last executing test programs: 2.096776195s ago: executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x866, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad4dace0f5119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c78e7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x181}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336", 0x1c}], 0x3}, 0xffffff7f}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672dbecde54535371af01e67576ef51", 0x1a}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f642920068473af2e996703149f0c13bcfae9beeb8d", 0x5c}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e", 0x25}], 0x4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000900)="e4", 0x9}], 0x1}}], 0x1, 0x24004040) accept$alg(0xffffffffffffffff, 0x0, 0x0) 2.030094221s ago: executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x600000000000000, 0x10012, r1, 0x0) 1.948275031s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="fe0f09"], 0x1a) 1.695465626s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000240)=0x60, 0x800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180)=0x800004, 0xffffffffffffff98) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000200)=0x9, 0x4) listen(r3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r7}, 0x4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x101, 0xf9164325198ce184, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4, 0x0, 0x740}}) 1.528251475s ago: executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x0, 0x0, @dev, @local, {[@hopopts={0x0, 0x1, '\x00', [@ra={0x5, 0x8}, @ra]}]}}}}}, 0x0) 1.420132649s ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400c000400040082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'veth0_to_batadv\x00', &(0x7f00000008c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x90000000}}) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000600)) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x29, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000002000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000099b9f8ff08000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70501000800000085000000a500000018100000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x68, &(0x7f00000002c0)=""/104, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x80, 0x3, 0x2}, 0x10, 0x254dc, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x100}, 0x90) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x4000000) r3 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r3, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000002900000043000000", 0x6033) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000001940)=@deltfilter={0x24}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x4, @dev, 'ip_vti0\x00'}}, 0x1e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) sendmmsg(r6, &(0x7f0000004240)=[{{&(0x7f0000000140)=@tipc=@id, 0x80, 0x0}}, {{&(0x7f0000002a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="001e000000000000b7030000000000008500000035000000b70000000000dfff9400000070a09f4cec65845c3eb1e557bb341986b48fc40000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @initdev, 0x0}, &(0x7f0000000640)=0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x19, r8, 0x1, 0x0, 0x6, @remote}, 0x75) getpeername$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.3478356s ago: executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) unshare(0x22020400) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) pipe(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000058000000000406"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (rerun: 64) 1.232238524s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x200000008000004]}}, @subvolid}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0068003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0) 1.221841834s ago: executing program 1: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x800, 0x9, 0x10040, 0x2818, 0xffffffffffffffff, 0xa950, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000091c0100000000000018110000029c36d09219a8c0b8f9286e7362922699f2582dd25c46f031f3a0767b80901a4f5a1865fa", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept4(0xffffffffffffffff, &(0x7f0000000300)=@rc={0x1f, @fixed}, &(0x7f0000000180)=0x80, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000980)={0x2c, r3, 0x201, 0x0, 0x0, {0x4}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@multicast1, @initdev}, &(0x7f0000000400)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pim6reg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1800000070000100000000000000000007000000b55e8809fee8633f858a17e3e0c5b3a93ed197c6ce60539660e6467004e37a67fa4f8f79ed03a3313e5d084deb7715efb1320a5d33baae71dc10102cc02332e0081be05dfd78204da2e35bb27cde31c65a900694c0238687c135b9cc9f08b7c51585f56df18841fbc654f44970d536a328516a861526fa852642c18604b58c9e35aa9b9b23f304183c8af82e4fb9d7348b4b56e62bbe1ef1cd80675b5b7909d832ea45d3b28d2b0e0b3e7b31d4929a04afa10ed4c8207d14b2f75d740566c16ce2d25e5b8876f99a47653d3265b3ae8ce561414b7a97b7950599a55bba71", @ANYRES32=r5], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x1c0000, 0x92f0, {{0x2c, 0x4, 0x1, 0x0, 0xb0, 0x68, 0x0, 0x1, 0x2f, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0x18, 0x1, [{0x4, 0xd, "6c0fecedf8b2dc08db96ce"}, {0x5, 0x5, "09c09e"}]}, @ssrr={0x89, 0x7, 0xdb, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x44, 0x10, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x9}, {@rand_addr=0x64010101, 0x1f}, {@empty, 0x7ff}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010100, 0x1ff}, {@broadcast}, {@loopback, 0x1800}, {@loopback, 0x1}]}, @timestamp_addr={0x44, 0x24, 0xd3, 0x1, 0x0, [{@remote, 0xffffff66}, {@empty}, {@local, 0x81}, {@remote, 0x10000}]}, @timestamp_prespec={0x44, 0x14, 0xef, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x10000}, {@loopback, 0x1ff}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x21, &(0x7f0000000740)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x0, 0x19, &(0x7f0000000680)=""/25, 0x0, 0x0, '\x00', r8}, 0x90) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300000000010001000000000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000940)={@remote, @private, 0xd}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680)=0x14) socket$packet(0x11, 0x3, 0x300) 1.033762607s ago: executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x866, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad4dace0f5119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c78e7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x181}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336", 0x1c}], 0x3}, 0xffffff7f}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672dbecde54535371af01e67576ef51", 0x1a}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f642920068473af2e996703149f0c13bcfae9beeb8d", 0x5c}, {&(0x7f0000000800)="8434335f698d91a2a3efe5291f7ebbc2424bb7ee30459376efe5541dc546f93c4ad4f9343e", 0x25}], 0x4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000900)="e4", 0x9}], 0x1}}], 0x1, 0x24004040) accept$alg(0xffffffffffffffff, 0x0, 0x0) 1.032246856s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000540), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.016161905s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x90) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x6, 0x4000}, 0x10) 914.947507ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000003b00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 867.464651ms ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x8, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) (fail_nth: 64) 848.690422ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="17fffff30000000000020000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 800.531791ms ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000011180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015000500142603600e1208001e0000000401a80009002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 485.590955ms ago: executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000008000000022f088b2f01000846"], 0xfdef) 454.605819ms ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xa2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000005580)=""/4101, 0x1005}, {&(0x7f0000002540)=""/4088, 0xff8}, {&(0x7f0000000040)=""/177, 0xb1}, {&(0x7f00000012c0)=""/64, 0x40}], 0x4}, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x1) 446.776109ms ago: executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1400000031001fffffff00000000000d03"], 0x114}], 0x1}, 0x0) 436.598144ms ago: executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2={0xff, 0x2, '\x00', 0xa}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 338.243237ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x42000100) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0xfdef) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x7, 0x1, 0xffffffffffffffff, 0x6a, 0x2, 0x2, 0x771f, 0x80010000, 0x100, 0x0, 0xffffffffffffff7f, 0x7fffffffffffffff, 0x1, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000400)={0x0, r3, "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", "cfa74a94e6fa31f3fd7b96fa4a96b185ce17976604f47a6968ec233eb71335231f91184470bd8a118b0d938c216d1d241f29c7c3b181d88d7e654645d2cd0d7a9ee599cb9fc4731565afb64f22f83ac83179b97327bf1ab0e911e15e1897a7fbbf589395313d2be7736cf826610f78abe310200d237366094386ff48b68b631677f8ae982521e82ba78a8b6cb9ea841454829f92863bf3a3fd3ef5badc3d2f5e82e9f10303b24e60c9145dc33d75da3e7c704050b4f1da665a4ca45bb4152c78fa7ce1f8b6bd6037633fc786503a896e4b0c24e474d8a8704e8b1b99904eaee3cf0e83469ff09ba0c19b697bb7faec62927a0ae75251326ac60ef51d14eb019f89248a2473c2616b9113dc0962da98faa888734d7387d80e4bb9bd85295590740700be6cad6f7949c03f45ad0e5dd50d5a7890c5e3ab6cfbdc200606e91053e0f4059be44b9cb9f3867d629520e224269a3f826f0f778debf489fbf594604a7f14d348ccac016a85247f13c96ad216c43983b99cefc3e762802c5cbfff2cdb1b2ae3724aac7d5c75bbdc8f576c7dd488d62c8ef77f69648d8380fce8830d98654be57036e605ed409eedc9d74306554469cab9094c7882a88dc6b77e0ec3ba4f0f89716f1ac7bca3d9282a680e644b823a69623f5d63ae1e4e42d4837b30aa7dce9d41694efadd16ebe42f5acf27b396696e0aace20b6ce661470dd4abe67d85db514880469edbec4ece25cf1b8101e9f28b9beae93d4398f02cf52a6abd8cf67e9ba1ed8a7258f9d7a2ce783e75c229d3bc5441985b7bdbf999a8e430d5334004296c70ed7131506b981e015b61e50c0189ed54c787b02ce2530a6d439c53f3cee4d3696a416b8b668a83458c45e51997ac3a4dc0266bd27247becbdd9ff6355551c82a597ad5736f13b87e2c1c50fb45f1a724cb850adbdb012262247af8726d70f82ebbf37fca3d3ad01fe1bed6c9de055997f600b6d7517f4be16feb01149cfd60ea467760f51586ec188d876f9d5f2f9695e381d1ff29d870e0f4717bc27ae9018860468e55a9daae8d6d0045ff006d30c8a4419eda54e19f0c98ff86367f5b720e5e316b36fabf0a4b498525faf51ba2fc7121053539f32adae447fafb66d38352a84a75a7d7b7b34665f42bd803a37f15c633e3a684f33b5fc6ed5891375602f43134fc3d7662155fdf1d37c6bb0e11bfc21fdbf85f60b533ec5d006e308cae611728f34240be5c6d47db96fc7b413146f14350b745240fad9b1dbaed195518e7bd3a6f2b12b8f4cc29b2ac50aee617abd5c675b1937619a28e7ffd4400e1d6f2c0847891583d97424448a192b1f0df07a549de7453382f647f2b3deb9d27d105986086da566548b6b385af3a9855994fad2edae0217145ec4568a39981d27a43123ff68cdcb82fdd5dc8fa51ef09e181f2c5d312d6a6c2329b066690e470a416ce92823cc71db8e212ed44f0003864be86e0daf8fcb13d190f04d53483668abdc42dc4df5e635b383e30ca3565c913e0b65669c4e9ac3b2f760f71f975440cce0fa349cf8bb44e0b877a83c2004202e5ff9e1a5e858437c0465ca21217038e585e9d0b2ac7842fd0b4ee47f3f9cc77979e5bc0e36f36e9c72ad3d214971d2fbcb9493c2759149c4e225d468daa6d97b143381568c4ba9c25a15df3b07a1b57041d0717e04ab2777503738cfeceee359d7a71b15be563aadade973b7076855a4a4910d445fed77dbca96544d597d774922b0333f92114312555a9bb058c6180f3c982a149f3daf072099663e88b28f645c81d1ad28efe1a5457563a67c2e7379c74728f114ca6c5a4f071cf45963d089a178469d4bb13ff28ce1402e0ed6122aa36e6d5ef7fe9cacaa07ea135641afb6d3e962dedb7cf444faabaf3451f6651742745ac129e9839a930bb0f7267a50db110ad7d9eb02ac1e60a0eb0021d725060176ad4151d8fcf81456b57972eba00ff7963d3441ef25f1418afeaaec77d1e1fe21303989b227c4fbb56abd5b71732f5ef9cf0c11b9473633b7bee7ee3ad62c9e63f768bcbd9197b42d923aebe8cda1923f9ff7641ffe564d304e2bd8b7c4f4dc66eb4f11a42d0f2b67594b7b1a8cc4b8d99c719690e8519d964535e2bafbf32cc9b2f45b115e15ad801fa6aeba40d55ba3e3435c00c7c7ef106db64c9611bb7ca41ae720f25415f9df8e8ec58a1efdde553e6e3497c0a45cf2e5c6d6d6842a0fb9e5ec03a04c9b2ad7d4f9b3687b0cfd910c7f761c4d50f3343182207df5d0dad352309a6e7aca118a40ce24e00e84339fa5782b960cbd5af964cf3e30bbcdb4392ea45bc680dd4d34ffeb13a8131d641f163d0c75aa8de851ba0dbfeb877c42d3d4232a7792a9d44e3e54f77da5ed4754bd8ed44d751f25f2d50211ac4e54299396b7b75699ffbddbf3deec0e6936167019dfb10039960d8e5ec3ab14de438b72f24c7fb71d09a531af7db890214eda8875123280309fbc5898a2bd5e1648695c9c1212d065ca7761ff2feccc261036ae203f3004e3b82b7cbb2758542a82b5dd11f7ee738817ff27e05a952ffff96287c9c94d5ba0020f7d9685f72b2eb38eeb998e4bac738b4ab1403f345e2fb6ea42f977fd56b2a1e5c6982dbfdb67a79527a5abad15137dea5972ca44bfd25262ac707b108c13c03f8520cceca869c5cb5c90ba3297f05bc467fdce331eba5d45fad66a559bb91dbe8d630ec125d2c68bd17e1e3ba9125495d265005f6fa26b55b5b2bfa01ebc9d558372804b6c94e8519215e76857e8082ae6ea0b7c72875f5f017d81ca6374faa098dc15a611047aacc3c16bb8bdf84dfcb307c1af5b14d5e9c8a7342b95a86e84a3dc9bf58a721f601ab1fed46a453c551715f424208d75422858adcb5a1699823659dd6ab2e8c4743e16ecfcd1aca7e5cda7a7102605bcc245d47617ecd9c5483d43b9025a14cc504dd6eb7d6a6acb6958b911a083ffe79d2b6d302f340e01119ff722ea30514c809d3754995b6c6032057d36e7f0a0c34b886af1bc64dd029e581fbf50567b5ef67d93a17d74920d9fce03f6470ba6382af9cac551f34c5d5eaa3ec494c748ca172bd6da0aa236e3e5937726673c22d0579840e42a790a1588c754958e45308d3ea7e64d1e1ad8de179641a77049e0d888071a417d751532f18fa6283c28303b987da5c9485b40b23f9083efcdc93e7889c300ddd1534be0afb6b0b7bd36c767a9bdfbd1bbbe3f8cbcc2f8c4199b67c9741d99864c49897b2f3a1937a06274a708e8e000045559d465760545dbc3e8ff349e0dd7ed2677aa36348152bbee79912fb482442d24e68f06f7bafc492398ff44c560096badfa1724020b666fc6dc5934293d7010850e857300bfd3ef105087faa0dc77598d1397ecfd3cd59b028356a06d805975348cdc2a7ea2a4ef504fdde6b046d0fd1d76a17b36540b1175bf3523c4881671c57e970e9ee97322b47e230d00a3d430cd441cba8dc136f1dee3c7f80d43ee094de6f47f0b91a9456097a339bf1306c931db186348632e5fda0fac2518b14cd96dc0d9aaff5dd936f68576366ee80b650168ff3fa2af4505a08fca4a07e13c76f3a7d1b304b710175fa22d1d5c6dabe0785b95003f433420ae83b96b99f4f1ee2451a452093585aa27c1d3b8766aaa7379500a7d319bbb66e03e95b305f9c695d574745d3e0630bdd0c45369d6f8add9d5937b22d383a086cb33091a06c43473b0da5f2e49f62f86ed3c1e818cd708da371e80bbccee1a86d7d4c4b6018dc948f624f95594945d0b90cf55ac74d3a8365f09c5196e27a50f041ca01bbdabb44b57e8e00a2448048f115d5c6080f4a74a7fc69026f5c1c3a373f10eb044553d3f9d2d862237b4a937a2a23f50630ef052d640754c8ecaf1ffc0bf9e20cd50908b6b4f7ad6673eba29f6123a95ffde134015bb1f73e9c3e2907fb09ca21d48f2bd9be55e92b6c906813870e7629aec0ba5710930a917aa455557dcd0c503a98bb6b956633b41d6c37e01771bb075db7276f3674334083171bdda636a515e4fb2f5b42b8faaf12159749558c868b3d3db19d1c6142b1df5b36775386e1155a8b46c1952403e1b979d4bfe94b726b39d008dfd2c098947719691fb9434f7619cdb5e240b8406c112c9de7fc71952c3e97affb0906b2de6f7404b7531ff1a2eb900cd1cde00ccc46a70c8a7f361758bc70762357f0ce2059aa7cb5b6a81759df1153c48f53990d6d9a0e403fbfbaf8cbbbeca43350a736f0d5fbbbb09429ce0bc8434dfa26af3ef33aa424f9e965e77ae5dadf20cbaa13a72502fe93b35ff1e065fd8ceacc9ae5d5ce6a71e92cdad45f179c001b89fdc53fdbae5650068e4a688f5499c65783c3ab0ffa5fd0b169fe81a72bd91d1b9ab9e7036ad8dbdac2471c2b4d037cd024281d178683350a9c93969a4b46eb36b224a46270a046fa2c049f04acec1b37928e22e1d13099255ca7ef1992cc7ae527f814fb84bdfb7f0412bb57b24df918e12cedd1bce53df4cbb621c0054ae3e78c5927c79aa1d158a1f5c8a7f506434fda93417a5210fd89bd602dc92d66097f0d45074e14c0ba11d6839b03ab84c94ad46e8351194f779ec0e4ca6db4c5ad9b1068ee15078b8c8b20d3d4604a4ef3c8a9f07bc08f07b00a5c76088e2d33ea4bbc91b9432ae5eefba53fa2be9b586e206eee93ef1618d359bb6e3c540cfaf5ed3bf6021005aa81d530202832116ed87dad7910d256d97a450dbe3a6ebcb8a11b206f73ca0b0558b2bd3e07895edfd1cb820ea489a3cbfb8439c029502da8b4740fc066471e828dff2b7123c1730a9bd4621eb50c76f7aebc23dbc55a5cbd8026c80c3278374ffea6759640ab842732ad9a45644cdc9c2eb78761c9e2c6e9c22c58644408af631be20aafb1511b4803dd979e6fbf10ef2d58e4de327a4511688500b9ef78f1a596de9e17eb748ac28a0c61c7bfdc0efd0c2c7c0f53a4e37d4462de4b88ec71d293c615d9b2804ff57dee0721948cfd04fd22b75e6b845c5454a6a718657f78e226a2ad47061560fa13f7180239c5cdaa1b055361af19e2f2483d41c7990fa5ccc0ebb39b808f199c4d8ffaa891115045693ccdfcdb14d644bf7fb49d4e0b8e066da31318877dbcb7df505913aa17ef04efbd993824e2697eab7bde2934a788367f5b76192526dd18744f5ae48ed1b908af68d38b89bfc18e949899a1fa6363c6fe3d068c6a1af3231504ea741b2cd7070067a4f63e6c85a143cd678148ce25b776f1ffa38d16e543bae655767bcb8be46db875a049fc97077fb5013b01df5f56e95a5d83e3df676148fa13239ac1a88bcaf3868e307e4005a7b10476c3439a097c103e376706f1dd96258ecb1d44d2aec75e7d369ab7ca32dd09472fe82e2dcf5d9f188006608b9fa32f39e993b78f"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000057000000bf090000000000005509010000000000ecc1b6a200000000bf91000000000000b7020000000000008500000000000000b7000000000000020000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@empty, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x58, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x3, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@srh={0xca, 0x4, 0x4, 0x2, 0x3, 0x8, 0x380, [@mcast2, @private1]}]}}}}}}}, 0x0) 336.192502ms ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="fe0f09"], 0x1a) 330.10366ms ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_dccp(0x2, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x34c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x9}, 0x0, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @local}, 0x10) 243.313128ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000540), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 146.412662ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db67dc983134d04ef2fd6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098c07898a3f4103699b9e079229c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b858b9267aa0b28d69a74ffdea61be892f0f9ff9468e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff180aa18b635d1667459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e7423d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c1779fe74f884c24"], &(0x7f0000000140)='GPL\x00'}, 0x90) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x6, 0x4000}, 0x10) 117.419264ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003000000000000000fd13da73da26a2d12a3d6300"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 88.177505ms ago: executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xce2, 0x4) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000100)={0x2, 0x4e22, 0x0, @remote, 0x700}, 0x1c, 0x0}}], 0x1, 0x0) 48.960237ms ago: executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x4c, r0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x70}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x16}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xac2d}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1f}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x40}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x40}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4b35, 0x6, 0xe31, 0x2, 0xffffffffffffffff, 0xc263, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x10, r1}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000600), 0x3fffff) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x48) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0xf000) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r13}, {}, {0x46, 0x2, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x8, 0x100}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0xf3, &(0x7f0000000240)=""/243, 0x41000, 0x5, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xe, 0x6, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r1, r3, r6, r7, r8, r9, r10, r11, r12, r14], 0x0, 0x10, 0x7}, 0x90) 28.493444ms ago: executing program 3: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) (fail_nth: 22) 0s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000240)=0x60, 0x800) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180)=0x800004, 0xffffffffffffff98) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000200)=0x9, 0x4) listen(r3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x1, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={r7}, 0x4) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x101, 0xf9164325198ce184, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4, 0x0, 0x740}}) kernel console output (not intermixed with test programs): .316350][ T7390] dump_stack_lvl+0x241/0x360 [ 112.321052][ T7390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.326280][ T7390] ? __pfx__printk+0x10/0x10 [ 112.330886][ T7390] ? nf_ct_pernet+0x45/0x270 [ 112.335490][ T7390] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.341482][ T7390] ? __pfx_lock_release+0x10/0x10 [ 112.346532][ T7390] should_fail_ex+0x3b0/0x4e0 [ 112.351238][ T7390] ? __nf_conntrack_alloc+0x8f/0x380 [ 112.353918][ T7392] syzkaller1: entered promiscuous mode [ 112.356527][ T7390] should_failslab+0x9/0x20 [ 112.356568][ T7390] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 112.369892][ T7392] syzkaller1: entered allmulticast mode [ 112.371854][ T7390] __nf_conntrack_alloc+0x8f/0x380 [ 112.371894][ T7390] init_conntrack+0x3c3/0x1310 [ 112.387336][ T7390] ? __pfx_init_conntrack+0x10/0x10 [ 112.392566][ T7390] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 112.398571][ T7390] ? __local_bh_enable_ip+0x168/0x200 [ 112.403976][ T7390] nf_conntrack_in+0xd59/0x1880 [ 112.408879][ T7390] ? __pfx_nf_conntrack_in+0x10/0x10 [ 112.414313][ T7390] ? ipt_do_table+0x312/0x1860 [ 112.419114][ T7390] ? __pfx_ipt_do_table+0x10/0x10 [ 112.424164][ T7390] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 112.429642][ T7390] ? ip_sabotage_in+0x55/0x290 [ 112.434434][ T7390] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 112.439910][ T7390] nf_hook_slow+0xc3/0x220 [ 112.444876][ T7390] ? __pfx_ip_rcv_finish+0x10/0x10 [ 112.450008][ T7390] ? __pfx_ip_rcv_finish+0x10/0x10 [ 112.455143][ T7390] NF_HOOK+0x29e/0x450 [ 112.459241][ T7390] ? NF_HOOK+0x9a/0x450 [ 112.463413][ T7390] ? __pfx_NF_HOOK+0x10/0x10 [ 112.464007][ T7397] Dead loop on virtual device ipvlan1, fix it urgently! [ 112.468008][ T7390] ? ip_rcv_core+0x801/0xd10 [ 112.468036][ T7390] ? __pfx_ip_rcv_finish+0x10/0x10 [ 112.468063][ T7390] ? __pfx_ip_rcv+0x10/0x10 [ 112.484654][ T7390] __netif_receive_skb+0x2bf/0x650 [ 112.484689][ T7390] ? __pfx_lock_acquire+0x10/0x10 [ 112.484709][ T7390] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 112.505729][ T7390] ? __pfx___netif_receive_skb+0x10/0x10 [ 112.511389][ T7390] ? read_tsc+0x9/0x20 [ 112.515477][ T7390] ? timekeeping_get_ns+0x2c0/0x420 [ 112.520703][ T7390] ? netif_receive_skb+0x131/0x890 [ 112.525837][ T7390] ? netif_receive_skb+0x131/0x890 [ 112.530975][ T7390] netif_receive_skb+0x1e8/0x890 [ 112.535938][ T7390] ? tun_rx_batched+0x160/0x8f0 [ 112.540813][ T7390] ? __pfx_netif_receive_skb+0x10/0x10 [ 112.546319][ T7390] ? tun_rx_batched+0x160/0x8f0 [ 112.551196][ T7390] tun_rx_batched+0x1b7/0x8f0 [ 112.555896][ T7390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.562241][ T7390] ? __pfx_lock_acquire+0x10/0x10 [ 112.567280][ T7390] ? __pfx_tun_rx_batched+0x10/0x10 [ 112.572523][ T7390] tun_get_user+0x2f3b/0x4560 [ 112.577210][ T7390] ? tun_get_user+0x2a35/0x4560 [ 112.582080][ T7390] ? __pfx_tun_get_user+0x10/0x10 [ 112.587111][ T7390] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 112.592565][ T7390] ? tun_get+0x1e/0x2f0 [ 112.596731][ T7390] ? tun_get+0x1e/0x2f0 [ 112.600882][ T7390] ? tun_get+0x27d/0x2f0 [ 112.605120][ T7390] tun_chr_write_iter+0x113/0x1f0 [ 112.610158][ T7390] vfs_write+0xa72/0xc90 [ 112.614408][ T7390] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 112.619953][ T7390] ? __pfx_vfs_write+0x10/0x10 [ 112.624735][ T7390] ksys_write+0x1a0/0x2c0 [ 112.629063][ T7390] ? __pfx_ksys_write+0x10/0x10 [ 112.633907][ T7390] ? do_syscall_64+0x100/0x230 [ 112.638665][ T7390] ? do_syscall_64+0xb6/0x230 [ 112.643347][ T7390] do_syscall_64+0xf3/0x230 [ 112.647869][ T7390] ? clear_bhb_loop+0x35/0x90 [ 112.652545][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.658434][ T7390] RIP: 0033:0x7f90b847d0a9 [ 112.662842][ T7390] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 112.682439][ T7390] RSP: 002b:00007f90b91390c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.690846][ T7390] RAX: ffffffffffffffda RBX: 00007f90b85b3f80 RCX: 00007f90b847d0a9 [ 112.698812][ T7390] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 112.706777][ T7390] RBP: 00007f90b9139120 R08: 0000000000000000 R09: 0000000000000000 [ 112.714740][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.722698][ T7390] R13: 000000000000000b R14: 00007f90b85b3f80 R15: 00007fff1e83f518 [ 112.730672][ T7390] [ 112.881723][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.996334][ T7407] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.328189][ T7425] netem: incorrect ge model size [ 113.582586][ T7436] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.098729][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.339007][ T7470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.439974][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.983397][ T7521] bridge0: entered promiscuous mode [ 114.997201][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.163855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.378714][ T7547] hsr0: entered promiscuous mode [ 115.392653][ T7547] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 115.402350][ T7547] __nla_validate_parse: 1 callbacks suppressed [ 115.402365][ T7547] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.451331][ T7551] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 115.465843][ T7551] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.539495][ T7545] hsr0: left promiscuous mode [ 115.775288][ T7561] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 115.799438][ T7561] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 115.820947][ T7561] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 115.845827][ T7561] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.876971][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.894957][ T7574] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.036295][ T7582] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 116.203280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.363915][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.387916][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.415172][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.460888][ T7615] syz-executor.0: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 116.463294][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.481165][ T7615] CPU: 0 PID: 7615 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 116.500557][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 116.510620][ T7615] Call Trace: [ 116.510809][ T7619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.513898][ T7615] [ 116.513911][ T7615] dump_stack_lvl+0x241/0x360 [ 116.513944][ T7615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.521134][ T7619] IPv6: NLM_F_CREATE should be set when creating new route [ 116.524049][ T7615] ? __pfx__printk+0x10/0x10 [ 116.524083][ T7615] ? __rcu_read_unlock+0xa1/0x110 [ 116.531650][ T7619] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.533937][ T7615] warn_alloc+0x278/0x410 [ 116.533974][ T7615] ? __pfx_warn_alloc+0x10/0x10 [ 116.534004][ T7615] ? hash_ipport_create+0x801/0x1670 [ 116.534025][ T7615] ? __get_vm_area_node+0x23d/0x270 [ 116.534052][ T7615] __vmalloc_node_range_noprof+0x69f/0x1460 [ 116.534103][ T7615] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.534126][ T7615] ? rcu_is_watching+0x15/0xb0 [ 116.534148][ T7615] ? trace_kmalloc+0x1f/0xd0 [ 116.534165][ T7615] ? __kmalloc_node_noprof+0x247/0x440 [ 116.534183][ T7615] ? kvmalloc_node_noprof+0x72/0x190 [ 116.534206][ T7615] kvmalloc_node_noprof+0x142/0x190 [ 116.534226][ T7615] ? hash_ipport_create+0x801/0x1670 [ 116.534248][ T7615] hash_ipport_create+0x801/0x1670 [ 116.534269][ T7615] ? __pfx_lock_acquire+0x10/0x10 [ 116.534300][ T7615] ? __pfx_hash_ipport_create+0x10/0x10 [ 116.534323][ T7615] ? __nla_parse+0x40/0x60 [ 116.534344][ T7615] ? __pfx_hash_ipport_create+0x10/0x10 [ 116.534364][ T7615] ip_set_create+0xa5c/0x1900 [ 116.534388][ T7615] ? ip_set_create+0x45e/0x1900 [ 116.534419][ T7615] ? __pfx_ip_set_create+0x10/0x10 [ 116.534476][ T7615] ? nfnetlink_rcv_msg+0x225/0x1180 [ 116.534494][ T7615] nfnetlink_rcv_msg+0xbec/0x1180 [ 116.534512][ T7615] ? nfnetlink_rcv_msg+0x225/0x1180 [ 116.534553][ T7615] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.534597][ T7615] ? kasan_save_track+0x51/0x80 [ 116.534617][ T7615] ? kasan_save_track+0x3f/0x80 [ 116.534643][ T7615] ? kasan_save_free_info+0x40/0x50 [ 116.534662][ T7615] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 116.534684][ T7615] ? __netlink_deliver_tap+0x54d/0x7c0 [ 116.534703][ T7615] ? netlink_deliver_tap+0x19d/0x1b0 [ 116.534719][ T7615] ? netlink_unicast+0x7be/0x990 [ 116.534741][ T7615] ? netlink_sendmsg+0x8e4/0xcb0 [ 116.534760][ T7615] ? ____sys_sendmsg+0x525/0x7d0 [ 116.534783][ T7615] netlink_rcv_skb+0x1e3/0x430 [ 116.534799][ T7615] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.534815][ T7615] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.534839][ T7615] ? apparmor_capable+0x138/0x1b0 [ 116.534859][ T7615] ? bpf_lsm_capable+0x9/0x10 [ 116.534880][ T7615] ? security_capable+0x90/0xb0 [ 116.534908][ T7615] nfnetlink_rcv+0x297/0x2a90 [ 116.534922][ T7615] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.534944][ T7615] ? __local_bh_enable_ip+0x168/0x200 [ 116.534960][ T7615] ? lockdep_hardirqs_on+0x99/0x150 [ 116.534979][ T7615] ? __local_bh_enable_ip+0x168/0x200 [ 116.534993][ T7615] ? dev_hard_start_xmit+0x773/0x7e0 [ 116.535010][ T7615] ? __dev_queue_xmit+0x2d2/0x3d30 [ 116.535028][ T7615] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 116.535048][ T7615] ? __dev_queue_xmit+0x2d2/0x3d30 [ 116.535069][ T7615] ? __dev_queue_xmit+0x16c9/0x3d30 [ 116.535087][ T7615] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 116.535117][ T7615] ? __dev_queue_xmit+0x2d2/0x3d30 [ 116.535144][ T7615] ? ref_tracker_free+0x643/0x7e0 [ 116.535166][ T7615] ? __asan_memcpy+0x40/0x70 [ 116.535182][ T7615] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.535214][ T7615] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.535228][ T7615] ? skb_clone+0x240/0x390 [ 116.535247][ T7615] ? __pfx_lock_release+0x10/0x10 [ 116.535264][ T7615] ? __netlink_deliver_tap+0x77e/0x7c0 [ 116.535288][ T7615] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.535305][ T7615] netlink_unicast+0x7f0/0x990 [ 116.535332][ T7615] ? __pfx_netlink_unicast+0x10/0x10 [ 116.535351][ T7615] ? __virt_addr_valid+0x183/0x520 [ 116.535373][ T7615] ? __check_object_size+0x49c/0x900 [ 116.535394][ T7615] ? bpf_lsm_netlink_send+0x9/0x10 [ 116.535418][ T7615] netlink_sendmsg+0x8e4/0xcb0 [ 116.535443][ T7615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.535461][ T7615] ? __import_iovec+0x536/0x820 [ 116.535478][ T7615] ? aa_sock_msg_perm+0x91/0x160 [ 116.535501][ T7615] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 116.535517][ T7615] ? security_socket_sendmsg+0x87/0xb0 [ 116.535538][ T7615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.535553][ T7615] __sock_sendmsg+0x221/0x270 [ 116.535573][ T7615] ____sys_sendmsg+0x525/0x7d0 [ 116.535599][ T7615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.535639][ T7615] __sys_sendmsg+0x2b0/0x3a0 [ 116.535662][ T7615] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.535722][ T7615] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.535744][ T7615] ? do_syscall_64+0x100/0x230 [ 116.535770][ T7615] ? do_syscall_64+0xb6/0x230 [ 116.535796][ T7615] do_syscall_64+0xf3/0x230 [ 116.535818][ T7615] ? clear_bhb_loop+0x35/0x90 [ 116.535846][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.535869][ T7615] RIP: 0033:0x7f5d79c7d0a9 [ 116.535888][ T7615] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 116.535903][ T7615] RSP: 002b:00007f5d797ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.535924][ T7615] RAX: ffffffffffffffda RBX: 00007f5d79db4050 RCX: 00007f5d79c7d0a9 [ 116.535938][ T7615] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 116.535949][ T7615] RBP: 00007f5d79cec074 R08: 0000000000000000 R09: 0000000000000000 [ 116.535961][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.535971][ T7615] R13: 000000000000000b R14: 00007f5d79db4050 R15: 00007ffdb2e3cc78 [ 116.535997][ T7615] [ 117.062187][ T7615] Mem-Info: [ 117.071225][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.073272][ T7615] active_anon:15625 inactive_anon:0 isolated_anon:0 [ 117.073272][ T7615] active_file:0 inactive_file:46631 isolated_file:0 [ 117.073272][ T7615] unevictable:768 dirty:77 writeback:0 [ 117.073272][ T7615] slab_reclaimable:11126 slab_unreclaimable:96091 [ 117.073272][ T7615] mapped:18376 shmem:1645 pagetables:666 [ 117.073272][ T7615] sec_pagetables:0 bounce:0 [ 117.073272][ T7615] kernel_misc_reclaimable:0 [ 117.073272][ T7615] free:1383549 free_pcp:309 free_cma:0 [ 117.150193][ T7615] Node 0 active_anon:62464kB inactive_anon:0kB active_file:60kB inactive_file:186404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73516kB dirty:244kB writeback:0kB shmem:5044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10352kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no [ 117.211799][ T7615] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 117.243323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.249029][ T7615] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.279361][ T7615] lowmem_reserve[]: 0 2571 2571 0 0 [ 117.284728][ T7615] Node 0 DMA32 free:1570092kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:62372kB inactive_anon:0kB active_file:0kB inactive_file:186092kB unevictable:1536kB writepending:240kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:1196kB local_pcp:332kB free_cma:0kB [ 117.317400][ T7615] lowmem_reserve[]: 0 0 0 0 0 [ 117.323588][ T7615] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 117.351786][ T7615] lowmem_reserve[]: 0 0 0 0 0 [ 117.357384][ T7615] Node 1 Normal free:3949860kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.402437][ T7615] lowmem_reserve[]: 0 0 0 0 0 [ 117.408694][ T7615] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.409912][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.428441][ T7615] Node 0 DMA32: 634*4kB (UME) 423*8kB (UME) 264*16kB (UME) 210*32kB (UME) 102*64kB (UME) 74*128kB (UME) 36*256kB (UME) 19*512kB (UM) 17*1024kB (UM) 7*2048kB (UME) 363*4096kB (UM) = 1570400kB [ 117.482921][ T7615] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 117.510111][ T7615] Node 1 Normal: 5*4kB (U) 6*8kB (UM) 8*16kB (UM) 15*32kB (UM) 8*64kB (U) 7*128kB (U) 3*256kB (UM) 5*512kB (UM) 4*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3949860kB [ 117.534611][ T7615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.544379][ T7615] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.556866][ T7615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.568240][ T7615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.578062][ T7615] 48259 total pagecache pages [ 117.582884][ T7615] 0 pages in swap cache [ 117.587615][ T7615] Free swap = 124996kB [ 117.591907][ T7615] Total swap = 124996kB [ 117.602256][ T7615] 2097051 pages RAM [ 117.607996][ T7615] 0 pages HighMem/MovableOnly [ 117.613478][ T7615] 400873 pages reserved [ 117.617890][ T7615] 0 pages cma reserved [ 117.652083][ T7631] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 117.661860][ T7631] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 117.715361][ T7640] Dead loop on virtual device ipvlan1, fix it urgently! [ 117.730761][ T7640] Dead loop on virtual device ipvlan1, fix it urgently! [ 117.742336][ T7640] syz-executor.0 (7640) used greatest stack depth: 7920 bytes left [ 118.042075][ T7662] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 118.139837][ T7666] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 118.192231][ T7670] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 118.202652][ T7672] sch_fq: defrate 0 ignored. [ 119.004022][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 119.324287][ T7740] TCP: TCP_TX_DELAY enabled [ 119.643231][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 119.802117][ T7767] syzkaller0: entered promiscuous mode [ 119.811174][ T7767] syzkaller0: entered allmulticast mode [ 121.565194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.594526][ T7815] validate_nla: 3 callbacks suppressed [ 121.594543][ T7815] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 121.641511][ T7819] __nla_validate_parse: 11 callbacks suppressed [ 121.641528][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.700642][ T7819] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.870953][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.936063][ T7835] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.948452][ T7840] FAULT_INJECTION: forcing a failure. [ 121.948452][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 121.961754][ T7838] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.978827][ T7840] CPU: 0 PID: 7840 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 121.989262][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 121.999320][ T7840] Call Trace: [ 122.002593][ T7840] [ 122.005519][ T7840] dump_stack_lvl+0x241/0x360 [ 122.010212][ T7840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.015419][ T7840] ? __pfx__printk+0x10/0x10 [ 122.020011][ T7840] should_fail_ex+0x3b0/0x4e0 [ 122.024689][ T7840] ? __alloc_skb+0x1c3/0x440 [ 122.029287][ T7840] should_failslab+0x9/0x20 [ 122.033785][ T7840] kmem_cache_alloc_node_noprof+0x71/0x320 [ 122.039589][ T7840] __alloc_skb+0x1c3/0x440 [ 122.044006][ T7840] ? __pfx___might_resched+0x10/0x10 [ 122.049291][ T7840] ? __pfx___alloc_skb+0x10/0x10 [ 122.054227][ T7840] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 122.060283][ T7840] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 122.066525][ T7840] netlink_sendmsg+0x638/0xcb0 [ 122.071287][ T7840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.076561][ T7840] ? __import_iovec+0x536/0x820 [ 122.081399][ T7840] ? aa_sock_msg_perm+0x91/0x160 [ 122.086336][ T7840] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 122.091612][ T7840] ? security_socket_sendmsg+0x87/0xb0 [ 122.097062][ T7840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.102334][ T7840] __sock_sendmsg+0x221/0x270 [ 122.107002][ T7840] ____sys_sendmsg+0x525/0x7d0 [ 122.111769][ T7840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.117058][ T7840] __sys_sendmsg+0x2b0/0x3a0 [ 122.121641][ T7840] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.126743][ T7840] ? vfs_write+0x7c4/0xc90 [ 122.131182][ T7840] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.137499][ T7840] ? do_syscall_64+0x100/0x230 [ 122.142257][ T7840] ? do_syscall_64+0xb6/0x230 [ 122.146936][ T7840] do_syscall_64+0xf3/0x230 [ 122.151430][ T7840] ? clear_bhb_loop+0x35/0x90 [ 122.156109][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.161996][ T7840] RIP: 0033:0x7f5d79c7d0a9 [ 122.166404][ T7840] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 122.186010][ T7840] RSP: 002b:00007f5d7a9210c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.194419][ T7840] RAX: ffffffffffffffda RBX: 00007f5d79db3f80 RCX: 00007f5d79c7d0a9 [ 122.202380][ T7840] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 122.210337][ T7840] RBP: 00007f5d7a921120 R08: 0000000000000000 R09: 0000000000000000 [ 122.218295][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.226254][ T7840] R13: 000000000000000b R14: 00007f5d79db3f80 R15: 00007ffdb2e3cc78 [ 122.234242][ T7840] [ 122.239763][ T7842] SET target dimension over the limit! [ 122.262042][ T7839] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 122.492704][ T7853] bridge0: port 3(team0) entered blocking state [ 122.495495][ T7858] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.511330][ T7853] bridge0: port 3(team0) entered disabled state [ 122.522708][ T7853] team0: entered allmulticast mode [ 122.533921][ T7853] team_slave_0: entered allmulticast mode [ 122.547177][ T7853] team_slave_1: entered allmulticast mode [ 122.561358][ T7853] team0: entered promiscuous mode [ 122.576910][ T7853] team_slave_0: entered promiscuous mode [ 122.592412][ T7853] team_slave_1: entered promiscuous mode [ 122.603272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.612566][ T7865] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 122.631120][ T7853] bridge0: port 3(team0) entered blocking state [ 122.637871][ T7853] bridge0: port 3(team0) entered forwarding state [ 122.749690][ T29] audit: type=1804 audit(1719142257.124:10): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3466438904/syzkaller.GUUd2G/199/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 122.815644][ T7871] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 123.047052][ T7891] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.079925][ T7891] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 123.386936][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.394751][ T7911] caif0 speed is unknown, defaulting to 1000 [ 123.463215][ T7912] block nbd0: NBD_DISCONNECT [ 123.469167][ T7912] block nbd0: Send disconnect failed -89 [ 123.486056][ T7912] block nbd0: Disconnected due to user request. [ 123.492337][ T7912] block nbd0: shutting down sockets [ 123.643254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.725416][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.776951][ T7933] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 123.804368][ T7933] gretap1: entered promiscuous mode [ 123.819883][ T7933] gretap1: entered allmulticast mode [ 123.886943][ T7937] FAULT_INJECTION: forcing a failure. [ 123.886943][ T7937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.935486][ T7937] CPU: 0 PID: 7937 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 123.945932][ T7937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 123.956005][ T7937] Call Trace: [ 123.959294][ T7937] [ 123.962233][ T7937] dump_stack_lvl+0x241/0x360 [ 123.966949][ T7937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.972174][ T7937] ? __pfx__printk+0x10/0x10 [ 123.976787][ T7937] ? __pfx_lock_release+0x10/0x10 [ 123.981841][ T7937] should_fail_ex+0x3b0/0x4e0 [ 123.986539][ T7937] _copy_from_user+0x2f/0xe0 [ 123.991158][ T7937] copy_msghdr_from_user+0xae/0x680 [ 123.996369][ T7937] ? __pfx___might_resched+0x10/0x10 [ 124.001683][ T7937] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.007516][ T7937] ? __might_fault+0xaa/0x120 [ 124.012218][ T7937] __sys_sendmmsg+0x374/0x740 [ 124.016928][ T7937] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.022185][ T7937] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 124.028113][ T7937] ? ksys_write+0x23e/0x2c0 [ 124.032639][ T7937] ? __pfx_lock_release+0x10/0x10 [ 124.037693][ T7937] ? vfs_write+0x7c4/0xc90 [ 124.042140][ T7937] ? __mutex_unlock_slowpath+0x21d/0x750 [ 124.047795][ T7937] ? __pfx_vfs_write+0x10/0x10 [ 124.052605][ T7937] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.058609][ T7937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.064959][ T7937] ? do_syscall_64+0x100/0x230 [ 124.069752][ T7937] __x64_sys_sendmmsg+0xa0/0xb0 [ 124.074632][ T7937] do_syscall_64+0xf3/0x230 [ 124.079162][ T7937] ? clear_bhb_loop+0x35/0x90 [ 124.083865][ T7937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.089784][ T7937] RIP: 0033:0x7f4b79e7d0a9 [ 124.094212][ T7937] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 124.113832][ T7937] RSP: 002b:00007f4b7ab6a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.122268][ T7937] RAX: ffffffffffffffda RBX: 00007f4b79fb3f80 RCX: 00007f4b79e7d0a9 [ 124.130259][ T7937] RDX: 03ffffffffffff3c RSI: 0000000020000940 RDI: 0000000000000003 [ 124.138247][ T7937] RBP: 00007f4b7ab6a120 R08: 0000000000000000 R09: 0000000000000000 [ 124.146275][ T7937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.154260][ T7937] R13: 000000000000000b R14: 00007f4b79fb3f80 R15: 00007fff094bfe48 [ 124.162249][ T7937] [ 124.659441][ T7961] x_tables: duplicate underflow at hook 2 [ 124.776778][ T7965] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 124.795276][ T7965] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.991626][ T7970] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 125.014271][ T7970] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.450298][ T7997] sctp: [Deprecated]: syz-executor.0 (pid 7997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.450298][ T7997] Use struct sctp_sack_info instead [ 125.586674][ T8003] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 126.044069][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 126.201442][ T8038] lo: Caught tx_queue_len zero misconfig [ 126.752732][ T8062] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 126.795986][ T8061] delete_channel: no stack [ 126.949638][ T8072] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 127.176159][ T8084] __nla_validate_parse: 6 callbacks suppressed [ 127.176178][ T8084] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.396362][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.772847][ T8112] openvswitch: netlink: Flow actions attr not present in new flow. [ 127.781703][ T8114] hsr0: entered promiscuous mode [ 128.125448][ T8120] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.154950][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.262398][ T8129] macvlan2: entered promiscuous mode [ 128.278452][ T8129] macvlan2: entered allmulticast mode [ 128.314580][ T8129] team0: Device macvlan2 is already an upper device of the team interface [ 128.656573][ T8148] Bluetooth: MGMT ver 1.22 [ 128.900894][ T8156] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 128.938418][ T8156] gretap1: entered promiscuous mode [ 128.965070][ T8156] gretap1: entered allmulticast mode [ 128.968233][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.979758][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.988590][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.996914][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.007200][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.016082][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.067158][ T8161] caif0 speed is unknown, defaulting to 1000 [ 129.187382][ T8170] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.299505][ T8175] x_tables: unsorted underflow at hook 4 [ 129.744873][ T8199] Dead loop on virtual device ipvlan1, fix it urgently! [ 129.834989][ T29] audit: type=1804 audit(1719142264.214:11): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4118078628/syzkaller.bpJ5or/182/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 129.882549][ T8198] Dead loop on virtual device ipvlan1, fix it urgently! [ 129.908009][ T8161] chnl_net:caif_netlink_parms(): no params data found [ 130.137388][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.144983][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.152221][ T8161] bridge_slave_0: entered allmulticast mode [ 130.159958][ T8161] bridge_slave_0: entered promiscuous mode [ 130.173792][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.184668][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.193438][ T8161] bridge_slave_1: entered allmulticast mode [ 130.195995][ T8217] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 130.200603][ T8161] bridge_slave_1: entered promiscuous mode [ 130.244840][ T8217] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.310825][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.341561][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.395608][ T8224] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 130.417260][ T8224] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 130.629848][ T8161] team0: Port device team_slave_0 added [ 130.644439][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.655262][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.681887][ T8161] team0: Port device team_slave_1 added [ 130.793620][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.813438][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.854230][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.910464][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.928004][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.960540][ T8249] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 130.965812][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.973140][ T8249] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.990445][ T8250] syzkaller1: entered promiscuous mode [ 130.996868][ T8250] syzkaller1: entered allmulticast mode [ 131.083422][ T5119] Bluetooth: hci2: command tx timeout [ 131.130527][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.187759][ T8161] hsr_slave_0: entered promiscuous mode [ 131.194393][ T8161] hsr_slave_1: entered promiscuous mode [ 131.200681][ T8161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.212919][ T8161] Cannot create hsr debugfs directory [ 131.385136][ T8275] FAULT_INJECTION: forcing a failure. [ 131.385136][ T8275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.405566][ T8275] CPU: 0 PID: 8275 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 131.416015][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 131.426072][ T8275] Call Trace: [ 131.429333][ T8275] [ 131.432243][ T8275] dump_stack_lvl+0x241/0x360 [ 131.436932][ T8275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.442155][ T8275] ? __pfx__printk+0x10/0x10 [ 131.446754][ T8275] ? __pfx_lock_release+0x10/0x10 [ 131.451807][ T8275] should_fail_ex+0x3b0/0x4e0 [ 131.456491][ T8275] _copy_from_iter+0x43a/0x1960 [ 131.461393][ T8275] ? __pfx__copy_from_iter+0x10/0x10 [ 131.466699][ T8275] ? __pfx_rds_page_remainder_alloc+0x10/0x10 [ 131.472794][ T8275] ? page_copy_sane+0x46/0x260 [ 131.477552][ T8275] copy_page_from_iter+0x7a/0x100 [ 131.482567][ T8275] rds_message_copy_from_user+0x4fa/0xbd0 [ 131.488290][ T8275] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 131.494531][ T8275] ? __asan_memset+0x23/0x50 [ 131.499113][ T8275] ? rds_message_alloc_sgs+0xb1/0x190 [ 131.504476][ T8275] rds_sendmsg+0xf94/0x2270 [ 131.508971][ T8275] ? __pfx___might_resched+0x10/0x10 [ 131.514266][ T8275] ? __pfx_rds_sendmsg+0x10/0x10 [ 131.519193][ T8275] ? aa_sk_perm+0x967/0xab0 [ 131.523697][ T8275] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.528540][ T8275] ? iovec_from_user+0x1b0/0x240 [ 131.533469][ T8275] ? __import_iovec+0x361/0x820 [ 131.538312][ T8275] ? aa_sock_msg_perm+0x91/0x160 [ 131.543251][ T8275] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 131.548527][ T8275] ? security_socket_sendmsg+0x87/0xb0 [ 131.553977][ T8275] ? __pfx_rds_sendmsg+0x10/0x10 [ 131.558913][ T8275] __sock_sendmsg+0x221/0x270 [ 131.563583][ T8275] ____sys_sendmsg+0x525/0x7d0 [ 131.568349][ T8275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.573645][ T8275] __sys_sendmsg+0x2b0/0x3a0 [ 131.578253][ T8275] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.583355][ T8275] ? vfs_write+0x7c4/0xc90 [ 131.587793][ T8275] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.594112][ T8275] ? do_syscall_64+0x100/0x230 [ 131.598871][ T8275] ? do_syscall_64+0xb6/0x230 [ 131.603578][ T8275] do_syscall_64+0xf3/0x230 [ 131.608073][ T8275] ? clear_bhb_loop+0x35/0x90 [ 131.612745][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.618633][ T8275] RIP: 0033:0x7f4b79e7d0a9 [ 131.623040][ T8275] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 131.642638][ T8275] RSP: 002b:00007f4b7ab6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.651044][ T8275] RAX: ffffffffffffffda RBX: 00007f4b79fb3f80 RCX: 00007f4b79e7d0a9 [ 131.659004][ T8275] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 131.666973][ T8275] RBP: 00007f4b7ab6a120 R08: 0000000000000000 R09: 0000000000000000 [ 131.674936][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.682893][ T8275] R13: 000000000000000b R14: 00007f4b79fb3f80 R15: 00007fff094bfe48 [ 131.690864][ T8275] [ 131.881647][ T8161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.903380][ T8161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.022733][ T8161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.037515][ T8161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.155568][ T8161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.177072][ T8161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.182951][ T8301] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 132.292305][ T8161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.311108][ T8161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.341879][ T8314] __nla_validate_parse: 2 callbacks suppressed [ 132.341896][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.598191][ T8161] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.619330][ T8161] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.637697][ T8161] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 132.649671][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.662716][ T8161] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 132.902853][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.962310][ T8161] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.978014][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.985235][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.021817][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.029058][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.086976][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.100000][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.118016][ T8346] ɶƣ0GCTw: entered promiscuous mode [ 133.163146][ T5119] Bluetooth: hci2: command tx timeout [ 133.202929][ T8346] ɶƣ0GC¦: entered promiscuous mode [ 133.408190][ T29] audit: type=1804 audit(1719142267.784:12): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3496584569/syzkaller.wcwkTP/192/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 133.588263][ T8161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.893586][ T8384] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 133.920378][ T8384] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.073379][ T9] IPVS: starting estimator thread 0... [ 134.119425][ T8161] veth0_vlan: entered promiscuous mode [ 134.173451][ T8396] IPVS: using max 21 ests per chain, 50400 per kthread [ 134.205772][ T8161] veth1_vlan: entered promiscuous mode [ 134.287302][ T8409] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.400991][ T8161] veth0_macvtap: entered promiscuous mode [ 134.464542][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.529021][ T8161] veth1_macvtap: entered promiscuous mode [ 134.564820][ T8423] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.621871][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.634013][ T8423] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.666807][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.699873][ T8423] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.713212][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.745618][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.770744][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.813025][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.834049][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.848396][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.868542][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.889587][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.928093][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.992676][ T8437] ɶƣ0GCTw: entered promiscuous mode [ 135.039913][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.054042][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.064311][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.075134][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.086134][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.109662][ T8448] Dead loop on virtual device ipvlan1, fix it urgently! [ 135.110902][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.132160][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.142860][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.153592][ T8161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.173244][ T8161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.197896][ T8161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.224749][ T8439] ɶƣ0GC¦: entered promiscuous mode [ 135.250508][ T5119] Bluetooth: hci2: command tx timeout [ 135.364026][ T8161] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.376165][ T8161] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.386279][ T8161] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.404446][ T8161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.673615][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.698717][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.719753][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.737106][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.753332][ T8471] Dead loop on virtual device ipvlan1, fix it urgently! [ 135.764684][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.831618][ T8476] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 135.853623][ T8476] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 135.861728][ T8476] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 135.874684][ T8475] Dead loop on virtual device ipvlan1, fix it urgently! [ 135.885821][ T29] audit: type=1800 audit(1719142270.264:13): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 135.941921][ T29] audit: type=1804 audit(1719142270.314:14): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1647342440/syzkaller.QuK2px/86/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 135.968572][ T8484] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.019926][ T29] audit: type=1804 audit(1719142270.394:15): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1647342440/syzkaller.QuK2px/86/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 136.592068][ T29] audit: type=1800 audit(1719142270.964:16): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 136.625778][ T8505] Bluetooth: MGMT ver 1.22 [ 136.630260][ T8505] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 136.670491][ T29] audit: type=1804 audit(1719142271.044:17): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1733029414/syzkaller.f99aFW/235/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 136.783710][ T29] audit: type=1804 audit(1719142271.084:18): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1733029414/syzkaller.f99aFW/235/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 136.964073][ T8528] delete_channel: no stack [ 137.066632][ T8525] tipc: Started in network mode [ 137.070962][ T8531] xt_hashlimit: size too large, truncated to 1048576 [ 137.071522][ T8525] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 137.089093][ T8531] xt_hashlimit: max too large, truncated to 1048576 [ 137.099541][ T8525] tipc: Enabled bearer , priority 0 [ 137.111367][ T8531] xt_hashlimit: overflow, try lower: 0/0 [ 137.333254][ T5119] Bluetooth: hci2: command tx timeout [ 137.373013][ T8551] bridge0: port 1(gretap0) entered blocking state [ 137.380593][ T8551] bridge0: port 1(gretap0) entered disabled state [ 137.392341][ T8551] gretap0: entered allmulticast mode [ 137.399319][ T8551] gretap0: entered promiscuous mode [ 137.416169][ T8551] gretap0: left allmulticast mode [ 137.421228][ T8551] gretap0: left promiscuous mode [ 137.427637][ T8551] bridge0: port 1(gretap0) entered disabled state [ 137.474057][ T8553] __nla_validate_parse: 5 callbacks suppressed [ 137.474073][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.499541][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.553912][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.585288][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.854068][ T8575] delete_channel: no stack [ 137.968177][ T8578] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 137.978345][ T8578] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 138.000920][ T8578] netlink: 126008 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.003437][ T8566] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.196994][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.222224][ T8589] sctp: [Deprecated]: syz-executor.3 (pid 8589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.222224][ T8589] Use struct sctp_sack_info instead [ 138.245644][ T930] tipc: Node number set to 10136234 [ 138.276089][ T8589] sctp: [Deprecated]: syz-executor.3 (pid 8589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.276089][ T8589] Use struct sctp_sack_info instead [ 138.472739][ T8599] caif0 speed is unknown, defaulting to 1000 [ 138.641159][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.670395][ T8614] delete_channel: no stack [ 138.770425][ T8596] caif0 speed is unknown, defaulting to 1000 [ 138.853374][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.914092][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.626910][ T8625] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.673642][ T8648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.702289][ T8648] team0: Port device virt_wifi0 added [ 140.026354][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.065277][ T8664] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 141.062231][ T8709] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 141.515565][ T8717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.890421][ T8720] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 142.522223][ T8714] __nla_validate_parse: 3 callbacks suppressed [ 142.522243][ T8714] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.556281][ T8717] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 142.582564][ T8717] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 142.606564][ T8717] team0: Port device virt_wifi0 added [ 143.022930][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.630586][ T8740] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.826390][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.848009][ T8775] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.911483][ T8781] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 143.960511][ T8781] bond0: entered promiscuous mode [ 143.974109][ T8781] bond_slave_0: entered promiscuous mode [ 143.979941][ T8781] bond_slave_1: entered promiscuous mode [ 143.987471][ T8786] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.004535][ T8780] bond0: left promiscuous mode [ 144.009884][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.019306][ T8780] bond_slave_0: left promiscuous mode [ 144.025938][ T8780] bond_slave_1: left promiscuous mode [ 144.188479][ T8797] unknown channel width for channel at 909000KHz? [ 144.195995][ T8797] unknown channel width for channel at 909000KHz? [ 145.028992][ T8814] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.046963][ T8833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.893543][ T8882] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.038153][ T29] audit: type=1804 audit(1719142280.414:19): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1733029414/syzkaller.f99aFW/265/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 146.092782][ T8898] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.210481][ T8904] netlink: zone id is out of range [ 146.231887][ T8904] netlink: zone id is out of range [ 146.247736][ T8904] netlink: zone id is out of range [ 146.271162][ T8904] netlink: zone id is out of range [ 146.287191][ T8904] netlink: zone id is out of range [ 146.301370][ T8904] netlink: zone id is out of range [ 146.312317][ T8904] netlink: zone id is out of range [ 146.323976][ T8904] netlink: zone id is out of range [ 146.329409][ T8904] netlink: zone id is out of range [ 146.445727][ T8912] delete_channel: no stack [ 146.672126][ T8897] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.918271][ T8936] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 147.020853][ T8943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.091046][ T8949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.730494][ T8991] __nla_validate_parse: 4 callbacks suppressed [ 147.730515][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.886679][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.064576][ T8978] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.230850][ T9005] caif0 speed is unknown, defaulting to 1000 [ 148.485290][ T9021] FAULT_INJECTION: forcing a failure. [ 148.485290][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.522618][ T9021] CPU: 0 PID: 9021 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 148.533070][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 148.543147][ T9021] Call Trace: [ 148.546433][ T9021] [ 148.549377][ T9021] dump_stack_lvl+0x241/0x360 [ 148.554078][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.559294][ T9021] ? __pfx__printk+0x10/0x10 [ 148.563905][ T9021] ? snprintf+0xda/0x120 [ 148.568167][ T9021] should_fail_ex+0x3b0/0x4e0 [ 148.572869][ T9021] _copy_to_user+0x2f/0xb0 [ 148.577316][ T9021] simple_read_from_buffer+0xca/0x150 [ 148.582716][ T9021] proc_fail_nth_read+0x1e9/0x250 [ 148.587762][ T9021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.593327][ T9021] ? rw_verify_area+0x514/0x6b0 [ 148.598193][ T9021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 148.603756][ T9021] vfs_read+0x204/0xbd0 [ 148.607928][ T9021] ? __pfx_lock_release+0x10/0x10 [ 148.612974][ T9021] ? __pfx_vfs_read+0x10/0x10 [ 148.617668][ T9021] ? __fget_files+0x29/0x470 [ 148.622278][ T9021] ? __fget_files+0x3f6/0x470 [ 148.626988][ T9021] ksys_read+0x1a0/0x2c0 [ 148.631257][ T9021] ? __pfx_ksys_read+0x10/0x10 [ 148.636045][ T9021] ? do_syscall_64+0x100/0x230 [ 148.640835][ T9021] ? do_syscall_64+0xb6/0x230 [ 148.645536][ T9021] do_syscall_64+0xf3/0x230 [ 148.650061][ T9021] ? clear_bhb_loop+0x35/0x90 [ 148.654765][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.657207][ T9019] caif0 speed is unknown, defaulting to 1000 [ 148.660658][ T9021] RIP: 0033:0x7ff1af67bd4c [ 148.660704][ T9021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 148.660720][ T9021] RSP: 002b:00007ff1b035e0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.699117][ T9021] RAX: ffffffffffffffda RBX: 00007ff1af7b3f80 RCX: 00007ff1af67bd4c [ 148.707103][ T9021] RDX: 000000000000000f RSI: 00007ff1b035e130 RDI: 0000000000000003 [ 148.715086][ T9021] RBP: 00007ff1b035e120 R08: 0000000000000000 R09: 0000000000000000 [ 148.723082][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.731068][ T9021] R13: 000000000000000b R14: 00007ff1af7b3f80 R15: 00007ffcd43d81b8 [ 148.739071][ T9021] [ 149.045001][ T9038] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.095810][ T9038] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.320557][ T9005] unknown channel width for channel at 909000KHz? [ 149.368220][ T9038] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.703559][ T9032] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 149.736296][ T9052] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.434554][ T9090] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 150.492783][ T9091] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 150.507938][ T9098] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.707290][ T9104] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 150.745465][ T9104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.752724][ T9104] IPv6: NLM_F_CREATE should be set when creating new route [ 150.760050][ T9104] IPv6: NLM_F_CREATE should be set when creating new route [ 151.064215][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.205919][ T9135] bridge6: entered promiscuous mode [ 151.228868][ T9135] bridge6: entered allmulticast mode [ 151.253779][ T9135] team0: Port device bridge6 added [ 151.259061][ T29] audit: type=1804 audit(1719142285.634:20): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir678056719/syzkaller.efvAaZ/37/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 151.430186][ T9158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.943390][ T9186] bond0: Unable to set down delay as MII monitoring is disabled [ 151.945811][ T9190] FAULT_INJECTION: forcing a failure. [ 151.945811][ T9190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.953344][ T9187] sctp: [Deprecated]: syz-executor.3 (pid 9187) Use of int in max_burst socket option deprecated. [ 151.953344][ T9187] Use struct sctp_assoc_value instead [ 151.987529][ T9190] CPU: 0 PID: 9190 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 151.997971][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.008040][ T9190] Call Trace: [ 152.011331][ T9190] [ 152.014273][ T9190] dump_stack_lvl+0x241/0x360 [ 152.018964][ T9190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.024157][ T9190] ? __pfx__printk+0x10/0x10 [ 152.028754][ T9190] ? __pfx_lock_release+0x10/0x10 [ 152.033784][ T9190] should_fail_ex+0x3b0/0x4e0 [ 152.038475][ T9190] _copy_from_user+0x2f/0xe0 [ 152.043059][ T9190] copy_msghdr_from_user+0xae/0x680 [ 152.048278][ T9190] ? __pfx___might_resched+0x10/0x10 [ 152.053587][ T9190] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 152.059419][ T9190] ? __might_fault+0xaa/0x120 [ 152.064137][ T9190] __sys_sendmmsg+0x374/0x740 [ 152.068834][ T9190] ? __pfx___sys_sendmmsg+0x10/0x10 [ 152.074047][ T9190] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 152.079933][ T9190] ? ksys_write+0x23e/0x2c0 [ 152.084433][ T9190] ? __pfx_lock_release+0x10/0x10 [ 152.089448][ T9190] ? vfs_write+0x7c4/0xc90 [ 152.093870][ T9190] ? __mutex_unlock_slowpath+0x21d/0x750 [ 152.099523][ T9190] ? __pfx_vfs_write+0x10/0x10 [ 152.104309][ T9190] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.110285][ T9190] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.116602][ T9190] ? do_syscall_64+0x100/0x230 [ 152.121360][ T9190] __x64_sys_sendmmsg+0xa0/0xb0 [ 152.126246][ T9190] do_syscall_64+0xf3/0x230 [ 152.130761][ T9190] ? clear_bhb_loop+0x35/0x90 [ 152.135428][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.141310][ T9190] RIP: 0033:0x7f5d79c7d0a9 [ 152.145730][ T9190] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 152.165341][ T9190] RSP: 002b:00007f5d7a9210c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.173741][ T9190] RAX: ffffffffffffffda RBX: 00007f5d79db3f80 RCX: 00007f5d79c7d0a9 [ 152.181706][ T9190] RDX: 000000007fffefff RSI: 0000000020000cc0 RDI: 0000000000000005 [ 152.189666][ T9190] RBP: 00007f5d7a921120 R08: 0000000000000000 R09: 0000000000000000 [ 152.197632][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.205609][ T9190] R13: 000000000000000b R14: 00007f5d79db3f80 R15: 00007ffdb2e3cc78 [ 152.213577][ T9190] [ 152.388555][ T9207] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.556609][ T9220] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 152.818526][ T9235] FAULT_INJECTION: forcing a failure. [ 152.818526][ T9235] name failslab, interval 1, probability 0, space 0, times 0 [ 152.849016][ T9235] CPU: 0 PID: 9235 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 152.859466][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.869538][ T9235] Call Trace: [ 152.872828][ T9235] [ 152.875772][ T9235] dump_stack_lvl+0x241/0x360 [ 152.880489][ T9235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.885716][ T9235] ? __pfx__printk+0x10/0x10 [ 152.890332][ T9235] ? ref_tracker_alloc+0x332/0x490 [ 152.895476][ T9235] should_fail_ex+0x3b0/0x4e0 [ 152.900186][ T9235] ? skb_clone+0x20c/0x390 [ 152.904623][ T9235] should_failslab+0x9/0x20 [ 152.909143][ T9235] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 152.914542][ T9235] skb_clone+0x20c/0x390 [ 152.918819][ T9235] __netlink_deliver_tap+0x3cc/0x7c0 [ 152.924132][ T9235] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.929345][ T9235] netlink_deliver_tap+0x19d/0x1b0 [ 152.934476][ T9235] netlink_dump+0x851/0xd80 [ 152.939010][ T9235] ? __pfx_netlink_dump+0x10/0x10 [ 152.944045][ T9235] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.950060][ T9235] ? lockdep_hardirqs_on+0x99/0x150 [ 152.955287][ T9235] ? netlink_recvmsg+0x60a/0x11d0 [ 152.960322][ T9235] ? kmem_cache_free+0x145/0x350 [ 152.965265][ T9235] netlink_recvmsg+0x6bb/0x11d0 [ 152.970116][ T9235] ? __pfx_netlink_recvmsg+0x10/0x10 [ 152.975405][ T9235] ? __pfx___might_resched+0x10/0x10 [ 152.980684][ T9235] ? iovec_from_user+0x61/0x240 [ 152.985536][ T9235] ? __import_iovec+0x361/0x820 [ 152.990376][ T9235] ? __pfx_netlink_recvmsg+0x10/0x10 [ 152.995655][ T9235] sock_recvmsg_nosec+0x18e/0x1d0 [ 153.000673][ T9235] ____sys_recvmsg+0x3c0/0x470 [ 153.005442][ T9235] ? __pfx_____sys_recvmsg+0x10/0x10 [ 153.010744][ T9235] ? __might_fault+0xaa/0x120 [ 153.015415][ T9235] do_recvmmsg+0x474/0xae0 [ 153.019823][ T9235] ? mark_lock+0x9a/0x350 [ 153.024156][ T9235] ? __pfx_do_recvmmsg+0x10/0x10 [ 153.029109][ T9235] ? __pfx___might_resched+0x10/0x10 [ 153.034388][ T9235] ? __might_fault+0xaa/0x120 [ 153.039053][ T9235] ? __pfx_lock_release+0x10/0x10 [ 153.044067][ T9235] ? vfs_write+0x7c4/0xc90 [ 153.048492][ T9235] ? get_timespec64+0x19c/0x280 [ 153.053363][ T9235] __x64_sys_recvmmsg+0x1b8/0x250 [ 153.058396][ T9235] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 153.063942][ T9235] ? do_syscall_64+0x100/0x230 [ 153.068705][ T9235] ? do_syscall_64+0xb6/0x230 [ 153.073377][ T9235] do_syscall_64+0xf3/0x230 [ 153.077874][ T9235] ? clear_bhb_loop+0x35/0x90 [ 153.082551][ T9235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.088439][ T9235] RIP: 0033:0x7ff1af67d0a9 [ 153.092847][ T9235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 153.112445][ T9235] RSP: 002b:00007ff1b035e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 153.120854][ T9235] RAX: ffffffffffffffda RBX: 00007ff1af7b3f80 RCX: 00007ff1af67d0a9 [ 153.128818][ T9235] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 153.136778][ T9235] RBP: 00007ff1b035e120 R08: 0000000020003700 R09: 0000000000000000 [ 153.144736][ T9235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.152697][ T9235] R13: 000000000000000b R14: 00007ff1af7b3f80 R15: 00007ffcd43d81b8 [ 153.160671][ T9235] [ 153.295198][ T9247] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.336877][ T9242] geneve0: entered allmulticast mode [ 153.446273][ T9257] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.467852][ T9259] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 153.753729][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.773317][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.967415][ T9294] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 154.165238][ T9313] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.287013][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.435581][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.693019][ T9343] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 154.710777][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.880094][ T9357] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.952673][ T9348] team0 (unregistering): Port device team_slave_0 removed [ 154.976094][ T9348] team0 (unregistering): Port device team_slave_1 removed [ 155.094290][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.231680][ T9369] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.872336][ T9411] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.106455][ T9423] net_ratelimit: 7 callbacks suppressed [ 156.106475][ T9423] Dead loop on virtual device ipvlan1, fix it urgently! [ 156.161922][ T9423] syz-executor.0 (9423) used greatest stack depth: 7416 bytes left [ 156.554016][ T9451] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.351222][ T9478] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.632651][ T9496] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 157.663737][ T9496] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 157.821521][ T9510] Dead loop on virtual device ipvlan1, fix it urgently! [ 157.932426][ T9514] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.421586][ T9547] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.487446][ T9550] __nla_validate_parse: 9 callbacks suppressed [ 158.487466][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.522296][ T9553] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.576799][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.624214][ T9553] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.926395][ T9578] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.109275][ T9593] ip6tnl1: entered promiscuous mode [ 159.123444][ T9593] ip6tnl1: entered allmulticast mode [ 159.419858][ T9611] FAULT_INJECTION: forcing a failure. [ 159.419858][ T9611] name failslab, interval 1, probability 0, space 0, times 0 [ 159.466801][ T9611] CPU: 0 PID: 9611 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 159.477267][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 159.487336][ T9611] Call Trace: [ 159.490624][ T9611] [ 159.493571][ T9611] dump_stack_lvl+0x241/0x360 [ 159.498278][ T9611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.503499][ T9611] ? __pfx__printk+0x10/0x10 [ 159.508113][ T9611] ? __pfx___might_resched+0x10/0x10 [ 159.513411][ T9611] ? __asan_memset+0x23/0x50 [ 159.518018][ T9611] ? lockdep_init_map_type+0xa1/0x910 [ 159.523411][ T9611] should_fail_ex+0x3b0/0x4e0 [ 159.528120][ T9611] should_failslab+0x9/0x20 [ 159.532640][ T9611] __kmalloc_node_noprof+0xdf/0x440 [ 159.537852][ T9611] ? kvmalloc_node_noprof+0x72/0x190 [ 159.543156][ T9611] kvmalloc_node_noprof+0x72/0x190 [ 159.548283][ T9611] alloc_netdev_mqs+0xa21/0xf80 [ 159.553162][ T9611] rtnl_create_link+0x2f9/0xc20 [ 159.558029][ T9611] rtnl_newlink+0x1423/0x20a0 [ 159.562699][ T9611] ? rtnl_newlink+0xa51/0x20a0 [ 159.567512][ T9611] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.572535][ T9611] ? mark_lock+0x9a/0x350 [ 159.576871][ T9611] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.582888][ T9611] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.589231][ T9611] ? __pfx_rtnl_newlink+0x10/0x10 [ 159.594252][ T9611] rtnetlink_rcv_msg+0x89b/0x1180 [ 159.599269][ T9611] ? rtnetlink_rcv_msg+0x208/0x1180 [ 159.604455][ T9611] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.609919][ T9611] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.612793][ T9589] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.615899][ T9611] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.615932][ T9611] ? __local_bh_enable_ip+0x168/0x200 [ 159.615952][ T9611] ? lockdep_hardirqs_on+0x99/0x150 [ 159.615977][ T9611] ? __local_bh_enable_ip+0x168/0x200 [ 159.647429][ T9611] ? dev_hard_start_xmit+0x773/0x7e0 [ 159.652708][ T9611] ? __dev_queue_xmit+0x2d2/0x3d30 [ 159.657808][ T9611] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 159.663537][ T9611] ? __dev_queue_xmit+0x2d2/0x3d30 [ 159.668638][ T9611] ? __dev_queue_xmit+0x16c9/0x3d30 [ 159.673858][ T9611] ? __dev_queue_xmit+0x2d2/0x3d30 [ 159.679007][ T9611] ? ref_tracker_free+0x643/0x7e0 [ 159.684062][ T9611] netlink_rcv_skb+0x1e3/0x430 [ 159.688836][ T9611] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 159.694286][ T9611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 159.699575][ T9611] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.704782][ T9611] netlink_unicast+0x7f0/0x990 [ 159.709542][ T9611] ? __pfx_netlink_unicast+0x10/0x10 [ 159.714813][ T9611] ? __virt_addr_valid+0x183/0x520 [ 159.719914][ T9611] ? __check_object_size+0x49c/0x900 [ 159.725202][ T9611] ? bpf_lsm_netlink_send+0x9/0x10 [ 159.730338][ T9611] netlink_sendmsg+0x8e4/0xcb0 [ 159.735135][ T9611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.740440][ T9611] ? __import_iovec+0x536/0x820 [ 159.745305][ T9611] ? aa_sock_msg_perm+0x91/0x160 [ 159.750257][ T9611] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 159.755528][ T9611] ? security_socket_sendmsg+0x87/0xb0 [ 159.760982][ T9611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.766255][ T9611] __sock_sendmsg+0x221/0x270 [ 159.770921][ T9611] ____sys_sendmsg+0x525/0x7d0 [ 159.775702][ T9611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.781007][ T9611] __sys_sendmsg+0x2b0/0x3a0 [ 159.785596][ T9611] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.790710][ T9611] ? vfs_write+0x7c4/0xc90 [ 159.795160][ T9611] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.801481][ T9611] ? do_syscall_64+0x100/0x230 [ 159.806261][ T9611] ? do_syscall_64+0xb6/0x230 [ 159.810939][ T9611] do_syscall_64+0xf3/0x230 [ 159.815434][ T9611] ? clear_bhb_loop+0x35/0x90 [ 159.820108][ T9611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.826156][ T9611] RIP: 0033:0x7ff1af67d0a9 [ 159.830618][ T9611] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 159.850214][ T9611] RSP: 002b:00007ff1b035e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.858613][ T9611] RAX: ffffffffffffffda RBX: 00007ff1af7b3f80 RCX: 00007ff1af67d0a9 [ 159.866572][ T9611] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 000000000000000e [ 159.874541][ T9611] RBP: 00007ff1b035e120 R08: 0000000000000000 R09: 0000000000000000 [ 159.882516][ T9611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.890476][ T9611] R13: 000000000000000b R14: 00007ff1af7b3f80 R15: 00007ffcd43d81b8 [ 159.898459][ T9611] [ 160.296483][ T9642] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 160.312834][ T9642] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.341495][ T9646] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 160.370381][ T9646] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 160.391286][ T9646] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 160.412881][ T9646] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 160.453963][ T9646] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 160.504590][ T9646] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.592724][ T9661] wireguard0: entered promiscuous mode [ 160.606652][ T9661] wireguard0: entered allmulticast mode [ 160.991912][ T9684] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.043610][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.344598][ T9675] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.376913][ T9706] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 161.386790][ T9706] bridge0: port 4(dummy0) entered blocking state [ 161.393800][ T9706] bridge0: port 4(dummy0) entered disabled state [ 161.407216][ T9706] dummy0: entered allmulticast mode [ 161.419395][ T9706] dummy0: entered promiscuous mode [ 161.432571][ T9706] bridge0: port 4(dummy0) entered blocking state [ 161.439126][ T9706] bridge0: port 4(dummy0) entered forwarding state [ 161.627276][ T9712] wireguard0: entered promiscuous mode [ 161.649051][ T9712] wireguard0: entered allmulticast mode [ 162.090567][ T9745] smc: removing ib device syz1 [ 162.100619][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.794113][ T9776] wireguard0: entered promiscuous mode [ 162.799803][ T9776] wireguard0: entered allmulticast mode [ 163.501930][ T9797] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 163.544356][ T9794] __nla_validate_parse: 6 callbacks suppressed [ 163.544376][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.567547][ T9798] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 163.595455][ T9794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.922989][ T9814] wireguard0: entered promiscuous mode [ 163.949515][ T9814] wireguard0: entered allmulticast mode [ 164.343828][ T9826] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.424272][ T9810] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.454659][ T9834] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 164.610793][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.653275][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.094096][ T9874] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.170896][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.241757][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.281883][ T9878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.313390][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.694671][ T9908] Dead loop on virtual device ipvlan1, fix it urgently! [ 165.823759][ T9914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.515980][ T9957] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 166.692076][ T9972] bond0: option arp_all_targets: invalid value (3) [ 167.139334][ T9986] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 167.708806][T10019] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 168.875023][T10072] syz-executor.3[10072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.877655][T10072] syz-executor.3[10072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.921419][T10074] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 168.949323][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.959319][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.963150][T10074] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 168.968077][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.985421][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.993379][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.001363][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.088734][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.126737][T10079] __nla_validate_parse: 10 callbacks suppressed [ 169.126756][T10079] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.247470][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.260990][T10083] Dead loop on virtual device ipvlan1, fix it urgently! [ 169.388392][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.467375][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.488507][T10093] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 169.620474][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.665714][T10099] (unnamed net_device) (uninitialized): peer notification delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 169.807929][T10075] chnl_net:caif_netlink_parms(): no params data found [ 169.993322][T10118] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 170.001596][T10118] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.032315][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.040829][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.062462][T10075] bridge_slave_0: entered allmulticast mode [ 170.075175][T10075] bridge_slave_0: entered promiscuous mode [ 170.084257][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.097062][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.104591][T10075] bridge_slave_1: entered allmulticast mode [ 170.111340][T10075] bridge_slave_1: entered promiscuous mode [ 170.119434][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.125478][T10089] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.232899][T10133] SET target dimension over the limit! [ 170.309080][T10075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.342460][T10075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.432827][ T61] bridge_slave_1: left allmulticast mode [ 170.439920][ T61] bridge_slave_1: left promiscuous mode [ 170.451021][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.476325][ T61] bridge_slave_0: left allmulticast mode [ 170.481993][ T61] bridge_slave_0: left promiscuous mode [ 170.497944][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.030937][T10165] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.041936][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.083271][ T5124] Bluetooth: hci2: command tx timeout [ 171.280172][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.291582][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.310048][ T61] bond0 (unregistering): Released all slaves [ 171.325163][T10075] team0: Port device team_slave_0 added [ 171.343010][T10164] team_slave_1: mtu less than device minimum [ 171.354175][T10075] team0: Port device team_slave_1 added [ 171.459377][T10075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.471625][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.510270][T10075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.528780][T10075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.536089][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.565592][T10075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.833608][T10075] hsr_slave_0: entered promiscuous mode [ 171.859786][T10075] hsr_slave_1: entered promiscuous mode [ 171.877247][T10075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.894342][T10075] Cannot create hsr debugfs directory [ 172.002959][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.061532][T10193] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.077950][T10193] tipc: Invalid UDP bearer configuration [ 172.078114][T10193] tipc: Enabling of bearer rejected, failed to enable media [ 172.168628][ T61] hsr_slave_0: left promiscuous mode [ 172.211374][ T61] hsr_slave_1: left promiscuous mode [ 172.225816][T10201] FAULT_INJECTION: forcing a failure. [ 172.225816][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 172.238786][T10201] CPU: 0 PID: 10201 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 172.249318][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 172.259383][T10201] Call Trace: [ 172.262672][T10201] [ 172.265618][T10201] dump_stack_lvl+0x241/0x360 [ 172.270325][T10201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.275545][T10201] ? __pfx__printk+0x10/0x10 [ 172.280159][T10201] ? nf_ct_pernet+0x45/0x270 [ 172.284763][T10201] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 172.290755][T10201] ? __pfx_lock_release+0x10/0x10 [ 172.295805][T10201] should_fail_ex+0x3b0/0x4e0 [ 172.300515][T10201] ? __nf_conntrack_alloc+0x8f/0x380 [ 172.305837][T10201] should_failslab+0x9/0x20 [ 172.310369][T10201] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 172.315769][T10201] __nf_conntrack_alloc+0x8f/0x380 [ 172.320914][T10201] init_conntrack+0x3c3/0x1310 [ 172.325707][T10201] ? __pfx_init_conntrack+0x10/0x10 [ 172.330933][T10201] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 172.336933][T10201] ? __local_bh_enable_ip+0x168/0x200 [ 172.342349][T10201] nf_conntrack_in+0xd59/0x1880 [ 172.347254][T10201] ? __pfx_nf_conntrack_in+0x10/0x10 [ 172.352582][T10201] ? ipt_do_table+0x312/0x1860 [ 172.357369][T10201] ? __pfx_ipt_do_table+0x10/0x10 [ 172.362467][T10201] ? __local_bh_enable_ip+0xe1/0x200 [ 172.367770][T10201] ? lockdep_hardirqs_on+0x99/0x150 [ 172.372992][T10201] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 172.378466][T10201] ? ipv4_conntrack_local+0x120/0x200 [ 172.383886][T10201] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 172.389621][T10201] nf_hook_slow+0xc3/0x220 [ 172.394059][T10201] ? __pfx_dst_output+0x10/0x10 [ 172.398932][T10201] nf_hook+0x2c4/0x450 [ 172.403028][T10201] ? nf_hook+0x9e/0x450 [ 172.407202][T10201] ? __pfx_nf_hook+0x10/0x10 [ 172.411805][T10201] ? __pfx_dst_output+0x10/0x10 [ 172.416673][T10201] ? __asan_memset+0x23/0x50 [ 172.421282][T10201] ? xfrm_lookup_with_ifid+0x198e/0x1ed0 [ 172.426935][T10201] ? ip_fast_csum+0x1f0/0x2b0 [ 172.431646][T10201] __ip_local_out+0x3d9/0x4e0 [ 172.436361][T10201] ? __pfx_dst_output+0x10/0x10 [ 172.441244][T10201] ip_local_out+0x26/0x70 [ 172.445600][T10201] iptunnel_xmit+0x540/0x9b0 [ 172.450229][T10201] ip_tunnel_xmit+0x2119/0x2950 [ 172.455104][T10201] ? deref_stack_reg+0x1c7/0x260 [ 172.460091][T10201] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 172.465302][T10201] ? gre_build_header+0x341/0xb30 [ 172.470358][T10201] ? __pfx_gre_build_header+0x10/0x10 [ 172.475748][T10201] ? iptunnel_handle_offloads+0x31b/0x650 [ 172.481497][T10201] ipgre_xmit+0x958/0xd40 [ 172.485878][T10201] ? __pfx_ipgre_xmit+0x10/0x10 [ 172.490752][T10201] ? validate_xmit_skb+0x9f9/0x1120 [ 172.495999][T10201] dev_hard_start_xmit+0x27a/0x7e0 [ 172.501147][T10201] __dev_queue_xmit+0x1b0e/0x3d30 [ 172.506204][T10201] ? __dev_queue_xmit+0x2d2/0x3d30 [ 172.511339][T10201] ? kmalloc_reserve+0xa8/0x2a0 [ 172.516223][T10201] ? __pfx___dev_queue_xmit+0x10/0x10 [ 172.521636][T10201] ? pskb_expand_head+0xc89/0x1390 [ 172.526780][T10201] ? __bpf_redirect+0x51c/0xe40 [ 172.531659][T10201] __bpf_tx_skb+0x18e/0x260 [ 172.536188][T10201] bpf_clone_redirect+0x26f/0x3d0 [ 172.541234][T10201] ? bpf_test_run+0x31e/0x910 [ 172.545912][T10201] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 172.551367][T10201] ? debug_mutex_free_waiter+0xe0/0x100 [ 172.556914][T10201] ? timekeeping_get_ns+0x5c/0x420 [ 172.562017][T10201] ? bpf_test_run+0x31e/0x910 [ 172.566685][T10201] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 172.572394][T10201] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.578709][T10201] ? ktime_get+0x3c/0xb0 [ 172.582947][T10201] ? bpf_test_run+0x31e/0x910 [ 172.587612][T10201] ? __pfx___cant_migrate+0x10/0x10 [ 172.592806][T10201] ? bpf_test_run+0x31e/0x910 [ 172.597475][T10201] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 172.603192][T10201] ? bpf_test_timer_continue+0x11a/0x350 [ 172.608815][T10201] ? bpf_test_run+0x31e/0x910 [ 172.613482][T10201] bpf_test_run+0x409/0x910 [ 172.617992][T10201] ? __pfx_bpf_test_run+0x10/0x10 [ 172.623012][T10201] ? eth_type_trans+0x3d1/0x7a0 [ 172.627871][T10201] ? __pfx_eth_type_trans+0x10/0x10 [ 172.633077][T10201] ? convert___skb_to_skb+0x41/0x620 [ 172.638381][T10201] bpf_prog_test_run_skb+0xafa/0x13b0 [ 172.643770][T10201] ? __pfx_lock_release+0x10/0x10 [ 172.648828][T10201] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 172.654650][T10201] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 172.660460][T10201] bpf_prog_test_run+0x33a/0x3b0 [ 172.665394][T10201] __sys_bpf+0x48d/0x810 [ 172.669634][T10201] ? __pfx___sys_bpf+0x10/0x10 [ 172.674403][T10201] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 172.680377][T10201] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.686699][T10201] ? do_syscall_64+0x100/0x230 [ 172.691462][T10201] __x64_sys_bpf+0x7c/0x90 [ 172.695879][T10201] do_syscall_64+0xf3/0x230 [ 172.700378][T10201] ? clear_bhb_loop+0x35/0x90 [ 172.705056][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.710945][T10201] RIP: 0033:0x7f5d79c7d0a9 [ 172.715365][T10201] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 172.734975][T10201] RSP: 002b:00007f5d7a9210c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.743395][T10201] RAX: ffffffffffffffda RBX: 00007f5d79db3f80 RCX: 00007f5d79c7d0a9 [ 172.751359][T10201] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 172.759322][T10201] RBP: 00007f5d7a921120 R08: 0000000000000000 R09: 0000000000000000 [ 172.767296][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.775261][T10201] R13: 000000000000000b R14: 00007f5d79db3f80 R15: 00007ffdb2e3cc78 [ 172.783240][T10201] [ 172.904329][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.912050][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.954880][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.962341][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.046717][ T61] veth1_macvtap: left promiscuous mode [ 173.052291][ T61] veth0_macvtap: left promiscuous mode [ 173.058688][ T61] veth1_vlan: left promiscuous mode [ 173.079860][ T61] veth0_vlan: left promiscuous mode [ 173.145045][T10216] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 173.163327][ T5124] Bluetooth: hci2: command tx timeout [ 173.193924][T10216] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.546936][ T61] team0 (unregistering): Port device virt_wifi0 removed [ 173.755666][ T61] team0 (unregistering): Port device team_slave_1 removed [ 173.864055][ T61] team0 (unregistering): Port device team_slave_0 removed [ 173.874831][T10229] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.045713][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 174.878713][T10265] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 174.880258][T10264] IPVS: stopping backup sync thread 10265 ... [ 175.034615][T10075] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.049530][T10075] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.061521][T10075] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.080851][T10075] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.243731][ T5124] Bluetooth: hci2: command tx timeout [ 175.277856][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.331682][T10075] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.381447][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.388638][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.429339][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.436532][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.490535][T10280] Dead loop on virtual device ipvlan1, fix it urgently! [ 175.524887][T10280] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.560812][T10075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.609109][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.656630][T10272] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 175.702818][T10287] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.776748][T10294] sctp: [Deprecated]: syz-executor.2 (pid 10294) Use of int in max_burst socket option. [ 175.776748][T10294] Use struct sctp_assoc_value instead [ 175.912223][T10075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.965034][T10304] Dead loop on virtual device ipvlan1, fix it urgently! [ 176.025469][T10306] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 176.065906][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.350739][T10075] veth0_vlan: entered promiscuous mode [ 176.370600][T10075] veth1_vlan: entered promiscuous mode [ 176.408158][T10075] veth0_macvtap: entered promiscuous mode [ 176.418244][T10075] veth1_macvtap: entered promiscuous mode [ 176.438567][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.449536][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.460276][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.471603][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.481544][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.492410][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.502299][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.512934][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.536742][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.556649][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.575853][T10075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.587642][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.598417][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.628789][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.639531][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.649734][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.660529][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.670914][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.682151][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.693763][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.706018][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.717769][T10075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.745441][T10075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.772924][T10075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.788963][T10075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.801875][T10075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.840804][T10332] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 177.151704][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.174853][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.251521][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.268487][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.326389][ T5124] Bluetooth: hci2: command tx timeout [ 178.020219][T10404] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 178.620817][T10448] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.693891][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.731974][T10455] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 178.834408][ T29] audit: type=1800 audit(1719142313.214:21): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 178.867024][T10463] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 178.882746][ T29] audit: type=1804 audit(1719142313.244:22): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3496584569/syzkaller.wcwkTP/331/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 178.910167][ T29] audit: type=1804 audit(1719142313.244:23): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3496584569/syzkaller.wcwkTP/331/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 178.961745][ T29] audit: type=1804 audit(1719142313.244:24): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3496584569/syzkaller.wcwkTP/331/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 179.011175][T10464] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 179.016692][ T29] audit: type=1804 audit(1719142313.314:25): pid=10467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3496584569/syzkaller.wcwkTP/331/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 179.044116][T10464] File: /root/syzkaller-testdir3496584569/syzkaller.wcwkTP/331/memory.events PID: 10464 Comm: syz-executor.0 [ 179.052437][ T29] audit: type=1804 audit(1719142313.314:26): pid=10467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3496584569/syzkaller.wcwkTP/331/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 179.188971][T10478] tipc: Can't bind to reserved service type 0 [ 180.855212][T10575] IPVS: Unknown mcast interface: pimreg [ 180.900092][T10579] ip6t_srh: unknown srh match flags 4001 [ 180.917804][T10579] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 181.245853][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 181.250417][ T5125] Bluetooth: hci3: command 0x0406 tx timeout [ 181.303419][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.368581][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.378334][T10600] dummy0: left allmulticast mode [ 181.383400][T10600] dummy0: left promiscuous mode [ 181.388471][T10600] bridge0: port 4(dummy0) entered disabled state [ 181.407021][T10600] team0: left allmulticast mode [ 181.412039][T10600] team_slave_0: left allmulticast mode [ 181.417887][T10600] team_slave_1: left allmulticast mode [ 181.423741][T10600] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 181.430937][T10600] bridge6: left allmulticast mode [ 181.436479][T10600] team0: left promiscuous mode [ 181.441658][T10600] team_slave_0: left promiscuous mode [ 181.448026][T10600] team_slave_1: left promiscuous mode [ 181.454302][T10600] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 181.461428][T10600] bridge6: left promiscuous mode [ 181.468996][T10600] bridge0: port 3(team0) entered disabled state [ 181.482982][T10600] bridge_slave_1: left allmulticast mode [ 181.489690][T10600] bridge_slave_1: left promiscuous mode [ 181.495700][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.506161][T10600] bridge_slave_0: left allmulticast mode [ 181.512000][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.579737][T10603] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 181.606040][T10607] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 182.845905][T10685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.280059][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.299918][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.426911][T10707] vlan2: entered promiscuous mode [ 183.432101][T10707] vlan2: entered allmulticast mode [ 183.451185][T10709] veth0_vlan: entered allmulticast mode [ 183.471633][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.543611][T10715] veth0_vlan: left promiscuous mode [ 183.550501][T10715] veth0_vlan: entered promiscuous mode [ 183.601078][T10713] netlink: 316 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.670070][T10720] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 183.692349][T10720] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 183.971557][T10743] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 184.328376][T10767] Dead loop on virtual device ipvlan1, fix it urgently! [ 184.450368][T10759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.499262][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.728044][T10786] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 184.743358][T10786] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 184.761004][T10786] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.011241][T10806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.301157][T10821] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 185.486541][T10833] FAULT_INJECTION: forcing a failure. [ 185.486541][T10833] name failslab, interval 1, probability 0, space 0, times 0 [ 185.515747][T10833] CPU: 0 PID: 10833 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 185.526290][T10833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 185.536363][T10833] Call Trace: [ 185.539647][T10833] [ 185.542583][T10833] dump_stack_lvl+0x241/0x360 [ 185.547282][T10833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.552502][T10833] ? __pfx__printk+0x10/0x10 [ 185.557114][T10833] ? __pfx___might_resched+0x10/0x10 [ 185.562436][T10833] should_fail_ex+0x3b0/0x4e0 [ 185.567144][T10833] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 185.572535][T10833] should_failslab+0x9/0x20 [ 185.577059][T10833] kmalloc_trace_noprof+0x6c/0x2c0 [ 185.582207][T10833] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 185.587440][T10833] genl_rcv_msg+0xb14/0xec0 [ 185.591966][T10833] ? mark_lock+0x9a/0x350 [ 185.596322][T10833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.601390][T10833] ? __pfx_lock_acquire+0x10/0x10 [ 185.606433][T10833] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 185.612168][T10833] ? __pfx___might_resched+0x10/0x10 [ 185.617464][T10833] netlink_rcv_skb+0x1e3/0x430 [ 185.622224][T10833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.627258][T10833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.632551][T10833] ? __netlink_deliver_tap+0x77e/0x7c0 [ 185.638014][T10833] genl_rcv+0x28/0x40 [ 185.641994][T10833] netlink_unicast+0x7f0/0x990 [ 185.646764][T10833] ? __pfx_netlink_unicast+0x10/0x10 [ 185.652042][T10833] ? __virt_addr_valid+0x183/0x520 [ 185.657155][T10833] ? __check_object_size+0x49c/0x900 [ 185.662439][T10833] ? bpf_lsm_netlink_send+0x9/0x10 [ 185.667548][T10833] netlink_sendmsg+0x8e4/0xcb0 [ 185.672312][T10833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.677591][T10833] ? __import_iovec+0x536/0x820 [ 185.682431][T10833] ? aa_sock_msg_perm+0x91/0x160 [ 185.687366][T10833] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 185.692645][T10833] ? security_socket_sendmsg+0x87/0xb0 [ 185.698099][T10833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.703384][T10833] __sock_sendmsg+0x221/0x270 [ 185.708059][T10833] ____sys_sendmsg+0x525/0x7d0 [ 185.712823][T10833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.718151][T10833] __sys_sendmsg+0x2b0/0x3a0 [ 185.722739][T10833] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.727844][T10833] ? vfs_write+0x7c4/0xc90 [ 185.732287][T10833] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.738605][T10833] ? do_syscall_64+0x100/0x230 [ 185.743367][T10833] ? do_syscall_64+0xb6/0x230 [ 185.748039][T10833] do_syscall_64+0xf3/0x230 [ 185.752552][T10833] ? clear_bhb_loop+0x35/0x90 [ 185.757246][T10833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.763147][T10833] RIP: 0033:0x7f4b79e7d0a9 [ 185.767555][T10833] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 185.787159][T10833] RSP: 002b:00007f4b7ab6a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.795566][T10833] RAX: ffffffffffffffda RBX: 00007f4b79fb3f80 RCX: 00007f4b79e7d0a9 [ 185.803525][T10833] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 185.811487][T10833] RBP: 00007f4b7ab6a120 R08: 0000000000000000 R09: 0000000000000000 [ 185.819452][T10833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.827417][T10833] R13: 000000000000000b R14: 00007f4b79fb3f80 R15: 00007fff094bfe48 [ 185.835398][T10833] [ 185.917929][T10847] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 186.415841][T10857] __nla_validate_parse: 3 callbacks suppressed [ 186.415861][T10857] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.824141][T10891] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.893942][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.040764][T10900] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 187.417624][T10927] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.718099][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.898227][T10965] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 187.940399][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.052452][T10975] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 188.597379][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.617410][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.628422][ T29] audit: type=1800 audit(1719142322.994:27): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 188.642156][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.672163][ T5162] IPVS: starting estimator thread 0... [ 188.716450][T11010] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.745481][T11010] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.764296][T11013] IPVS: using max 21 ests per chain, 50400 per kthread [ 188.872980][T11019] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 188.931618][T11021] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 188.942781][T11021] macvlan2: entered promiscuous mode [ 188.969959][T11021] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 189.051854][T11026] FAULT_INJECTION: forcing a failure. [ 189.051854][T11026] name failslab, interval 1, probability 0, space 0, times 0 [ 189.064489][T11027] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.094815][T11026] CPU: 0 PID: 11026 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 189.105377][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 189.115454][T11026] Call Trace: [ 189.118757][T11026] [ 189.121716][T11026] dump_stack_lvl+0x241/0x360 [ 189.126426][T11026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.131635][T11026] ? __pfx__printk+0x10/0x10 [ 189.136232][T11026] ? __pfx___might_resched+0x10/0x10 [ 189.141537][T11026] should_fail_ex+0x3b0/0x4e0 [ 189.146218][T11026] ? alloc_vfsmnt+0x27/0x4d0 [ 189.150800][T11026] should_failslab+0x9/0x20 [ 189.155300][T11026] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 189.160676][T11026] alloc_vfsmnt+0x27/0x4d0 [ 189.165090][T11026] clone_mnt+0x6b/0xc80 [ 189.169239][T11026] ? do_raw_spin_unlock+0x13c/0x8b0 [ 189.174431][T11026] ? attach_mnt+0x4ed/0x600 [ 189.178928][T11026] copy_tree+0x3f5/0x830 [ 189.183169][T11026] ? copy_mnt_ns+0x178/0x820 [ 189.187753][T11026] copy_mnt_ns+0x178/0x820 [ 189.192165][T11026] ? create_new_namespaces+0x34/0x7b0 [ 189.197533][T11026] ? rcu_is_watching+0x15/0xb0 [ 189.202289][T11026] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 189.207661][T11026] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 189.213295][T11026] create_new_namespaces+0xd3/0x7b0 [ 189.218494][T11026] ? bpf_lsm_capable+0x9/0x10 [ 189.223170][T11026] ? security_capable+0x90/0xb0 [ 189.228033][T11026] unshare_nsproxy_namespaces+0x124/0x180 [ 189.233745][T11026] ksys_unshare+0x619/0xc10 [ 189.238254][T11026] ? __pfx_ksys_unshare+0x10/0x10 [ 189.243270][T11026] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.249250][T11026] ? do_syscall_64+0x100/0x230 [ 189.254015][T11026] __x64_sys_unshare+0x38/0x40 [ 189.258773][T11026] do_syscall_64+0xf3/0x230 [ 189.263273][T11026] ? clear_bhb_loop+0x35/0x90 [ 189.267948][T11026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.273834][T11026] RIP: 0033:0x7f4b79e7d0a9 [ 189.278240][T11026] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 189.297836][T11026] RSP: 002b:00007f4b7ab6a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 189.306242][T11026] RAX: ffffffffffffffda RBX: 00007f4b79fb3f80 RCX: 00007f4b79e7d0a9 [ 189.314203][T11026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 189.322162][T11026] RBP: 00007f4b7ab6a120 R08: 0000000000000000 R09: 0000000000000000 [ 189.330122][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.338086][T11026] R13: 000000000000000b R14: 00007f4b79fb3f80 R15: 00007fff094bfe48 [ 189.346063][T11026] [ 189.351882][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.385590][T11033] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 189.666371][T11046] FAULT_INJECTION: forcing a failure. [ 189.666371][T11046] name failslab, interval 1, probability 0, space 0, times 0 [ 189.685767][T11046] CPU: 0 PID: 11046 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 189.696308][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 189.706377][T11046] Call Trace: [ 189.709668][T11046] [ 189.712659][T11046] dump_stack_lvl+0x241/0x360 [ 189.717367][T11046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.722589][T11046] ? __pfx__printk+0x10/0x10 [ 189.727203][T11046] ? __pfx___might_resched+0x10/0x10 [ 189.732508][T11046] ? __asan_memset+0x23/0x50 [ 189.737122][T11046] ? lockdep_init_map_type+0xa1/0x910 [ 189.737967][T11051] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 189.742507][T11046] should_fail_ex+0x3b0/0x4e0 [ 189.755177][T11046] should_failslab+0x9/0x20 [ 189.759679][T11046] __kmalloc_node_noprof+0xdf/0x440 [ 189.764870][T11046] ? kvmalloc_node_noprof+0x72/0x190 [ 189.770149][T11046] kvmalloc_node_noprof+0x72/0x190 [ 189.775251][T11046] rhashtable_init_noprof+0x534/0xa60 [ 189.780620][T11046] rhltable_init_noprof+0x1c/0x60 [ 189.785654][T11046] nf_tables_newtable+0x7ea/0x1dc0 [ 189.790787][T11046] ? nfnl_pernet+0x23/0x240 [ 189.795298][T11046] ? __pfx_nf_tables_newtable+0x10/0x10 [ 189.800901][T11046] ? __nla_parse+0x40/0x60 [ 189.805409][T11046] nfnetlink_rcv+0x1427/0x2a90 [ 189.810176][T11046] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.816527][T11046] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 189.821646][T11046] ? __dev_queue_xmit+0x2d2/0x3d30 [ 189.826784][T11046] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.831974][T11046] ? skb_clone+0x240/0x390 [ 189.836393][T11046] ? __pfx_lock_release+0x10/0x10 [ 189.841426][T11046] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.846624][T11046] netlink_unicast+0x7f0/0x990 [ 189.851404][T11046] ? __pfx_netlink_unicast+0x10/0x10 [ 189.856688][T11046] ? __virt_addr_valid+0x183/0x520 [ 189.861800][T11046] ? __check_object_size+0x49c/0x900 [ 189.867085][T11046] ? bpf_lsm_netlink_send+0x9/0x10 [ 189.872196][T11046] netlink_sendmsg+0x8e4/0xcb0 [ 189.876964][T11046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.882251][T11046] ? __import_iovec+0x536/0x820 [ 189.887093][T11046] ? aa_sock_msg_perm+0x91/0x160 [ 189.892029][T11046] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.897308][T11046] ? security_socket_sendmsg+0x87/0xb0 [ 189.902761][T11046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.908034][T11046] __sock_sendmsg+0x221/0x270 [ 189.912708][T11046] ____sys_sendmsg+0x525/0x7d0 [ 189.917474][T11046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.922766][T11046] __sys_sendmsg+0x2b0/0x3a0 [ 189.927353][T11046] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.932455][T11046] ? vfs_write+0x7c4/0xc90 [ 189.936895][T11046] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.943225][T11046] ? do_syscall_64+0x100/0x230 [ 189.947999][T11046] ? do_syscall_64+0xb6/0x230 [ 189.952680][T11046] do_syscall_64+0xf3/0x230 [ 189.957178][T11046] ? clear_bhb_loop+0x35/0x90 [ 189.961866][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.967752][T11046] RIP: 0033:0x7ff1af67d0a9 [ 189.972159][T11046] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 189.991756][T11046] RSP: 002b:00007ff1b035e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.000167][T11046] RAX: ffffffffffffffda RBX: 00007ff1af7b3f80 RCX: 00007ff1af67d0a9 [ 190.008135][T11046] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 190.016096][T11046] RBP: 00007ff1b035e120 R08: 0000000000000000 R09: 0000000000000000 [ 190.024058][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.032017][T11046] R13: 000000000000000b R14: 00007ff1af7b3f80 R15: 00007ffcd43d81b8 [ 190.039992][T11046] [ 190.175281][ T29] audit: type=1800 audit(1719142324.544:28): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 190.230569][T11062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 190.349035][T11054] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 190.691114][T11092] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 191.397849][T11129] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 191.798389][T11150] __nla_validate_parse: 3 callbacks suppressed [ 191.798408][T11150] netlink: 134312 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.866160][T11150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 191.880831][T11150] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 192.082599][T11170] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 192.296061][T11177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.658234][T11195] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1 [ 192.724432][T11199] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 192.807824][T11202] syzkaller1: entered promiscuous mode [ 192.827716][T11202] syzkaller1: entered allmulticast mode [ 193.557386][T11236] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.640698][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.657678][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.680217][T11238] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 193.691958][T11239] xt_TCPMSS: Only works on TCP SYN packets [ 193.700564][T11244] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 193.704556][T11238] rdma_op ffff88807b22d1f0 conn xmit_rdma 0000000000000000 [ 193.719111][T11238] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.747731][T11244] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 194.097256][T11263] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 194.117613][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.157967][T11267] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 194.254567][T11274] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.378764][T11267] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 194.430265][T11267] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 194.463432][T11267] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 194.529421][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 194.530984][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.542772][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.200725][T11316] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 195.774848][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.838210][T11347] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.845214][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.060455][T11359] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 196.167763][T11366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.241582][T11369] tipc: Enabled bearer , priority 10 [ 196.481422][T11386] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 197.306773][T11408] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.551163][T11444] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 197.996852][T11472] Cannot find del_set index 4 as target [ 198.286230][T11481] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.706957][T11490] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.930768][T11506] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 198.947862][T11506] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.482121][T11535] FAULT_INJECTION: forcing a failure. [ 199.482121][T11535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.530014][T11535] CPU: 1 PID: 11535 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 199.540560][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 199.550631][T11535] Call Trace: [ 199.553926][T11535] [ 199.556856][T11535] dump_stack_lvl+0x241/0x360 [ 199.561565][T11535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.566781][T11535] ? __pfx__printk+0x10/0x10 [ 199.571399][T11535] ? __pfx_lock_release+0x10/0x10 [ 199.576454][T11535] should_fail_ex+0x3b0/0x4e0 [ 199.581165][T11535] _copy_from_user+0x2f/0xe0 [ 199.585779][T11535] generic_map_update_batch+0x567/0x900 [ 199.591342][T11535] ? __pfx_generic_map_update_batch+0x10/0x10 [ 199.597407][T11535] ? __pfx_generic_map_update_batch+0x10/0x10 [ 199.603473][T11535] bpf_map_do_batch+0x3e0/0x690 [ 199.608371][T11535] __sys_bpf+0x377/0x810 [ 199.612641][T11535] ? __pfx___sys_bpf+0x10/0x10 [ 199.617426][T11535] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.623420][T11535] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.629777][T11535] ? do_syscall_64+0x100/0x230 [ 199.634543][T11535] __x64_sys_bpf+0x7c/0x90 [ 199.638963][T11535] do_syscall_64+0xf3/0x230 [ 199.643475][T11535] ? clear_bhb_loop+0x35/0x90 [ 199.648167][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.654069][T11535] RIP: 0033:0x7f90b847d0a9 [ 199.658490][T11535] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 199.678090][T11535] RSP: 002b:00007f90b91390c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.686501][T11535] RAX: ffffffffffffffda RBX: 00007f90b85b3f80 RCX: 00007f90b847d0a9 [ 199.694483][T11535] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 199.702464][T11535] RBP: 00007f90b9139120 R08: 0000000000000000 R09: 0000000000000000 [ 199.710450][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.718427][T11535] R13: 000000000000000b R14: 00007f90b85b3f80 R15: 00007fff1e83f518 [ 199.726424][T11535] [ 199.895345][T11550] xt_NFQUEUE: number of total queues is 0 [ 200.303455][T11570] FAULT_INJECTION: forcing a failure. [ 200.303455][T11570] name failslab, interval 1, probability 0, space 0, times 0 [ 200.316605][T11570] CPU: 1 PID: 11570 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 200.327126][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 200.337181][T11570] Call Trace: [ 200.340453][T11570] [ 200.343375][T11570] dump_stack_lvl+0x241/0x360 [ 200.348055][T11570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.353251][T11570] ? __pfx__printk+0x10/0x10 [ 200.357849][T11570] ? __pfx___mod_timer+0x10/0x10 [ 200.362781][T11570] should_fail_ex+0x3b0/0x4e0 [ 200.367468][T11570] ? skb_clone+0x20c/0x390 [ 200.371880][T11570] should_failslab+0x9/0x20 [ 200.376380][T11570] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 200.381757][T11570] skb_clone+0x20c/0x390 [ 200.385996][T11570] ? __neigh_event_send+0xe45/0x15b0 [ 200.391284][T11570] __neigh_event_send+0xe52/0x15b0 [ 200.396409][T11570] neigh_resolve_output+0x1b5/0x740 [ 200.401607][T11570] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 200.407421][T11570] ip6_finish_output2+0xffa/0x1680 [ 200.412549][T11570] ? ip6_finish_output2+0x712/0x1680 [ 200.417829][T11570] ? nf_hook+0x9e/0x450 [ 200.421988][T11570] ? __pfx_ip6_finish_output2+0x10/0x10 [ 200.427540][T11570] ? ip6_mtu+0x81/0x3f0 [ 200.431729][T11570] ip6_finish_output+0x41e/0x810 [ 200.436666][T11570] ip6_send_skb+0x112/0x230 [ 200.441166][T11570] ? icmp6_send+0xba4/0x2070 [ 200.445754][T11570] icmp6_send+0x15fc/0x2070 [ 200.450265][T11570] ? icmp6_send+0xba4/0x2070 [ 200.454866][T11570] ? __pfx_icmp6_send+0x10/0x10 [ 200.459711][T11570] ? in6_dump_addrs+0x600/0x1e40 [ 200.464645][T11570] ? __pfx_lock_release+0x10/0x10 [ 200.469702][T11570] ? ip6_neigh_lookup+0x44b/0x580 [ 200.474732][T11570] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 200.480105][T11570] ip6_link_failure+0x3c/0x4f0 [ 200.484860][T11570] ? dst_link_failure+0x107/0x160 [ 200.489885][T11570] ip_tunnel_xmit+0x1653/0x2950 [ 200.494734][T11570] ? kasan_save_free_info+0x40/0x50 [ 200.499924][T11570] ? __kasan_slab_free+0x37/0x60 [ 200.504854][T11570] ? packet_rcv+0x16e/0x13e0 [ 200.509434][T11570] ? dev_hard_start_xmit+0x15f/0x7e0 [ 200.514716][T11570] ? ip6_finish_output2+0xffa/0x1680 [ 200.519993][T11570] ? ip6_finish_output+0x41e/0x810 [ 200.525096][T11570] ? rawv6_sendmsg+0x1962/0x23c0 [ 200.530027][T11570] ? ____sys_sendmsg+0x525/0x7d0 [ 200.534955][T11570] ? __sys_sendmsg+0x2b0/0x3a0 [ 200.539726][T11570] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 200.544928][T11570] ? gre_build_header+0x341/0xb30 [ 200.549951][T11570] ? __pfx_gre_build_header+0x10/0x10 [ 200.555313][T11570] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.561639][T11570] __gre_xmit+0x1cf/0x260 [ 200.565963][T11570] ? __pfx___gre_xmit+0x10/0x10 [ 200.570807][T11570] ? erspan_build_header+0x174/0x360 [ 200.576091][T11570] erspan_xmit+0xabe/0x1310 [ 200.580600][T11570] ? __pfx_erspan_xmit+0x10/0x10 [ 200.585534][T11570] ? dev_queue_xmit_nit+0x2b/0xc10 [ 200.590656][T11570] dev_hard_start_xmit+0x27a/0x7e0 [ 200.595778][T11570] sch_direct_xmit+0x2b6/0x5f0 [ 200.600614][T11570] ? __pfx_sch_direct_xmit+0x10/0x10 [ 200.605918][T11570] ? tbf_dequeue+0x892/0xd40 [ 200.610535][T11570] __qdisc_run+0xbfd/0x2170 [ 200.615063][T11570] __dev_queue_xmit+0x14f0/0x3d30 [ 200.620099][T11570] ? read_seqbegin+0x157/0x2b0 [ 200.624859][T11570] ? __dev_queue_xmit+0x2d2/0x3d30 [ 200.629969][T11570] ? read_seqbegin+0x208/0x2b0 [ 200.634734][T11570] ? __pfx___dev_queue_xmit+0x10/0x10 [ 200.640107][T11570] ? neigh_resolve_output+0x2e5/0x740 [ 200.645482][T11570] ? eth_header+0x11c/0x1f0 [ 200.649991][T11570] ? __asan_memcpy+0x40/0x70 [ 200.654583][T11570] ? eth_header+0x11c/0x1f0 [ 200.659088][T11570] ? __pfx_eth_header+0x10/0x10 [ 200.663932][T11570] ? neigh_resolve_output+0x61f/0x740 [ 200.669332][T11570] ip6_finish_output2+0xffa/0x1680 [ 200.674457][T11570] ? ip6_finish_output2+0x712/0x1680 [ 200.679747][T11570] ? nf_hook+0x9e/0x450 [ 200.683903][T11570] ? __pfx_ip6_finish_output2+0x10/0x10 [ 200.689449][T11570] ? ip6_mtu+0x81/0x3f0 [ 200.693605][T11570] ip6_finish_output+0x41e/0x810 [ 200.698540][T11570] ? rawv6_send_hdrinc+0xb7a/0x1890 [ 200.703746][T11570] rawv6_send_hdrinc+0xcfc/0x1890 [ 200.708780][T11570] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 200.714236][T11570] ? ip6_dst_lookup_flow+0x13e/0x180 [ 200.719519][T11570] ? __pfx_dst_output+0x10/0x10 [ 200.724377][T11570] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 200.730007][T11570] ? aa_label_sk_perm+0x4f0/0x6d0 [ 200.735030][T11570] ? rawv6_sendmsg+0xef9/0x23c0 [ 200.739878][T11570] rawv6_sendmsg+0x1962/0x23c0 [ 200.744659][T11570] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 200.749778][T11570] ? aa_sk_perm+0x967/0xab0 [ 200.754299][T11570] ? inet_sendmsg+0x330/0x390 [ 200.758968][T11570] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 200.764244][T11570] ? security_socket_sendmsg+0x87/0xb0 [ 200.769708][T11570] __sock_sendmsg+0x1a6/0x270 [ 200.774384][T11570] ____sys_sendmsg+0x525/0x7d0 [ 200.779150][T11570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.784444][T11570] __sys_sendmsg+0x2b0/0x3a0 [ 200.789033][T11570] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.794161][T11570] ? vfs_write+0x7c4/0xc90 [ 200.798631][T11570] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.804954][T11570] ? do_syscall_64+0x100/0x230 [ 200.809722][T11570] ? do_syscall_64+0xb6/0x230 [ 200.814404][T11570] do_syscall_64+0xf3/0x230 [ 200.818908][T11570] ? clear_bhb_loop+0x35/0x90 [ 200.823589][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.829489][T11570] RIP: 0033:0x7ff1af67d0a9 [ 200.833902][T11570] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 200.853515][T11570] RSP: 002b:00007ff1b035e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.861926][T11570] RAX: ffffffffffffffda RBX: 00007ff1af7b3f80 RCX: 00007ff1af67d0a9 [ 200.869903][T11570] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 200.877872][T11570] RBP: 00007ff1b035e120 R08: 0000000000000000 R09: 0000000000000000 [ 200.885840][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.893805][T11570] R13: 000000000000000b R14: 00007ff1af7b3f80 R15: 00007ffcd43d81b8 [ 200.901796][T11570] [ 200.906515][T11570] [ 200.908855][T11570] ====================================================== [ 200.915866][T11570] WARNING: possible circular locking dependency detected [ 200.922868][T11570] 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 Not tainted [ 200.929956][T11570] ------------------------------------------------------ [ 200.936956][T11570] syz-executor.3/11570 is trying to acquire lock: [ 200.943350][T11570] ffff8880424a3218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}, at: __dev_queue_xmit+0x22f7/0x3d30 [ 200.955525][T11570] [ 200.955525][T11570] but task is already holding lock: [ 200.962874][T11570] ffff888044a9dcd8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 200.972696][T11570] [ 200.972696][T11570] which lock already depends on the new lock. [ 200.972696][T11570] [ 200.983111][T11570] [ 200.983111][T11570] the existing dependency chain (in reverse order) is: [ 200.992105][T11570] [ 200.992105][T11570] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}: [ 201.000348][T11570] lock_acquire+0x1ed/0x550 [ 201.005363][T11570] _raw_spin_lock+0x2e/0x40 [ 201.010386][T11570] sch_direct_xmit+0x1c4/0x5f0 [ 201.015656][T11570] __dev_queue_xmit+0x1a24/0x3d30 [ 201.021187][T11570] ip6_finish_output2+0xffa/0x1680 [ 201.026810][T11570] ip6_finish_output+0x41e/0x810 [ 201.032254][T11570] ndisc_send_skb+0xab2/0x1380 [ 201.037527][T11570] ndisc_send_ns+0xcc/0x160 [ 201.042541][T11570] addrconf_dad_work+0xb45/0x16f0 [ 201.048079][T11570] process_scheduled_works+0xa2c/0x1830 [ 201.054130][T11570] worker_thread+0x86d/0xd70 [ 201.059225][T11570] kthread+0x2f0/0x390 [ 201.063800][T11570] ret_from_fork+0x4b/0x80 [ 201.068724][T11570] ret_from_fork_asm+0x1a/0x30 [ 201.073996][T11570] [ 201.073996][T11570] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}: [ 201.084328][T11570] validate_chain+0x18e0/0x5900 [ 201.089705][T11570] __lock_acquire+0x1346/0x1fd0 [ 201.095067][T11570] lock_acquire+0x1ed/0x550 [ 201.100079][T11570] _raw_spin_lock+0x2e/0x40 [ 201.105119][T11570] __dev_queue_xmit+0x22f7/0x3d30 [ 201.110666][T11570] ip6_finish_output2+0xffa/0x1680 [ 201.116310][T11570] ip6_finish_output+0x41e/0x810 [ 201.121765][T11570] ndisc_send_skb+0xab2/0x1380 [ 201.127044][T11570] ndisc_solicit+0x493/0x6a0 [ 201.132139][T11570] __neigh_event_send+0xece/0x15b0 [ 201.137761][T11570] neigh_resolve_output+0x1b5/0x740 [ 201.143481][T11570] ip6_finish_output2+0xffa/0x1680 [ 201.149100][T11570] ip6_finish_output+0x41e/0x810 [ 201.154545][T11570] ip6_send_skb+0x112/0x230 [ 201.159555][T11570] icmp6_send+0x15fc/0x2070 [ 201.164578][T11570] ip6_link_failure+0x3c/0x4f0 [ 201.169847][T11570] ip_tunnel_xmit+0x1653/0x2950 [ 201.175207][T11570] __gre_xmit+0x1cf/0x260 [ 201.180044][T11570] erspan_xmit+0xabe/0x1310 [ 201.185058][T11570] dev_hard_start_xmit+0x27a/0x7e0 [ 201.190676][T11570] sch_direct_xmit+0x2b6/0x5f0 [ 201.195951][T11570] __qdisc_run+0xbfd/0x2170 [ 201.200959][T11570] __dev_queue_xmit+0x14f0/0x3d30 [ 201.206492][T11570] ip6_finish_output2+0xffa/0x1680 [ 201.212112][T11570] ip6_finish_output+0x41e/0x810 [ 201.217554][T11570] rawv6_send_hdrinc+0xcfc/0x1890 [ 201.223088][T11570] rawv6_sendmsg+0x1962/0x23c0 [ 201.228362][T11570] __sock_sendmsg+0x1a6/0x270 [ 201.233544][T11570] ____sys_sendmsg+0x525/0x7d0 [ 201.238816][T11570] __sys_sendmsg+0x2b0/0x3a0 [ 201.243914][T11570] do_syscall_64+0xf3/0x230 [ 201.248939][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.255361][T11570] [ 201.255361][T11570] other info that might help us debug this: [ 201.255361][T11570] [ 201.265585][T11570] Possible unsafe locking scenario: [ 201.265585][T11570] [ 201.273017][T11570] CPU0 CPU1 [ 201.278367][T11570] ---- ---- [ 201.283719][T11570] lock(&qdisc_xmit_lock_key#3); [ 201.288737][T11570] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 201.298358][T11570] lock(&qdisc_xmit_lock_key#3); [ 201.305897][T11570] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 201.313001][T11570] [ 201.313001][T11570] *** DEADLOCK *** [ 201.313001][T11570] [ 201.321127][T11570] 10 locks held by syz-executor.3/11570: [ 201.326742][T11570] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: rawv6_send_hdrinc+0xb7a/0x1890 [ 201.336484][T11570] #1: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1680 [ 201.346307][T11570] #2: ffffffff8e334000 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d2/0x3d30 [ 201.356215][T11570] #3: ffff888044a9dcd8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 201.366468][T11570] #4: ffff888029fd8918 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xc45/0x2070 [ 201.375856][T11570] #5: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: icmp6_send+0xba4/0x2070 [ 201.384981][T11570] #6: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1680 [ 201.394802][T11570] #7: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: ndisc_send_skb+0x574/0x1380 [ 201.404276][T11570] #8: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1680 [ 201.414125][T11570] #9: ffffffff8e334000 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d2/0x3d30 [ 201.424037][T11570] [ 201.424037][T11570] stack backtrace: [ 201.429904][T11570] CPU: 1 PID: 11570 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00869-g185d72112b95 #0 [ 201.440383][T11570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 201.450422][T11570] Call Trace: [ 201.453691][T11570] [ 201.456611][T11570] dump_stack_lvl+0x241/0x360 [ 201.461280][T11570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.466471][T11570] ? print_circular_bug+0x130/0x1a0 [ 201.471659][T11570] check_noncircular+0x36a/0x4a0 [ 201.476591][T11570] ? __pfx_check_noncircular+0x10/0x10 [ 201.482037][T11570] ? __bfs+0x368/0x6f0 [ 201.486093][T11570] ? __pfx_usage_skip+0x10/0x10 [ 201.490937][T11570] validate_chain+0x18e0/0x5900 [ 201.495786][T11570] ? __pfx_validate_chain+0x10/0x10 [ 201.500970][T11570] ? __pfx_validate_chain+0x10/0x10 [ 201.506161][T11570] ? register_lock_class+0x102/0x980 [ 201.511436][T11570] ? __pfx_register_lock_class+0x10/0x10 [ 201.517059][T11570] ? mark_lock+0x9a/0x350 [ 201.521380][T11570] __lock_acquire+0x1346/0x1fd0 [ 201.526224][T11570] lock_acquire+0x1ed/0x550 [ 201.530711][T11570] ? __dev_queue_xmit+0x22f7/0x3d30 [ 201.535902][T11570] ? __pfx_lock_acquire+0x10/0x10 [ 201.540909][T11570] ? __pfx_lock_acquire+0x10/0x10 [ 201.545919][T11570] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 201.552064][T11570] ? rcu_read_lock_bh_held+0x7e/0x120 [ 201.557428][T11570] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 201.563233][T11570] _raw_spin_lock+0x2e/0x40 [ 201.567731][T11570] ? __dev_queue_xmit+0x22f7/0x3d30 [ 201.572919][T11570] __dev_queue_xmit+0x22f7/0x3d30 [ 201.577933][T11570] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.584251][T11570] ? read_seqbegin+0x157/0x2b0 [ 201.589003][T11570] ? __dev_queue_xmit+0x2d2/0x3d30 [ 201.594113][T11570] ? read_seqbegin+0x208/0x2b0 [ 201.598877][T11570] ? __pfx___dev_queue_xmit+0x10/0x10 [ 201.604262][T11570] ? neigh_resolve_output+0x2e5/0x740 [ 201.609625][T11570] ? eth_header+0x11c/0x1f0 [ 201.614123][T11570] ? __asan_memcpy+0x40/0x70 [ 201.618707][T11570] ? eth_header+0x11c/0x1f0 [ 201.623204][T11570] ? __pfx_eth_header+0x10/0x10 [ 201.628057][T11570] ? neigh_resolve_output+0x61f/0x740 [ 201.633438][T11570] ip6_finish_output2+0xffa/0x1680 [ 201.638546][T11570] ? ip6_finish_output2+0x712/0x1680 [ 201.643822][T11570] ? nf_hook+0x9e/0x450 [ 201.647971][T11570] ? __pfx_ip6_finish_output2+0x10/0x10 [ 201.653511][T11570] ? ip6_mtu+0x81/0x3f0 [ 201.657663][T11570] ip6_finish_output+0x41e/0x810 [ 201.662593][T11570] ndisc_send_skb+0xab2/0x1380 [ 201.667351][T11570] ? ndisc_send_skb+0x574/0x1380 [ 201.672287][T11570] ? __pfx_ndisc_send_skb+0x10/0x10 [ 201.677478][T11570] ? __pfx_dst_output+0x10/0x10 [ 201.682319][T11570] ? __asan_memcpy+0x40/0x70 [ 201.686903][T11570] ? __pfx_ndisc_ns_create+0x10/0x10 [ 201.692184][T11570] ? ipv6_get_lladdr+0x35a/0x3d0 [ 201.697112][T11570] ? ipv6_get_lladdr+0x2c/0x3d0 [ 201.701952][T11570] ndisc_solicit+0x493/0x6a0 [ 201.706529][T11570] ? __pfx___mod_timer+0x10/0x10 [ 201.711454][T11570] ? __pfx_ndisc_solicit+0x10/0x10 [ 201.716552][T11570] ? rcu_is_watching+0x15/0xb0 [ 201.721305][T11570] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 201.726673][T11570] ? __pfx_ndisc_solicit+0x10/0x10 [ 201.731768][T11570] __neigh_event_send+0xece/0x15b0 [ 201.736877][T11570] neigh_resolve_output+0x1b5/0x740 [ 201.742064][T11570] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 201.747865][T11570] ip6_finish_output2+0xffa/0x1680 [ 201.752983][T11570] ? ip6_finish_output2+0x712/0x1680 [ 201.758278][T11570] ? nf_hook+0x9e/0x450 [ 201.762437][T11570] ? __pfx_ip6_finish_output2+0x10/0x10 [ 201.767987][T11570] ? ip6_mtu+0x81/0x3f0 [ 201.772140][T11570] ip6_finish_output+0x41e/0x810 [ 201.777079][T11570] ip6_send_skb+0x112/0x230 [ 201.781576][T11570] ? icmp6_send+0xba4/0x2070 [ 201.786157][T11570] icmp6_send+0x15fc/0x2070 [ 201.790653][T11570] ? icmp6_send+0xba4/0x2070 [ 201.795236][T11570] ? __pfx_icmp6_send+0x10/0x10 [ 201.800075][T11570] ? in6_dump_addrs+0x600/0x1e40 [ 201.805003][T11570] ? __pfx_lock_release+0x10/0x10 [ 201.810020][T11570] ? ip6_neigh_lookup+0x44b/0x580 [ 201.815039][T11570] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 201.820405][T11570] ip6_link_failure+0x3c/0x4f0 [ 201.825156][T11570] ? dst_link_failure+0x107/0x160 [ 201.830168][T11570] ip_tunnel_xmit+0x1653/0x2950 [ 201.835012][T11570] ? kasan_save_free_info+0x40/0x50 [ 201.840194][T11570] ? __kasan_slab_free+0x37/0x60 [ 201.845118][T11570] ? packet_rcv+0x16e/0x13e0 [ 201.849692][T11570] ? dev_hard_start_xmit+0x15f/0x7e0 [ 201.854965][T11570] ? ip6_finish_output2+0xffa/0x1680 [ 201.860238][T11570] ? ip6_finish_output+0x41e/0x810 [ 201.865336][T11570] ? rawv6_sendmsg+0x1962/0x23c0 [ 201.870262][T11570] ? ____sys_sendmsg+0x525/0x7d0 [ 201.875187][T11570] ? __sys_sendmsg+0x2b0/0x3a0 [ 201.879940][T11570] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 201.885129][T11570] ? gre_build_header+0x341/0xb30 [ 201.890143][T11570] ? __pfx_gre_build_header+0x10/0x10 [ 201.895501][T11570] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.901817][T11570] __gre_xmit+0x1cf/0x260 [ 201.906134][T11570] ? __pfx___gre_xmit+0x10/0x10 [ 201.910970][T11570] ? erspan_build_header+0x174/0x360 [ 201.916243][T11570] erspan_xmit+0xabe/0x1310 [ 201.920738][T11570] ? __pfx_erspan_xmit+0x10/0x10 [ 201.925661][T11570] ? dev_queue_xmit_nit+0x2b/0xc10 [ 201.930762][T11570] dev_hard_start_xmit+0x27a/0x7e0 [ 201.935869][T11570] sch_direct_xmit+0x2b6/0x5f0 [ 201.940797][T11570] ? __pfx_sch_direct_xmit+0x10/0x10 [ 201.946095][T11570] ? tbf_dequeue+0x892/0xd40 [ 201.950688][T11570] __qdisc_run+0xbfd/0x2170 [ 201.955192][T11570] __dev_queue_xmit+0x14f0/0x3d30 [ 201.960220][T11570] ? read_seqbegin+0x157/0x2b0 [ 201.964982][T11570] ? __dev_queue_xmit+0x2d2/0x3d30 [ 201.970089][T11570] ? read_seqbegin+0x208/0x2b0 [ 201.974863][T11570] ? __pfx___dev_queue_xmit+0x10/0x10 [ 201.980241][T11570] ? neigh_resolve_output+0x2e5/0x740 [ 201.985620][T11570] ? eth_header+0x11c/0x1f0 [ 201.990127][T11570] ? __asan_memcpy+0x40/0x70 [ 201.994709][T11570] ? eth_header+0x11c/0x1f0 [ 201.999202][T11570] ? __pfx_eth_header+0x10/0x10 [ 202.004042][T11570] ? neigh_resolve_output+0x61f/0x740 [ 202.009408][T11570] ip6_finish_output2+0xffa/0x1680 [ 202.014525][T11570] ? ip6_finish_output2+0x712/0x1680 [ 202.019800][T11570] ? nf_hook+0x9e/0x450 [ 202.023951][T11570] ? __pfx_ip6_finish_output2+0x10/0x10 [ 202.029490][T11570] ? ip6_mtu+0x81/0x3f0 [ 202.033634][T11570] ip6_finish_output+0x41e/0x810 [ 202.038560][T11570] ? rawv6_send_hdrinc+0xb7a/0x1890 [ 202.043749][T11570] rawv6_send_hdrinc+0xcfc/0x1890 [ 202.048773][T11570] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 202.054218][T11570] ? ip6_dst_lookup_flow+0x13e/0x180 [ 202.059506][T11570] ? __pfx_dst_output+0x10/0x10 [ 202.064346][T11570] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 202.069970][T11570] ? aa_label_sk_perm+0x4f0/0x6d0 [ 202.074988][T11570] ? rawv6_sendmsg+0xef9/0x23c0 [ 202.079830][T11570] rawv6_sendmsg+0x1962/0x23c0 [ 202.084594][T11570] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 202.089705][T11570] ? aa_sk_perm+0x967/0xab0 [ 202.094206][T11570] ? inet_sendmsg+0x330/0x390 [ 202.098870][T11570] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 202.104149][T11570] ? security_socket_sendmsg+0x87/0xb0 [ 202.109593][T11570] __sock_sendmsg+0x1a6/0x270 [ 202.114266][T11570] ____sys_sendmsg+0x525/0x7d0 [ 202.119021][T11570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.124301][T11570] __sys_sendmsg+0x2b0/0x3a0 [ 202.128879][T11570] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.133979][T11570] ? vfs_write+0x7c4/0xc90 [ 202.138401][T11570] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.144715][T11570] ? do_syscall_64+0x100/0x230 [ 202.149467][T11570] ? do_syscall_64+0xb6/0x230 [ 202.154160][T11570] do_syscall_64+0xf3/0x230 [ 202.158652][T11570] ? clear_bhb_loop+0x35/0x90 [ 202.163318][T11570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.169199][T11570] RIP: 0033:0x7ff1af67d0a9 [ 202.173603][T11570] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 202.193214][T11570] RSP: 002b:00007ff1b035e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.201615][T11570] RAX: ffffffffffffffda RBX: 00007ff1af7b3f80 RCX: 00007ff1af67d0a9 2024/06/23 11:32:16 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 202.209574][T11570] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 202.217533][T11570] RBP: 00007ff1b035e120 R08: 0000000000000000 R09: 0000000000000000 [ 202.225522][T11570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.233479][T11570] R13: 000000000000000b R14: 00007ff1af7b3f80 R15: 00007ffcd43d81b8 [ 202.241443][T11570]