x7f0000003a40)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003a00)={&(0x7f0000003880)={0x180, r14, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 511.052646ms ago: executing program 4 (id=2717): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x76, &(0x7f0000000ac0)={@random="09c9849d490f", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ced920", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "b3a21a", 0x0, 0x0, 0x0, @dev, @private0, [@dstopts={0x84}], "83098ece0f967fda"}}}}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r3, &(0x7f00000003c0)={@val={0x0, 0x9100}, @void, @eth={@empty, @random="1f00", @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x4e) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r2, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)=@bridge_getlink={0x30, 0x12, 0x1609, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x43902, 0x40010}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4001}, @IFLA_EXT_MASK={0x8, 0x1d, 0xf89}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000084) unshare(0x8000400) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000280)=@req={0xfff, 0x5, 0x4, 0x10000}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r11, @ANYBLOB="00410000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000080008"], 0x3c}}, 0x0) 378.489307ms ago: executing program 2 (id=2718): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7, 0x9, 0x7fffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x5, 0x3, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x700, 0xff10, 0xe5f, 0x80000001}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000002140)={0x44c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xdc, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1fc, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc72ad8f6ab4bdd34}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3542d35e0a2e4ea6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x44c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000d40)=""/207, 0xcf}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000f00)=""/197, 0xc5}, {&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f0000001100)=""/4098, 0x1002}, {&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000140)=""/65, 0x41}], 0x8}, 0x2000) 281.535062ms ago: executing program 0 (id=2719): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 237.05046ms ago: executing program 2 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffd, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2b}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x44}}, 0x0) 166.68665ms ago: executing program 1 (id=2721): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001600)={'filter\x00', 0xb001, 0x4, 0x3f8, 0x110, 0x110, 0x0, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110, 0x30}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0xffffffff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010102, @local, 0x2, 0xfffffffe}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) setsockopt$inet_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) 160.67471ms ago: executing program 0 (id=2722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r2, r3}, 0xc) 129.554031ms ago: executing program 2 (id=2723): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x60, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}]}, 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) 82.729942ms ago: executing program 1 (id=2724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988cafbe863cac5058031c97d70ccd0f76db9", 0x280}, {&(0x7f0000000100)="e3f4e01bb64d88aff4c99218e5450df5392e79789c3968b1c72fc30961", 0x1d}], 0x2) 54.645927ms ago: executing program 0 (id=2725): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}, 0x1, 0xf00}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x3, 0x4, 0x0, "1b2bc764c7ed2890"}, 0x10}, 0x2}, 0x40) 0s ago: executing program 2 (id=2726): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x40000000002, 0x3, 0x2) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r4, 0x9fe99cc7b7e92564, 0x2, 0x9, 0xffffffff, 0xd, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x401, 0x4}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) kernel console output (not intermixed with test programs): __alloc_skb+0x1c3/0x440 [ 254.584659][T11557] ? __pfx___alloc_skb+0x10/0x10 [ 254.589599][T11557] ? if_nlmsg_size+0x755/0x7a0 [ 254.594360][T11557] ? if_nlmsg_size+0x540/0x7a0 [ 254.599127][T11557] rtmsg_ifinfo_build_skb+0x84/0x260 [ 254.604411][T11557] ? in6_dev_get+0x22a/0x290 [ 254.609008][T11557] ? notifier_call_chain+0x15a/0x3f0 [ 254.614291][T11557] rtmsg_ifinfo+0x91/0x1b0 [ 254.618714][T11557] netdev_state_change+0x139/0x1a0 [ 254.623829][T11557] ? __pfx_netdev_state_change+0x10/0x10 [ 254.629485][T11557] do_setlink+0x7eb/0x4210 [ 254.633921][T11557] ? mark_lock+0x9a/0x360 [ 254.638254][T11557] ? __pfx_do_setlink+0x10/0x10 [ 254.643105][T11557] ? macsec_changelink_common+0x782/0xa70 [ 254.648825][T11557] ? __pfx_macsec_changelink_common+0x10/0x10 [ 254.654894][T11557] ? macsec_changelink+0x187/0x430 [ 254.660013][T11557] ? macsec_changelink+0x372/0x430 [ 254.665133][T11557] ? __pfx_macsec_changelink+0x10/0x10 [ 254.670607][T11557] ? __mutex_lock+0x5ef/0xee0 [ 254.675287][T11557] ? rtnl_newlink+0xbcb/0x2150 [ 254.680062][T11557] ? __pfx___mutex_lock+0x10/0x10 [ 254.685093][T11557] ? ns_capable+0x8a/0xf0 [ 254.689427][T11557] ? rtnl_link_get_net_capable+0x168/0x340 [ 254.695237][T11557] rtnl_newlink+0x1519/0x2150 [ 254.699923][T11557] ? __pfx_rtnl_newlink+0x10/0x10 [ 254.704944][T11557] ? __netlink_deliver_tap+0x56b/0x7f0 [ 254.710409][T11557] ? __pfx_validate_chain+0x10/0x10 [ 254.715618][T11557] ? __sock_sendmsg+0x221/0x270 [ 254.720470][T11557] ? ____sys_sendmsg+0x52a/0x7e0 [ 254.725406][T11557] ? __sys_sendmsg+0x269/0x350 [ 254.730172][T11557] ? do_syscall_64+0xf3/0x230 [ 254.734844][T11557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.740922][T11557] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.746911][T11557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.753243][T11557] ? mark_lock+0x9a/0x360 [ 254.757581][T11557] ? __lock_acquire+0x1397/0x2100 [ 254.762629][T11557] ? __pfx_lock_release+0x10/0x10 [ 254.767671][T11557] ? __pfx_rtnl_newlink+0x10/0x10 [ 254.772702][T11557] rtnetlink_rcv_msg+0x791/0xcf0 [ 254.777642][T11557] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 254.782759][T11557] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.788230][T11557] ? ref_tracker_free+0x643/0x7e0 [ 254.793266][T11557] netlink_rcv_skb+0x1e3/0x430 [ 254.798032][T11557] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.803502][T11557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.808804][T11557] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.814005][T11557] netlink_unicast+0x7f6/0x990 [ 254.818811][T11557] ? __pfx_netlink_unicast+0x10/0x10 [ 254.824117][T11557] ? __virt_addr_valid+0x45f/0x530 [ 254.829263][T11557] ? __phys_addr_symbol+0x2f/0x70 [ 254.834348][T11557] ? __check_object_size+0x47a/0x730 [ 254.839663][T11557] netlink_sendmsg+0x8e4/0xcb0 [ 254.844449][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.849740][T11557] ? aa_sock_msg_perm+0x91/0x160 [ 254.854694][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.859975][T11557] __sock_sendmsg+0x221/0x270 [ 254.864663][T11557] ____sys_sendmsg+0x52a/0x7e0 [ 254.869434][T11557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.874719][T11557] ? __fget_files+0x2a/0x410 [ 254.879321][T11557] ? __fget_files+0x2a/0x410 [ 254.883920][T11557] __sys_sendmsg+0x269/0x350 [ 254.888513][T11557] ? __pfx_lock_release+0x10/0x10 [ 254.893541][T11557] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.898664][T11557] ? __pfx_vfs_write+0x10/0x10 [ 254.903447][T11557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.909779][T11557] ? do_syscall_64+0x100/0x230 [ 254.914548][T11557] ? do_syscall_64+0xb6/0x230 [ 254.919227][T11557] do_syscall_64+0xf3/0x230 [ 254.923729][T11557] ? clear_bhb_loop+0x35/0x90 [ 254.928418][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.934318][T11557] RIP: 0033:0x7fbe64f85d19 [ 254.938749][T11557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.958795][T11557] RSP: 002b:00007fbe65d09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.967218][T11557] RAX: ffffffffffffffda RBX: 00007fbe65175fa0 RCX: 00007fbe64f85d19 [ 254.975192][T11557] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 254.983168][T11557] RBP: 00007fbe65d09090 R08: 0000000000000000 R09: 0000000000000000 [ 254.991138][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.999106][T11557] R13: 0000000000000000 R14: 00007fbe65175fa0 R15: 00007ffe713e91a8 [ 255.007088][T11557] [ 255.042096][T11559] vlan2: entered promiscuous mode [ 255.152496][T11566] vlan2: entered promiscuous mode [ 255.173633][T11566] dummy0: entered promiscuous mode [ 255.202396][T11566] dummy0: left promiscuous mode [ 255.745993][T11588] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 255.772796][T11588] FAULT_INJECTION: forcing a failure. [ 255.772796][T11588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.806152][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.0.1871 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 255.817039][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 255.827129][T11588] Call Trace: [ 255.830439][T11588] [ 255.833402][T11588] dump_stack_lvl+0x241/0x360 [ 255.838173][T11588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.843418][T11588] ? __pfx__printk+0x10/0x10 [ 255.848054][T11588] ? __pfx_lock_release+0x10/0x10 [ 255.853125][T11588] should_fail_ex+0x3b0/0x4e0 [ 255.857859][T11588] _copy_to_iter+0x440/0x1c50 [ 255.862590][T11588] ? __pfx__copy_to_iter+0x10/0x10 [ 255.867723][T11588] ? __virt_addr_valid+0x183/0x530 [ 255.872848][T11588] ? __virt_addr_valid+0x183/0x530 [ 255.877955][T11588] ? __virt_addr_valid+0x45f/0x530 [ 255.883073][T11588] ? __check_object_size+0x47a/0x730 [ 255.888360][T11588] __skb_datagram_iter+0x107/0x900 [ 255.893472][T11588] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 255.899110][T11588] skb_copy_datagram_iter+0xd1/0x250 [ 255.904397][T11588] netlink_recvmsg+0x2d0/0x11d0 [ 255.909286][T11588] ? __pfx_netlink_recvmsg+0x10/0x10 [ 255.914570][T11588] ? __pfx_aa_sk_perm+0x10/0x10 [ 255.919428][T11588] ? iovec_from_user+0x1b4/0x240 [ 255.924369][T11588] ? aa_sock_msg_perm+0x91/0x160 [ 255.929302][T11588] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 255.934587][T11588] ? __pfx_netlink_recvmsg+0x10/0x10 [ 255.939879][T11588] sock_recvmsg+0x22f/0x280 [ 255.944390][T11588] ____sys_recvmsg+0x1c6/0x480 [ 255.949158][T11588] ? __pfx_____sys_recvmsg+0x10/0x10 [ 255.954467][T11588] __sys_recvmsg+0x291/0x390 [ 255.959065][T11588] ? __pfx___sys_recvmsg+0x10/0x10 [ 255.964171][T11588] ? __mutex_unlock_slowpath+0x21e/0x790 [ 255.969815][T11588] ? __fget_files+0x2a/0x410 [ 255.974422][T11588] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.980751][T11588] ? do_syscall_64+0x100/0x230 [ 255.985513][T11588] ? do_syscall_64+0xb6/0x230 [ 255.990184][T11588] do_syscall_64+0xf3/0x230 [ 255.994682][T11588] ? clear_bhb_loop+0x35/0x90 [ 255.999362][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.005251][T11588] RIP: 0033:0x7f35ced85d19 [ 256.009661][T11588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.029273][T11588] RSP: 002b:00007f35cfc73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 256.037690][T11588] RAX: ffffffffffffffda RBX: 00007f35cef75fa0 RCX: 00007f35ced85d19 [ 256.045658][T11588] RDX: 0000000000002000 RSI: 0000000020000000 RDI: 0000000000000003 [ 256.053625][T11588] RBP: 00007f35cfc73090 R08: 0000000000000000 R09: 0000000000000000 [ 256.061597][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.069569][T11588] R13: 0000000000000000 R14: 00007f35cef75fa0 R15: 00007fff401c4338 [ 256.077552][T11588] [ 256.091292][T11588] netlink: 'syz.0.1871': attribute type 29 has an invalid length. [ 256.116431][T11597] netlink: 'syz.4.1874': attribute type 29 has an invalid length. [ 256.126524][T11597] netlink: 'syz.4.1874': attribute type 29 has an invalid length. [ 256.179327][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.185747][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.284922][T11601] vlan2: entered promiscuous mode [ 256.354716][T11603] netlink: 'syz.4.1879': attribute type 178 has an invalid length. [ 256.442427][T11605] lo speed is unknown, defaulting to 1000 [ 256.463682][T11603] __nla_validate_parse: 9 callbacks suppressed [ 256.463705][T11603] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1879'. [ 256.559522][T11610] vlan2: entered promiscuous mode [ 256.828876][T11624] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1884'. [ 256.949882][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 257.288889][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 257.521215][T11657] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1893'. [ 257.610054][T11657] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1893'. [ 257.682425][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 257.713302][T11663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1894'. [ 257.947231][T11671] lo speed is unknown, defaulting to 1000 [ 258.289516][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 258.461053][T11686] lo speed is unknown, defaulting to 1000 [ 258.524722][T11691] vlan2: entered promiscuous mode [ 258.947482][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1900'. [ 258.992607][T11710] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 259.762100][T11738] xt_bpf: check failed: parse error [ 259.812627][T11742] netlink: 'syz.1.1920': attribute type 10 has an invalid length. [ 259.822693][T11742] syz_tun: entered promiscuous mode [ 259.858240][T11742] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 259.985466][T11749] bond0: (slave syz_tun): Releasing backup interface [ 260.297584][T11768] xt_bpf: check failed: parse error [ 260.314222][T11762] vlan2: entered promiscuous mode [ 260.329945][T11762] dummy0: entered promiscuous mode [ 260.350583][T11762] dummy0: left promiscuous mode [ 260.403879][T11774] FAULT_INJECTION: forcing a failure. [ 260.403879][T11774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.424319][T11774] CPU: 0 UID: 0 PID: 11774 Comm: syz.4.1932 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 260.435168][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 260.445246][T11774] Call Trace: [ 260.448541][T11774] [ 260.451481][T11774] dump_stack_lvl+0x241/0x360 [ 260.456176][T11774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.461401][T11774] ? __pfx__printk+0x10/0x10 [ 260.466006][T11774] ? __pfx_lock_release+0x10/0x10 [ 260.471052][T11774] should_fail_ex+0x3b0/0x4e0 [ 260.475741][T11774] _copy_from_user+0x2f/0xc0 [ 260.480354][T11774] copy_msghdr_from_user+0xae/0x680 [ 260.485566][T11774] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 260.491377][T11774] ? __fget_files+0x2a/0x410 [ 260.495999][T11774] ? __fget_files+0x2a/0x410 [ 260.500625][T11774] __sys_sendmsg+0x209/0x350 [ 260.505215][T11774] ? __pfx_lock_release+0x10/0x10 [ 260.510253][T11774] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.515376][T11774] ? __pfx_vfs_write+0x10/0x10 [ 260.520171][T11774] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.526522][T11774] ? do_syscall_64+0x100/0x230 [ 260.531393][T11774] ? do_syscall_64+0xb6/0x230 [ 260.536078][T11774] do_syscall_64+0xf3/0x230 [ 260.540601][T11774] ? clear_bhb_loop+0x35/0x90 [ 260.545275][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.551187][T11774] RIP: 0033:0x7fbe64f85d19 [ 260.555600][T11774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.575207][T11774] RSP: 002b:00007fbe65d09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.583627][T11774] RAX: ffffffffffffffda RBX: 00007fbe65175fa0 RCX: 00007fbe64f85d19 [ 260.591603][T11774] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 260.599577][T11774] RBP: 00007fbe65d09090 R08: 0000000000000000 R09: 0000000000000000 [ 260.607557][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.615531][T11774] R13: 0000000000000000 R14: 00007fbe65175fa0 R15: 00007ffe713e91a8 [ 260.623525][T11774] [ 260.723369][T11780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.768022][T11778] netlink: 'syz.3.1934': attribute type 10 has an invalid length. [ 260.796656][T11778] syz_tun: entered promiscuous mode [ 260.896332][T11788] tipc: Enabling of bearer rejected, failed to enable media [ 261.063958][T11797] netlink: 'syz.4.1941': attribute type 9 has an invalid length. [ 261.082619][T11797] netlink: 'syz.4.1941': attribute type 6 has an invalid length. [ 261.110006][T11797] netlink: 'syz.4.1941': attribute type 7 has an invalid length. [ 261.127505][T11801] xt_bpf: check failed: parse error [ 261.134426][T11797] netlink: 'syz.4.1941': attribute type 8 has an invalid length. [ 261.386467][T11806] syzkaller0: entered promiscuous mode [ 261.402300][T11806] syzkaller0: entered allmulticast mode [ 261.620585][T11821] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 261.783201][T11828] __nla_validate_parse: 9 callbacks suppressed [ 261.783230][T11828] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1952'. [ 263.499008][T11821] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.512053][T11821] team0: entered promiscuous mode [ 263.531048][T11821] team_slave_0: entered promiscuous mode [ 263.551152][T11821] team_slave_1: entered promiscuous mode [ 263.564616][T11821] bond0: (slave team0): Enslaving as an active interface with an up link [ 263.605051][T11826] bridge_slave_0: left allmulticast mode [ 263.612589][T11826] bridge_slave_0: left promiscuous mode [ 263.632309][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.647969][T11826] bridge_slave_1: left allmulticast mode [ 263.663970][T11826] bridge_slave_1: left promiscuous mode [ 263.682908][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.704559][T11826] bond0: (slave bond_slave_0): Releasing backup interface [ 263.742100][T11826] bond0: (slave bond_slave_1): Releasing backup interface [ 263.801457][T11826] team0: Port device team_slave_0 removed [ 263.840433][T11826] team0: Port device team_slave_1 removed [ 263.847621][T11826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.855089][T11826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.863927][T11826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.881551][T11842] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1955'. [ 263.891744][T11842] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1955'. [ 264.058435][T11853] netlink: 'syz.1.1961': attribute type 10 has an invalid length. [ 264.072383][T11853] batman_adv: batadv0: Adding interface: team0 [ 264.086081][T11853] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.111800][T11853] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 264.124132][T11857] netlink: 'syz.1.1961': attribute type 10 has an invalid length. [ 264.133075][T11857] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1961'. [ 264.150947][T11857] team0: entered promiscuous mode [ 264.159113][T11855] netlink: 'syz.0.1962': attribute type 4 has an invalid length. [ 264.168984][T11857] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.177764][T11857] batman_adv: batadv0: Interface activated: team0 [ 264.184799][T11857] batman_adv: batadv0: Interface deactivated: team0 [ 264.192311][T11857] batman_adv: batadv0: Removing interface: team0 [ 264.215279][T11857] bridge0: port 1(team0) entered blocking state [ 264.242456][T11857] bridge0: port 1(team0) entered disabled state [ 264.254090][T11857] team0: entered allmulticast mode [ 264.634552][T11882] vlan2: entered promiscuous mode [ 264.654562][T11882] dummy0: entered promiscuous mode [ 264.655216][T11879] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1969'. [ 264.670319][T11882] dummy0: left promiscuous mode [ 264.766169][T11886] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1971'. [ 264.777096][T11886] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1971'. [ 264.998482][T11902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1976'. [ 265.016532][T11902] netlink: 'syz.4.1976': attribute type 10 has an invalid length. [ 265.025366][T11902] syz_tun: entered promiscuous mode [ 265.054851][T11902] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 265.355559][T11912] lo speed is unknown, defaulting to 1000 [ 265.883703][T11912] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 265.943336][T11925] team0: left allmulticast mode [ 265.951772][T11925] bridge0: port 1(team0) entered disabled state [ 266.004831][T11925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1984'. [ 266.173471][T11935] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1986'. [ 266.603763][T11944] IPVS: Error connecting to the multicast addr [ 266.654737][T11949] vlan2: entered promiscuous mode [ 266.686077][T11949] dummy0: entered promiscuous mode [ 266.711443][T11949] dummy0: left promiscuous mode [ 266.966300][T11961] vlan2: entered promiscuous mode [ 267.131195][T11966] __nla_validate_parse: 1 callbacks suppressed [ 267.131219][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'. [ 267.201334][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 267.338608][T11976] lo speed is unknown, defaulting to 1000 [ 267.431847][T11982] vlan2: entered promiscuous mode [ 267.445379][T11982] team0: Device vlan2 is already an upper device of the team interface [ 267.573889][T11990] IPVS: Error joining to the multicast group [ 267.825044][T11998] IPVS: Error joining to the multicast group [ 268.059344][T12004] vlan2: entered promiscuous mode [ 268.088688][T12008] bridge_slave_0: left allmulticast mode [ 268.101783][T12008] bridge_slave_0: left promiscuous mode [ 268.108281][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.119553][T12008] bridge_slave_1: left allmulticast mode [ 268.125275][T12008] bridge_slave_1: left promiscuous mode [ 268.137361][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.233378][T12021] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.233394][T12008] team0: Port device team_slave_0 removed [ 268.258184][T12008] team0: Port device team_slave_1 removed [ 268.264409][T12008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.272785][T12008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.281174][T12008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.294203][T12019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2015'. [ 268.316210][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 268.567874][T12026] vlan2: entered promiscuous mode [ 268.625456][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 268.635017][T12034] FAULT_INJECTION: forcing a failure. [ 268.635017][T12034] name failslab, interval 1, probability 0, space 0, times 0 [ 268.648913][T12034] CPU: 1 UID: 0 PID: 12034 Comm: syz.3.2021 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 268.659720][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 268.669806][T12034] Call Trace: [ 268.673109][T12034] [ 268.676063][T12034] dump_stack_lvl+0x241/0x360 [ 268.680779][T12034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.686024][T12034] ? __pfx__printk+0x10/0x10 [ 268.690656][T12034] ? ref_tracker_alloc+0x332/0x490 [ 268.695799][T12034] should_fail_ex+0x3b0/0x4e0 [ 268.700528][T12034] should_failslab+0xac/0x100 [ 268.705248][T12034] ? skb_clone+0x20c/0x390 [ 268.709690][T12034] kmem_cache_alloc_noprof+0x70/0x380 [ 268.715087][T12034] skb_clone+0x20c/0x390 [ 268.719337][T12034] __netlink_deliver_tap+0x3cc/0x7f0 [ 268.724631][T12034] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.729825][T12034] netlink_deliver_tap+0x19d/0x1b0 [ 268.735307][T12034] netlink_sendskb+0x68/0x140 [ 268.739986][T12034] netlink_unicast+0x39d/0x990 [ 268.744843][T12034] ? __pfx_netlink_unicast+0x10/0x10 [ 268.750139][T12034] netlink_rcv_skb+0x262/0x430 [ 268.754905][T12034] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 268.760379][T12034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.765852][T12034] ? apparmor_capable+0x13b/0x1b0 [ 268.770889][T12034] ? bpf_lsm_capable+0x9/0x10 [ 268.775564][T12034] ? security_capable+0x7e/0x2d0 [ 268.780507][T12034] nfnetlink_rcv+0x297/0x2ab0 [ 268.785186][T12034] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 268.790909][T12034] ? __dev_queue_xmit+0x2f4/0x3f50 [ 268.796026][T12034] ? __dev_queue_xmit+0x1775/0x3f50 [ 268.801219][T12034] ? kasan_save_track+0x51/0x80 [ 268.806079][T12034] ? ____sys_sendmsg+0x52a/0x7e0 [ 268.811047][T12034] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 268.816258][T12034] ? __dev_queue_xmit+0x2f4/0x3f50 [ 268.821386][T12034] ? __pfx___dev_queue_xmit+0x10/0x10 [ 268.827041][T12034] ? ref_tracker_free+0x643/0x7e0 [ 268.832067][T12034] ? __asan_memcpy+0x40/0x70 [ 268.836654][T12034] ? __pfx_ref_tracker_free+0x10/0x10 [ 268.842042][T12034] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.847235][T12034] ? skb_clone+0x240/0x390 [ 268.851655][T12034] ? __pfx_lock_release+0x10/0x10 [ 268.856684][T12034] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 268.862153][T12034] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.867351][T12034] netlink_unicast+0x7f6/0x990 [ 268.872122][T12034] ? __pfx_netlink_unicast+0x10/0x10 [ 268.877407][T12034] ? __virt_addr_valid+0x45f/0x530 [ 268.882515][T12034] ? __phys_addr_symbol+0x2f/0x70 [ 268.887538][T12034] ? __check_object_size+0x47a/0x730 [ 268.892826][T12034] netlink_sendmsg+0x8e4/0xcb0 [ 268.897596][T12034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.902878][T12034] ? aa_sock_msg_perm+0x91/0x160 [ 268.907820][T12034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.913103][T12034] __sock_sendmsg+0x221/0x270 [ 268.917790][T12034] ____sys_sendmsg+0x52a/0x7e0 [ 268.922558][T12034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.927849][T12034] ? __fget_files+0x2a/0x410 [ 268.932442][T12034] ? __fget_files+0x2a/0x410 [ 268.937046][T12034] __sys_sendmsg+0x269/0x350 [ 268.941635][T12034] ? __pfx_lock_release+0x10/0x10 [ 268.946746][T12034] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.951869][T12034] ? __pfx_vfs_write+0x10/0x10 [ 268.956647][T12034] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 268.962981][T12034] ? do_syscall_64+0x100/0x230 [ 268.967755][T12034] ? do_syscall_64+0xb6/0x230 [ 268.972439][T12034] do_syscall_64+0xf3/0x230 [ 268.976937][T12034] ? clear_bhb_loop+0x35/0x90 [ 268.981646][T12034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.987554][T12034] RIP: 0033:0x7faafe585d19 [ 268.991976][T12034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.011611][T12034] RSP: 002b:00007faaff477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.020073][T12034] RAX: ffffffffffffffda RBX: 00007faafe775fa0 RCX: 00007faafe585d19 [ 269.028046][T12034] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 269.036013][T12034] RBP: 00007faaff477090 R08: 0000000000000000 R09: 0000000000000000 [ 269.043982][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.051949][T12034] R13: 0000000000000000 R14: 00007faafe775fa0 R15: 00007ffcaae69808 [ 269.059936][T12034] [ 269.314712][T12045] geneve2: entered promiscuous mode [ 269.322551][T12048] FAULT_INJECTION: forcing a failure. [ 269.322551][T12048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.338919][T12048] CPU: 1 UID: 0 PID: 12048 Comm: syz.0.2024 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 269.349743][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 269.359830][T12048] Call Trace: [ 269.363391][T12048] [ 269.366344][T12048] dump_stack_lvl+0x241/0x360 [ 269.371829][T12048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.377041][T12048] ? __pfx__printk+0x10/0x10 [ 269.381646][T12048] should_fail_ex+0x3b0/0x4e0 [ 269.386336][T12048] _copy_from_user+0x2f/0xc0 [ 269.390944][T12048] sctp_setsockopt+0xcc/0x11c0 [ 269.395714][T12048] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 269.401610][T12048] do_sock_setsockopt+0x3af/0x720 [ 269.406729][T12048] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 269.412274][T12048] ? __fget_files+0x395/0x410 [ 269.416949][T12048] ? __fget_files+0x2a/0x410 [ 269.421546][T12048] __x64_sys_setsockopt+0x1ee/0x280 [ 269.426748][T12048] do_syscall_64+0xf3/0x230 [ 269.431249][T12048] ? clear_bhb_loop+0x35/0x90 [ 269.435932][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.441918][T12048] RIP: 0033:0x7f35ced85d19 [ 269.446332][T12048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.465934][T12048] RSP: 002b:00007f35cfc52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.474348][T12048] RAX: ffffffffffffffda RBX: 00007f35cef76080 RCX: 00007f35ced85d19 [ 269.482329][T12048] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 269.490359][T12048] RBP: 00007f35cfc52090 R08: 0000000000000014 R09: 0000000000000000 [ 269.498343][T12048] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 269.506313][T12048] R13: 0000000000000001 R14: 00007f35cef76080 R15: 00007fff401c4338 [ 269.514299][T12048] [ 269.523140][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2023'. [ 269.539710][T12051] netlink: 'syz.3.2023': attribute type 1 has an invalid length. [ 269.548163][T12051] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2023'. [ 269.892543][T12073] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2031'. [ 269.916555][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2032'. [ 269.963697][T12070] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2031'. [ 270.280308][T12092] vlan2: entered promiscuous mode [ 270.347081][T12099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.371734][T12101] netlink: zone id is out of range [ 270.378285][T12101] netlink: zone id is out of range [ 270.383915][T12101] netlink: zone id is out of range [ 270.403484][T12101] netlink: get zone limit has 8 unknown bytes [ 270.886290][T12120] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 270.987799][T12131] vlan2: entered promiscuous mode [ 271.010164][T12133] vlan2: entered promiscuous mode [ 271.061325][T12135] netlink: 'syz.2.2054': attribute type 10 has an invalid length. [ 271.793867][T12174] vlan2: entered promiscuous mode [ 271.821282][T12174] dummy0: entered promiscuous mode [ 271.869075][T12174] dummy0: left promiscuous mode [ 272.071305][T12183] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 272.338259][T12196] xt_cgroup: xt_cgroup: no path or classid specified [ 272.356151][T12197] xt_cgroup: xt_cgroup: no path or classid specified [ 272.703967][T12212] vlan2: entered promiscuous mode [ 272.725879][T12212] dummy0: entered promiscuous mode [ 272.790917][T12212] dummy0: left promiscuous mode [ 272.994298][T12224] vlan2: entered promiscuous mode [ 273.006721][T12224] team0: entered promiscuous mode [ 273.032827][T12224] team0: Device vlan2 is already an upper device of the team interface [ 273.044618][T12228] __nla_validate_parse: 6 callbacks suppressed [ 273.044640][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2091'. [ 273.060663][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2091'. [ 273.096668][T12224] team0: left promiscuous mode [ 273.232833][T12237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2093'. [ 273.251925][T12237] netlink: 'syz.4.2093': attribute type 10 has an invalid length. [ 273.283328][T12239] FAULT_INJECTION: forcing a failure. [ 273.283328][T12239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.297181][T12239] CPU: 1 UID: 0 PID: 12239 Comm: syz.0.2094 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 273.307992][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 273.318082][T12239] Call Trace: [ 273.321389][T12239] [ 273.324343][T12239] dump_stack_lvl+0x241/0x360 [ 273.329067][T12239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.334308][T12239] ? __pfx__printk+0x10/0x10 [ 273.338938][T12239] ? __pfx_lock_release+0x10/0x10 [ 273.344000][T12239] ? __lock_acquire+0x1397/0x2100 [ 273.349065][T12239] should_fail_ex+0x3b0/0x4e0 [ 273.353792][T12239] _copy_from_user+0x2f/0xc0 [ 273.358432][T12239] kstrtouint_from_user+0xc6/0x190 [ 273.363588][T12239] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 273.369346][T12239] ? __pfx_lock_acquire+0x10/0x10 [ 273.374443][T12239] proc_fail_nth_write+0xaa/0x2d0 [ 273.379512][T12239] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 273.385449][T12239] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.386891][T12247] netlink: 4632 bytes leftover after parsing attributes in process `syz.2.2096'. [ 273.391107][T12239] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.405905][T12239] vfs_write+0x2a3/0xd30 [ 273.410193][T12239] ? __pfx_vfs_write+0x10/0x10 [ 273.415099][T12239] ? __fget_files+0x2a/0x410 [ 273.419727][T12239] ? __fget_files+0x395/0x410 [ 273.424428][T12239] ? __fget_files+0x2a/0x410 [ 273.429042][T12239] ksys_write+0x18f/0x2b0 [ 273.433393][T12239] ? __pfx_ksys_write+0x10/0x10 [ 273.438240][T12239] ? do_syscall_64+0x100/0x230 [ 273.443001][T12239] ? do_syscall_64+0xb6/0x230 [ 273.447676][T12239] do_syscall_64+0xf3/0x230 [ 273.452173][T12239] ? clear_bhb_loop+0x35/0x90 [ 273.456858][T12239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.462747][T12239] RIP: 0033:0x7f35ced847cf [ 273.467165][T12239] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 273.486773][T12239] RSP: 002b:00007f35cfc73030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 273.495185][T12239] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f35ced847cf [ 273.503157][T12239] RDX: 0000000000000001 RSI: 00007f35cfc730a0 RDI: 000000000000000c [ 273.511131][T12239] RBP: 00007f35cfc73090 R08: 0000000000000000 R09: 0000000000000000 [ 273.519107][T12239] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 273.527074][T12239] R13: 0000000000000000 R14: 00007f35cef75fa0 R15: 00007fff401c4338 [ 273.535055][T12239] [ 273.544039][ T11] bond0: (slave syz_tun): link status definitely down, disabling slave [ 273.556056][ T11] bond0: now running without any active interface! [ 273.732750][T12256] FAULT_INJECTION: forcing a failure. [ 273.732750][T12256] name failslab, interval 1, probability 0, space 0, times 0 [ 273.782438][T12256] CPU: 1 UID: 0 PID: 12256 Comm: syz.3.2099 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 273.793290][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 273.803395][T12256] Call Trace: [ 273.806710][T12256] [ 273.809670][T12256] dump_stack_lvl+0x241/0x360 [ 273.812085][T12262] vlan2: entered promiscuous mode [ 273.814363][T12256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.819604][T12262] dummy0: entered promiscuous mode [ 273.824572][T12256] ? __pfx__printk+0x10/0x10 [ 273.824605][T12256] ? kmem_cache_alloc_noprof+0x48/0x380 [ 273.824629][T12256] ? __pfx___might_resched+0x10/0x10 [ 273.845204][T12256] should_fail_ex+0x3b0/0x4e0 [ 273.849929][T12256] should_failslab+0xac/0x100 [ 273.854639][T12256] ? alloc_vfsmnt+0x27/0x4d0 [ 273.859241][T12256] kmem_cache_alloc_noprof+0x70/0x380 [ 273.864655][T12256] alloc_vfsmnt+0x27/0x4d0 [ 273.869113][T12256] clone_mnt+0x6b/0xc80 [ 273.873321][T12256] copy_tree+0xe4/0x830 [ 273.877511][T12256] ? __init_waitqueue_head+0xae/0x150 [ 273.882920][T12256] ? alloc_mnt_ns+0x2f8/0x3d0 [ 273.887636][T12256] copy_mnt_ns+0x176/0x8c0 [ 273.892088][T12256] ? rcu_is_watching+0x15/0xb0 [ 273.896886][T12256] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 273.902302][T12256] create_new_namespaces+0xd3/0x7b0 [ 273.907567][T12256] ? bpf_lsm_capable+0x9/0x10 [ 273.912267][T12256] ? security_capable+0x7e/0x2d0 [ 273.917246][T12256] unshare_nsproxy_namespaces+0x124/0x180 [ 273.923009][T12256] ksys_unshare+0x57d/0xa70 [ 273.927549][T12256] ? __pfx_ksys_unshare+0x10/0x10 [ 273.932608][T12256] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.938973][T12256] ? do_syscall_64+0x100/0x230 [ 273.943775][T12256] __x64_sys_unshare+0x38/0x40 [ 273.948571][T12256] do_syscall_64+0xf3/0x230 [ 273.953107][T12256] ? clear_bhb_loop+0x35/0x90 [ 273.957822][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.963750][T12256] RIP: 0033:0x7faafe585d19 [ 273.968199][T12256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.987846][T12256] RSP: 002b:00007faaff477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 273.996290][T12256] RAX: ffffffffffffffda RBX: 00007faafe775fa0 RCX: 00007faafe585d19 [ 274.004314][T12256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 274.012297][T12256] RBP: 00007faaff477090 R08: 0000000000000000 R09: 0000000000000000 [ 274.020289][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.028295][T12256] R13: 0000000000000000 R14: 00007faafe775fa0 R15: 00007ffcaae69808 [ 274.036330][T12256] [ 274.052215][T12262] dummy0: left promiscuous mode [ 274.072698][T12272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2103'. [ 274.096522][T12263] netlink: 'syz.2.2100': attribute type 21 has an invalid length. [ 274.104465][T12263] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2100'. [ 274.117702][T12272] netlink: 'syz.0.2103': attribute type 10 has an invalid length. [ 274.128798][T12272] syz_tun: entered promiscuous mode [ 274.139579][T12272] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 274.163076][T12266] netlink: 'syz.2.2100': attribute type 21 has an invalid length. [ 274.171484][T12266] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2100'. [ 274.319725][T12281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2107'. [ 274.391931][T12283] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2108'. [ 274.430341][T12283] netlink: 'syz.3.2108': attribute type 10 has an invalid length. [ 274.547737][T12292] FAULT_INJECTION: forcing a failure. [ 274.547737][T12292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.561820][T12292] CPU: 0 UID: 0 PID: 12292 Comm: syz.4.2112 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 274.572631][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 274.582718][T12292] Call Trace: [ 274.586025][T12292] [ 274.588979][T12292] dump_stack_lvl+0x241/0x360 [ 274.593702][T12292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.598938][T12292] ? __pfx__printk+0x10/0x10 [ 274.603571][T12292] ? __pfx_lock_release+0x10/0x10 [ 274.608643][T12292] ? rcu_is_watching+0x15/0xb0 [ 274.613452][T12292] should_fail_ex+0x3b0/0x4e0 [ 274.618181][T12292] _copy_from_iter+0x1e9/0x1c20 [ 274.623082][T12292] ? alloc_pages_mpol_noprof+0x417/0x680 [ 274.628757][T12292] ? __pfx__copy_from_iter+0x10/0x10 [ 274.634087][T12292] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 274.640116][T12292] ? alloc_pages_noprof+0xef/0x170 [ 274.645266][T12292] ? page_copy_sane+0x46/0x260 [ 274.650073][T12292] copy_page_from_iter+0x7a/0x100 [ 274.655166][T12292] tun_get_user+0x203c/0x4890 [ 274.659896][T12292] ? tun_get_user+0x86e/0x4890 [ 274.664715][T12292] ? __lock_acquire+0x1397/0x2100 [ 274.669783][T12292] ? __pfx_tun_get_user+0x10/0x10 [ 274.674866][T12292] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 274.680369][T12292] ? tun_get+0x1e/0x2f0 [ 274.684568][T12292] ? __pfx_lock_release+0x10/0x10 [ 274.689647][T12292] ? tun_get+0x1e/0x2f0 [ 274.693857][T12292] ? tun_get+0x27d/0x2f0 [ 274.698149][T12292] tun_chr_write_iter+0x10d/0x1f0 [ 274.702118][T12301] syzkaller0: entered promiscuous mode [ 274.703195][T12292] vfs_write+0xaeb/0xd30 [ 274.703225][T12292] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 274.712953][T12301] syzkaller0: entered allmulticast mode [ 274.718463][T12292] ? __pfx_vfs_write+0x10/0x10 [ 274.718491][T12292] ? __fget_files+0x2a/0x410 [ 274.718520][T12292] ? __fget_files+0x2a/0x410 [ 274.718548][T12292] ksys_write+0x18f/0x2b0 [ 274.718568][T12292] ? __pfx_ksys_write+0x10/0x10 [ 274.718586][T12292] ? do_syscall_64+0x100/0x230 [ 274.718606][T12292] ? do_syscall_64+0xb6/0x230 [ 274.718625][T12292] do_syscall_64+0xf3/0x230 [ 274.761280][T12292] ? clear_bhb_loop+0x35/0x90 [ 274.765998][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.771929][T12292] RIP: 0033:0x7fbe64f847cf [ 274.776377][T12292] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 274.796016][T12292] RSP: 002b:00007fbe65d09000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 274.804476][T12292] RAX: ffffffffffffffda RBX: 00007fbe65175fa0 RCX: 00007fbe64f847cf [ 274.812490][T12292] RDX: 0000000000000062 RSI: 0000000020000140 RDI: 00000000000000c8 [ 274.820520][T12292] RBP: 00007fbe65d09090 R08: 0000000000000000 R09: 0000000000000000 [ 274.828531][T12292] R10: 0000000000000062 R11: 0000000000000293 R12: 0000000000000001 [ 274.836556][T12292] R13: 0000000000000000 R14: 00007fbe65175fa0 R15: 00007ffe713e91a8 [ 274.844586][T12292] [ 275.045333][T12316] netlink: 'syz.1.2116': attribute type 3 has an invalid length. [ 275.055566][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 275.134086][T12319] netlink: 'syz.1.2116': attribute type 30 has an invalid length. [ 276.679756][T12319] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 276.818110][T12326] netlink: 'syz.1.2123': attribute type 10 has an invalid length. [ 276.880658][T12326] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 276.907970][T12334] netlink: 'syz.4.2120': attribute type 29 has an invalid length. [ 277.104503][T12344] geneve2: entered promiscuous mode [ 277.165650][T12350] netlink: 'syz.4.2129': attribute type 1 has an invalid length. [ 277.198883][T12352] bond0: (slave bridge0): Releasing backup interface [ 277.224734][T12352] bridge0: left promiscuous mode [ 277.251679][T12360] trusted_key: syz.2.2132 sent an empty control message without MSG_MORE. [ 277.282819][T12352] bond0: (slave team0): Releasing backup interface [ 277.318655][T12352] team0: left promiscuous mode [ 277.324592][T12352] team_slave_0: left promiscuous mode [ 277.334890][T12352] team_slave_1: left promiscuous mode [ 277.353936][T12352] bridge_slave_0: left allmulticast mode [ 277.360674][T12352] bridge_slave_0: left promiscuous mode [ 277.366655][T12352] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.378662][T12352] bridge_slave_1: left allmulticast mode [ 277.384389][T12352] bridge_slave_1: left promiscuous mode [ 277.391227][T12352] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.402249][T12352] bond0: (slave bond_slave_0): Releasing backup interface [ 277.409922][T12352] bond_slave_0: left promiscuous mode [ 277.420283][T12352] bond0: (slave bond_slave_1): Releasing backup interface [ 277.429692][T12352] bond_slave_1: left promiscuous mode [ 277.439073][T12352] team0: Port device team_slave_0 removed [ 277.449852][T12352] team0: Port device team_slave_1 removed [ 277.456720][T12352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.476890][T12352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.497865][T12352] bond0: (slave netdevsim0): Releasing backup interface [ 277.510726][T12352] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 277.543554][T12375] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 277.668982][T12372] syzkaller0: entered promiscuous mode [ 277.686011][T12372] syzkaller0: entered allmulticast mode [ 277.758119][T12386] sctp: [Deprecated]: syz.2.2137 (pid 12386) Use of int in max_burst socket option. [ 277.758119][T12386] Use struct sctp_assoc_value instead [ 279.717490][T12402] FAULT_INJECTION: forcing a failure. [ 279.717490][T12402] name failslab, interval 1, probability 0, space 0, times 0 [ 279.753862][T12402] CPU: 0 UID: 0 PID: 12402 Comm: syz.1.2144 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 279.764698][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 279.774786][T12402] Call Trace: [ 279.778095][T12402] [ 279.781061][T12402] dump_stack_lvl+0x241/0x360 [ 279.785775][T12402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.791017][T12402] ? __pfx__printk+0x10/0x10 [ 279.795636][T12402] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 279.801652][T12402] ? __pfx___might_resched+0x10/0x10 [ 279.806974][T12402] should_fail_ex+0x3b0/0x4e0 [ 279.811696][T12402] should_failslab+0xac/0x100 [ 279.816414][T12402] kmem_cache_alloc_node_noprof+0x77/0x380 [ 279.822250][T12402] ? __alloc_skb+0x1c3/0x440 [ 279.826872][T12402] __alloc_skb+0x1c3/0x440 [ 279.831413][T12402] ? __pfx___alloc_skb+0x10/0x10 [ 279.836384][T12402] ? netlink_ack_tlv_len+0x6e/0x200 [ 279.841591][T12402] netlink_ack+0x145/0xa50 [ 279.846019][T12402] netlink_rcv_skb+0x262/0x430 [ 279.850780][T12402] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.856330][T12402] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.861629][T12402] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.866826][T12402] netlink_unicast+0x7f6/0x990 [ 279.871603][T12402] ? __pfx_netlink_unicast+0x10/0x10 [ 279.876996][T12402] ? __virt_addr_valid+0x45f/0x530 [ 279.882155][T12402] ? __phys_addr_symbol+0x2f/0x70 [ 279.887196][T12402] ? __check_object_size+0x47a/0x730 [ 279.892489][T12402] netlink_sendmsg+0x8e4/0xcb0 [ 279.897265][T12402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.902553][T12402] ? aa_sock_msg_perm+0x91/0x160 [ 279.907509][T12402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.912791][T12402] __sock_sendmsg+0x221/0x270 [ 279.917479][T12402] ____sys_sendmsg+0x52a/0x7e0 [ 279.922253][T12402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.927536][T12402] ? __fget_files+0x2a/0x410 [ 279.932132][T12402] ? __fget_files+0x2a/0x410 [ 279.936731][T12402] __sys_sendmmsg+0x36a/0x720 [ 279.941414][T12402] ? __pfx___sys_sendmmsg+0x10/0x10 [ 279.946621][T12402] ? __pfx_lock_release+0x10/0x10 [ 279.951650][T12402] ? kstrtouint_from_user+0x128/0x190 [ 279.957036][T12402] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 279.962938][T12402] ? ksys_write+0x22a/0x2b0 [ 279.967444][T12402] ? __pfx_lock_release+0x10/0x10 [ 279.972482][T12402] ? vfs_write+0x730/0xd30 [ 279.976911][T12402] ? __mutex_unlock_slowpath+0x21e/0x790 [ 279.982579][T12402] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.988568][T12402] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.994900][T12402] ? do_syscall_64+0x100/0x230 [ 279.999665][T12402] __x64_sys_sendmmsg+0xa0/0xb0 [ 280.004521][T12402] do_syscall_64+0xf3/0x230 [ 280.009021][T12402] ? clear_bhb_loop+0x35/0x90 [ 280.013698][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.019588][T12402] RIP: 0033:0x7fb3ac785d19 [ 280.024004][T12402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.043703][T12402] RSP: 002b:00007fb3ad562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.052126][T12402] RAX: ffffffffffffffda RBX: 00007fb3ac975fa0 RCX: 00007fb3ac785d19 [ 280.060096][T12402] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 280.068071][T12402] RBP: 00007fb3ad562090 R08: 0000000000000000 R09: 0000000000000000 [ 280.076040][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.084011][T12402] R13: 0000000000000000 R14: 00007fb3ac975fa0 R15: 00007ffdf30fc5c8 [ 280.091990][T12402] [ 280.127265][T12410] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 280.304818][T12423] __nla_validate_parse: 7 callbacks suppressed [ 280.304840][T12423] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2152'. [ 280.344729][T12424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2151'. [ 280.357447][T12423] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2152'. [ 280.366184][T12424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2151'. [ 280.640599][T12440] vlan2: entered promiscuous mode [ 280.663987][T12436] vlan2: entered promiscuous mode [ 280.703550][T12441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2155'. [ 280.879994][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'. [ 280.961627][T12455] FAULT_INJECTION: forcing a failure. [ 280.961627][T12455] name failslab, interval 1, probability 0, space 0, times 0 [ 280.975018][T12455] CPU: 1 UID: 0 PID: 12455 Comm: syz.3.2163 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 280.985823][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 280.995888][T12455] Call Trace: [ 280.999163][T12455] [ 281.002090][T12455] dump_stack_lvl+0x241/0x360 [ 281.006782][T12455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.011987][T12455] ? __pfx__printk+0x10/0x10 [ 281.016587][T12455] should_fail_ex+0x3b0/0x4e0 [ 281.021268][T12455] should_failslab+0xac/0x100 [ 281.025952][T12455] ? skb_clone+0x20c/0x390 [ 281.030377][T12455] kmem_cache_alloc_noprof+0x70/0x380 [ 281.035758][T12455] skb_clone+0x20c/0x390 [ 281.040003][T12455] __netlink_deliver_tap+0x3cc/0x7f0 [ 281.045295][T12455] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.050505][T12455] netlink_deliver_tap+0x19d/0x1b0 [ 281.055614][T12455] netlink_unicast+0x7c4/0x990 [ 281.060386][T12455] ? __pfx_netlink_unicast+0x10/0x10 [ 281.065673][T12455] ? __virt_addr_valid+0x45f/0x530 [ 281.070788][T12455] ? __phys_addr_symbol+0x2f/0x70 [ 281.075830][T12455] ? __check_object_size+0x47a/0x730 [ 281.081132][T12455] netlink_sendmsg+0x8e4/0xcb0 [ 281.085910][T12455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.091192][T12455] ? aa_sock_msg_perm+0x91/0x160 [ 281.096134][T12455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.101414][T12455] __sock_sendmsg+0x221/0x270 [ 281.106091][T12455] ____sys_sendmsg+0x52a/0x7e0 [ 281.110866][T12455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.116148][T12455] ? __fget_files+0x2a/0x410 [ 281.120738][T12455] ? __fget_files+0x2a/0x410 [ 281.125333][T12455] __sys_sendmsg+0x269/0x350 [ 281.129923][T12455] ? __pfx_lock_release+0x10/0x10 [ 281.134947][T12455] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.140066][T12455] ? __pfx_vfs_write+0x10/0x10 [ 281.144847][T12455] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.151182][T12455] ? do_syscall_64+0x100/0x230 [ 281.155946][T12455] ? do_syscall_64+0xb6/0x230 [ 281.160652][T12455] do_syscall_64+0xf3/0x230 [ 281.165180][T12455] ? clear_bhb_loop+0x35/0x90 [ 281.169889][T12455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.175801][T12455] RIP: 0033:0x7faafe585d19 [ 281.180235][T12455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.199850][T12455] RSP: 002b:00007faaff477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.208263][T12455] RAX: ffffffffffffffda RBX: 00007faafe775fa0 RCX: 00007faafe585d19 [ 281.216237][T12455] RDX: 0000000000040040 RSI: 0000000020000000 RDI: 0000000000000003 [ 281.224204][T12455] RBP: 00007faaff477090 R08: 0000000000000000 R09: 0000000000000000 [ 281.232173][T12455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.240140][T12455] R13: 0000000000000000 R14: 00007faafe775fa0 R15: 00007ffcaae69808 [ 281.248124][T12455] [ 281.261646][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 281.273989][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 281.412900][T12465] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2165'. [ 281.426207][T12465] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2165'. [ 281.575208][T12475] FAULT_INJECTION: forcing a failure. [ 281.575208][T12475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.579866][T12473] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 281.602745][T12473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.612192][T12473] batadv0: entered promiscuous mode [ 281.618306][T12473] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 281.641032][T12475] CPU: 1 UID: 0 PID: 12475 Comm: syz.1.2171 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 281.651859][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 281.661921][T12475] Call Trace: [ 281.665227][T12475] [ 281.668164][T12475] dump_stack_lvl+0x241/0x360 [ 281.672852][T12475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.678062][T12475] ? __pfx__printk+0x10/0x10 [ 281.682676][T12475] ? __pfx_lock_release+0x10/0x10 [ 281.687700][T12475] should_fail_ex+0x3b0/0x4e0 [ 281.692396][T12475] _copy_from_user+0x2f/0xc0 [ 281.697016][T12475] copy_msghdr_from_user+0xae/0x680 [ 281.702232][T12475] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 281.708059][T12475] ? __fget_files+0x2a/0x410 [ 281.712655][T12475] ? __fget_files+0x2a/0x410 [ 281.717252][T12475] __sys_sendmsg+0x209/0x350 [ 281.721870][T12475] ? __pfx_lock_release+0x10/0x10 [ 281.726914][T12475] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.732157][T12475] ? __pfx_vfs_write+0x10/0x10 [ 281.736979][T12475] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.743431][T12475] ? do_syscall_64+0x100/0x230 [ 281.748229][T12475] ? do_syscall_64+0xb6/0x230 [ 281.752937][T12475] do_syscall_64+0xf3/0x230 [ 281.757465][T12475] ? clear_bhb_loop+0x35/0x90 [ 281.762167][T12475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.768090][T12475] RIP: 0033:0x7fb3ac785d19 [ 281.772530][T12475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.792429][T12475] RSP: 002b:00007fb3ad562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.800883][T12475] RAX: ffffffffffffffda RBX: 00007fb3ac975fa0 RCX: 00007fb3ac785d19 [ 281.808881][T12475] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 281.816858][T12475] RBP: 00007fb3ad562090 R08: 0000000000000000 R09: 0000000000000000 [ 281.824829][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.832793][T12475] R13: 0000000000000000 R14: 00007fb3ac975fa0 R15: 00007ffdf30fc5c8 [ 281.840966][T12475] [ 281.917033][T12482] netlink: 'syz.4.2174': attribute type 10 has an invalid length. [ 281.940620][T12484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.418585][T12499] tipc: Enabling of bearer rejected, failed to enable media [ 282.619082][T12506] bond0: (slave batadv0): Releasing backup interface [ 282.627172][T12506] batadv0: left promiscuous mode [ 283.023744][T12512] vlan2: entered promiscuous mode [ 283.033643][T12512] dummy0: entered promiscuous mode [ 283.119394][T12519] netlink: 'syz.4.2186': attribute type 10 has an invalid length. [ 283.206478][T12522] openvswitch: netlink: Missing key (keys=40, expected=100) [ 283.546296][T12512] dummy0: left promiscuous mode [ 283.791505][T12531] netlink: 'syz.1.2190': attribute type 1 has an invalid length. [ 283.925627][T12531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.943098][T12531] bond1: (slave bond2): making interface the new active one [ 283.952130][T12531] bond1: (slave bond2): Enslaving as an active interface with an up link [ 283.977851][T12539] netlink: 'syz.0.2192': attribute type 9 has an invalid length. [ 284.001237][T12544] lo speed is unknown, defaulting to 1000 [ 284.060166][T12551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.441256][T12567] FAULT_INJECTION: forcing a failure. [ 284.441256][T12567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.492070][T12569] pim6reg: entered allmulticast mode [ 284.500435][T12567] CPU: 0 UID: 0 PID: 12567 Comm: syz.3.2198 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 284.511248][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 284.521334][T12567] Call Trace: [ 284.524658][T12567] [ 284.527619][T12567] dump_stack_lvl+0x241/0x360 [ 284.532337][T12567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.537571][T12567] ? __pfx__printk+0x10/0x10 [ 284.542202][T12567] ? __pfx_lock_release+0x10/0x10 [ 284.547262][T12567] ? rcu_is_watching+0x15/0xb0 [ 284.551069][T12569] pim6reg: left allmulticast mode [ 284.552130][T12567] should_fail_ex+0x3b0/0x4e0 [ 284.552169][T12567] _copy_from_iter+0x1e9/0x1c20 [ 284.566843][T12567] ? alloc_pages_mpol_noprof+0x417/0x680 [ 284.572514][T12567] ? __pfx__copy_from_iter+0x10/0x10 [ 284.577841][T12567] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 284.583878][T12567] ? alloc_pages_noprof+0xef/0x170 [ 284.589027][T12567] ? page_copy_sane+0x46/0x260 [ 284.593829][T12567] copy_page_from_iter+0x7a/0x100 [ 284.598917][T12567] tun_get_user+0x203c/0x4890 [ 284.603635][T12567] ? tun_get_user+0x86e/0x4890 [ 284.608437][T12567] ? __lock_acquire+0x1397/0x2100 [ 284.613501][T12567] ? __pfx_tun_get_user+0x10/0x10 [ 284.618638][T12567] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 284.624130][T12567] ? tun_get+0x1e/0x2f0 [ 284.628320][T12567] ? __pfx_lock_release+0x10/0x10 [ 284.633391][T12567] ? tun_get+0x1e/0x2f0 [ 284.637582][T12567] ? tun_get+0x27d/0x2f0 [ 284.641866][T12567] tun_chr_write_iter+0x10d/0x1f0 [ 284.646926][T12567] vfs_write+0xaeb/0xd30 [ 284.651197][T12567] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 284.656772][T12567] ? __pfx_vfs_write+0x10/0x10 [ 284.661562][T12567] ? __fget_files+0x2a/0x410 [ 284.666188][T12567] ? __fget_files+0x2a/0x410 [ 284.670810][T12567] ksys_write+0x18f/0x2b0 [ 284.675169][T12567] ? __pfx_ksys_write+0x10/0x10 [ 284.680045][T12567] ? do_syscall_64+0x100/0x230 [ 284.684837][T12567] ? do_syscall_64+0xb6/0x230 [ 284.689548][T12567] do_syscall_64+0xf3/0x230 [ 284.694074][T12567] ? clear_bhb_loop+0x35/0x90 [ 284.698780][T12567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.704702][T12567] RIP: 0033:0x7faafe5847cf [ 284.709142][T12567] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 284.728781][T12567] RSP: 002b:00007faaff477000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 284.737231][T12567] RAX: ffffffffffffffda RBX: 00007faafe775fa0 RCX: 00007faafe5847cf [ 284.745235][T12567] RDX: 0000000000000046 RSI: 00000000200003c0 RDI: 00000000000000c8 [ 284.753238][T12567] RBP: 00007faaff477090 R08: 0000000000000000 R09: 0000000000000000 [ 284.761240][T12567] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 284.769243][T12567] R13: 0000000000000000 R14: 00007faafe775fa0 R15: 00007ffcaae69808 [ 284.777259][T12567] [ 284.882723][T12579] FAULT_INJECTION: forcing a failure. [ 284.882723][T12579] name failslab, interval 1, probability 0, space 0, times 0 [ 284.986262][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.2.2201 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 284.997179][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 285.007263][T12579] Call Trace: [ 285.010539][T12579] [ 285.013467][T12579] dump_stack_lvl+0x241/0x360 [ 285.018242][T12579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.023464][T12579] ? __pfx__printk+0x10/0x10 [ 285.028067][T12579] ? __kmalloc_noprof+0xb5/0x4c0 [ 285.033020][T12579] ? __pfx___might_resched+0x10/0x10 [ 285.038327][T12579] ? aa_get_newest_label+0xff/0x6f0 [ 285.043661][T12579] should_fail_ex+0x3b0/0x4e0 [ 285.048383][T12579] should_failslab+0xac/0x100 [ 285.053181][T12579] __kmalloc_noprof+0xdd/0x4c0 [ 285.057973][T12579] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 285.064246][T12579] ? apparmor_capable+0x13b/0x1b0 [ 285.069293][T12579] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 285.075370][T12579] genl_rcv_msg+0x802/0xec0 [ 285.079912][T12579] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.084986][T12579] ? __pfx_lock_acquire+0x10/0x10 [ 285.090008][T12579] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 285.095547][T12579] ? __pfx___might_resched+0x10/0x10 [ 285.100851][T12579] netlink_rcv_skb+0x1e3/0x430 [ 285.105627][T12579] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.110656][T12579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.115960][T12579] genl_rcv+0x28/0x40 [ 285.119938][T12579] netlink_unicast+0x7f6/0x990 [ 285.124706][T12579] ? __pfx_netlink_unicast+0x10/0x10 [ 285.129987][T12579] ? __virt_addr_valid+0x45f/0x530 [ 285.135126][T12579] ? __phys_addr_symbol+0x2f/0x70 [ 285.140175][T12579] ? __check_object_size+0x47a/0x730 [ 285.145477][T12579] netlink_sendmsg+0x8e4/0xcb0 [ 285.150264][T12579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.155558][T12579] ? aa_sock_msg_perm+0x91/0x160 [ 285.160508][T12579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.165787][T12579] __sock_sendmsg+0x221/0x270 [ 285.170470][T12579] ____sys_sendmsg+0x52a/0x7e0 [ 285.175238][T12579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.180526][T12579] ? __fget_files+0x2a/0x410 [ 285.185127][T12579] ? __fget_files+0x2a/0x410 [ 285.189722][T12579] __sys_sendmsg+0x269/0x350 [ 285.194346][T12579] ? __pfx_lock_release+0x10/0x10 [ 285.199375][T12579] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.204501][T12579] ? __pfx_vfs_write+0x10/0x10 [ 285.209281][T12579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.215612][T12579] ? do_syscall_64+0x100/0x230 [ 285.220377][T12579] ? do_syscall_64+0xb6/0x230 [ 285.225049][T12579] do_syscall_64+0xf3/0x230 [ 285.229557][T12579] ? clear_bhb_loop+0x35/0x90 [ 285.234236][T12579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.240129][T12579] RIP: 0033:0x7f4626385d19 [ 285.244556][T12579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.264176][T12579] RSP: 002b:00007f4627269038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.272594][T12579] RAX: ffffffffffffffda RBX: 00007f4626575fa0 RCX: 00007f4626385d19 [ 285.280568][T12579] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 285.288535][T12579] RBP: 00007f4627269090 R08: 0000000000000000 R09: 0000000000000000 [ 285.296510][T12579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.304477][T12579] R13: 0000000000000000 R14: 00007f4626575fa0 R15: 00007ffe914ecab8 [ 285.312459][T12579] [ 285.442883][T12583] lo speed is unknown, defaulting to 1000 [ 285.497915][T12592] __nla_validate_parse: 10 callbacks suppressed [ 285.497935][T12592] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2205'. [ 285.513456][T12592] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2205'. [ 285.981037][T12608] netlink: 'syz.4.2209': attribute type 29 has an invalid length. [ 286.066974][T12611] FAULT_INJECTION: forcing a failure. [ 286.066974][T12611] name failslab, interval 1, probability 0, space 0, times 0 [ 286.080027][T12611] CPU: 0 UID: 0 PID: 12611 Comm: syz.0.2210 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 286.090825][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 286.100919][T12611] Call Trace: [ 286.104215][T12611] [ 286.106115][T12608] netlink: 'syz.4.2209': attribute type 29 has an invalid length. [ 286.107150][T12611] dump_stack_lvl+0x241/0x360 [ 286.107190][T12611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.119797][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2202'. [ 286.124840][T12611] ? __pfx__printk+0x10/0x10 [ 286.138341][T12611] should_fail_ex+0x3b0/0x4e0 [ 286.143064][T12611] should_failslab+0xac/0x100 [ 286.147789][T12611] ? skb_clone+0x20c/0x390 [ 286.152328][T12611] kmem_cache_alloc_noprof+0x70/0x380 [ 286.157745][T12611] skb_clone+0x20c/0x390 [ 286.162041][T12611] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 286.167269][T12611] dev_queue_xmit_nit+0x249/0xca0 [ 286.172333][T12611] ? dev_queue_xmit_nit+0x2b/0xca0 [ 286.177484][T12611] ? validate_xmit_skb+0x9b8/0xff0 [ 286.182728][T12611] dev_hard_start_xmit+0x15f/0x7d0 [ 286.187880][T12611] ? __pfx_validate_xmit_skb+0x10/0x10 [ 286.193384][T12611] __dev_queue_xmit+0x1b73/0x3f50 [ 286.198441][T12611] ? kasan_save_track+0x51/0x80 [ 286.203329][T12611] ? ____sys_sendmsg+0x52a/0x7e0 [ 286.208309][T12611] ? __dev_queue_xmit+0x2f4/0x3f50 [ 286.213462][T12611] ? __pfx___dev_queue_xmit+0x10/0x10 [ 286.218301][T12615] wg1: entered promiscuous mode [ 286.218862][T12611] ? __copy_skb_header+0x437/0x5b0 [ 286.224262][T12615] vlan2: entered promiscuous mode [ 286.229028][T12611] ? __asan_memcpy+0x40/0x70 [ 286.229055][T12611] ? __copy_skb_header+0x437/0x5b0 [ 286.229081][T12611] ? __skb_clone+0x454/0x6c0 [ 286.229105][T12611] ? skb_clone+0x240/0x390 [ 286.229128][T12611] __netlink_deliver_tap+0x56b/0x7f0 [ 286.229157][T12611] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.229174][T12611] netlink_deliver_tap+0x19d/0x1b0 [ 286.268598][T12611] netlink_unicast+0x7c4/0x990 [ 286.273414][T12611] ? __pfx_netlink_unicast+0x10/0x10 [ 286.278736][T12611] ? __virt_addr_valid+0x45f/0x530 [ 286.283866][T12611] ? __phys_addr_symbol+0x2f/0x70 [ 286.288890][T12611] ? __check_object_size+0x47a/0x730 [ 286.294178][T12611] netlink_sendmsg+0x8e4/0xcb0 [ 286.298954][T12611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.304242][T12611] ? aa_sock_msg_perm+0x91/0x160 [ 286.309182][T12611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.314463][T12611] __sock_sendmsg+0x221/0x270 [ 286.319152][T12611] ____sys_sendmsg+0x52a/0x7e0 [ 286.324012][T12611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.329308][T12611] ? __fget_files+0x2a/0x410 [ 286.333909][T12611] ? __fget_files+0x2a/0x410 [ 286.338512][T12611] __sys_sendmsg+0x269/0x350 [ 286.343106][T12611] ? __pfx_lock_release+0x10/0x10 [ 286.348155][T12611] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.353310][T12611] ? __pfx_vfs_write+0x10/0x10 [ 286.358110][T12611] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.364445][T12611] ? do_syscall_64+0x100/0x230 [ 286.369215][T12611] ? do_syscall_64+0xb6/0x230 [ 286.373905][T12611] do_syscall_64+0xf3/0x230 [ 286.378408][T12611] ? clear_bhb_loop+0x35/0x90 [ 286.383086][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.388982][T12611] RIP: 0033:0x7f35ced85d19 [ 286.393397][T12611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.413006][T12611] RSP: 002b:00007f35cfc73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.421428][T12611] RAX: ffffffffffffffda RBX: 00007f35cef75fa0 RCX: 00007f35ced85d19 [ 286.429404][T12611] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 286.437391][T12611] RBP: 00007f35cfc73090 R08: 0000000000000000 R09: 0000000000000000 [ 286.445359][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.453330][T12611] R13: 0000000000000000 R14: 00007f35cef75fa0 R15: 00007fff401c4338 [ 286.461324][T12611] [ 286.472445][T12615] wg1: left promiscuous mode [ 286.720126][T12625] netlink: 'syz.0.2214': attribute type 10 has an invalid length. [ 287.055401][T12625] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 287.066981][T12646] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2218'. [ 287.088978][T12646] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2218'. [ 287.544256][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2223'. [ 287.582556][T12660] geneve3: entered promiscuous mode [ 287.898646][T12682] vlan2: entered promiscuous mode [ 287.904100][T12682] dummy0: entered promiscuous mode [ 287.944954][T12682] dummy0: left promiscuous mode [ 288.283479][T12701] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2232'. [ 288.326524][T12701] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2232'. [ 288.671514][T12725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2240'. [ 289.033963][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 289.337269][T12751] macsec2: entered promiscuous mode [ 289.350568][T12751] bridge0: entered promiscuous mode [ 289.367872][T12751] macsec2: entered allmulticast mode [ 289.384003][T12751] bridge0: entered allmulticast mode [ 289.400263][T12751] bridge0: port 1(macsec2) entered blocking state [ 289.422070][T12751] bridge0: port 1(macsec2) entered disabled state [ 289.445201][T12751] bridge0: left allmulticast mode [ 289.453243][T12751] bridge0: left promiscuous mode [ 289.499946][T12756] tipc: Enabled bearer , priority 10 [ 289.703142][T12762] lo speed is unknown, defaulting to 1000 [ 289.732970][T12767] geneve2: entered promiscuous mode [ 290.308115][T12794] FAULT_INJECTION: forcing a failure. [ 290.308115][T12794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.335274][T12794] CPU: 0 UID: 0 PID: 12794 Comm: syz.1.2259 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 290.346111][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 290.356208][T12794] Call Trace: [ 290.359511][T12794] [ 290.362460][T12794] dump_stack_lvl+0x241/0x360 [ 290.367170][T12794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.372394][T12794] ? __pfx__printk+0x10/0x10 [ 290.377018][T12794] ? __pfx_lock_release+0x10/0x10 [ 290.382081][T12794] ? __lock_acquire+0x1397/0x2100 [ 290.387147][T12794] should_fail_ex+0x3b0/0x4e0 [ 290.391872][T12794] _copy_from_user+0x2f/0xc0 [ 290.396509][T12794] kstrtouint_from_user+0xc6/0x190 [ 290.401654][T12794] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 290.407405][T12794] ? __pfx_lock_acquire+0x10/0x10 [ 290.412477][T12794] proc_fail_nth_write+0xaa/0x2d0 [ 290.417529][T12794] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 290.423453][T12794] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.429120][T12794] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 290.434789][T12794] vfs_write+0x2a3/0xd30 [ 290.439073][T12794] ? __pfx_vfs_write+0x10/0x10 [ 290.443870][T12794] ? __fget_files+0x2a/0x410 [ 290.448504][T12794] ? __fget_files+0x395/0x410 [ 290.453225][T12794] ? __fget_files+0x2a/0x410 [ 290.457860][T12794] ksys_write+0x18f/0x2b0 [ 290.462228][T12794] ? __pfx_ksys_write+0x10/0x10 [ 290.467106][T12794] ? do_syscall_64+0x100/0x230 [ 290.471893][T12794] ? do_syscall_64+0xb6/0x230 [ 290.476593][T12794] do_syscall_64+0xf3/0x230 [ 290.481216][T12794] ? clear_bhb_loop+0x35/0x90 [ 290.485935][T12794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.491851][T12794] RIP: 0033:0x7fb3ac7847cf [ 290.496289][T12794] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 290.515927][T12794] RSP: 002b:00007fb3ad562030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 290.524379][T12794] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb3ac7847cf [ 290.532379][T12794] RDX: 0000000000000001 RSI: 00007fb3ad5620a0 RDI: 0000000000000004 [ 290.540374][T12794] RBP: 00007fb3ad562090 R08: 0000000000000000 R09: 0000000000000000 [ 290.548364][T12794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 290.556362][T12794] R13: 0000000000000000 R14: 00007fb3ac975fa0 R15: 00007ffdf30fc5c8 [ 290.564368][T12794] [ 290.571156][T12801] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 290.589104][T12762] __nla_validate_parse: 3 callbacks suppressed [ 290.589124][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 290.650761][T12804] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2260'. [ 290.679169][T12804] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2260'. [ 290.940244][T12809] vlan2: entered promiscuous mode [ 290.945359][T12809] dummy0: entered promiscuous mode [ 290.979194][T12809] dummy0: left promiscuous mode [ 291.066079][T12817] geneve2: entered promiscuous mode [ 291.097442][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 291.182128][T12822] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 291.215425][T12822] x_tables: ip_tables: osf match: only valid for protocol 6 [ 291.578751][T12840] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2273'. [ 291.599333][T12840] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2273'. [ 291.624631][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2272'. [ 291.644869][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2272'. [ 291.684662][T12846] lo speed is unknown, defaulting to 1000 [ 291.975890][T12853] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2276'. [ 292.102513][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 292.190084][T12861] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.286464][T12864] geneve3: entered promiscuous mode [ 292.619093][T12877] netlink: 'syz.1.2284': attribute type 10 has an invalid length. [ 292.659259][ T1087] bond0: (slave syz_tun): link status definitely down, disabling slave [ 292.705973][ T1087] bond0: now running without any active interface! [ 292.911835][T12892] lo speed is unknown, defaulting to 1000 [ 293.085438][T12898] vlan2: entered promiscuous mode [ 293.091091][T12898] dummy0: entered promiscuous mode [ 293.117943][T12898] dummy0: left promiscuous mode [ 293.223200][T12900] FAULT_INJECTION: forcing a failure. [ 293.223200][T12900] name failslab, interval 1, probability 0, space 0, times 0 [ 293.296142][T12900] CPU: 1 UID: 0 PID: 12900 Comm: syz.0.2293 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 293.307002][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 293.317095][T12900] Call Trace: [ 293.320407][T12900] [ 293.323390][T12900] dump_stack_lvl+0x241/0x360 [ 293.328108][T12900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.333356][T12900] ? __pfx__printk+0x10/0x10 [ 293.337981][T12900] ? __kmalloc_cache_noprof+0x48/0x390 [ 293.343479][T12900] ? __pfx___might_resched+0x10/0x10 [ 293.348819][T12900] should_fail_ex+0x3b0/0x4e0 [ 293.353548][T12900] should_failslab+0xac/0x100 [ 293.358268][T12900] __kmalloc_cache_noprof+0x70/0x390 [ 293.363600][T12900] ? ip_set_create+0x330/0x18b0 [ 293.368496][T12900] ip_set_create+0x330/0x18b0 [ 293.373210][T12900] ? rcu_is_watching+0x15/0xb0 [ 293.378022][T12900] ? __pfx_ip_set_create+0x10/0x10 [ 293.383207][T12900] ? nfnetlink_rcv_msg+0x225/0x1180 [ 293.388446][T12900] nfnetlink_rcv_msg+0xbec/0x1180 [ 293.393515][T12900] ? nfnetlink_rcv_msg+0x225/0x1180 [ 293.398780][T12900] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 293.404283][T12900] ? stack_trace_save+0x118/0x1d0 [ 293.409382][T12900] ? dev_hard_start_xmit+0x27a/0x7d0 [ 293.414707][T12900] ? __dev_queue_xmit+0x1b73/0x3f50 [ 293.419949][T12900] ? __netlink_deliver_tap+0x56b/0x7f0 [ 293.425436][T12900] ? netlink_deliver_tap+0x19d/0x1b0 [ 293.430731][T12900] ? netlink_unicast+0x7c4/0x990 [ 293.435673][T12900] ? netlink_sendmsg+0x8e4/0xcb0 [ 293.440645][T12900] ? __sock_sendmsg+0x221/0x270 [ 293.445535][T12900] ? ____sys_sendmsg+0x52a/0x7e0 [ 293.450481][T12900] ? __sys_sendmsg+0x269/0x350 [ 293.455271][T12900] netlink_rcv_skb+0x1e3/0x430 [ 293.460084][T12900] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 293.465574][T12900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.470903][T12900] ? apparmor_capable+0x13b/0x1b0 [ 293.475964][T12900] ? bpf_lsm_capable+0x9/0x10 [ 293.480675][T12900] ? security_capable+0x7e/0x2d0 [ 293.485651][T12900] nfnetlink_rcv+0x297/0x2ab0 [ 293.490371][T12900] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 293.496132][T12900] ? __dev_queue_xmit+0x2f4/0x3f50 [ 293.501282][T12900] ? __dev_queue_xmit+0x1775/0x3f50 [ 293.506503][T12900] ? kasan_save_track+0x51/0x80 [ 293.511385][T12900] ? ____sys_sendmsg+0x52a/0x7e0 [ 293.516350][T12900] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 293.521486][T12900] ? __dev_queue_xmit+0x2f4/0x3f50 [ 293.526626][T12900] ? __pfx___dev_queue_xmit+0x10/0x10 [ 293.532045][T12900] ? ref_tracker_free+0x643/0x7e0 [ 293.537101][T12900] ? __asan_memcpy+0x40/0x70 [ 293.541723][T12900] ? __pfx_ref_tracker_free+0x10/0x10 [ 293.547230][T12900] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.552491][T12900] ? skb_clone+0x240/0x390 [ 293.556944][T12900] ? __pfx_lock_release+0x10/0x10 [ 293.562001][T12900] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 293.567500][T12900] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.572733][T12900] netlink_unicast+0x7f6/0x990 [ 293.577552][T12900] ? __pfx_netlink_unicast+0x10/0x10 [ 293.582872][T12900] ? __virt_addr_valid+0x45f/0x530 [ 293.588014][T12900] ? __phys_addr_symbol+0x2f/0x70 [ 293.593083][T12900] ? __check_object_size+0x47a/0x730 [ 293.598500][T12900] netlink_sendmsg+0x8e4/0xcb0 [ 293.603324][T12900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.608656][T12900] ? aa_sock_msg_perm+0x91/0x160 [ 293.613635][T12900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.618950][T12900] __sock_sendmsg+0x221/0x270 [ 293.623753][T12900] ____sys_sendmsg+0x52a/0x7e0 [ 293.628559][T12900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.633881][T12900] ? __fget_files+0x2a/0x410 [ 293.638519][T12900] ? __fget_files+0x2a/0x410 [ 293.643170][T12900] __sys_sendmsg+0x269/0x350 [ 293.647797][T12900] ? __pfx_lock_release+0x10/0x10 [ 293.652862][T12900] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.658024][T12900] ? __pfx_vfs_write+0x10/0x10 [ 293.662812][T12900] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.669142][T12900] ? do_syscall_64+0x100/0x230 [ 293.673911][T12900] ? do_syscall_64+0xb6/0x230 [ 293.678584][T12900] do_syscall_64+0xf3/0x230 [ 293.683085][T12900] ? clear_bhb_loop+0x35/0x90 [ 293.687773][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.693668][T12900] RIP: 0033:0x7f35ced85d19 [ 293.698083][T12900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.717694][T12900] RSP: 002b:00007f35cfc73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.726111][T12900] RAX: ffffffffffffffda RBX: 00007f35cef75fa0 RCX: 00007f35ced85d19 [ 293.734082][T12900] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000000a [ 293.742051][T12900] RBP: 00007f35cfc73090 R08: 0000000000000000 R09: 0000000000000000 [ 293.750021][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.757997][T12900] R13: 0000000000000000 R14: 00007f35cef75fa0 R15: 00007fff401c4338 [ 293.765979][T12900] [ 294.350479][T12929] bond0: (slave syz_tun): Releasing backup interface [ 294.438777][T12929] bond1: (slave bond2): Releasing backup interface [ 294.954704][T12955] syzkaller0: entered promiscuous mode [ 294.963731][T12955] syzkaller0: entered allmulticast mode [ 295.323318][T12972] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0 [ 295.599459][T12977] __nla_validate_parse: 14 callbacks suppressed [ 295.599481][T12977] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2320'. [ 295.619388][T12977] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2320'. [ 296.864688][T12969] bond0: (slave syz_tun): Releasing backup interface [ 296.874828][T12969] bond0: (slave team0): Releasing backup interface [ 296.882045][T12969] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 296.926297][T12969] tipc: Resetting bearer [ 296.946439][T12969] bond0: (slave netdevsim0): Releasing backup interface [ 297.251939][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2328'. [ 297.333900][T13003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2329'. [ 297.359284][T13003] netlink: 'syz.0.2329': attribute type 10 has an invalid length. [ 297.411312][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'. [ 297.593624][T13014] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2334'. [ 297.608216][T13014] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2334'. [ 298.174098][T13031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2340'. [ 298.215792][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2341'. [ 298.291363][T13037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2342'. [ 298.308027][T13037] netlink: 'syz.2.2342': attribute type 10 has an invalid length. [ 298.618913][T13049] netlink: 'syz.0.2347': attribute type 10 has an invalid length. [ 298.692395][T13054] xt_connbytes: Forcing CT accounting to be enabled [ 298.716467][T13054] xt_bpf: check failed: parse error [ 298.772676][T13064] FAULT_INJECTION: forcing a failure. [ 298.772676][T13064] name failslab, interval 1, probability 0, space 0, times 0 [ 298.799785][T13064] CPU: 1 UID: 0 PID: 13064 Comm: syz.3.2353 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 298.810624][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 298.820715][T13064] Call Trace: [ 298.824014][T13064] [ 298.826963][T13064] dump_stack_lvl+0x241/0x360 [ 298.831679][T13064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.836994][T13064] ? __pfx__printk+0x10/0x10 [ 298.841623][T13064] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 298.847031][T13064] ? __pfx___might_resched+0x10/0x10 [ 298.852357][T13064] should_fail_ex+0x3b0/0x4e0 [ 298.857071][T13064] should_failslab+0xac/0x100 [ 298.861770][T13064] __kmalloc_node_noprof+0xe1/0x4d0 [ 298.866975][T13064] ? qdisc_alloc+0x9a/0xa80 [ 298.871479][T13064] qdisc_alloc+0x9a/0xa80 [ 298.875810][T13064] qdisc_create_dflt+0x62/0x4b0 [ 298.880660][T13064] taprio_init+0x424/0xc80 [ 298.885078][T13064] ? ____sys_sendmsg+0x52a/0x7e0 [ 298.890018][T13064] ? __sys_sendmsg+0x269/0x350 [ 298.894776][T13064] ? do_syscall_64+0xf3/0x230 [ 298.899459][T13064] ? __pfx_taprio_init+0x10/0x10 [ 298.904392][T13064] ? qdisc_alloc+0x7dd/0xa80 [ 298.908986][T13064] ? __pfx_taprio_init+0x10/0x10 [ 298.913927][T13064] qdisc_create+0x9d4/0x11a0 [ 298.918552][T13064] ? __pfx_qdisc_create+0x10/0x10 [ 298.923688][T13064] ? lockdep_rtnl_is_held+0x26/0x40 [ 298.928933][T13064] tc_modify_qdisc+0xa26/0x1e40 [ 298.933814][T13064] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 298.939133][T13064] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 298.944418][T13064] rtnetlink_rcv_msg+0x73f/0xcf0 [ 298.949354][T13064] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 298.954466][T13064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.959940][T13064] ? ref_tracker_free+0x643/0x7e0 [ 298.964977][T13064] netlink_rcv_skb+0x1e3/0x430 [ 298.969747][T13064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.975213][T13064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.980511][T13064] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.985725][T13064] netlink_unicast+0x7f6/0x990 [ 298.990499][T13064] ? __pfx_netlink_unicast+0x10/0x10 [ 298.995784][T13064] ? __virt_addr_valid+0x45f/0x530 [ 299.000920][T13064] ? __phys_addr_symbol+0x2f/0x70 [ 299.005976][T13064] ? __check_object_size+0x47a/0x730 [ 299.011289][T13064] netlink_sendmsg+0x8e4/0xcb0 [ 299.016095][T13064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.021405][T13064] ? aa_sock_msg_perm+0x91/0x160 [ 299.026348][T13064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.031642][T13064] __sock_sendmsg+0x221/0x270 [ 299.036324][T13064] ____sys_sendmsg+0x52a/0x7e0 [ 299.041094][T13064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.046378][T13064] ? __fget_files+0x2a/0x410 [ 299.050974][T13064] ? __fget_files+0x2a/0x410 [ 299.055571][T13064] __sys_sendmsg+0x269/0x350 [ 299.060163][T13064] ? __pfx_lock_release+0x10/0x10 [ 299.065197][T13064] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.070320][T13064] ? __pfx_vfs_write+0x10/0x10 [ 299.075101][T13064] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.081524][T13064] ? do_syscall_64+0x100/0x230 [ 299.086289][T13064] ? do_syscall_64+0xb6/0x230 [ 299.090966][T13064] do_syscall_64+0xf3/0x230 [ 299.095469][T13064] ? clear_bhb_loop+0x35/0x90 [ 299.100154][T13064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.106048][T13064] RIP: 0033:0x7faafe585d19 [ 299.110469][T13064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.130081][T13064] RSP: 002b:00007faaff477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.138503][T13064] RAX: ffffffffffffffda RBX: 00007faafe775fa0 RCX: 00007faafe585d19 [ 299.146477][T13064] RDX: 0000000020008090 RSI: 00000000200007c0 RDI: 0000000000000005 [ 299.154457][T13064] RBP: 00007faaff477090 R08: 0000000000000000 R09: 0000000000000000 [ 299.162440][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.170430][T13064] R13: 0000000000000000 R14: 00007faafe775fa0 R15: 00007ffcaae69808 [ 299.178422][T13064] [ 299.459612][T13084] netlink: 'syz.3.2360': attribute type 7 has an invalid length. [ 299.489359][T13084] netlink: 'syz.3.2360': attribute type 8 has an invalid length. [ 299.522576][T13084] gretap0: entered promiscuous mode [ 299.563417][T13084] gretap0: left promiscuous mode [ 299.831538][T13100] vlan2: entered promiscuous mode [ 299.860960][T13103] Bluetooth: MGMT ver 1.23 [ 299.944861][T13107] tipc: Resetting bearer [ 300.245602][T13127] netlink: 'syz.1.2374': attribute type 10 has an invalid length. [ 300.259507][T13129] FAULT_INJECTION: forcing a failure. [ 300.259507][T13129] name failslab, interval 1, probability 0, space 0, times 0 [ 300.261275][T13127] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 300.286278][T13129] CPU: 1 UID: 0 PID: 13129 Comm: syz.4.2375 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 300.297103][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 300.307193][T13129] Call Trace: [ 300.310501][T13129] [ 300.313469][T13129] dump_stack_lvl+0x241/0x360 [ 300.318193][T13129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.323393][T13129] ? __pfx__printk+0x10/0x10 [ 300.327993][T13129] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 300.334014][T13129] ? __pfx___might_resched+0x10/0x10 [ 300.339342][T13129] should_fail_ex+0x3b0/0x4e0 [ 300.344061][T13129] should_failslab+0xac/0x100 [ 300.348770][T13129] kmem_cache_alloc_node_noprof+0x77/0x380 [ 300.354581][T13129] ? __alloc_skb+0x1c3/0x440 [ 300.359171][T13129] __alloc_skb+0x1c3/0x440 [ 300.363619][T13129] ? __pfx___alloc_skb+0x10/0x10 [ 300.368586][T13129] ? netlink_autobind+0xd6/0x2f0 [ 300.373531][T13129] ? netlink_autobind+0x2b0/0x2f0 [ 300.378554][T13129] netlink_sendmsg+0x638/0xcb0 [ 300.383322][T13129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.388620][T13129] ? aa_sock_msg_perm+0x91/0x160 [ 300.393566][T13129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.398852][T13129] __sock_sendmsg+0x221/0x270 [ 300.403538][T13129] ____sys_sendmsg+0x52a/0x7e0 [ 300.408315][T13129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.413683][T13129] ? __fget_files+0x2a/0x410 [ 300.418275][T13129] ? __fget_files+0x2a/0x410 [ 300.422867][T13129] __sys_sendmsg+0x269/0x350 [ 300.427455][T13129] ? __pfx_lock_release+0x10/0x10 [ 300.432480][T13129] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.437597][T13129] ? __pfx_vfs_write+0x10/0x10 [ 300.442372][T13129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.448708][T13129] ? do_syscall_64+0x100/0x230 [ 300.453468][T13129] ? do_syscall_64+0xb6/0x230 [ 300.458141][T13129] do_syscall_64+0xf3/0x230 [ 300.462637][T13129] ? clear_bhb_loop+0x35/0x90 [ 300.467311][T13129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.473231][T13129] RIP: 0033:0x7fbe64f85d19 [ 300.477660][T13129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.497287][T13129] RSP: 002b:00007fbe65d09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.505735][T13129] RAX: ffffffffffffffda RBX: 00007fbe65175fa0 RCX: 00007fbe64f85d19 [ 300.513735][T13129] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 300.521709][T13129] RBP: 00007fbe65d09090 R08: 0000000000000000 R09: 0000000000000000 [ 300.529677][T13129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.537646][T13129] R13: 0000000000000000 R14: 00007fbe65175fa0 R15: 00007ffe713e91a8 [ 300.545627][T13129] [ 300.644686][T13134] lo speed is unknown, defaulting to 1000 [ 300.699509][T13141] __nla_validate_parse: 16 callbacks suppressed [ 300.699531][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 300.861647][T13141] batadv0: entered promiscuous mode [ 300.867766][T13141] macvtap1: entered promiscuous mode [ 300.873427][T13141] macvtap1: entered allmulticast mode [ 300.893115][T13141] batadv0: entered allmulticast mode [ 300.915589][T13141] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 300.937914][T13146] geneve2: entered promiscuous mode [ 300.943289][T13146] geneve2: entered allmulticast mode [ 301.028275][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'. [ 301.222511][T13161] lo speed is unknown, defaulting to 1000 [ 301.284379][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2373'. [ 301.358387][T13169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2388'. [ 301.609472][T13178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2391'. [ 301.648734][T13171] lo speed is unknown, defaulting to 1000 [ 301.659399][T13178] netlink: 'syz.1.2391': attribute type 10 has an invalid length. [ 301.868628][ T61] bond0: (slave syz_tun): link status definitely down, disabling slave [ 301.879350][ T61] bond0: now running without any active interface! [ 302.222288][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 302.257538][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 302.332844][T13195] macvtap1: entered promiscuous mode [ 302.344613][T13195] batadv0: entered promiscuous mode [ 302.357873][T13195] macvtap1: entered allmulticast mode [ 302.363415][T13195] batadv0: entered allmulticast mode [ 302.373943][T13195] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 302.397178][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2389'. [ 302.445398][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2395'. [ 302.991592][T13214] syzkaller0: entered promiscuous mode [ 303.016109][T13214] syzkaller0: entered allmulticast mode [ 303.034108][T13211] lo speed is unknown, defaulting to 1000 [ 303.591690][T13225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2404'. [ 303.636978][T13225] netlink: 'syz.4.2404': attribute type 10 has an invalid length. [ 305.429431][T13223] lo speed is unknown, defaulting to 1000 [ 305.438764][T13225] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 305.663523][T13237] netlink: 'syz.0.2408': attribute type 29 has an invalid length. [ 305.870711][T13239] netlink: 'syz.0.2408': attribute type 29 has an invalid length. [ 305.932822][T13246] __nla_validate_parse: 2 callbacks suppressed [ 305.932843][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 306.380681][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2415'. [ 306.397081][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2413'. [ 306.410649][T13260] geneve3: entered promiscuous mode [ 306.544539][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 306.662553][T13279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2418'. [ 306.998592][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'. [ 307.114277][T13304] lo speed is unknown, defaulting to 1000 [ 307.250953][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2428'. [ 307.345387][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 307.512890][T13320] netlink: 'syz.2.2432': attribute type 13 has an invalid length. [ 307.529282][T13320] macvtap0: entered allmulticast mode [ 307.535521][T13320] macvtap0: refused to change device tx_queue_len [ 307.549358][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 307.581896][T13320] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2432'. [ 307.649702][T13324] batadv0 (unregistering): left allmulticast mode [ 307.788116][T13337] tipc: Resetting bearer [ 307.799471][T13337] veth0_macvtap: left promiscuous mode [ 307.850686][T13337] tipc: Disabling bearer [ 307.906063][T13339] netlink: 'syz.3.2437': attribute type 29 has an invalid length. [ 307.919439][T13341] FAULT_INJECTION: forcing a failure. [ 307.919439][T13341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.934893][T13341] CPU: 1 UID: 0 PID: 13341 Comm: syz.3.2437 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 307.945710][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 307.955810][T13341] Call Trace: [ 307.959128][T13341] [ 307.962084][T13341] dump_stack_lvl+0x241/0x360 [ 307.966804][T13341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.972038][T13341] ? __pfx__printk+0x10/0x10 [ 307.976666][T13341] ? __pfx_lock_release+0x10/0x10 [ 307.981729][T13341] should_fail_ex+0x3b0/0x4e0 [ 307.986453][T13341] _copy_to_iter+0x440/0x1c50 [ 307.991185][T13341] ? __pfx__copy_to_iter+0x10/0x10 [ 307.996337][T13341] ? __virt_addr_valid+0x183/0x530 [ 308.001483][T13341] ? __virt_addr_valid+0x183/0x530 [ 308.006714][T13341] ? __virt_addr_valid+0x45f/0x530 [ 308.011865][T13341] ? __check_object_size+0x47a/0x730 [ 308.017197][T13341] __skb_datagram_iter+0x107/0x900 [ 308.022350][T13341] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 308.028060][T13341] skb_copy_datagram_iter+0xd1/0x250 [ 308.033397][T13341] netlink_recvmsg+0x2d0/0x11d0 [ 308.038307][T13341] ? __pfx_netlink_recvmsg+0x10/0x10 [ 308.043639][T13341] ? __pfx_aa_sk_perm+0x10/0x10 [ 308.048541][T13341] ? iovec_from_user+0x1b4/0x240 [ 308.053523][T13341] ? aa_sock_msg_perm+0x91/0x160 [ 308.058504][T13341] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 308.063834][T13341] ? __pfx_netlink_recvmsg+0x10/0x10 [ 308.069167][T13341] sock_recvmsg+0x22f/0x280 [ 308.073724][T13341] ____sys_recvmsg+0x1c6/0x480 [ 308.078536][T13341] ? __pfx_____sys_recvmsg+0x10/0x10 [ 308.083885][T13341] __sys_recvmsg+0x291/0x390 [ 308.088529][T13341] ? __pfx___sys_recvmsg+0x10/0x10 [ 308.093681][T13341] ? __mutex_unlock_slowpath+0x21e/0x790 [ 308.099381][T13341] ? __fget_files+0x2a/0x410 [ 308.104026][T13341] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.110402][T13341] ? do_syscall_64+0x100/0x230 [ 308.115204][T13341] ? do_syscall_64+0xb6/0x230 [ 308.119915][T13341] do_syscall_64+0xf3/0x230 [ 308.124451][T13341] ? clear_bhb_loop+0x35/0x90 [ 308.129166][T13341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.135092][T13341] RIP: 0033:0x7faafe585d19 [ 308.139543][T13341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.150575][T13353] netlink: 'syz.1.2440': attribute type 4 has an invalid length. [ 308.159163][T13341] RSP: 002b:00007faaff456038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 308.159195][T13341] RAX: ffffffffffffffda RBX: 00007faafe776080 RCX: 00007faafe585d19 [ 308.159210][T13341] RDX: 0000000000002000 RSI: 0000000020000000 RDI: 0000000000000003 [ 308.159223][T13341] RBP: 00007faaff456090 R08: 0000000000000000 R09: 0000000000000000 [ 308.159234][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.159245][T13341] R13: 0000000000000001 R14: 00007faafe776080 R15: 00007ffcaae69808 [ 308.159270][T13341] [ 308.279944][T13341] netlink: 'syz.3.2437': attribute type 29 has an invalid length. [ 308.422204][T13361] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:20001 [ 308.531051][T13363] vlan2: entered promiscuous mode [ 308.539331][T13363] dummy0: entered promiscuous mode [ 308.550566][T13363] dummy0: left promiscuous mode [ 308.771893][T13379] lo speed is unknown, defaulting to 1000 [ 309.312012][T13403] FAULT_INJECTION: forcing a failure. [ 309.312012][T13403] name failslab, interval 1, probability 0, space 0, times 0 [ 309.324866][T13403] CPU: 1 UID: 0 PID: 13403 Comm: syz.0.2457 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 309.335659][T13403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 309.345732][T13403] Call Trace: [ 309.349041][T13403] [ 309.351984][T13403] dump_stack_lvl+0x241/0x360 [ 309.356676][T13403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.361875][T13403] ? __pfx__printk+0x10/0x10 [ 309.366560][T13403] should_fail_ex+0x3b0/0x4e0 [ 309.371262][T13403] should_failslab+0xac/0x100 [ 309.375950][T13403] ? skb_clone+0x20c/0x390 [ 309.380379][T13403] kmem_cache_alloc_noprof+0x70/0x380 [ 309.385775][T13403] skb_clone+0x20c/0x390 [ 309.390045][T13403] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 309.395266][T13403] dev_queue_xmit_nit+0x249/0xca0 [ 309.400304][T13403] ? dev_queue_xmit_nit+0x2b/0xca0 [ 309.405415][T13403] ? validate_xmit_skb+0x9b8/0xff0 [ 309.410533][T13403] dev_hard_start_xmit+0x15f/0x7d0 [ 309.415645][T13403] ? __pfx_validate_xmit_skb+0x10/0x10 [ 309.421110][T13403] __dev_queue_xmit+0x1b73/0x3f50 [ 309.426141][T13403] ? kasan_save_track+0x51/0x80 [ 309.431000][T13403] ? ____sys_sendmsg+0x52a/0x7e0 [ 309.435942][T13403] ? __dev_queue_xmit+0x2f4/0x3f50 [ 309.441058][T13403] ? __pfx___dev_queue_xmit+0x10/0x10 [ 309.446444][T13403] ? __copy_skb_header+0x437/0x5b0 [ 309.451556][T13403] ? __asan_memcpy+0x40/0x70 [ 309.456144][T13403] ? __copy_skb_header+0x437/0x5b0 [ 309.461257][T13403] ? __skb_clone+0x454/0x6c0 [ 309.465853][T13403] ? skb_clone+0x240/0x390 [ 309.470300][T13403] __netlink_deliver_tap+0x56b/0x7f0 [ 309.475613][T13403] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.480826][T13403] netlink_deliver_tap+0x19d/0x1b0 [ 309.485949][T13403] netlink_unicast+0x7c4/0x990 [ 309.490726][T13403] ? __pfx_netlink_unicast+0x10/0x10 [ 309.496019][T13403] ? __virt_addr_valid+0x45f/0x530 [ 309.501131][T13403] ? __phys_addr_symbol+0x2f/0x70 [ 309.506152][T13403] ? __check_object_size+0x47a/0x730 [ 309.511465][T13403] netlink_sendmsg+0x8e4/0xcb0 [ 309.516268][T13403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.521563][T13403] ? aa_sock_msg_perm+0x91/0x160 [ 309.526505][T13403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.531791][T13403] __sock_sendmsg+0x221/0x270 [ 309.536471][T13403] ____sys_sendmsg+0x52a/0x7e0 [ 309.541244][T13403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.546522][T13403] ? __fget_files+0x2a/0x410 [ 309.551148][T13403] ? __fget_files+0x2a/0x410 [ 309.555750][T13403] __sys_sendmsg+0x269/0x350 [ 309.560339][T13403] ? __pfx_lock_release+0x10/0x10 [ 309.565362][T13403] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.570502][T13403] ? __pfx_vfs_write+0x10/0x10 [ 309.575309][T13403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.581660][T13403] ? do_syscall_64+0x100/0x230 [ 309.586433][T13403] ? do_syscall_64+0xb6/0x230 [ 309.591110][T13403] do_syscall_64+0xf3/0x230 [ 309.595610][T13403] ? clear_bhb_loop+0x35/0x90 [ 309.600291][T13403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.606180][T13403] RIP: 0033:0x7f35ced85d19 [ 309.610595][T13403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.630209][T13403] RSP: 002b:00007f35cfc73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.638626][T13403] RAX: ffffffffffffffda RBX: 00007f35cef75fa0 RCX: 00007f35ced85d19 [ 309.646597][T13403] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005 [ 309.654566][T13403] RBP: 00007f35cfc73090 R08: 0000000000000000 R09: 0000000000000000 [ 309.662530][T13403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.670505][T13403] R13: 0000000000000000 R14: 00007f35cef75fa0 R15: 00007fff401c4338 [ 309.678491][T13403] [ 309.722125][T13403] Â: renamed from pim6reg1 [ 309.751613][T13403] bond0: (slave syz_tun): Releasing backup interface [ 309.760755][T13403] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 309.788488][T13403] bond0: (slave bridge0): Releasing backup interface [ 310.351685][T13419] batadv0 (unregistering): left allmulticast mode [ 310.360250][T13419] batadv0 (unregistering): left promiscuous mode [ 310.449579][T13412] vlan2: entered promiscuous mode [ 310.455174][T13412] dummy0: entered promiscuous mode [ 310.474209][T13412] dummy0: left promiscuous mode [ 310.517026][T13422] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 310.539543][T13423] lo speed is unknown, defaulting to 1000 [ 310.725323][T13435] FAULT_INJECTION: forcing a failure. [ 310.725323][T13435] name failslab, interval 1, probability 0, space 0, times 0 [ 310.733506][T13434] netlink: 'syz.4.2467': attribute type 29 has an invalid length. [ 310.749692][T13435] CPU: 1 UID: 0 PID: 13435 Comm: syz.1.2468 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 310.760529][T13435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 310.770618][T13435] Call Trace: [ 310.773924][T13435] [ 310.776883][T13435] dump_stack_lvl+0x241/0x360 [ 310.781620][T13435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.786871][T13435] ? __pfx__printk+0x10/0x10 [ 310.791511][T13435] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 310.797535][T13435] ? __pfx___might_resched+0x10/0x10 [ 310.802877][T13435] should_fail_ex+0x3b0/0x4e0 [ 310.807624][T13435] should_failslab+0xac/0x100 [ 310.812351][T13435] kmem_cache_alloc_node_noprof+0x77/0x380 [ 310.818202][T13435] ? __alloc_skb+0x1c3/0x440 [ 310.822847][T13435] __alloc_skb+0x1c3/0x440 [ 310.827323][T13435] ? __pfx___alloc_skb+0x10/0x10 [ 310.832327][T13435] ? netlink_autobind+0xd6/0x2f0 [ 310.837305][T13435] ? netlink_autobind+0x2b0/0x2f0 [ 310.842385][T13435] netlink_sendmsg+0x638/0xcb0 [ 310.847219][T13435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.852636][T13435] ? aa_sock_msg_perm+0x91/0x160 [ 310.857619][T13435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.862939][T13435] __sock_sendmsg+0x221/0x270 [ 310.867671][T13435] ____sys_sendmsg+0x52a/0x7e0 [ 310.872578][T13435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.877904][T13435] ? __fget_files+0x2a/0x410 [ 310.882530][T13435] ? __fget_files+0x2a/0x410 [ 310.887169][T13435] __sys_sendmsg+0x269/0x350 [ 310.891803][T13435] ? __pfx_lock_release+0x10/0x10 [ 310.896868][T13435] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.902033][T13435] ? __pfx_vfs_write+0x10/0x10 [ 310.906855][T13435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 310.913235][T13435] ? do_syscall_64+0x100/0x230 [ 310.918047][T13435] ? do_syscall_64+0xb6/0x230 [ 310.922773][T13435] do_syscall_64+0xf3/0x230 [ 310.927315][T13435] ? clear_bhb_loop+0x35/0x90 [ 310.932026][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.937968][T13435] RIP: 0033:0x7fb3ac785d19 [ 310.942434][T13435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.962156][T13435] RSP: 002b:00007fb3ad562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.970591][T13435] RAX: ffffffffffffffda RBX: 00007fb3ac975fa0 RCX: 00007fb3ac785d19 [ 310.978661][T13435] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 310.986651][T13435] RBP: 00007fb3ad562090 R08: 0000000000000000 R09: 0000000000000000 [ 310.994621][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.002618][T13435] R13: 0000000000000000 R14: 00007fb3ac975fa0 R15: 00007ffdf30fc5c8 [ 311.010637][T13435] [ 311.034241][T13434] netlink: 'syz.4.2467': attribute type 29 has an invalid length. [ 311.155061][T13451] sctp: [Deprecated]: syz.1.2473 (pid 13451) Use of int in maxseg socket option. [ 311.155061][T13451] Use struct sctp_assoc_value instead [ 311.295854][T13457] __nla_validate_parse: 17 callbacks suppressed [ 311.295876][T13457] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2475'. [ 311.415509][T13460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2476'. [ 311.423437][T13458] netlink: 'syz.0.2474': attribute type 1 has an invalid length. [ 311.455873][T13458] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2474'. [ 311.552277][T13467] vlan2: entered promiscuous mode [ 311.569579][T13467] dummy0: entered promiscuous mode [ 311.598909][T13467] dummy0: left promiscuous mode [ 311.603629][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2478'. [ 311.723677][T13471] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 311.809459][T13469] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2478'. [ 312.024595][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2483'. [ 312.068614][T13484] netlink: 'syz.1.2483': attribute type 10 has an invalid length. [ 312.232133][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'. [ 312.249761][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'. [ 312.302175][T13503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2489'. [ 312.397936][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'. [ 312.468472][T13511] netlink: 'syz.4.2491': attribute type 10 has an invalid length. [ 313.750878][T13581] netlink: 'syz.2.2513': attribute type 2 has an invalid length. [ 313.767364][T13581] netlink: 'syz.2.2513': attribute type 9 has an invalid length. [ 314.043898][T13598] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 314.138943][T13602] IPVS: Error connecting to the multicast addr [ 314.415313][T13618] vcan0: tx drop: invalid sa for name 0x0000000000020000 [ 314.748265][T13639] netlink: 'syz.2.2530': attribute type 10 has an invalid length. [ 314.860967][T13647] openvswitch: netlink: Key type 157 is out of range max 32 [ 315.232964][T13660] batadv0 (unregistering): left allmulticast mode [ 315.367726][T13671] netlink: 'syz.0.2543': attribute type 10 has an invalid length. [ 315.393859][T13671] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 315.530321][T13682] FAULT_INJECTION: forcing a failure. [ 315.530321][T13682] name failslab, interval 1, probability 0, space 0, times 0 [ 315.545481][T13682] CPU: 0 UID: 0 PID: 13682 Comm: syz.1.2547 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 315.556324][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 315.566391][T13682] Call Trace: [ 315.569675][T13682] [ 315.572615][T13682] dump_stack_lvl+0x241/0x360 [ 315.577336][T13682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.582584][T13682] ? __pfx__printk+0x10/0x10 [ 315.587250][T13682] ? __kmalloc_cache_noprof+0x48/0x390 [ 315.592755][T13682] ? __pfx___might_resched+0x10/0x10 [ 315.598095][T13682] should_fail_ex+0x3b0/0x4e0 [ 315.602831][T13682] should_failslab+0xac/0x100 [ 315.607566][T13682] __kmalloc_cache_noprof+0x70/0x390 [ 315.612894][T13682] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 315.618318][T13682] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 315.623578][T13682] genl_rcv_msg+0xb14/0xec0 [ 315.628136][T13682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.633234][T13682] ? __pfx_lock_acquire+0x10/0x10 [ 315.638300][T13682] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 315.644063][T13682] ? __pfx___might_resched+0x10/0x10 [ 315.649400][T13682] netlink_rcv_skb+0x1e3/0x430 [ 315.654209][T13682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.659252][T13682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.664571][T13682] genl_rcv+0x28/0x40 [ 315.668588][T13682] netlink_unicast+0x7f6/0x990 [ 315.673389][T13682] ? __pfx_netlink_unicast+0x10/0x10 [ 315.678693][T13682] ? __virt_addr_valid+0x45f/0x530 [ 315.683830][T13682] ? __phys_addr_symbol+0x2f/0x70 [ 315.688875][T13682] ? __check_object_size+0x47a/0x730 [ 315.694215][T13682] netlink_sendmsg+0x8e4/0xcb0 [ 315.699023][T13682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.704360][T13682] ? aa_sock_msg_perm+0x91/0x160 [ 315.709346][T13682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.714680][T13682] __sock_sendmsg+0x221/0x270 [ 315.719407][T13682] ____sys_sendmsg+0x52a/0x7e0 [ 315.724230][T13682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.729564][T13682] ? __fget_files+0x2a/0x410 [ 315.734206][T13682] ? __fget_files+0x2a/0x410 [ 315.738851][T13682] __sys_sendmsg+0x269/0x350 [ 315.743487][T13682] ? __pfx_lock_release+0x10/0x10 [ 315.748586][T13682] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.753843][T13682] ? __pfx_vfs_write+0x10/0x10 [ 315.758654][T13682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.765000][T13682] ? do_syscall_64+0x100/0x230 [ 315.769783][T13682] ? do_syscall_64+0xb6/0x230 [ 315.774483][T13682] do_syscall_64+0xf3/0x230 [ 315.779006][T13682] ? clear_bhb_loop+0x35/0x90 [ 315.783694][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.789608][T13682] RIP: 0033:0x7fb3ac785d19 [ 315.794065][T13682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.813711][T13682] RSP: 002b:00007fb3ad562038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.822164][T13682] RAX: ffffffffffffffda RBX: 00007fb3ac975fa0 RCX: 00007fb3ac785d19 [ 315.830162][T13682] RDX: 0000000000044014 RSI: 0000000020000100 RDI: 0000000000000003 [ 315.838159][T13682] RBP: 00007fb3ad562090 R08: 0000000000000000 R09: 0000000000000000 [ 315.846151][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.854164][T13682] R13: 0000000000000000 R14: 00007fb3ac975fa0 R15: 00007ffdf30fc5c8 [ 315.862177][T13682] [ 315.886866][T13695] : entered allmulticast mode [ 315.900466][T13693] nbd: socks must be embedded in a SOCK_ITEM attr [ 315.951999][T13698] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 316.468928][T13731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.497009][T13733] __nla_validate_parse: 28 callbacks suppressed [ 316.497022][T13733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2562'. [ 316.584823][T13741] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2561'. [ 316.596534][T13740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.648358][T13743] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2565'. [ 316.659686][T13743] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2565'. [ 316.793167][T13750] vlan2: entered promiscuous mode [ 316.799688][T13750] dummy0: entered promiscuous mode [ 316.809088][T13750] dummy0: left promiscuous mode [ 317.019912][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2569'. [ 317.070153][T13755] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2569'. [ 317.206234][T13763] netlink: 'syz.4.2572': attribute type 12 has an invalid length. [ 317.329622][T13765] netlink: 'syz.1.2573': attribute type 2 has an invalid length. [ 317.477671][T13776] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 317.552111][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.596749][T13785] tipc: Enabling of bearer rejected, failed to enable media [ 317.710715][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 317.879014][T13802] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.963120][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2587'. [ 317.985646][T13810] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2585'. [ 318.189529][T13822] FAULT_INJECTION: forcing a failure. [ 318.189529][T13822] name failslab, interval 1, probability 0, space 0, times 0 [ 318.204770][T13822] CPU: 1 UID: 0 PID: 13822 Comm: syz.1.2593 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 318.215598][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 318.225682][T13822] Call Trace: [ 318.228985][T13822] [ 318.231940][T13822] dump_stack_lvl+0x241/0x360 [ 318.236654][T13822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.241857][T13822] ? __pfx__printk+0x10/0x10 [ 318.246451][T13822] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 318.252434][T13822] ? __pfx___might_resched+0x10/0x10 [ 318.257735][T13822] ? __alloc_pages_noprof+0x350/0x710 [ 318.263128][T13822] should_fail_ex+0x3b0/0x4e0 [ 318.267817][T13822] should_failslab+0xac/0x100 [ 318.272499][T13822] kmem_cache_alloc_node_noprof+0x77/0x380 [ 318.278310][T13822] ? __alloc_skb+0x1c3/0x440 [ 318.282902][T13822] __alloc_skb+0x1c3/0x440 [ 318.287322][T13822] ? __pfx___alloc_skb+0x10/0x10 [ 318.292258][T13822] ? tcp_sync_mss+0x278/0x5b0 [ 318.296941][T13822] ? alloc_pages_noprof+0xef/0x170 [ 318.302056][T13822] tcp_stream_alloc_skb+0x3d/0x310 [ 318.307174][T13822] tcp_connect+0x1e44/0x4940 [ 318.311784][T13822] ? __pfx_tcp_connect+0x10/0x10 [ 318.316741][T13822] ? __kasan_kmalloc+0x57/0xb0 [ 318.321533][T13822] ? __kmalloc_cache_noprof+0x243/0x390 [ 318.327602][T13822] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 318.333002][T13822] tcp_sendmsg_fastopen+0x2b0/0x5d0 [ 318.338213][T13822] tcp_sendmsg_locked+0x48d2/0x4f30 [ 318.343411][T13822] ? mark_lock+0x9a/0x360 [ 318.347752][T13822] ? __lock_acquire+0x1397/0x2100 [ 318.352793][T13822] ? mark_lock+0x9a/0x360 [ 318.357135][T13822] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.363125][T13822] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.369486][T13822] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 318.375035][T13822] ? tcp_sendmsg+0x22/0x50 [ 318.379500][T13822] ? do_raw_spin_unlock+0x13c/0x8b0 [ 318.384824][T13822] tcp_sendmsg+0x30/0x50 [ 318.389088][T13822] __sock_sendmsg+0xef/0x270 [ 318.393701][T13822] ____sys_sendmsg+0x52a/0x7e0 [ 318.398473][T13822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.403758][T13822] ? __fget_files+0x2a/0x410 [ 318.408361][T13822] ? __fget_files+0x2a/0x410 [ 318.412963][T13822] __sys_sendmmsg+0x36a/0x720 [ 318.417650][T13822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 318.422856][T13822] ? __pfx_lock_release+0x10/0x10 [ 318.427879][T13822] ? kstrtouint_from_user+0x128/0x190 [ 318.433411][T13822] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 318.439345][T13822] ? ksys_write+0x22a/0x2b0 [ 318.443870][T13822] ? __pfx_lock_release+0x10/0x10 [ 318.448906][T13822] ? vfs_write+0x730/0xd30 [ 318.453329][T13822] ? __mutex_unlock_slowpath+0x21e/0x790 [ 318.458989][T13822] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.464972][T13822] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.471392][T13822] ? do_syscall_64+0x100/0x230 [ 318.476158][T13822] __x64_sys_sendmmsg+0xa0/0xb0 [ 318.481015][T13822] do_syscall_64+0xf3/0x230 [ 318.485516][T13822] ? clear_bhb_loop+0x35/0x90 [ 318.490201][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.496092][T13822] RIP: 0033:0x7fb3ac785d19 [ 318.500505][T13822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.520291][T13822] RSP: 002b:00007fb3ad562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.528716][T13822] RAX: ffffffffffffffda RBX: 00007fb3ac975fa0 RCX: 00007fb3ac785d19 [ 318.536690][T13822] RDX: 0000000000000001 RSI: 0000000020001880 RDI: 0000000000000003 [ 318.544776][T13822] RBP: 00007fb3ad562090 R08: 0000000000000000 R09: 0000000000000000 [ 318.552756][T13822] R10: 0000000004000085 R11: 0000000000000246 R12: 0000000000000001 [ 318.560735][T13822] R13: 0000000000000000 R14: 00007fb3ac975fa0 R15: 00007ffdf30fc5c8 [ 318.568723][T13822] [ 318.583898][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'. [ 318.650900][T13827] netlink: 'syz.2.2595': attribute type 10 has an invalid length. [ 319.181945][T13861] vlan2: entered promiscuous mode [ 319.195559][T13861] team0: entered promiscuous mode [ 319.207066][T13861] team0: Device vlan2 is already an upper device of the team interface [ 319.239615][T13861] team0: left promiscuous mode [ 319.847157][T13892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.274979][T13892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.294365][T13901] FAULT_INJECTION: forcing a failure. [ 321.294365][T13901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.335946][T13901] CPU: 1 UID: 0 PID: 13901 Comm: syz.2.2618 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 321.346802][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 321.356903][T13901] Call Trace: [ 321.360203][T13901] [ 321.363156][T13901] dump_stack_lvl+0x241/0x360 [ 321.367877][T13901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.373550][T13901] ? __pfx__printk+0x10/0x10 [ 321.378183][T13901] ? __pfx_lock_release+0x10/0x10 [ 321.383247][T13901] should_fail_ex+0x3b0/0x4e0 [ 321.387958][T13901] _copy_from_user+0x2f/0xc0 [ 321.392592][T13901] copy_msghdr_from_user+0xae/0x680 [ 321.397830][T13901] ? __pfx___might_resched+0x10/0x10 [ 321.403154][T13901] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 321.409000][T13901] ? __fget_files+0x2a/0x410 [ 321.413644][T13901] ? __sys_sendmmsg+0x392/0x720 [ 321.418521][T13901] ? __might_fault+0xaa/0x120 [ 321.423225][T13901] __sys_sendmmsg+0x32b/0x720 [ 321.427966][T13901] ? __pfx___sys_sendmmsg+0x10/0x10 [ 321.433203][T13901] ? __pfx_lock_release+0x10/0x10 [ 321.438255][T13901] ? kstrtouint_from_user+0x128/0x190 [ 321.443678][T13901] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 321.449616][T13901] ? ksys_write+0x22a/0x2b0 [ 321.454160][T13901] ? __pfx_lock_release+0x10/0x10 [ 321.459222][T13901] ? vfs_write+0x730/0xd30 [ 321.463668][T13901] ? __mutex_unlock_slowpath+0x21e/0x790 [ 321.469355][T13901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 321.475374][T13901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.481762][T13901] ? do_syscall_64+0x100/0x230 [ 321.486572][T13901] __x64_sys_sendmmsg+0xa0/0xb0 [ 321.491463][T13901] do_syscall_64+0xf3/0x230 [ 321.496001][T13901] ? clear_bhb_loop+0x35/0x90 [ 321.500713][T13901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.506655][T13901] RIP: 0033:0x7f4626385d19 [ 321.511078][T13901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.530704][T13901] RSP: 002b:00007f4627269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.539122][T13901] RAX: ffffffffffffffda RBX: 00007f4626575fa0 RCX: 00007f4626385d19 [ 321.547115][T13901] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 321.555090][T13901] RBP: 00007f4627269090 R08: 0000000000000000 R09: 0000000000000000 [ 321.563070][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.571055][T13901] R13: 0000000000000000 R14: 00007f4626575fa0 R15: 00007ffe914ecab8 [ 321.579053][T13901] [ 321.607996][T13926] vlan0: entered promiscuous mode [ 321.888851][T13964] __nla_validate_parse: 4 callbacks suppressed [ 321.888869][T13964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2626'. [ 321.953038][T13964] netlink: 'syz.2.2626': attribute type 10 has an invalid length. [ 321.971284][T13892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.122896][T13892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.243205][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 322.250392][T13892] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.298277][T13892] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.336470][T13892] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.363209][T13892] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.384237][T13990] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2632'. [ 322.427077][T13990] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2632'. [ 322.537517][T13998] netlink: 'syz.2.2633': attribute type 3 has an invalid length. [ 322.623989][T14006] netlink: 'syz.2.2633': attribute type 11 has an invalid length. [ 322.837672][T14016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2638'. [ 322.907434][T14016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2638'. [ 323.080266][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2643'. [ 323.187134][T14030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2643'. [ 323.717432][T14049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.887244][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 323.951500][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2657'. [ 324.372840][T14089] netlink: 'syz.1.2663': attribute type 10 has an invalid length. [ 324.515035][T14096] lo speed is unknown, defaulting to 1000 [ 324.638487][T14098] lo speed is unknown, defaulting to 1000 [ 325.484092][T14118] netlink: 'syz.4.2672': attribute type 10 has an invalid length. [ 325.527885][T13945] bond0: (slave syz_tun): link status definitely down, disabling slave [ 325.538922][T13945] bond0: now running without any active interface! [ 325.678539][T14124] netlink: 'syz.2.2675': attribute type 2 has an invalid length. [ 325.736928][T14129] netlink: 'syz.0.2677': attribute type 10 has an invalid length. [ 325.901687][T14134] lo speed is unknown, defaulting to 1000 [ 325.988490][T14142] FAULT_INJECTION: forcing a failure. [ 325.988490][T14142] name failslab, interval 1, probability 0, space 0, times 0 [ 326.022382][T14142] CPU: 1 UID: 0 PID: 14142 Comm: syz.0.2682 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 326.033229][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 326.043324][T14142] Call Trace: [ 326.046635][T14142] [ 326.049592][T14142] dump_stack_lvl+0x241/0x360 [ 326.054316][T14142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.059552][T14142] ? __pfx__printk+0x10/0x10 [ 326.064140][T14142] ? ref_tracker_alloc+0x332/0x490 [ 326.069271][T14142] should_fail_ex+0x3b0/0x4e0 [ 326.074002][T14142] should_failslab+0xac/0x100 [ 326.078721][T14142] ? skb_clone+0x20c/0x390 [ 326.083180][T14142] kmem_cache_alloc_noprof+0x70/0x380 [ 326.088606][T14142] skb_clone+0x20c/0x390 [ 326.092951][T14142] __netlink_deliver_tap+0x3cc/0x7f0 [ 326.098292][T14142] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.103525][T14142] netlink_deliver_tap+0x19d/0x1b0 [ 326.108679][T14142] netlink_sendskb+0x68/0x140 [ 326.113401][T14142] netlink_unicast+0x39d/0x990 [ 326.118214][T14142] ? __pfx_netlink_unicast+0x10/0x10 [ 326.123552][T14142] netlink_rcv_skb+0x262/0x430 [ 326.128362][T14142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.133430][T14142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.138775][T14142] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 326.144300][T14142] genl_rcv+0x28/0x40 [ 326.148323][T14142] netlink_unicast+0x7f6/0x990 [ 326.153143][T14142] ? __pfx_netlink_unicast+0x10/0x10 [ 326.158477][T14142] ? __virt_addr_valid+0x45f/0x530 [ 326.163643][T14142] ? __phys_addr_symbol+0x2f/0x70 [ 326.168718][T14142] ? __check_object_size+0x47a/0x730 [ 326.174055][T14142] netlink_sendmsg+0x8e4/0xcb0 [ 326.178876][T14142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.184209][T14142] ? aa_sock_msg_perm+0x91/0x160 [ 326.189191][T14142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.194515][T14142] __sock_sendmsg+0x221/0x270 [ 326.199241][T14142] ____sys_sendmsg+0x52a/0x7e0 [ 326.204051][T14142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.209371][T14142] ? __fget_files+0x2a/0x410 [ 326.214008][T14142] ? __fget_files+0x2a/0x410 [ 326.218648][T14142] __sys_sendmsg+0x269/0x350 [ 326.223272][T14142] ? __pfx_lock_release+0x10/0x10 [ 326.228339][T14142] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.233504][T14142] ? __pfx_vfs_write+0x10/0x10 [ 326.238339][T14142] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.244708][T14142] ? do_syscall_64+0x100/0x230 [ 326.249509][T14142] ? do_syscall_64+0xb6/0x230 [ 326.254220][T14142] do_syscall_64+0xf3/0x230 [ 326.258752][T14142] ? clear_bhb_loop+0x35/0x90 [ 326.263459][T14142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.269436][T14142] RIP: 0033:0x7f35ced85d19 [ 326.273882][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.293522][T14142] RSP: 002b:00007f35cfc73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.301986][T14142] RAX: ffffffffffffffda RBX: 00007f35cef75fa0 RCX: 00007f35ced85d19 [ 326.309999][T14142] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 326.318001][T14142] RBP: 00007f35cfc73090 R08: 0000000000000000 R09: 0000000000000000 [ 326.326008][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.334008][T14142] R13: 0000000000000000 R14: 00007f35cef75fa0 R15: 00007fff401c4338 [ 326.342029][T14142] [ 326.371517][T14145] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.469820][T14145] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.553226][T14145] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.622913][T14145] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.807265][T14145] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.844285][T14145] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.939087][T14145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.965603][T14176] __nla_validate_parse: 11 callbacks suppressed [ 326.965624][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2689'. [ 326.984734][T14173] geneve2: entered promiscuous mode [ 327.033797][T14145] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.148387][T14181] netlink: 'syz.3.2691': attribute type 10 has an invalid length. [ 327.164767][T14183] netlink: set zone limit has 8 unknown bytes [ 327.343776][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2696'. [ 327.355637][T14194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2696'. [ 327.371247][T14194] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 328.043934][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 328.076903][T14203] lo speed is unknown, defaulting to 1000 [ 328.203445][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2700'. [ 328.646282][T14241] vlan3: entered promiscuous mode [ 328.659100][T14241] team0: Device vlan3 is already an upper device of the team interface [ 329.351418][T14244] vlan0: entered promiscuous mode [ 329.357622][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2712'. [ 329.370360][T14250] netlink: 'syz.0.2712': attribute type 10 has an invalid length. [ 329.541904][T14256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.628735][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'. [ 329.662534][T14270] netlink: 'syz.2.2718': attribute type 29 has an invalid length. [ 329.688889][T14270] netlink: 'syz.2.2718': attribute type 29 has an invalid length. [ 329.954122][T14287] tipc: Enabled bearer , priority 0 [ 330.020215][T14287] syzkaller0: entered promiscuous mode [ 330.034409][T14292] ------------[ cut here ]------------ [ 330.040446][T14292] kernel BUG at net/core/skbuff.c:2849! [ 330.045852][T14287] syzkaller0: entered allmulticast mode [ 330.046068][T14292] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 330.052346][T14287] tipc: Resetting bearer [ 330.058556][T14292] CPU: 0 UID: 0 PID: 14292 Comm: syz.1.2724 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 330.058590][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 330.058603][T14292] RIP: 0010:__pskb_pull_tail+0x1568/0x1570 [ 330.058634][T14292] Code: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 c2 38 78 f8 e9 25 f1 ff ff e8 f8 d7 11 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 e9 d7 11 f8 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 330.058652][T14292] RSP: 0018:ffffc90005c86f30 EFLAGS: 00010283 [ 330.058670][T14292] RAX: ffffffff898d8657 RBX: 00000000fffffff2 RCX: 0000000000080000 [ 330.058685][T14292] RDX: ffffc9000e51f000 RSI: 00000000000001c0 RDI: 00000000000001c1 [ 330.058699][T14292] RBP: ffff88805ab2c2c0 R08: ffffffff898d7394 R09: 1ffff1100b5658dc [ 330.058714][T14292] R10: dffffc0000000000 R11: ffffed100b5658dd R12: ffff888032ed9350 [ 330.058730][T14292] R13: ffff888032ed9280 R14: ffff888032ed92f4 R15: ffff888032ed9280 [ 330.058746][T14292] FS: 00007fb3ad5416c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 330.058765][T14292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.058780][T14292] CR2: 00007fb3ad540f98 CR3: 0000000052efa000 CR4: 00000000003526f0 [ 330.058798][T14292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.058811][T14292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.058824][T14292] Call Trace: [ 330.058832][T14292] [ 330.058841][T14292] ? __die_body+0x5f/0xb0 [ 330.058863][T14292] ? die+0x9e/0xc0 [ 330.058883][T14292] ? do_trap+0x15a/0x3a0 [ 330.058902][T14292] ? __pskb_pull_tail+0x1568/0x1570 [ 330.058928][T14292] ? do_error_trap+0x1dc/0x2c0 [ 330.058944][T14292] ? __pskb_pull_tail+0x1568/0x1570 [ 330.058970][T14292] ? __pfx_do_error_trap+0x10/0x10 [ 330.058990][T14292] ? handle_invalid_op+0x34/0x40 [ 330.229447][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'. [ 330.229816][T14292] ? __pskb_pull_tail+0x1568/0x1570 [ 330.253995][T14292] ? exc_invalid_op+0x38/0x50 [ 330.258674][T14292] ? asm_exc_invalid_op+0x1a/0x20 [ 330.263708][T14292] ? __pskb_pull_tail+0x2a4/0x1570 [ 330.268839][T14292] ? __pskb_pull_tail+0x1567/0x1570 [ 330.274034][T14292] ? __pskb_pull_tail+0x1568/0x1570 [ 330.279233][T14292] skb_cow_data+0x2da/0xcb0 [ 330.283751][T14292] tipc_crypto_rcv+0x402/0x24e0 [ 330.288669][T14292] ? tipc_crypto_rcv+0x27f/0x24e0 [ 330.293691][T14292] ? __pfx_tipc_crypto_rcv+0x10/0x10 [ 330.298973][T14292] ? __pfx_tipc_node_find_by_id+0x10/0x10 [ 330.304698][T14292] ? tipc_ehdr_validate+0x186/0x340 [ 330.309919][T14292] tipc_rcv+0x57e/0x12a0 [ 330.314171][T14292] ? __pfx_tipc_rcv+0x10/0x10 [ 330.318854][T14292] ? tipc_l2_rcv_msg+0x28/0x450 [ 330.323699][T14292] tipc_l2_rcv_msg+0x2bd/0x450 [ 330.328469][T14292] ? __pfx_tipc_l2_rcv_msg+0x10/0x10 [ 330.333787][T14292] __netif_receive_skb_list_core+0x8b7/0x980 [ 330.339809][T14292] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 330.346345][T14292] ? dev_gro_receive+0x1318/0x2510 [ 330.351482][T14292] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 330.357813][T14292] netif_receive_skb_list_internal+0xa51/0xe30 [ 330.363970][T14292] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 330.370315][T14292] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 330.377114][T14292] ? eth_type_trans+0x3ce/0x7b0 [ 330.382013][T14292] napi_complete_done+0x2b5/0x870 [ 330.387074][T14292] ? __pfx_napi_complete_done+0x10/0x10 [ 330.392651][T14292] ? napi_gro_frags+0xa5f/0x1360 [ 330.397626][T14292] ? tun_get_user+0x2bbe/0x4890 [ 330.402506][T14292] tun_get_user+0x2ea0/0x4890 [ 330.407245][T14292] ? tun_get_user+0x2bbe/0x4890 [ 330.412146][T14292] ? __pfx_tun_get_user+0x10/0x10 [ 330.417212][T14292] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 330.422717][T14292] ? tun_get+0x1e/0x2f0 [ 330.426908][T14292] ? __pfx_lock_release+0x10/0x10 [ 330.431968][T14292] ? tun_get+0x1e/0x2f0 [ 330.436152][T14292] ? tun_get+0x27d/0x2f0 [ 330.440427][T14292] tun_chr_write_iter+0x10d/0x1f0 [ 330.445480][T14292] do_iter_readv_writev+0x600/0x880 [ 330.450792][T14292] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 330.456549][T14292] ? bpf_lsm_file_permission+0x9/0x10 [ 330.461962][T14292] ? security_file_permission+0x74/0x280 [ 330.467633][T14292] ? rw_verify_area+0x1c3/0x6f0 [ 330.472513][T14292] vfs_writev+0x376/0xba0 [ 330.476886][T14292] ? __pfx_lock_acquire+0x10/0x10 [ 330.481945][T14292] ? __pfx_vfs_writev+0x10/0x10 [ 330.486837][T14292] ? __fget_files+0x2a/0x410 [ 330.491463][T14292] ? __fget_files+0x395/0x410 [ 330.496180][T14292] ? __fget_files+0x2a/0x410 [ 330.500818][T14292] do_writev+0x1b6/0x360 [ 330.505103][T14292] ? __pfx_do_writev+0x10/0x10 [ 330.509903][T14292] ? exc_page_fault+0x590/0x8b0 [ 330.514790][T14292] ? do_syscall_64+0xb6/0x230 [ 330.519496][T14292] do_syscall_64+0xf3/0x230 [ 330.524032][T14292] ? clear_bhb_loop+0x35/0x90 [ 330.528739][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.534072][T14311] FAULT_INJECTION: forcing a failure. [ 330.534072][T14311] name failslab, interval 1, probability 0, space 0, times 0 [ 330.534635][T14292] RIP: 0033:0x7fb3ac785d19 [ 330.547938][T14311] CPU: 1 UID: 0 PID: 14311 Comm: syz.3.2732 Not tainted 6.13.0-rc2-syzkaller-00378-g5098462fbac6 #0 [ 330.551590][T14292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.562318][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 330.581898][T14292] RSP: 002b:00007fb3ad541038 EFLAGS: 00000246 [ 330.591928][T14311] Call Trace: [ 330.591940][T14311] [ 330.597973][T14292] ORIG_RAX: 0000000000000014 [ 330.601234][T14311] dump_stack_lvl+0x241/0x360 [ 330.604145][T14292] RAX: ffffffffffffffda RBX: 00007fb3ac976080 RCX: 00007fb3ac785d19 [ 330.608795][T14311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.613439][T14292] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000004 [ 330.621386][T14311] ? __pfx__printk+0x10/0x10 [ 330.626553][T14292] RBP: 00007fb3ac801a20 R08: 0000000000000000 R09: 0000000000000000 [ 330.634500][T14311] ? __pfx___might_resched+0x10/0x10 [ 330.639057][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.647001][T14311] ? rcu_is_watching+0x15/0xb0 [ 330.652255][T14292] R13: 0000000000000001 R14: 00007fb3ac976080 R15: 00007ffdf30fc5c8 [ 330.660215][T14311] should_fail_ex+0x3b0/0x4e0 [ 330.664970][T14292] [ 330.672922][T14311] should_failslab+0xac/0x100 [ 330.677577][T14292] Modules linked in: [ 330.680578][T14311] __kmalloc_cache_noprof+0x70/0x390 [ 330.685422][T14292] ---[ end trace 0000000000000000 ]--- [ 330.689102][T14311] ? __request_module+0x2b9/0x640 [ 330.689131][T14311] __request_module+0x2b9/0x640 [ 330.694399][T14292] RIP: 0010:__pskb_pull_tail+0x1568/0x1570 [ 330.699851][T14311] ? lock_release+0xbf/0xa30 [ 330.699873][T14311] ? lock_release+0xb0/0xa30 [ 330.699890][T14311] ? __pfx___request_module+0x10/0x10 [ 330.704900][T14292] Code: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 c2 38 78 f8 e9 25 f1 ff ff e8 f8 d7 11 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 e9 d7 11 f8 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 330.709729][T14311] ? __pfx_lock_release+0x10/0x10 [ 330.709756][T14311] ? ctnetlink_new_conntrack+0x7d5/0x2250 [ 330.715532][T14292] RSP: 0018:ffffc90005c86f30 EFLAGS: 00010283 [ 330.720095][T14311] ctnetlink_new_conntrack+0x1c40/0x2250 [ 330.720119][T14311] ? ctnetlink_new_conntrack+0x7d5/0x2250 [ 330.724673][T14292] [ 330.730017][T14311] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 330.730036][T14311] ? rcu_is_watching+0x15/0xb0 [ 330.749648][T14292] RAX: ffffffff898d8657 RBX: 00000000fffffff2 RCX: 0000000000080000 [ 330.754624][T14311] ? trace_contention_end+0x3c/0x120 [ 330.760331][T14292] RDX: ffffc9000e51f000 RSI: 00000000000001c0 RDI: 00000000000001c1 [ 330.766350][T14311] ? __mutex_lock+0x37f/0xee0 [ 330.766372][T14311] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 330.771971][T14292] RBP: ffff88805ab2c2c0 R08: ffffffff898d7394 R09: 1ffff1100b5658dc [ 330.777661][T14311] ? rcu_is_watching+0x15/0xb0 [ 330.779977][T14292] R10: dffffc0000000000 R11: ffffed100b5658dd R12: ffff888032ed9350 [ 330.785925][T14311] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 330.785944][T14311] ? lock_release+0xbf/0xa30 [ 330.790682][T14292] R13: ffff888032ed9280 R14: ffff888032ed92f4 R15: ffff888032ed9280 [ 330.798628][T14311] ? nfnetlink_rcv_msg+0xa5c/0x1180 [ 330.798654][T14311] ? __pfx_lock_release+0x10/0x10 [ 330.803904][T14292] FS: 00007fb3ad5416c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 330.811856][T14311] ? __nla_parse+0x40/0x60 [ 330.811878][T14311] ? nfnetlink_rcv_msg+0x225/0x1180 [ 330.816542][T14292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.822481][T14311] nfnetlink_rcv_msg+0xbec/0x1180 [ 330.830451][T14292] CR2: 00007fb3ad540f98 CR3: 0000000052efa000 CR4: 00000000003526f0 [ 330.835175][T14311] ? nfnetlink_rcv_msg+0x225/0x1180 [ 330.843155][T14292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.849085][T14311] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 330.853658][T14292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.861604][T14311] ? stack_trace_save+0x118/0x1d0 [ 330.861635][T14311] ? dev_hard_start_xmit+0x27a/0x7d0 [ 330.866833][T14292] Kernel panic - not syncing: Fatal exception in interrupt [ 330.954345][T14292] Kernel Offset: disabled [ 330.958666][T14292] Rebooting in 86400 seconds..