last executing test programs: 2.622557717s ago: executing program 2 (id=1731): socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@ifindex, r0, 0x2f, 0x10, 0x0, @void, @value}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.49894278s ago: executing program 2 (id=1734): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @multicast1}, {0x0, @remote}, 0x0, {0x2, 0x0, @loopback}, 'vcan0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000900)) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="28a1ede8a08b9e1023d75b7cf1aff48265c763ad9ebb2730c37b", 0x1a}, {0x0}], 0x2, &(0x7f0000000940)}, 0x8000004) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) socket$kcm(0x11, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) close(r2) 1.994241038s ago: executing program 0 (id=1743): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.81977276s ago: executing program 0 (id=1746): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r4 = socket(0x22, 0x80002, 0xfffffffe) unshare(0x24020400) getsockopt$nfc_llcp(r4, 0x6a, 0x0, 0x0, 0x20000071) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="00000000080000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000120010000000000000000000000000000000040000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ac1414000000000000000000000000000000000000000000fc"], 0xec}}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/69, 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e00)=""/185, 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001640)=""/112, 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a80)=""/8, 0x8}], 0x1}}], 0x4, 0x400123a0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}], 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c00000026002f364fc000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r10, 0x1, 0xfffffffa, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x1d1a5b6aa11dbc7a, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xffef}, {0xfff3, 0x9}, {0xfff1, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x48a0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0x25}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) sendmmsg$inet6(r11, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000900)=@raw=[@alu={0x7, 0x1, 0xc, 0x2, 0xa, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f0000000780)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095", @ANYRES64=r5, @ANYRESHEX=r6, @ANYRESHEX=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.719920992s ago: executing program 3 (id=1747): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7, 0x7, 0x8001, 0x100, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast}}}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r7, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r8, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r2, 0x2f, 0x81, 0x2, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, 0x700, 0x0, 0x1, 0xfffffff0}}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000380)='\r\x00\x00\x00Y~V\x00\x00\x00\x00\x00\x00', 0xd) r13 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r13, 0x89ef, &(0x7f0000000000)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x1, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.49533052s ago: executing program 4 (id=1749): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) 1.414816935s ago: executing program 3 (id=1750): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.337900555s ago: executing program 3 (id=1752): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0, 0x0) socket(0x1, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 1.337564066s ago: executing program 4 (id=1753): bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x1a, 0x8, 0x5}, 0x10) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, &(0x7f00000000c0)=0x28) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3], 0x154}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYBLOB="e663f2ea1c0823680b76fabd0bd3595c09f6bc956a102f7c81bd6ca618318abc71ceaeabf2e3a4abd99f0e142e8b03d0bf2e738ef7cc6e8ac04305522ebe8b3ad51412785759b41a85a599b19dd8830fcac820ade3137a04b2ff640d6fcc2959c7fb3d234c8e524d7152e6833d857a116b8177b25e1408cd4f860bddd70fe074ad0a014fb04ab8655bdd295d3284c5f4854fb7c783668449c90b49755a1ff619373ab1f4e91f204fd80cb3b39dceab42d57086", @ANYBLOB="296f5673c2ebe0db76835244f86c2afb063a932cb6b4480870ba86b1fb22d2b3558c389d160001b9f6a5f5d8a4a811ae2f9fe206dba7c6becd946299f9ba0e0fd9113fdf5ad5597a59b33a87880ab7c91373ded1be0979c07f8db8e45b3bc55dd25daafda6438fd8a3"], 0x5c}}, 0x0) 1.336552867s ago: executing program 2 (id=1754): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r1, 0x88, 0x68, 0x0, 0x20000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x2a, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001500)=ANY=[@ANYBLOB="ffffffffffff0161c2000d000800450000780000000000889078ac1e0001ac1414aa00000000004d90780200000000000000000000008908981864d689ac43445c1c26e95299e94ccad8794114ae30e1e328af342f99e4d0ce57abcb41f7f5c8ab8f63dd38a1bb3ce5a4bbb68671a2892fa0317a823cbe9d98ca816f77013a778b6c40b49ea9"], 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x80000000}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) syz_emit_ethernet(0x12, &(0x7f0000000040)={@local, @empty, @void, {@generic={0x7, "c03ea896"}}}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x317) r6 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r6, 0x0, 0x0, 0x40, 0x0, 0x0) close(r0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@remote, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @private2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 1.208038296s ago: executing program 4 (id=1755): socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@ifindex, r0, 0x2f, 0x10, 0x0, @void, @value}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.17106113s ago: executing program 3 (id=1757): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xfff2}}}, 0x24}}, 0x4048000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x2003032, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x74}}, 0x0) 1.138629802s ago: executing program 2 (id=1758): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x10c, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0xfa, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x10c}], 0x1}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff1, 0xfff1}, {0x0, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffcc}]}, 0x38}}, 0x44080) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4", @ANYRES16=r1], 0x398}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) 1.127614711s ago: executing program 4 (id=1759): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYBLOB="8b04040000"], 0x90}}, 0x0) (async, rerun: 32) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 1.000056243s ago: executing program 2 (id=1761): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x60004f29, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c0", 0xbc}], 0x1}}], 0x1, 0x1) (fail_nth: 2) 982.472588ms ago: executing program 4 (id=1762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 971.536761ms ago: executing program 3 (id=1763): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x60004f29, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c0", 0xbc}], 0x1}}], 0x1, 0x1) 908.124212ms ago: executing program 1 (id=1764): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'veth1_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x400}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xff}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x58}}, 0x0) 839.844805ms ago: executing program 0 (id=1765): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x3b, @private=0xa010101, 0x4e22, 0x0, 'wrr\x00', 0x38, 0x7, 0x4b}, 0x2c) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000880)=0xc) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x83, "d5193ae17527f1f44a0b04b1a3a12c025f40962eaf3b0b3e4f74fa700eb15fa67989b5c1bbd24ab92f588f74a07f4add6407ea69a1fe5b3acffac56c36c5c5b6c52cf1cadab6b072aaa65022452dd12165529281fdbbdba815b5134343a771f7b9796feb585a5c4f4db729e62360cf1294387040a72d594611ab189a689544be84a639"}, &(0x7f00000001c0)=0x8b) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={r7, 0x9}, &(0x7f0000000280)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32=r10, @ANYBLOB="04227061", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x3b0, 0x0, 0xffffffff, 0x0, 0x3b0, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@srh={{0x30}, {0x3a, 0x7, 0x0, 0x6, 0x3, 0x1840, 0x8}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], 0x4e20, 0x4e21, 0x4e21, 0x4e20, 0x954, 0x7, 0x7, 0xaf64, 0x3bcd}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x0, [0x9, 0xaca, 0x9d, 0x1, 0x0, 0x0, 0x4010, 0x15f, 0x5, 0x0, 0x1, 0xf2, 0x0, 0xf, 0xfff, 0xa], 0xf}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@dev={0xac, 0x14, 0x14, 0x41}, @ipv4=@loopback, @icmp_id=0x68, @port=0x4e20}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@ipv6header={{0x28}, {0x12, 0x62}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x18, @ipv4=@broadcast, @ipv6=@private0, @gre_key=0x9, @port=0x4e21}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xff000000, 0xff], 'ip6_vti0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x21, 0xf8, 0x7}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@private=0xa010101, @gre_key=0xffff, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) close(r10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) pwritev(r2, &(0x7f0000001240)=[{&(0x7f0000000300)="4e033b08bbb3707d54e4", 0xa}], 0x1, 0x0, 0x0) 805.202074ms ago: executing program 1 (id=1766): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getchain={0x44, 0x66, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x6, 0xfff2}, {0x0, 0x8}}, [{0x8, 0xb, 0x96}, {0x8, 0xb, 0x7806166a}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}]}, 0x44}}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff1, 0xc}, {0xf, 0xffe0}, {0xffff, 0xfffc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 735.661224ms ago: executing program 1 (id=1767): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="f4f0a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4", @ANYRES16], 0x398}}, 0x0) 619.759622ms ago: executing program 1 (id=1768): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x0, 0x0) socket(0x1, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 613.817596ms ago: executing program 1 (id=1769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xfff2}}}, 0x24}}, 0x4048000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x2003032, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x74}}, 0x0) (fail_nth: 2) 600.893841ms ago: executing program 0 (id=1770): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) bind$xdp(r0, 0x0, 0x0) 203.752779ms ago: executing program 0 (id=1771): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5bd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r5 = socket(0x200000100000011, 0x3, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x10, r7, 0x1, 0x0, 0x6, @random="b60d20440cdd"}, 0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0xa, [@ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @fwd={0x10}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x4, 0x4}, {0x9, 0x2}, {0xa, 0x4}, {0xd, 0x4}, {0xf}, {0x2, 0x1}, {0x8}, {0x9, 0x3}]}, @const={0x1, 0x0, 0x0, 0xa, 0x4}, @union={0xb, 0x4, 0x0, 0x5, 0x0, 0x9, [{0x0, 0x5, 0xc5f}, {0xd, 0x1, 0x9}, {0xb, 0x1, 0x82cd}, {0x10, 0x1, 0x8}]}]}, {0x0, [0xfb6822643fa53546, 0x0, 0x61, 0x0, 0x30, 0x0, 0x61, 0x0]}}, &(0x7f0000000500)=""/28, 0xd6, 0x1c, 0x1, 0x63b5, 0x0, @void, @value}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x4, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f00000001c0)="7e9c41dd3d", &(0x7f0000000240)}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb, '\x00', 0x0, r0, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x53ae5873, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000880)={r0, 0x7, 0x4}) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r15}, 0x38) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r16, 0x29, 0x41, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)=0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x19, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff800000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x2b, &(0x7f00000004c0)=""/43, 0x41000, 0x2c, '\x00', r7, 0x25, r8, 0x8, &(0x7f00000006c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[r9, r10, r11, r2, r12, r13, r14, r15], &(0x7f0000000900)=[{0x1, 0x3, 0x8, 0x5}, {0x0, 0x5, 0x3, 0x5}, {0x4, 0x5, 0x9, 0x6}, {0x2, 0x5, 0x9, 0xb}, {0x1, 0x5, 0x1, 0xb}, {0x5, 0x1, 0x10, 0x1}, {0x4, 0x2, 0xf, 0x4}, {0x4, 0x3, 0x9, 0xa}], 0x10, 0x4, @void, @value}, 0x94) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r14) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r17, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40055}, 0x24044044) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x51, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000006300000085000000760000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 202.968734ms ago: executing program 1 (id=1772): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 132.072013ms ago: executing program 0 (id=1773): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe"], 0xfdef) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1004) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="247aa48b00332c341900000000327665b590840000001c14ff0ffe00000100000000050021ca595b30fda361ca65ac635b1216f8e004f3fd75e7c3a32c1b7e49f52284e855762c3e7307fa0bb793919ad5727ec780604750b550f3789cc8287e94d0e11b54581daa3d52187247eaa1fb0311f7c19a6e4a04026bec5c0474764d9a9268bf67e5d6cf25b48fb09198247f0c7ff05e21abdb879cd55444f7429a57005d52ff1f8a6831ea77ccaed1dd5a3ebca6117b5d893233195347c6fefbc5c93a6f0e21a998059bf0d9d596b2807e5860ff8b0b38f286a068404dc68481c03b4483567f25a73fd292597514038e13e8064fec97f46c5a204309d062a26f6a"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac100000907800041312623eebe039a1f617fd02722e3486ebd90000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e00000000000000040000000700000000000000", @ANYRES32, @ANYBLOB="00ec000000011d00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/28], 0x48) 1.041707ms ago: executing program 2 (id=1774): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000080)="aba64aa3e4593297b86f03fd623361e45d057e84aefcbe240a466de215eaa82880005dd779eebf825aee62fdbae90e679a1d8548b2c7012cf1f991d66da9fbbf0e1ceacc8e090e8f941f4723293c6eac4fea02044c3990ad86787963897f94eaa450df2fb97c0adc5335eef90db904e3b995dea41c1c5bf14019defd48c5ea57e67dcdb29b402b233a9f6f90f0442a96", 0x90) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b25, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x138, 0xffffff80, 0x178, 0x138, 0x178, 0x2b8, 0x258, 0x230, 0x2b8, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x100, 0x138, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@cluster={{0x30}, {0x300}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 470.146µs ago: executing program 4 (id=1775): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=1776): r0 = socket(0x40000000015, 0x5, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x20000) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000004c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000bc8020"], &(0x7f0000000300)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) kernel console output (not intermixed with test programs): lave_0 [ 69.429868][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.440393][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.451760][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.461909][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.472508][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.483327][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.507214][ T5928] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 69.518442][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.529187][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.540842][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.552005][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.561915][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.572812][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.582735][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.593299][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.604510][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.613586][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.633695][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.694045][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.703118][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.712385][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.721703][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.735364][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.759286][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.767317][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.772233][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.786667][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.801412][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.885638][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.899553][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.996091][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.012288][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.203208][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.211931][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.060921][ T5965] Zero length message leads to an empty skb [ 71.194546][ T5840] Bluetooth: hci3: command tx timeout [ 71.210208][ T5840] Bluetooth: hci1: command tx timeout [ 71.210275][ T5844] Bluetooth: hci0: command tx timeout [ 71.253972][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 71.274097][ T5844] Bluetooth: hci2: command tx timeout [ 71.276382][ T5840] Bluetooth: hci4: command tx timeout [ 71.401584][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 71.598964][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.608557][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.000433][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 72.259351][ T6010] tipc: Started in network mode [ 72.269898][ T6010] tipc: Node identity aae518b373f, cluster identity 4711 [ 72.284133][ T6010] tipc: Enabled bearer , priority 7 [ 72.302234][ T6013] ªªªªªª: renamed from syzkaller0 [ 72.323058][ T6013] tipc: Disabling bearer [ 72.681820][ T6026] tipc: Started in network mode [ 72.691577][ T6026] tipc: Node identity 160597361694, cluster identity 4711 [ 72.725520][ T6026] tipc: Enabled bearer , priority 0 [ 72.746526][ T6028] dummy0: entered promiscuous mode [ 72.754023][ T6028] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 72.783620][ T6030] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 72.891107][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 72.893316][ T6026] syzkaller0: entered promiscuous mode [ 72.912489][ T6026] syzkaller0: entered allmulticast mode [ 72.920644][ T6026] tipc: Resetting bearer [ 73.081180][ T6025] tipc: Resetting bearer [ 73.292582][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 73.407109][ T6048] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 73.786955][ T25] tipc: Node number set to 9541430 [ 74.442337][ T6025] tipc: Disabling bearer [ 74.460486][ T6035] netlink: 'syz.1.42': attribute type 7 has an invalid length. [ 74.606460][ T6049] bond1 (unregistering): Released all slaves [ 74.609357][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.644413][ T6050] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 74.646057][ T6050] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 74.920962][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 75.097718][ T6074] tipc: Enabled bearer , priority 0 [ 75.230441][ T6074] syzkaller0: entered promiscuous mode [ 75.251564][ T6074] syzkaller0: entered allmulticast mode [ 75.276725][ T6074] tipc: Resetting bearer [ 75.278159][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 75.305884][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 75.315729][ T6073] tipc: Resetting bearer [ 75.449296][ T6083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.176148][ T5885] tipc: Node number set to 3642038451 [ 76.577498][ T6073] tipc: Disabling bearer [ 76.917119][ T6095] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 77.248919][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 77.267624][ T6102] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 77.304591][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 77.334260][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.4.67'. [ 77.701219][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 77.804156][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 77.875556][ T6121] warning: `syz.1.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.100723][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.78'. [ 78.139043][ T6128] veth0_to_batadv: mtu less than device minimum [ 78.344535][ T6137] dccp_close: ABORT with 1 bytes unread [ 78.367514][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 78.413645][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 78.728030][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 79.602188][ T6175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.95'. [ 80.585057][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020ecc800: rx timeout, send abort [ 80.594295][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020ecc000: rx timeout, send abort [ 80.602860][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020ecc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 80.618159][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888020ecc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 81.323724][ T6197] netlink: 'syz.2.103': attribute type 4 has an invalid length. [ 81.373093][ T6199] netlink: 'syz.2.103': attribute type 4 has an invalid length. [ 81.844836][ T8] cfg80211: failed to load regulatory.db [ 81.892660][ T6205] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 82.566162][ T6207] vlan2: entered promiscuous mode [ 82.616638][ T6207] veth1_to_batadv: entered promiscuous mode [ 82.622805][ T6207] vlan2: entered allmulticast mode [ 82.633854][ T6207] veth1_to_batadv: entered allmulticast mode [ 82.746472][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 82.854950][ T6220] tipc: Started in network mode [ 82.870142][ T6220] tipc: Node identity c69b6796b22e, cluster identity 4711 [ 82.888693][ T6220] tipc: Enabled bearer , priority 0 [ 82.947075][ T6220] syzkaller0: entered promiscuous mode [ 82.953898][ T6220] syzkaller0: entered allmulticast mode [ 82.962692][ T6220] tipc: Resetting bearer [ 82.974753][ T5852] IPVS: starting estimator thread 0... [ 82.975907][ T6224] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 83.022011][ T6217] tipc: Resetting bearer [ 83.083764][ T6227] IPVS: using max 20 ests per chain, 48000 per kthread [ 83.167324][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 83.883639][ T25] tipc: Node number set to 1958045590 [ 84.439416][ T6217] tipc: Disabling bearer [ 84.696330][ T6246] pim6reg1: entered promiscuous mode [ 84.714279][ T6246] pim6reg1: entered allmulticast mode [ 84.952490][ T6264] dccp_close: ABORT with 1 bytes unread [ 85.158822][ T6273] netlink: 668 bytes leftover after parsing attributes in process `syz.1.127'. [ 85.168216][ T6273] netlink: 668 bytes leftover after parsing attributes in process `syz.1.127'. [ 86.424894][ T6311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.795231][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 86.892791][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 87.380159][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 87.389183][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 90.028982][ T6351] Set syz1 is full, maxelem 65536 reached [ 90.038931][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 90.766447][ T6400] pim6reg1: entered promiscuous mode [ 90.782111][ T6389] infiniband syz1: set active [ 90.787162][ T6400] pim6reg1: entered allmulticast mode [ 90.803731][ T6389] infiniband syz1: added team_slave_0 [ 90.936759][ T6389] RDS/IB: syz1: added [ 90.942367][ T6389] smc: adding ib device syz1 with port count 1 [ 90.950170][ T6389] smc: ib device syz1 port 1 has pnetid [ 91.908761][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 92.588645][ T6432] vxcan1 speed is unknown, defaulting to 1000 [ 92.598165][ T6432] vxcan1 speed is unknown, defaulting to 1000 [ 92.614992][ T6432] vxcan1 speed is unknown, defaulting to 1000 [ 92.907879][ T6432] infiniband syz2: set active [ 92.912659][ T25] vxcan1 speed is unknown, defaulting to 1000 [ 92.920591][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 92.931982][ T6432] infiniband syz2: added vxcan1 [ 92.940184][ T6432] syz2: rxe_create_cq: returned err = -12 [ 92.956096][ T6432] infiniband syz2: Couldn't create ib_mad CQ [ 92.983720][ T6432] infiniband syz2: Couldn't open port 1 [ 93.019897][ T6432] RDS/IB: syz2: added [ 93.024389][ T6432] smc: adding ib device syz2 with port count 1 [ 93.030579][ T6432] smc: ib device syz2 port 1 has pnetid [ 93.054548][ T25] vxcan1 speed is unknown, defaulting to 1000 [ 93.061578][ T6432] vxcan1 speed is unknown, defaulting to 1000 [ 93.318834][ T6432] vxcan1 speed is unknown, defaulting to 1000 [ 93.358254][ T6484] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 93.397204][ T6484] netlink: 224 bytes leftover after parsing attributes in process `syz.0.215'. [ 93.587271][ T6432] vxcan1 speed is unknown, defaulting to 1000 [ 93.867762][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 93.902274][ T6432] vxcan1 speed is unknown, defaulting to 1000 [ 93.935698][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 94.106388][ T6432] vxcan1 speed is unknown, defaulting to 1000 [ 94.281542][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 94.841938][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 95.908318][ T6591] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.253'. [ 96.130000][ T6601] veth1_macvtap: left promiscuous mode [ 96.135619][ T6601] macsec0: entered promiscuous mode [ 96.151383][ T6601] veth1_macvtap: entered promiscuous mode [ 96.163816][ T6601] macsec0: left promiscuous mode [ 96.469145][ C0] Unknown status report in ack skb [ 96.608718][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 97.198082][ T6649] netlink: 104 bytes leftover after parsing attributes in process `syz.1.278'. [ 97.228968][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 97.509969][ T6667] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.202850][ T6693] syz.3.297[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.202946][ T6693] syz.3.297[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.231039][ T6693] syz.3.297[6693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.503385][ T6705] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.588810][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.597277][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.623914][ T6705] bridge0: entered allmulticast mode [ 98.721317][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 99.312809][ T6746] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 99.420095][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 99.445468][ T6756] lo speed is unknown, defaulting to 1000 [ 99.467483][ T6756] lo speed is unknown, defaulting to 1000 [ 99.498056][ T6756] lo speed is unknown, defaulting to 1000 [ 99.530416][ T6756] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.576063][ T6756] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 99.638232][ T6756] lo speed is unknown, defaulting to 1000 [ 99.669948][ T6756] lo speed is unknown, defaulting to 1000 [ 99.696038][ T6756] lo speed is unknown, defaulting to 1000 [ 99.724660][ T6756] lo speed is unknown, defaulting to 1000 [ 99.743435][ T6756] lo speed is unknown, defaulting to 1000 [ 100.648953][ T6805] bridge0: port 3(vlan2) entered blocking state [ 100.669341][ T6805] bridge0: port 3(vlan2) entered disabled state [ 100.678145][ T6805] vlan2: entered allmulticast mode [ 100.705990][ T6805] vlan2: left allmulticast mode [ 100.745522][ T6813] syz.0.349: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.783948][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.0.349 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 100.794594][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.804703][ T6813] Call Trace: [ 100.807999][ T6813] [ 100.810951][ T6813] dump_stack_lvl+0x241/0x360 [ 100.815697][ T6813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.820929][ T6813] ? __pfx__printk+0x10/0x10 [ 100.825557][ T6813] ? __rcu_read_unlock+0xa1/0x110 [ 100.830611][ T6813] warn_alloc+0x278/0x410 [ 100.833372][ T6817] netem: unknown loss type 0 [ 100.834955][ T6813] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 100.835016][ T6813] ? __pfx_warn_alloc+0x10/0x10 [ 100.835037][ T6813] ? kasan_save_track+0x3f/0x80 [ 100.840058][ T6817] netem: change failed [ 100.845877][ T6813] ? __kasan_kmalloc+0x98/0xb0 [ 100.845907][ T6813] ? xsk_setsockopt+0x4ea/0x950 [ 100.845927][ T6813] ? do_sock_setsockopt+0x3af/0x720 [ 100.845947][ T6813] ? __x64_sys_setsockopt+0x1ee/0x280 [ 100.845966][ T6813] ? do_syscall_64+0xf3/0x230 [ 100.845989][ T6813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.846023][ T6813] __vmalloc_node_range_noprof+0x126/0x1380 [ 100.846078][ T6813] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.846109][ T6813] ? __kasan_kmalloc+0x98/0xb0 [ 100.846133][ T6813] vmalloc_user_noprof+0x74/0x80 [ 100.846151][ T6813] ? xskq_create+0xb6/0x170 [ 100.846170][ T6813] xskq_create+0xb6/0x170 [ 100.846193][ T6813] xsk_init_queue+0xa1/0x100 [ 100.846214][ T6813] xsk_setsockopt+0x4ea/0x950 [ 100.846236][ T6813] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.936127][ T6813] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.940988][ T6813] ? do_sock_setsockopt+0x136/0x720 [ 100.946187][ T6813] ? apparmor_socket_setsockopt+0xd/0x30 [ 100.951825][ T6813] ? aa_sock_opt_perm+0x79/0x120 [ 100.956762][ T6813] ? __pfx_xsk_setsockopt+0x10/0x10 [ 100.961956][ T6813] do_sock_setsockopt+0x3af/0x720 [ 100.966983][ T6813] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 100.972537][ T6813] ? __fget_files+0x395/0x410 [ 100.977240][ T6813] ? __fget_files+0x2a/0x410 [ 100.981847][ T6813] __x64_sys_setsockopt+0x1ee/0x280 [ 100.987051][ T6813] do_syscall_64+0xf3/0x230 [ 100.991556][ T6813] ? clear_bhb_loop+0x35/0x90 [ 100.996230][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.002134][ T6813] RIP: 0033:0x7fab29d85d29 [ 101.006557][ T6813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.026157][ T6813] RSP: 002b:00007fab2ac29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.034570][ T6813] RAX: ffffffffffffffda RBX: 00007fab29f75fa0 RCX: 00007fab29d85d29 [ 101.042538][ T6813] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 101.050513][ T6813] RBP: 00007fab29e01b08 R08: 0000000000000004 R09: 0000000000000000 [ 101.058490][ T6813] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.066462][ T6813] R13: 0000000000000000 R14: 00007fab29f75fa0 R15: 00007ffc6803bf68 [ 101.074449][ T6813] [ 101.178705][ T6813] Mem-Info: [ 101.181903][ T6813] active_anon:4688 inactive_anon:0 isolated_anon:0 [ 101.181903][ T6813] active_file:1208 inactive_file:38262 isolated_file:0 [ 101.181903][ T6813] unevictable:768 dirty:262 writeback:0 [ 101.181903][ T6813] slab_reclaimable:9812 slab_unreclaimable:103723 [ 101.181903][ T6813] mapped:28580 shmem:1428 pagetables:739 [ 101.181903][ T6813] sec_pagetables:0 bounce:0 [ 101.181903][ T6813] kernel_misc_reclaimable:0 [ 101.181903][ T6813] free:1341827 free_pcp:318 free_cma:0 [ 101.251787][ T6813] Node 0 active_anon:18752kB inactive_anon:0kB active_file:4832kB inactive_file:152972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114320kB dirty:1048kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no [ 101.291452][ T6813] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 101.337856][ T6813] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.365601][ T6813] lowmem_reserve[]: 0 2465 2466 0 0 [ 101.371174][ T6813] Node 0 DMA32 free:1444724kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18712kB inactive_anon:0kB active_file:4832kB inactive_file:152144kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:1984kB local_pcp:996kB free_cma:0kB [ 101.389962][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 101.422551][ T6813] lowmem_reserve[]: 0 0 0 0 0 [ 101.435789][ T6813] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 101.477595][ T6813] lowmem_reserve[]: 0 0 0 0 0 [ 101.499894][ T6813] Node 1 Normal free:3905068kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:120kB local_pcp:104kB free_cma:0kB [ 101.590983][ T6813] lowmem_reserve[]: 0 0 0 0 0 [ 101.617033][ T6813] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.682919][ T6813] Node 0 DMA32: 494*4kB (UM) 450*8kB (UME) 147*16kB (UME) 33*32kB (ME) 29*64kB (UME) 30*128kB (UME) 12*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 2*2048kB (M) 346*4096kB (M) = 1445720kB [ 101.743641][ T6813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 101.843048][ T6813] Node 1 Normal: 227*4kB (UE) 68*8kB (UME) 46*16kB (UME) 225*32kB (UME) 100*64kB (UME) 25*128kB (UME) 12*256kB (UME) 6*512kB (UM) 7*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3905068kB [ 101.873346][ T6847] bridge_slave_0: default FDB implementation only supports local addresses [ 101.892243][ T6813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.933868][ T6813] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.986112][ T6813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.012977][ T6813] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.042826][ T6813] 40898 total pagecache pages [ 102.060173][ T6813] 0 pages in swap cache [ 102.077468][ T6813] Free swap = 124996kB [ 102.081729][ T6813] Total swap = 124996kB [ 102.101045][ T6813] 2097051 pages RAM [ 102.105000][ T6813] 0 pages HighMem/MovableOnly [ 102.109704][ T6813] 427005 pages reserved [ 102.131932][ T6813] 0 pages cma reserved [ 102.258639][ T6859] team0: No ports can be present during mode change [ 102.400510][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 102.568808][ T6867] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.104032][ T6888] TCP: TCP_TX_DELAY enabled [ 103.354426][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 104.091593][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 104.475735][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 104.548968][ T6948] netlink: 244 bytes leftover after parsing attributes in process `syz.0.407'. [ 104.657686][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 104.717426][ T6950] syzkaller0: entered promiscuous mode [ 104.722951][ T6950] syzkaller0: entered allmulticast mode [ 106.625507][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.426'. [ 106.919405][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.430'. [ 106.954834][ T7014] nbd: device at index 2 is going down [ 107.244977][ T7024] syzkaller0: entered promiscuous mode [ 107.276613][ T7024] syzkaller0: entered allmulticast mode [ 109.123776][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.444'. [ 109.159008][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 109.312604][ T7077] netlink: 244 bytes leftover after parsing attributes in process `syz.3.447'. [ 109.398496][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 109.912865][ T7104] syzkaller0: entered promiscuous mode [ 109.928516][ T7104] syzkaller0: entered allmulticast mode [ 110.901222][ T7144] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 112.462039][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 112.552771][ T7205] "syz.1.483" (7205) uses obsolete ecb(arc4) skcipher [ 113.792987][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 113.954922][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.502'. [ 114.595622][ T7291] trusted_key: syz.0.512 sent an empty control message without MSG_MORE. [ 115.165159][ T7321] syzkaller0: entered promiscuous mode [ 115.177862][ T7321] syzkaller0: entered allmulticast mode [ 116.204727][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 116.968465][ T7351] ip_vti0: Master is either lo or non-ether device [ 116.992319][ T7353] macvlan0: entered promiscuous mode [ 117.051505][ T7353] macvlan0: left promiscuous mode [ 118.047584][ T7413] syzkaller1: entered promiscuous mode [ 118.053177][ T7413] syzkaller1: entered allmulticast mode [ 118.341695][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 118.472925][ T7425] syzkaller0: entered promiscuous mode [ 118.510295][ T7425] syzkaller0: entered allmulticast mode [ 120.554261][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 120.596885][ T7481] syz.4.574[7481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.596984][ T7481] syz.4.574[7481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.608840][ T7481] syz.4.574[7481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.623859][ T7481] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 121.331125][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 121.782763][ T7528] netlink: 'syz.2.592': attribute type 5 has an invalid length. [ 122.589130][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 123.342739][ T7605] netlink: 92 bytes leftover after parsing attributes in process `syz.2.625'. [ 124.033667][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'. [ 124.139434][ T7641] veth0_vlan: left promiscuous mode [ 124.170235][ T7641] veth0_vlan: entered promiscuous mode [ 124.806027][ T7674] netlink: 244 bytes leftover after parsing attributes in process `syz.3.651'. [ 124.836933][ T7672] syzkaller0: entered promiscuous mode [ 124.842429][ T7672] syzkaller0: entered allmulticast mode [ 124.855615][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 125.412851][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 126.723289][ T7699] netlink: 'syz.4.657': attribute type 5 has an invalid length. [ 126.862776][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 126.881381][ T7708] netlink: 244 bytes leftover after parsing attributes in process `syz.1.662'. [ 126.946929][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 127.218056][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 127.245510][ T7724] vxcan1 speed is unknown, defaulting to 1000 [ 127.490762][ T7724] lo speed is unknown, defaulting to 1000 [ 127.924535][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 127.981987][ T7749] netlink: 244 bytes leftover after parsing attributes in process `syz.2.677'. [ 129.536421][ T7817] bridge0: port 3(vlan3) entered blocking state [ 129.548337][ T7817] bridge0: port 3(vlan3) entered disabled state [ 129.558669][ T7817] vlan3: entered allmulticast mode [ 129.587850][ T7817] vlan3: left allmulticast mode [ 129.659523][ T7821] __nla_validate_parse: 4 callbacks suppressed [ 129.659545][ T7821] netlink: 244 bytes leftover after parsing attributes in process `syz.2.703'. [ 129.794687][ T7825] netlink: 244 bytes leftover after parsing attributes in process `syz.2.716'. [ 129.857941][ T7822] dccp_close: ABORT with 36 bytes unread [ 129.897473][ T7828] dccp_close: ABORT with 1 bytes unread [ 129.980160][ T7831] gtp0: entered promiscuous mode [ 130.095641][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 130.231843][ T7844] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 130.249787][ T7844] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 130.650104][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 130.721684][ T7869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.723'. [ 132.458894][ T7890] syzkaller0: entered promiscuous mode [ 132.489436][ T7890] syzkaller0: entered allmulticast mode [ 132.509060][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 132.527725][ T7895] tipc: Started in network mode [ 132.533366][ T7895] tipc: Node identity b215a72cba6f, cluster identity 4711 [ 132.547123][ T7895] tipc: Enabled bearer , priority 0 [ 132.621533][ T7900] syzkaller0: entered promiscuous mode [ 132.628044][ T7900] syzkaller0: entered allmulticast mode [ 132.635476][ T7900] tipc: Resetting bearer [ 132.642136][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 132.753793][ T7886] tipc: Resetting bearer [ 132.831845][ T7911] netlink: 'syz.3.737': attribute type 7 has an invalid length. [ 132.852100][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 133.007313][ T7916] xt_hashlimit: max too large, truncated to 1048576 [ 133.021745][ T7916] No such timeout policy "syz1" [ 133.050652][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.134426][ T7918] netlink: 244 bytes leftover after parsing attributes in process `syz.1.741'. [ 133.215751][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 133.613981][ T8] tipc: Node number set to 142255916 [ 134.324330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.350202][ T7886] tipc: Disabling bearer [ 135.778994][ T7927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.743'. [ 136.075234][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 136.089011][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 136.214276][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 136.388714][ T7955] tipc: Enabled bearer , priority 0 [ 136.460807][ T7955] syzkaller0: entered promiscuous mode [ 136.482463][ T7955] syzkaller0: entered allmulticast mode [ 136.499829][ T7955] tipc: Resetting bearer [ 136.543318][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 136.577538][ T7952] tipc: Resetting bearer [ 138.614929][ T7952] tipc: Disabling bearer [ 138.657880][ T7995] veth0_to_batadv: mtu less than device minimum [ 139.026922][ T8007] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 139.097288][ T8007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.114678][ T8012] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 139.121875][ T8012] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 139.165436][ T8007] bond1: (slave veth3): Enslaving as an active interface with a down link [ 139.177506][ T8013] tipc: Enabled bearer , priority 0 [ 139.231987][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 139.234385][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.264679][ T8014] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 139.381256][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 139.385468][ T8013] syzkaller0: entered promiscuous mode [ 139.390528][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 139.416367][ T8013] syzkaller0: entered allmulticast mode [ 139.428190][ T8013] tipc: Resetting bearer [ 139.498756][ T8009] tipc: Resetting bearer [ 139.653179][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 139.659311][ T8037] netlink: 48 bytes leftover after parsing attributes in process `syz.4.781'. [ 141.725294][ T8009] tipc: Disabling bearer [ 141.752760][ T8039] tipc: Enabling of bearer rejected, failed to enable media [ 141.818571][ T8049] __nla_validate_parse: 1 callbacks suppressed [ 141.818591][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 141.949967][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 142.019429][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 142.053060][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 143.210593][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 143.278479][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 143.456010][ T8102] syzkaller0: entered promiscuous mode [ 143.466351][ T8102] syzkaller0: entered allmulticast mode [ 143.483415][ T8104] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 143.619449][ T8104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.638180][ T8108] bond1: (slave ip6gretap1): making interface the new active one [ 143.648067][ T8108] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 143.691294][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ffd5800: rx timeout, send abort [ 144.199640][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ffd5800: abort rx timeout. Force session deactivation [ 144.562551][ T8125] netlink: 244 bytes leftover after parsing attributes in process `syz.4.809'. [ 144.642733][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 145.292910][ T8110] vlan3: entered promiscuous mode [ 145.298823][ T8110] bond1: entered promiscuous mode [ 145.304223][ T8110] ip6gretap1: entered promiscuous mode [ 145.309885][ T8110] vlan3: entered allmulticast mode [ 145.316003][ T8110] bond1: entered allmulticast mode [ 145.321140][ T8110] ip6gretap1: entered allmulticast mode [ 145.479847][ T8132] netlink: del zone limit has 4 unknown bytes [ 145.492362][ T8132] xt_l2tp: unknown flags: 18 [ 145.994043][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 145.999189][ T8161] netlink: 244 bytes leftover after parsing attributes in process `syz.1.824'. [ 146.280740][ T8172] dccp_invalid_packet: P.Data Offset(0) too small [ 146.701323][ T8183] dccp_close: ABORT with 32 bytes unread [ 146.829187][ T8188] __nla_validate_parse: 4 callbacks suppressed [ 146.829206][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'. [ 147.007934][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 147.057563][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 147.573053][ T8213] netlink: 244 bytes leftover after parsing attributes in process `syz.2.846'. [ 147.620839][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 148.004468][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 148.495924][ T8249] netlink: 'syz.1.861': attribute type 1 has an invalid length. [ 148.504249][ T8249] netlink: 224 bytes leftover after parsing attributes in process `syz.1.861'. [ 149.381633][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 149.473988][ T8280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.556134][ T8282] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 150.220964][ T8307] syzkaller0: entered promiscuous mode [ 150.232702][ T8307] syzkaller0: entered allmulticast mode [ 150.376956][ T8314] netlink: 244 bytes leftover after parsing attributes in process `syz.2.886'. [ 150.470191][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 150.977374][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 151.278984][ T8246] Set syz1 is full, maxelem 65536 reached [ 152.559582][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 152.905739][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 152.962941][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 153.041385][ T8355] netlink: 244 bytes leftover after parsing attributes in process `syz.2.902'. [ 153.068069][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 153.107265][ T8359] syzkaller0: entered promiscuous mode [ 153.117943][ T8359] syzkaller0: entered allmulticast mode [ 153.928765][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 154.816888][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 154.942383][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.906'. [ 155.116661][ T8392] netlink: 244 bytes leftover after parsing attributes in process `syz.1.917'. [ 155.118197][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 155.699192][ T8425] sctp: [Deprecated]: syz.3.929 (pid 8425) Use of int in max_burst socket option. [ 155.699192][ T8425] Use struct sctp_assoc_value instead [ 155.764023][ T8426] dccp_close: ABORT with 68 bytes unread [ 156.289912][ T8440] : renamed from ipvlan1 [ 156.896482][ T8475] workqueue: name exceeds WQ_NAME_LEN. Truncating to: þÜ»}ÆÓžäءÑV§ïj×ì·Pbôõ=Ì [ 157.815098][ T8524] __nla_validate_parse: 4 callbacks suppressed [ 157.815116][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 158.299979][ T8544] netlink: 244 bytes leftover after parsing attributes in process `syz.1.972'. [ 158.326761][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.972'. [ 158.517499][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 158.683418][ T8562] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 159.430076][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 159.973252][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 160.102971][ T8640] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1002'. [ 160.321917][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 160.620942][ T8667] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1015'. [ 161.208204][ T8692] infiniband syz2: set active [ 161.233826][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.244847][ T8692] bridge_slave_0: left allmulticast mode [ 161.259954][ T8692] bridge_slave_0: left promiscuous mode [ 161.270830][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.314390][ T8692] bridge_slave_1: left allmulticast mode [ 161.320123][ T8692] bridge_slave_1: left promiscuous mode [ 161.339699][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.392996][ T8692] bond0: (slave bond_slave_0): Releasing backup interface [ 161.440630][ T8692] bond0: (slave bond_slave_1): Releasing backup interface [ 161.490149][ T8711] syz.1.1028[8711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.490247][ T8711] syz.1.1028[8711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.504259][ T8711] syz.1.1028[8711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.544860][ T8692] team0: Port device team_slave_0 removed [ 161.595044][ T8692] team0: Port device team_slave_1 removed [ 161.604339][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.611916][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.627671][ T8692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.636249][ T8692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.657993][ T8692] bond2: (slave bridge1): Releasing backup interface [ 161.688321][ T5852] vxcan1 speed is unknown, defaulting to 1000 [ 161.917899][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.292152][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 162.850782][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 163.299139][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 163.431145][ T8804] syz.4.1068: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 163.459858][ T8804] CPU: 0 UID: 0 PID: 8804 Comm: syz.4.1068 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 163.470591][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.480769][ T8804] Call Trace: [ 163.484060][ T8804] [ 163.487005][ T8804] dump_stack_lvl+0x241/0x360 [ 163.491695][ T8804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.496899][ T8804] ? __pfx__printk+0x10/0x10 [ 163.501494][ T8804] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 163.507915][ T8804] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 163.514438][ T8804] warn_alloc+0x278/0x410 [ 163.518775][ T8804] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 163.524936][ T8804] ? __pfx_warn_alloc+0x10/0x10 [ 163.529781][ T8804] ? kasan_save_track+0x3f/0x80 [ 163.534627][ T8804] ? __kasan_kmalloc+0x98/0xb0 [ 163.539390][ T8804] ? xsk_setsockopt+0x4ea/0x950 [ 163.544244][ T8804] ? do_sock_setsockopt+0x3af/0x720 [ 163.549442][ T8804] ? __x64_sys_setsockopt+0x1ee/0x280 [ 163.554813][ T8804] ? do_syscall_64+0xf3/0x230 [ 163.559491][ T8804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.565565][ T8804] __vmalloc_node_range_noprof+0x126/0x1380 [ 163.571482][ T8804] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 163.577828][ T8804] ? __kasan_kmalloc+0x98/0xb0 [ 163.582591][ T8804] vmalloc_user_noprof+0x74/0x80 [ 163.587524][ T8804] ? xskq_create+0xb6/0x170 [ 163.592022][ T8804] xskq_create+0xb6/0x170 [ 163.596352][ T8804] xsk_init_queue+0xa1/0x100 [ 163.600940][ T8804] xsk_setsockopt+0x4ea/0x950 [ 163.605616][ T8804] ? __pfx_xsk_setsockopt+0x10/0x10 [ 163.610812][ T8804] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.615772][ T8804] ? aa_sock_opt_perm+0x79/0x120 [ 163.620728][ T8804] ? __pfx_xsk_setsockopt+0x10/0x10 [ 163.625924][ T8804] do_sock_setsockopt+0x3af/0x720 [ 163.630950][ T8804] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 163.636498][ T8804] ? __fget_files+0x395/0x410 [ 163.641178][ T8804] ? __fget_files+0x2a/0x410 [ 163.645786][ T8804] __x64_sys_setsockopt+0x1ee/0x280 [ 163.650992][ T8804] do_syscall_64+0xf3/0x230 [ 163.655512][ T8804] ? clear_bhb_loop+0x35/0x90 [ 163.660192][ T8804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.666105][ T8804] RIP: 0033:0x7fde72985d29 [ 163.670523][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.690180][ T8804] RSP: 002b:00007fde737b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.698601][ T8804] RAX: ffffffffffffffda RBX: 00007fde72b75fa0 RCX: 00007fde72985d29 [ 163.706655][ T8804] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 163.714621][ T8804] RBP: 00007fde72a01b08 R08: 0000000000000004 R09: 0000000000000000 [ 163.722588][ T8804] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.730558][ T8804] R13: 0000000000000000 R14: 00007fde72b75fa0 R15: 00007fffc851bdd8 [ 163.738636][ T8804] [ 163.775930][ T8804] Mem-Info: [ 163.779100][ T8804] active_anon:4795 inactive_anon:0 isolated_anon:0 [ 163.779100][ T8804] active_file:1208 inactive_file:38290 isolated_file:0 [ 163.779100][ T8804] unevictable:768 dirty:181 writeback:0 [ 163.779100][ T8804] slab_reclaimable:10115 slab_unreclaimable:104718 [ 163.779100][ T8804] mapped:28677 shmem:1441 pagetables:773 [ 163.779100][ T8804] sec_pagetables:0 bounce:0 [ 163.779100][ T8804] kernel_misc_reclaimable:0 [ 163.779100][ T8804] free:1340561 free_pcp:287 free_cma:0 [ 163.863758][ T8804] Node 0 active_anon:19180kB inactive_anon:0kB active_file:4832kB inactive_file:153084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114708kB dirty:724kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11100kB pagetables:3092kB sec_pagetables:0kB all_unreclaimable? no [ 163.924559][ T8804] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 163.978112][ T8804] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.014799][ T8804] lowmem_reserve[]: 0 2465 2466 0 0 [ 164.041933][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 164.063586][ T8804] Node 0 DMA32 free:1440904kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18840kB inactive_anon:0kB active_file:4832kB inactive_file:152256kB unevictable:1536kB writepending:724kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:2084kB local_pcp:848kB free_cma:0kB [ 164.132658][ T8804] lowmem_reserve[]: 0 0 0 0 0 [ 164.137599][ T8804] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 164.173570][ T8804] lowmem_reserve[]: 0 0 0 0 0 [ 164.180054][ T8804] Node 1 Normal free:3905308kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 164.221131][ T8804] lowmem_reserve[]: 0 0 0 0 0 [ 164.240728][ T8804] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 164.301540][ T8804] Node 0 DMA32: 32*4kB (UE) 171*8kB (UM) 83*16kB (UME) 79*32kB (UME) 159*64kB (UME) 58*128kB (UME) 31*256kB (UME) 6*512kB (UM) 7*1024kB (UME) 1*2048kB (E) 341*4096kB (M) = 1439912kB [ 164.357863][ T8804] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 164.384752][ T8804] Node 1 Normal: 231*4kB (UE) 68*8kB (UME) 54*16kB (UME) 226*32kB (UME) 99*64kB (UME) 26*128kB (UME) 12*256kB (UME) 6*512kB (UM) 7*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3905308kB [ 164.430620][ T8804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.463666][ T8804] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.476864][ T8804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.488144][ T8804] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.520835][ T8804] 40941 total pagecache pages [ 164.527443][ T8804] 0 pages in swap cache [ 164.532705][ T8804] Free swap = 124996kB [ 164.543697][ T8804] Total swap = 124996kB [ 164.547896][ T8804] 2097051 pages RAM [ 164.551726][ T8804] 0 pages HighMem/MovableOnly [ 164.566566][ T8804] 427005 pages reserved [ 164.570852][ T8804] 0 pages cma reserved [ 164.844779][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 165.028909][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'. [ 165.117130][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 165.483327][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'. [ 165.704466][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 166.032536][ T8918] Bluetooth: MGMT ver 1.23 [ 166.385938][ T8931] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1119'. [ 166.667331][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'. [ 167.013649][ T8944] netlink: 'syz.1.1124': attribute type 7 has an invalid length. [ 167.022048][ T8944] netlink: 'syz.1.1124': attribute type 8 has an invalid length. [ 167.064129][ T8944] erspan0: entered promiscuous mode [ 167.071643][ T8944] batadv_slave_1: entered promiscuous mode [ 167.084329][ T8944] gretap0: entered promiscuous mode [ 167.304832][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.878412][ T8993] __nla_validate_parse: 4 callbacks suppressed [ 167.878426][ T8993] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1143'. [ 167.976139][ T8998] team0: No ports can be present during mode change [ 168.100577][ T9001] syzkaller1: entered promiscuous mode [ 168.113667][ T9001] syzkaller1: entered allmulticast mode [ 168.153829][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.160018][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 168.212317][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 168.831808][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 169.152627][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'. [ 169.171936][ T9068] netlink: 'syz.3.1171': attribute type 7 has an invalid length. [ 169.196558][ T9068] netlink: 'syz.3.1171': attribute type 8 has an invalid length. [ 169.217047][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 169.240137][ T9068] erspan0: entered promiscuous mode [ 169.266693][ T9068] batadv_slave_1: entered promiscuous mode [ 169.286563][ T9068] gretap0: entered promiscuous mode [ 169.301310][ T9068] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 169.320381][ T9068] Cannot create hsr debugfs directory [ 169.462179][ T9072] syzkaller0: entered promiscuous mode [ 169.468067][ T9072] syzkaller0: entered allmulticast mode [ 169.559316][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'. [ 170.995969][ T9093] syzkaller1: entered promiscuous mode [ 171.013860][ T9093] syzkaller1: entered allmulticast mode [ 171.385208][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 171.979223][ T9150] syzkaller1: entered promiscuous mode [ 172.010515][ T9150] syzkaller1: entered allmulticast mode [ 172.086967][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'. [ 172.331271][ T9154] vxcan1 speed is unknown, defaulting to 1000 [ 172.602658][ T9154] lo speed is unknown, defaulting to 1000 [ 172.646354][ T9175] IPVS: length: 255 != 24 [ 172.651708][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'. [ 172.758990][ T9154] IPVS: You probably need to specify IP address on multicast interface. [ 172.783742][ T9154] IPVS: Error connecting to the multicast addr [ 174.007632][ T9217] vxcan1 speed is unknown, defaulting to 1000 [ 174.292829][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 174.337496][ T9217] lo speed is unknown, defaulting to 1000 [ 174.446780][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'. [ 174.704515][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 174.771456][ T9217] IPVS: You probably need to specify IP address on multicast interface. [ 174.776520][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 174.781368][ T9217] IPVS: Error connecting to the multicast addr [ 175.235983][ T9273] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 175.887793][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 175.894553][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 175.991935][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 176.010625][ T9309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.035962][ T9309] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 176.784034][ T9340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1269'. [ 176.921065][ T9346] xt_hashlimit: max too large, truncated to 1048576 [ 176.955285][ T9346] No such timeout policy "syz1" [ 177.245657][ T9364] syzkaller0: entered promiscuous mode [ 177.251280][ T9364] syzkaller0: entered allmulticast mode [ 179.007951][ T9387] netlink: 'syz.0.1287': attribute type 7 has an invalid length. [ 179.017224][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 179.078533][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 179.079752][ T9394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1289'. [ 179.347197][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 179.647494][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 179.841212][ T9419] vxcan1 speed is unknown, defaulting to 1000 [ 179.863886][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 179.887939][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 180.178347][ T9419] lo speed is unknown, defaulting to 1000 [ 180.249504][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 180.503864][ T9456] tipc: Enabled bearer , priority 0 [ 180.595013][ T9458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1313'. [ 180.618263][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 180.618313][ T9456] syzkaller0: entered promiscuous mode [ 180.633175][ T9456] syzkaller0: entered allmulticast mode [ 180.640462][ T9456] tipc: Resetting bearer [ 180.703375][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 180.796790][ T9455] tipc: Resetting bearer [ 182.214096][ T9455] tipc: Disabling bearer [ 182.230198][ T9470] : renamed from ipvlan1 [ 182.396345][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 182.435018][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 182.991261][ T9504] tipc: Enabled bearer , priority 0 [ 183.031717][ T9504] syzkaller0: entered promiscuous mode [ 183.046732][ T9504] syzkaller0: entered allmulticast mode [ 183.065539][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 183.085686][ T9504] tipc: Resetting bearer [ 183.102071][ T9503] tipc: Resetting bearer [ 183.132318][ T9503] tipc: Disabling bearer [ 183.296248][ T9515] tipc: Started in network mode [ 183.301308][ T9515] tipc: Node identity 2d40517b90889848002e, cluster identity 4711 [ 183.370710][ T9521] netlink: 'syz.1.1337': attribute type 1 has an invalid length. [ 183.407089][ T9521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.432618][ T9521] bond2: (slave ip6gretap1): making interface the new active one [ 183.442836][ T9521] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 183.478729][ T9521] vlan2: entered promiscuous mode [ 183.489962][ T9521] bond2: entered promiscuous mode [ 183.495602][ T9521] ip6gretap1: entered promiscuous mode [ 183.501473][ T9521] vlan2: entered allmulticast mode [ 183.513835][ T9521] bond2: entered allmulticast mode [ 183.519196][ T9521] ip6gretap1: entered allmulticast mode [ 184.396715][ T9572] __nla_validate_parse: 6 callbacks suppressed [ 184.396735][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 184.617074][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 185.250568][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 185.430559][ T9624] tipc: Enabled bearer , priority 0 [ 185.439670][ T9624] syzkaller0: entered promiscuous mode [ 185.445291][ T9624] syzkaller0: entered allmulticast mode [ 185.465059][ T9624] tipc: Resetting bearer [ 185.473064][ T9623] tipc: Resetting bearer [ 185.491847][ T9623] tipc: Disabling bearer [ 185.659261][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 185.683971][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1379'. [ 185.717916][ T9627] tipc: Enabled bearer , priority 0 [ 185.829687][ T9627] syzkaller0: entered promiscuous mode [ 185.835587][ T9627] syzkaller0: entered allmulticast mode [ 185.842122][ T9627] tipc: Resetting bearer [ 185.886731][ T9626] tipc: Resetting bearer [ 185.964851][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1382'. [ 186.057435][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 186.319469][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.319504][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 186.325527][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 186.325589][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 186.325621][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 187.532151][ T9626] tipc: Disabling bearer [ 187.803373][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 187.942575][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1395'. [ 187.952108][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1395'. [ 187.991867][ T9677] IPv6: addrconf: prefix option has invalid lifetime [ 188.040393][ T9677] IPv6: addrconf: prefix option has invalid lifetime [ 188.307493][ T9693] tipc: Enabled bearer , priority 0 [ 188.392294][ T9693] syzkaller0: entered promiscuous mode [ 188.417776][ T9693] syzkaller0: entered allmulticast mode [ 188.437676][ T9693] tipc: Resetting bearer [ 188.542968][ T9686] tipc: Resetting bearer [ 190.224345][ T9686] tipc: Disabling bearer [ 190.381122][ T9727] __nla_validate_parse: 6 callbacks suppressed [ 190.381142][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'. [ 190.662686][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1422'. [ 190.923721][ T9753] syzkaller0: entered promiscuous mode [ 190.929248][ T9753] syzkaller0: entered allmulticast mode [ 190.942552][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 191.230846][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 191.602940][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 192.002311][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 192.828180][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 192.910642][ T9785] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1437'. [ 192.929648][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'. [ 193.201152][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'. [ 193.947219][ T9832] FAULT_INJECTION: forcing a failure. [ 193.947219][ T9832] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 193.983801][ T9832] CPU: 0 UID: 0 PID: 9832 Comm: syz.4.1458 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 193.994534][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.004624][ T9832] Call Trace: [ 194.007923][ T9832] [ 194.010875][ T9832] dump_stack_lvl+0x241/0x360 [ 194.015596][ T9832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.020825][ T9832] ? __pfx__printk+0x10/0x10 [ 194.025444][ T9832] ? __pfx_lock_release+0x10/0x10 [ 194.030513][ T9832] should_fail_ex+0x3b0/0x4e0 [ 194.035233][ T9832] _copy_from_user+0x2f/0xc0 [ 194.039860][ T9832] do_ipv6_setsockopt+0x2f5/0x3640 [ 194.045006][ T9832] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 194.050583][ T9832] ? __pfx_validate_chain+0x10/0x10 [ 194.055814][ T9832] ? aa_label_sk_perm+0x4f3/0x6c0 [ 194.060879][ T9832] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 194.066293][ T9832] ? __pfx___might_resched+0x10/0x10 [ 194.071609][ T9832] ? __lock_acquire+0x1397/0x2100 [ 194.076669][ T9832] ipv6_setsockopt+0x5d/0x170 [ 194.081376][ T9832] dccp_setsockopt+0x17c/0x12c0 [ 194.086256][ T9832] ? __pfx_dccp_setsockopt+0x10/0x10 [ 194.091573][ T9832] ? __pfx_lock_acquire+0x10/0x10 [ 194.096619][ T9832] ? aa_sock_opt_perm+0x79/0x120 [ 194.101584][ T9832] ? sock_common_setsockopt+0x37/0xc0 [ 194.106985][ T9832] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 194.112904][ T9832] do_sock_setsockopt+0x3af/0x720 [ 194.117963][ T9832] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 194.123532][ T9832] ? __fget_files+0x395/0x410 [ 194.128241][ T9832] ? __fget_files+0x2a/0x410 [ 194.132867][ T9832] __x64_sys_setsockopt+0x1ee/0x280 [ 194.138095][ T9832] do_syscall_64+0xf3/0x230 [ 194.142625][ T9832] ? clear_bhb_loop+0x35/0x90 [ 194.147321][ T9832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.153243][ T9832] RIP: 0033:0x7fde72985d29 [ 194.157681][ T9832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.169502][ T9842] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 194.177288][ T9832] RSP: 002b:00007fde737b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.177324][ T9832] RAX: ffffffffffffffda RBX: 00007fde72b75fa0 RCX: 00007fde72985d29 [ 194.177337][ T9832] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 194.177349][ T9832] RBP: 00007fde737b4090 R08: 00000000000003e8 R09: 0000000000000000 [ 194.177361][ T9832] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 194.177373][ T9832] R13: 0000000000000000 R14: 00007fde72b75fa0 R15: 00007fffc851bdd8 [ 194.177398][ T9832] [ 194.957548][ T9881] FAULT_INJECTION: forcing a failure. [ 194.957548][ T9881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.973156][ T9881] CPU: 1 UID: 0 PID: 9881 Comm: syz.4.1478 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 194.983877][ T9881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.993956][ T9881] Call Trace: [ 194.997256][ T9881] [ 195.000208][ T9881] dump_stack_lvl+0x241/0x360 [ 195.004914][ T9881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.010144][ T9881] ? __pfx__printk+0x10/0x10 [ 195.014771][ T9881] ? __pfx_lock_release+0x10/0x10 [ 195.019830][ T9881] should_fail_ex+0x3b0/0x4e0 [ 195.024546][ T9881] _copy_from_user+0x2f/0xc0 [ 195.029168][ T9881] copy_msghdr_from_user+0xae/0x680 [ 195.034403][ T9881] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.040234][ T9881] ? __fget_files+0x2a/0x410 [ 195.044850][ T9881] ? __fget_files+0x2a/0x410 [ 195.049454][ T9881] __sys_sendmsg+0x209/0x350 [ 195.054056][ T9881] ? __pfx_lock_release+0x10/0x10 [ 195.059087][ T9881] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.064203][ T9881] ? __pfx_vfs_write+0x10/0x10 [ 195.068978][ T9881] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.075303][ T9881] ? do_syscall_64+0x100/0x230 [ 195.080072][ T9881] ? do_syscall_64+0xb6/0x230 [ 195.084753][ T9881] do_syscall_64+0xf3/0x230 [ 195.089257][ T9881] ? clear_bhb_loop+0x35/0x90 [ 195.093934][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.099824][ T9881] RIP: 0033:0x7fde72985d29 [ 195.104234][ T9881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.123836][ T9881] RSP: 002b:00007fde737b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.132247][ T9881] RAX: ffffffffffffffda RBX: 00007fde72b75fa0 RCX: 00007fde72985d29 [ 195.140214][ T9881] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 195.148181][ T9881] RBP: 00007fde737b4090 R08: 0000000000000000 R09: 0000000000000000 [ 195.156152][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.164116][ T9881] R13: 0000000000000000 R14: 00007fde72b75fa0 R15: 00007fffc851bdd8 [ 195.172092][ T9881] [ 195.676809][ T9912] __nla_validate_parse: 7 callbacks suppressed [ 195.676831][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 195.824351][ T9918] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 195.832384][ T9918] netlink: 'syz.1.1496': attribute type 2 has an invalid length. [ 195.845398][ T9918] xt_l2tp: v2 doesn't support IP mode [ 195.915289][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 195.942927][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 196.485490][ T9947] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1507'. [ 196.665466][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 196.794435][ T9941] vxcan1 speed is unknown, defaulting to 1000 [ 197.027699][ T9968] FAULT_INJECTION: forcing a failure. [ 197.027699][ T9968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.073588][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.0.1515 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 197.084313][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.094385][ T9968] Call Trace: [ 197.097667][ T9968] [ 197.100598][ T9968] dump_stack_lvl+0x241/0x360 [ 197.105287][ T9968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.110484][ T9968] ? __pfx__printk+0x10/0x10 [ 197.115072][ T9968] ? process_measurement+0x1aea/0x1fb0 [ 197.120528][ T9968] ? __pfx_lock_release+0x10/0x10 [ 197.125553][ T9968] ? validate_chain+0x11e/0x5920 [ 197.130498][ T9968] should_fail_ex+0x3b0/0x4e0 [ 197.135190][ T9968] _copy_from_iter+0x1e9/0x1c20 [ 197.140049][ T9968] ? __pfx__copy_from_iter+0x10/0x10 [ 197.145342][ T9968] ? mark_lock+0x9a/0x360 [ 197.149682][ T9968] tun_get_user+0x43f/0x48a0 [ 197.154286][ T9968] ? __lock_acquire+0x1397/0x2100 [ 197.159312][ T9968] ? __pfx_tun_get_user+0x10/0x10 [ 197.164346][ T9968] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 197.169815][ T9968] ? tun_get+0x1e/0x2f0 [ 197.173969][ T9968] ? __pfx_lock_release+0x10/0x10 [ 197.178998][ T9968] ? tun_get+0x1e/0x2f0 [ 197.183151][ T9968] ? tun_get+0x27d/0x2f0 [ 197.187399][ T9968] tun_chr_write_iter+0x10d/0x1f0 [ 197.192440][ T9968] do_iter_readv_writev+0x600/0x880 [ 197.197644][ T9968] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 197.203370][ T9968] ? bpf_lsm_file_permission+0x9/0x10 [ 197.208742][ T9968] ? security_file_permission+0x74/0x280 [ 197.214381][ T9968] ? rw_verify_area+0x1c3/0x6f0 [ 197.219235][ T9968] vfs_writev+0x376/0xba0 [ 197.223571][ T9968] ? __pfx_lock_acquire+0x10/0x10 [ 197.228600][ T9968] ? __pfx_vfs_writev+0x10/0x10 [ 197.233506][ T9968] ? vfs_write+0x730/0xd30 [ 197.237937][ T9968] ? __fget_files+0x2a/0x410 [ 197.242528][ T9968] ? __fget_files+0x395/0x410 [ 197.247205][ T9968] ? __fget_files+0x2a/0x410 [ 197.251808][ T9968] __x64_sys_pwritev+0x1b7/0x2d0 [ 197.256745][ T9968] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 197.262197][ T9968] ? do_syscall_64+0x100/0x230 [ 197.266965][ T9968] ? do_syscall_64+0xb6/0x230 [ 197.271647][ T9968] do_syscall_64+0xf3/0x230 [ 197.276154][ T9968] ? clear_bhb_loop+0x35/0x90 [ 197.280835][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.286735][ T9968] RIP: 0033:0x7fab29d85d29 [ 197.291170][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.310857][ T9968] RSP: 002b:00007fab2ac29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 197.319270][ T9968] RAX: ffffffffffffffda RBX: 00007fab29f75fa0 RCX: 00007fab29d85d29 [ 197.327235][ T9968] RDX: 0000000000000001 RSI: 0000000020001240 RDI: 0000000000000003 [ 197.335476][ T9968] RBP: 00007fab2ac29090 R08: 0000000000000000 R09: 0000000000000000 [ 197.343464][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.351464][ T9968] R13: 0000000000000000 R14: 00007fab29f75fa0 R15: 00007ffc6803bf68 [ 197.359451][ T9968] [ 197.376083][ T9969] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 197.393569][ T9969] netlink: 'syz.3.1505': attribute type 2 has an invalid length. [ 197.452122][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1505'. [ 197.586645][ T9941] lo speed is unknown, defaulting to 1000 [ 197.586663][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 197.712474][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1523'. [ 198.672228][T10017] FAULT_INJECTION: forcing a failure. [ 198.672228][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.690556][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.2.1534 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 198.695668][T10018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1535'. [ 198.701343][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.701359][T10017] Call Trace: [ 198.723636][T10017] [ 198.726577][T10017] dump_stack_lvl+0x241/0x360 [ 198.731284][T10017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.736512][T10017] ? __pfx__printk+0x10/0x10 [ 198.741148][T10017] ? vfs_write+0x730/0xd30 [ 198.745594][T10017] should_fail_ex+0x3b0/0x4e0 [ 198.750305][T10017] _copy_from_user+0x2f/0xc0 [ 198.754926][T10017] move_addr_to_kernel+0x82/0x150 [ 198.759975][T10017] __sys_connect+0xb6/0x2d0 [ 198.764498][T10017] ? __fget_files+0x2a/0x410 [ 198.769119][T10017] ? __pfx___sys_connect+0x10/0x10 [ 198.774263][T10017] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.780612][T10017] ? do_syscall_64+0x100/0x230 [ 198.785406][T10017] __x64_sys_connect+0x7a/0x90 [ 198.790197][T10017] do_syscall_64+0xf3/0x230 [ 198.794727][T10017] ? clear_bhb_loop+0x35/0x90 [ 198.799424][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.805346][T10017] RIP: 0033:0x7fb153b85d29 [ 198.809779][T10017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.829410][T10017] RSP: 002b:00007fb154a01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 198.837860][T10017] RAX: ffffffffffffffda RBX: 00007fb153d75fa0 RCX: 00007fb153b85d29 [ 198.845864][T10017] RDX: 0000000000000058 RSI: 00000000200001c0 RDI: 0000000000000003 [ 198.853868][T10017] RBP: 00007fb154a01090 R08: 0000000000000000 R09: 0000000000000000 [ 198.861869][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.869871][T10017] R13: 0000000000000000 R14: 00007fb153d75fa0 R15: 00007ffda7711f68 [ 198.877888][T10017] [ 198.893219][T10020] FAULT_INJECTION: forcing a failure. [ 198.893219][T10020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.917911][T10020] CPU: 1 UID: 0 PID: 10020 Comm: syz.3.1536 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 198.928720][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.938798][T10020] Call Trace: [ 198.942089][T10020] [ 198.945037][T10020] dump_stack_lvl+0x241/0x360 [ 198.949746][T10020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.954972][T10020] ? __pfx__printk+0x10/0x10 [ 198.959591][T10020] ? __pfx_lock_release+0x10/0x10 [ 198.964645][T10020] should_fail_ex+0x3b0/0x4e0 [ 198.969350][T10020] _copy_from_user+0x2f/0xc0 [ 198.973963][T10020] copy_msghdr_from_user+0xae/0x680 [ 198.979192][T10020] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 198.985028][T10020] ? __fget_files+0x2a/0x410 [ 198.989646][T10020] ? __fget_files+0x2a/0x410 [ 198.994276][T10020] __sys_sendmsg+0x209/0x350 [ 198.998883][T10020] ? __pfx_lock_release+0x10/0x10 [ 199.003911][T10020] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.009026][T10020] ? __pfx_vfs_write+0x10/0x10 [ 199.013804][T10020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.020126][T10020] ? do_syscall_64+0x100/0x230 [ 199.024893][T10020] ? do_syscall_64+0xb6/0x230 [ 199.029571][T10020] do_syscall_64+0xf3/0x230 [ 199.034076][T10020] ? clear_bhb_loop+0x35/0x90 [ 199.038750][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.044641][T10020] RIP: 0033:0x7f6372385d29 [ 199.049053][T10020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.068653][T10020] RSP: 002b:00007f6373112038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.077072][T10020] RAX: ffffffffffffffda RBX: 00007f6372575fa0 RCX: 00007f6372385d29 [ 199.085039][T10020] RDX: 0000000000040000 RSI: 0000000020000a00 RDI: 0000000000000003 [ 199.093005][T10020] RBP: 00007f6373112090 R08: 0000000000000000 R09: 0000000000000000 [ 199.100970][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.108939][T10020] R13: 0000000000000000 R14: 00007f6372575fa0 R15: 00007ffd2ed32778 [ 199.116916][T10020] [ 199.505189][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'. [ 200.636293][T10081] Illegal XDP return value 3036139570 on prog (id 488) dev N/A, expect packet loss! [ 201.117499][T10104] __nla_validate_parse: 4 callbacks suppressed [ 201.117520][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 201.305710][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 201.335748][T10107] vxcan1 speed is unknown, defaulting to 1000 [ 201.415561][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.442752][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.466082][T10107] lo speed is unknown, defaulting to 1000 [ 202.261672][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 202.308639][T10147] FAULT_INJECTION: forcing a failure. [ 202.308639][T10147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.329373][T10147] CPU: 1 UID: 0 PID: 10147 Comm: syz.4.1590 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 202.340193][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.350302][T10147] Call Trace: [ 202.353605][T10147] [ 202.356558][T10147] dump_stack_lvl+0x241/0x360 [ 202.361269][T10147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.366496][T10147] ? __pfx__printk+0x10/0x10 [ 202.371118][T10147] ? __pfx_lock_release+0x10/0x10 [ 202.376170][T10147] ? rcu_is_watching+0x15/0xb0 [ 202.380964][T10147] should_fail_ex+0x3b0/0x4e0 [ 202.385672][T10147] _copy_from_iter+0x1e9/0x1c20 [ 202.390559][T10147] ? alloc_pages_mpol_noprof+0x417/0x680 [ 202.396223][T10147] ? __pfx__copy_from_iter+0x10/0x10 [ 202.401530][T10147] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 202.407540][T10147] ? alloc_pages_noprof+0xef/0x170 [ 202.412679][T10147] ? page_copy_sane+0x46/0x260 [ 202.417475][T10147] copy_page_from_iter+0x7a/0x100 [ 202.422532][T10147] tun_get_user+0x2035/0x48a0 [ 202.427244][T10147] ? tun_get_user+0x875/0x48a0 [ 202.432051][T10147] ? __pfx_tun_get_user+0x10/0x10 [ 202.437122][T10147] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 202.442607][T10147] ? tun_get+0x1e/0x2f0 [ 202.446790][T10147] ? __pfx_lock_release+0x10/0x10 [ 202.451849][T10147] ? tun_get+0x1e/0x2f0 [ 202.456024][T10147] ? tun_get+0x27d/0x2f0 [ 202.460289][T10147] tun_chr_write_iter+0x10d/0x1f0 [ 202.465342][T10147] vfs_write+0xaeb/0xd30 [ 202.469616][T10147] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 202.475190][T10147] ? __pfx_vfs_write+0x10/0x10 [ 202.479976][T10147] ? __fget_files+0x2a/0x410 [ 202.484587][T10147] ? __fget_files+0x2a/0x410 [ 202.489218][T10147] ksys_write+0x18f/0x2b0 [ 202.493575][T10147] ? __pfx_ksys_write+0x10/0x10 [ 202.498448][T10147] ? do_syscall_64+0x100/0x230 [ 202.503249][T10147] ? do_syscall_64+0xb6/0x230 [ 202.507953][T10147] do_syscall_64+0xf3/0x230 [ 202.512568][T10147] ? clear_bhb_loop+0x35/0x90 [ 202.517391][T10147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.523320][T10147] RIP: 0033:0x7fde729847df [ 202.527758][T10147] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 202.547403][T10147] RSP: 002b:00007fde737b4000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 202.555849][T10147] RAX: ffffffffffffffda RBX: 00007fde72b75fa0 RCX: 00007fde729847df [ 202.563844][T10147] RDX: 000000000000004a RSI: 0000000020000640 RDI: 00000000000000c8 [ 202.571838][T10147] RBP: 00007fde737b4090 R08: 0000000000000000 R09: 0000000000000000 [ 202.579278][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 202.579809][T10147] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 202.596651][T10147] R13: 0000000000000001 R14: 00007fde72b75fa0 R15: 00007fffc851bdd8 [ 202.604660][T10147] [ 202.690582][T10159] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1596'. [ 202.789962][T10164] FAULT_INJECTION: forcing a failure. [ 202.789962][T10164] name failslab, interval 1, probability 0, space 0, times 1 [ 202.810373][T10164] CPU: 1 UID: 0 PID: 10164 Comm: syz.4.1598 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 202.821192][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.831277][T10164] Call Trace: [ 202.834575][T10164] [ 202.837521][T10164] dump_stack_lvl+0x241/0x360 [ 202.842232][T10164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.847455][T10164] ? __pfx__printk+0x10/0x10 [ 202.852076][T10164] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 202.857999][T10164] ? __pfx___might_resched+0x10/0x10 [ 202.863314][T10164] should_fail_ex+0x3b0/0x4e0 [ 202.868033][T10164] should_failslab+0xac/0x100 [ 202.872739][T10164] ? __get_vm_area_node+0x132/0x2d0 [ 202.877958][T10164] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 202.883688][T10164] __get_vm_area_node+0x132/0x2d0 [ 202.888715][T10164] __vmalloc_node_range_noprof+0x344/0x1380 [ 202.894607][T10164] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 202.900147][T10164] ? mark_lock+0x9a/0x360 [ 202.904501][T10164] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.910844][T10164] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 202.916395][T10164] __vmalloc_noprof+0x79/0x90 [ 202.921080][T10164] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 202.926628][T10164] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 202.932000][T10164] ? bpf_prog_alloc+0x28/0x1b0 [ 202.936764][T10164] bpf_prog_alloc+0x3a/0x1b0 [ 202.941349][T10164] bpf_prog_load+0x7f7/0x20f0 [ 202.946032][T10164] ? __pfx_bpf_prog_load+0x10/0x10 [ 202.951136][T10164] ? __pfx___might_resched+0x10/0x10 [ 202.956425][T10164] ? __might_fault+0xc6/0x120 [ 202.961108][T10164] __sys_bpf+0x4ee/0x810 [ 202.965356][T10164] ? __pfx___sys_bpf+0x10/0x10 [ 202.970129][T10164] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.976106][T10164] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.982429][T10164] ? do_syscall_64+0x100/0x230 [ 202.987194][T10164] __x64_sys_bpf+0x7c/0x90 [ 202.991614][T10164] do_syscall_64+0xf3/0x230 [ 202.996143][T10164] ? clear_bhb_loop+0x35/0x90 [ 203.000855][T10164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.006770][T10164] RIP: 0033:0x7fde72985d29 [ 203.011189][T10164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.030809][T10164] RSP: 002b:00007fde737b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.039231][T10164] RAX: ffffffffffffffda RBX: 00007fde72b75fa0 RCX: 00007fde72985d29 [ 203.047204][T10164] RDX: 0000000000000023 RSI: 00000000202a0fb8 RDI: 0000000000000005 [ 203.055174][T10164] RBP: 00007fde737b4090 R08: 0000000000000000 R09: 0000000000000000 [ 203.063163][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.071151][T10164] R13: 0000000000000001 R14: 00007fde72b75fa0 R15: 00007fffc851bdd8 [ 203.079140][T10164] [ 203.131606][T10164] syz.4.1598: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 203.189648][T10164] CPU: 0 UID: 0 PID: 10164 Comm: syz.4.1598 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 203.200472][T10164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.210555][T10164] Call Trace: [ 203.213839][T10164] [ 203.216796][T10164] dump_stack_lvl+0x241/0x360 [ 203.221508][T10164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.226733][T10164] ? __pfx__printk+0x10/0x10 [ 203.231358][T10164] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 203.237820][T10164] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 203.244364][T10164] warn_alloc+0x278/0x410 [ 203.248735][T10164] ? __pfx_warn_alloc+0x10/0x10 [ 203.253606][T10164] ? __kasan_kmalloc+0x23/0xb0 [ 203.258392][T10164] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 203.264403][T10164] ? __get_vm_area_node+0x280/0x2d0 [ 203.265671][T10177] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 203.269616][T10164] __vmalloc_node_range_noprof+0x369/0x1380 [ 203.269652][T10164] ? mark_lock+0x9a/0x360 [ 203.288882][T10164] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.295251][T10164] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 203.300824][T10164] __vmalloc_noprof+0x79/0x90 [ 203.305527][T10164] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 203.311101][T10164] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 203.316511][T10164] ? bpf_prog_alloc+0x28/0x1b0 [ 203.321304][T10164] bpf_prog_alloc+0x3a/0x1b0 [ 203.325919][T10164] bpf_prog_load+0x7f7/0x20f0 [ 203.330638][T10164] ? __pfx_bpf_prog_load+0x10/0x10 [ 203.335786][T10164] ? __pfx___might_resched+0x10/0x10 [ 203.341118][T10164] ? __might_fault+0xc6/0x120 [ 203.345830][T10164] __sys_bpf+0x4ee/0x810 [ 203.350109][T10164] ? __pfx___sys_bpf+0x10/0x10 [ 203.354919][T10164] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 203.360949][T10164] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.367308][T10164] ? do_syscall_64+0x100/0x230 [ 203.372115][T10164] __x64_sys_bpf+0x7c/0x90 [ 203.376577][T10164] do_syscall_64+0xf3/0x230 [ 203.381116][T10164] ? clear_bhb_loop+0x35/0x90 [ 203.385838][T10164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.391760][T10164] RIP: 0033:0x7fde72985d29 [ 203.396207][T10164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.398887][T10181] FAULT_INJECTION: forcing a failure. [ 203.398887][T10181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.415820][T10164] RSP: 002b:00007fde737b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.415852][T10164] RAX: ffffffffffffffda RBX: 00007fde72b75fa0 RCX: 00007fde72985d29 [ 203.415866][T10164] RDX: 0000000000000023 RSI: 00000000202a0fb8 RDI: 0000000000000005 [ 203.415885][T10164] RBP: 00007fde737b4090 R08: 0000000000000000 R09: 0000000000000000 [ 203.415897][T10164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.415908][T10164] R13: 0000000000000001 R14: 00007fde72b75fa0 R15: 00007fffc851bdd8 [ 203.415934][T10164] [ 203.462712][T10164] Mem-Info: [ 203.485685][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.1.1606 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 203.496479][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.506565][T10181] Call Trace: [ 203.509884][T10181] [ 203.512885][T10181] dump_stack_lvl+0x241/0x360 [ 203.517600][T10181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.522830][T10181] ? __pfx__printk+0x10/0x10 [ 203.527458][T10181] ? __pfx_lock_release+0x10/0x10 [ 203.532527][T10181] should_fail_ex+0x3b0/0x4e0 [ 203.537252][T10181] _copy_from_user+0x2f/0xc0 [ 203.541889][T10181] do_ip6t_set_ctl+0x73a/0x1270 [ 203.543925][T10164] active_anon:3827 inactive_anon:0 isolated_anon:0 [ 203.543925][T10164] active_file:1562 inactive_file:38304 isolated_file:0 [ 203.543925][T10164] unevictable:768 dirty:316 writeback:0 [ 203.543925][T10164] slab_reclaimable:10265 slab_unreclaimable:105371 [ 203.543925][T10164] mapped:28559 shmem:1407 pagetables:695 [ 203.543925][T10164] sec_pagetables:0 bounce:0 [ 203.543925][T10164] kernel_misc_reclaimable:0 [ 203.543925][T10164] free:1340669 free_pcp:629 free_cma:0 [ 203.546755][T10181] ? __pfx___mutex_trylock_common+0x10/0x10 [ 203.546787][T10181] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 203.546807][T10181] ? __pfx_lock_release+0x10/0x10 [ 203.546827][T10181] ? rcu_is_watching+0x15/0xb0 [ 203.612936][T10181] ? trace_contention_end+0x3c/0x120 [ 203.618277][T10181] ? __mutex_unlock_slowpath+0x21e/0x790 [ 203.623946][T10181] ? __pfx___mutex_lock+0x10/0x10 [ 203.629004][T10181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.635023][T10181] ? __lock_acquire+0x1397/0x2100 [ 203.640085][T10181] nf_setsockopt+0x295/0x2c0 [ 203.641505][T10164] Node 0 active_anon:15208kB inactive_anon:0kB active_file:6248kB inactive_file:153140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114236kB dirty:1264kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11004kB pagetables:2780kB sec_pagetables:0kB all_unreclaimable? no [ 203.644700][T10181] dccp_setsockopt+0x17c/0x12c0 [ 203.644733][T10181] ? __pfx_dccp_setsockopt+0x10/0x10 [ 203.644756][T10181] ? __pfx_lock_acquire+0x10/0x10 [ 203.644775][T10181] ? aa_sock_opt_perm+0x79/0x120 [ 203.644795][T10181] ? sock_common_setsockopt+0x37/0xc0 [ 203.684276][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1608'. [ 203.687186][T10181] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 203.692403][T10164] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 203.697107][T10181] do_sock_setsockopt+0x3af/0x720 [ 203.697137][T10181] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 203.697161][T10181] ? __fget_files+0x395/0x410 [ 203.697183][T10181] ? __fget_files+0x2a/0x410 [ 203.697210][T10181] __x64_sys_setsockopt+0x1ee/0x280 [ 203.697234][T10181] do_syscall_64+0xf3/0x230 [ 203.697259][T10181] ? clear_bhb_loop+0x35/0x90 [ 203.697280][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.697304][T10181] RIP: 0033:0x7f0fa9985d29 [ 203.697323][T10181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.697337][T10181] RSP: 002b:00007f0faa7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.697359][T10181] RAX: ffffffffffffffda RBX: 00007f0fa9b75fa0 RCX: 00007f0fa9985d29 [ 203.697373][T10181] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 203.697385][T10181] RBP: 00007f0faa7f5090 R08: 00000000000003e8 R09: 0000000000000000 [ 203.697398][T10181] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 203.697410][T10181] R13: 0000000000000000 R14: 00007f0fa9b75fa0 R15: 00007ffe50a1d898 [ 203.697435][T10181] [ 203.876807][T10164] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.910656][T10164] lowmem_reserve[]: 0 2465 2466 0 0 [ 203.916179][T10164] Node 0 DMA32 free:1441848kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:15068kB inactive_anon:0kB active_file:6248kB inactive_file:152312kB unevictable:1536kB writepending:1264kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:2364kB local_pcp:1148kB free_cma:0kB [ 203.951891][T10164] lowmem_reserve[]: 0 0 0 0 0 [ 203.956733][T10164] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 203.989004][T10164] lowmem_reserve[]: 0 0 0 0 0 [ 203.993933][T10164] Node 1 Normal free:3905372kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.024153][T10164] lowmem_reserve[]: 0 0 0 0 0 [ 204.028758][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 204.029012][T10164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.052907][T10164] Node 0 DMA32: 166*4kB (UME) 180*8kB (UM) 87*16kB (M) 861*32kB (UM) 195*64kB (UME) 54*128kB (UME) 14*256kB (UME) 0*512kB 3*1024kB (M) 2*2048kB (UE) 337*4096kB (UM) = 1441544kB [ 204.074920][T10164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 204.086875][T10164] Node 1 Normal: 231*4kB (UE) 68*8kB (UME) 54*16kB (UME) 226*32kB (UME) 98*64kB (UME) 27*128kB (UME) 12*256kB (UME) 6*512kB (UM) 7*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3905372kB [ 204.122021][T10164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.131744][T10164] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.141787][T10164] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.152039][T10164] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.161911][T10164] 41279 total pagecache pages [ 204.167343][T10164] 0 pages in swap cache [ 204.171526][T10164] Free swap = 124996kB [ 204.175816][T10164] Total swap = 124996kB [ 204.179984][T10164] 2097051 pages RAM [ 204.185309][T10164] 0 pages HighMem/MovableOnly [ 204.190031][T10164] 427005 pages reserved [ 204.195938][T10164] 0 pages cma reserved [ 204.282060][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 204.373315][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1615'. [ 204.577089][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1621'. [ 204.714373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.720395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.778503][T10225] FAULT_INJECTION: forcing a failure. [ 204.778503][T10225] name failslab, interval 1, probability 0, space 0, times 0 [ 204.794937][T10225] CPU: 1 UID: 0 PID: 10225 Comm: syz.4.1627 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 204.805745][T10225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 204.815825][T10225] Call Trace: [ 204.819113][T10225] [ 204.822055][T10225] dump_stack_lvl+0x241/0x360 [ 204.826744][T10225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.831940][T10225] ? __pfx__printk+0x10/0x10 [ 204.836541][T10225] ? fs_reclaim_acquire+0x93/0x130 [ 204.841683][T10225] ? __pfx___might_resched+0x10/0x10 [ 204.846981][T10225] ? dynamic_dname+0x141/0x1b0 [ 204.851769][T10225] should_fail_ex+0x3b0/0x4e0 [ 204.856460][T10225] should_failslab+0xac/0x100 [ 204.861147][T10225] __kmalloc_noprof+0xdd/0x4c0 [ 204.865932][T10225] ? tomoyo_encode+0x26f/0x540 [ 204.870713][T10225] tomoyo_encode+0x26f/0x540 [ 204.875324][T10225] ? __pfx_sockfs_dname+0x10/0x10 [ 204.880370][T10225] tomoyo_realpath_from_path+0x59e/0x5e0 [ 204.886034][T10225] tomoyo_path_number_perm+0x236/0x860 [ 204.891566][T10225] ? __lock_acquire+0x1397/0x2100 [ 204.896600][T10225] ? tomoyo_path_number_perm+0x206/0x860 [ 204.902269][T10225] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.908319][T10225] ? __fget_files+0x2a/0x410 [ 204.912939][T10225] ? __fget_files+0x2a/0x410 [ 204.917549][T10225] security_file_ioctl+0xc6/0x2a0 [ 204.922588][T10225] __se_sys_ioctl+0x46/0x170 [ 204.927180][T10225] do_syscall_64+0xf3/0x230 [ 204.931859][T10225] ? clear_bhb_loop+0x35/0x90 [ 204.936534][T10225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.942429][T10225] RIP: 0033:0x7fde72985d29 [ 204.946842][T10225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.966533][T10225] RSP: 002b:00007fde737b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.974947][T10225] RAX: ffffffffffffffda RBX: 00007fde72b75fa0 RCX: 00007fde72985d29 [ 204.982939][T10225] RDX: 00000000200002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 204.990908][T10225] RBP: 00007fde737b4090 R08: 0000000000000000 R09: 0000000000000000 [ 204.998877][T10225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.006845][T10225] R13: 0000000000000000 R14: 00007fde72b75fa0 R15: 00007fffc851bdd8 [ 205.014846][T10225] [ 205.033768][T10225] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.230043][T10237] FAULT_INJECTION: forcing a failure. [ 205.230043][T10237] name failslab, interval 1, probability 0, space 0, times 0 [ 205.249877][T10237] CPU: 1 UID: 0 PID: 10237 Comm: syz.2.1633 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 205.260700][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.270783][T10237] Call Trace: [ 205.274089][T10237] [ 205.277054][T10237] dump_stack_lvl+0x241/0x360 [ 205.281765][T10237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.286993][T10237] ? __pfx__printk+0x10/0x10 [ 205.291616][T10237] ? fs_reclaim_acquire+0x93/0x130 [ 205.296750][T10237] ? __pfx___might_resched+0x10/0x10 [ 205.302066][T10237] should_fail_ex+0x3b0/0x4e0 [ 205.306783][T10237] should_failslab+0xac/0x100 [ 205.311492][T10237] __kmalloc_noprof+0xdd/0x4c0 [ 205.316290][T10237] ? tomoyo_encode+0x26f/0x540 [ 205.321103][T10237] tomoyo_encode+0x26f/0x540 [ 205.325739][T10237] tomoyo_realpath_from_path+0x59e/0x5e0 [ 205.331428][T10237] tomoyo_path_number_perm+0x236/0x860 [ 205.336928][T10237] ? __lock_acquire+0x1397/0x2100 [ 205.341995][T10237] ? tomoyo_path_number_perm+0x206/0x860 [ 205.347725][T10237] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 205.353842][T10237] ? __fget_files+0x2a/0x410 [ 205.358474][T10237] ? __fget_files+0x2a/0x410 [ 205.363103][T10237] security_file_ioctl+0xc6/0x2a0 [ 205.368160][T10237] __se_sys_ioctl+0x46/0x170 [ 205.372774][T10237] do_syscall_64+0xf3/0x230 [ 205.377310][T10237] ? clear_bhb_loop+0x35/0x90 [ 205.382023][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.387949][T10237] RIP: 0033:0x7fb153b85d29 [ 205.392387][T10237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.412024][T10237] RSP: 002b:00007fb154a01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.420473][T10237] RAX: ffffffffffffffda RBX: 00007fb153d75fa0 RCX: 00007fb153b85d29 [ 205.428483][T10237] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 205.436483][T10237] RBP: 00007fb154a01090 R08: 0000000000000000 R09: 0000000000000000 [ 205.444480][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.452501][T10237] R13: 0000000000000000 R14: 00007fb153d75fa0 R15: 00007ffda7711f68 [ 205.460514][T10237] [ 205.520015][T10249] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 205.529140][T10250] FAULT_INJECTION: forcing a failure. [ 205.529140][T10250] name failslab, interval 1, probability 0, space 0, times 0 [ 205.530269][T10247] FAULT_INJECTION: forcing a failure. [ 205.530269][T10247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.557374][T10237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.557922][T10250] CPU: 0 UID: 0 PID: 10250 Comm: syz.3.1636 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 205.574836][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.584921][T10250] Call Trace: [ 205.588225][T10250] [ 205.591177][T10250] dump_stack_lvl+0x241/0x360 [ 205.595885][T10250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.601111][T10250] ? __pfx__printk+0x10/0x10 [ 205.605733][T10250] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 205.611728][T10250] ? __pfx___might_resched+0x10/0x10 [ 205.617024][T10250] should_fail_ex+0x3b0/0x4e0 [ 205.621715][T10250] should_failslab+0xac/0x100 [ 205.626402][T10250] kmem_cache_alloc_node_noprof+0x77/0x380 [ 205.632214][T10250] ? __alloc_skb+0x1c3/0x440 [ 205.636806][T10250] __alloc_skb+0x1c3/0x440 [ 205.641227][T10250] ? __pfx___alloc_skb+0x10/0x10 [ 205.646161][T10250] ? netlink_autobind+0xd6/0x2f0 [ 205.651096][T10250] ? netlink_autobind+0x2b0/0x2f0 [ 205.656124][T10250] netlink_sendmsg+0x638/0xcb0 [ 205.660893][T10250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.666176][T10250] ? aa_sock_msg_perm+0x91/0x160 [ 205.671109][T10250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.676404][T10250] __sock_sendmsg+0x221/0x270 [ 205.681084][T10250] ____sys_sendmsg+0x52a/0x7e0 [ 205.685852][T10250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.691131][T10250] ? __fget_files+0x2a/0x410 [ 205.695721][T10250] ? __fget_files+0x2a/0x410 [ 205.700318][T10250] __sys_sendmsg+0x269/0x350 [ 205.704996][T10250] ? __pfx_lock_release+0x10/0x10 [ 205.710021][T10250] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.715138][T10250] ? __pfx_vfs_write+0x10/0x10 [ 205.719911][T10250] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.726232][T10250] ? do_syscall_64+0x100/0x230 [ 205.731008][T10250] ? do_syscall_64+0xb6/0x230 [ 205.735689][T10250] do_syscall_64+0xf3/0x230 [ 205.740194][T10250] ? clear_bhb_loop+0x35/0x90 [ 205.744867][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.750764][T10250] RIP: 0033:0x7f6372385d29 [ 205.755175][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.774801][T10250] RSP: 002b:00007f6373112038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.783209][T10250] RAX: ffffffffffffffda RBX: 00007f6372575fa0 RCX: 00007f6372385d29 [ 205.791177][T10250] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000003 [ 205.799142][T10250] RBP: 00007f6373112090 R08: 0000000000000000 R09: 0000000000000000 [ 205.807109][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.815071][T10250] R13: 0000000000000000 R14: 00007f6372575fa0 R15: 00007ffd2ed32778 [ 205.823044][T10250] [ 205.854100][T10247] CPU: 0 UID: 0 PID: 10247 Comm: syz.0.1639 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 205.864913][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.874971][T10247] Call Trace: [ 205.878247][T10247] [ 205.881173][T10247] dump_stack_lvl+0x241/0x360 [ 205.885889][T10247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.891092][T10247] ? __pfx__printk+0x10/0x10 [ 205.895683][T10247] ? snprintf+0xda/0x120 [ 205.899922][T10247] should_fail_ex+0x3b0/0x4e0 [ 205.904605][T10247] _copy_to_user+0x31/0xb0 [ 205.909022][T10247] simple_read_from_buffer+0xca/0x150 [ 205.914394][T10247] proc_fail_nth_read+0x1e9/0x250 [ 205.919420][T10247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.924965][T10247] ? rw_verify_area+0x55e/0x6f0 [ 205.929816][T10247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.935360][T10247] vfs_read+0x1fc/0xb70 [ 205.939516][T10247] ? __pfx___mutex_lock+0x10/0x10 [ 205.944539][T10247] ? __pfx_vfs_read+0x10/0x10 [ 205.949211][T10247] ? __fget_files+0x2a/0x410 [ 205.953797][T10247] ? __fget_files+0x395/0x410 [ 205.958469][T10247] ? __fget_files+0x2a/0x410 [ 205.963061][T10247] ksys_read+0x18f/0x2b0 [ 205.967297][T10247] ? __pfx_ksys_read+0x10/0x10 [ 205.972054][T10247] ? do_syscall_64+0x100/0x230 [ 205.976855][T10247] ? do_syscall_64+0xb6/0x230 [ 205.981531][T10247] do_syscall_64+0xf3/0x230 [ 205.986033][T10247] ? clear_bhb_loop+0x35/0x90 [ 205.990702][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.996596][T10247] RIP: 0033:0x7fab29d8473c [ 206.001016][T10247] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.020792][T10247] RSP: 002b:00007fab2ac29030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.029204][T10247] RAX: ffffffffffffffda RBX: 00007fab29f75fa0 RCX: 00007fab29d8473c [ 206.037172][T10247] RDX: 000000000000000f RSI: 00007fab2ac290a0 RDI: 0000000000000004 [ 206.045173][T10247] RBP: 00007fab2ac29090 R08: 0000000000000000 R09: 0000000000000000 [ 206.053135][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.061099][T10247] R13: 0000000000000000 R14: 00007fab29f75fa0 R15: 00007ffc6803bf68 [ 206.069076][T10247] [ 206.489407][T10278] __nla_validate_parse: 4 callbacks suppressed [ 206.489426][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 206.760873][T10286] FAULT_INJECTION: forcing a failure. [ 206.760873][T10286] name failslab, interval 1, probability 0, space 0, times 0 [ 206.779381][T10286] CPU: 0 UID: 0 PID: 10286 Comm: syz.3.1653 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 206.790195][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.800278][T10286] Call Trace: [ 206.803581][T10286] [ 206.806535][T10286] dump_stack_lvl+0x241/0x360 [ 206.811245][T10286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.816466][T10286] ? __pfx__printk+0x10/0x10 [ 206.821083][T10286] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 206.827092][T10286] ? __pfx___might_resched+0x10/0x10 [ 206.832401][T10286] should_fail_ex+0x3b0/0x4e0 [ 206.837111][T10286] should_failslab+0xac/0x100 [ 206.841816][T10286] kmem_cache_alloc_node_noprof+0x77/0x380 [ 206.847651][T10286] ? __alloc_skb+0x1c3/0x440 [ 206.852272][T10286] __alloc_skb+0x1c3/0x440 [ 206.856720][T10286] ? __pfx___alloc_skb+0x10/0x10 [ 206.861696][T10286] ? netlink_autobind+0xd6/0x2f0 [ 206.866663][T10286] ? netlink_autobind+0x2b0/0x2f0 [ 206.871714][T10286] netlink_sendmsg+0x638/0xcb0 [ 206.876508][T10286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.881826][T10286] ? aa_sock_msg_perm+0x91/0x160 [ 206.886788][T10286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.892095][T10286] __sock_sendmsg+0x221/0x270 [ 206.896810][T10286] ____sys_sendmsg+0x52a/0x7e0 [ 206.901603][T10286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.906908][T10286] ? __fget_files+0x2a/0x410 [ 206.911878][T10286] ? __fget_files+0x2a/0x410 [ 206.916502][T10286] __sys_sendmsg+0x269/0x350 [ 206.921107][T10286] ? __pfx_lock_release+0x10/0x10 [ 206.926139][T10286] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.931367][T10286] ? __pfx_vfs_write+0x10/0x10 [ 206.936156][T10286] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.942483][T10286] ? do_syscall_64+0x100/0x230 [ 206.947249][T10286] ? do_syscall_64+0xb6/0x230 [ 206.951924][T10286] do_syscall_64+0xf3/0x230 [ 206.956433][T10286] ? clear_bhb_loop+0x35/0x90 [ 206.961114][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.967007][T10286] RIP: 0033:0x7f6372385d29 [ 206.971418][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.991018][T10286] RSP: 002b:00007f6373112038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.999429][T10286] RAX: ffffffffffffffda RBX: 00007f6372575fa0 RCX: 00007f6372385d29 [ 207.007393][T10286] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 207.015357][T10286] RBP: 00007f6373112090 R08: 0000000000000000 R09: 0000000000000000 [ 207.023328][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.031292][T10286] R13: 0000000000000000 R14: 00007f6372575fa0 R15: 00007ffd2ed32778 [ 207.039270][T10286] [ 207.116523][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 207.166267][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1657'. [ 207.329295][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 207.474572][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1665'. [ 207.518026][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1665'. [ 207.544009][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1665'. [ 207.564993][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1665'. [ 207.580746][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1665'. [ 207.590473][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1665'. [ 207.807135][T10333] FAULT_INJECTION: forcing a failure. [ 207.807135][T10333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.821296][T10333] CPU: 1 UID: 0 PID: 10333 Comm: syz.0.1671 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 207.832108][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 207.842199][T10333] Call Trace: [ 207.845499][T10333] [ 207.848450][T10333] dump_stack_lvl+0x241/0x360 [ 207.853165][T10333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.858388][T10333] ? __pfx__printk+0x10/0x10 [ 207.862999][T10333] ? __pfx_lock_release+0x10/0x10 [ 207.868036][T10333] should_fail_ex+0x3b0/0x4e0 [ 207.872724][T10333] _copy_from_user+0x2f/0xc0 [ 207.877315][T10333] copy_msghdr_from_user+0xae/0x680 [ 207.882529][T10333] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 207.888345][T10333] ? __fget_files+0x2a/0x410 [ 207.892939][T10333] ? __fget_files+0x2a/0x410 [ 207.897538][T10333] __sys_sendmsg+0x209/0x350 [ 207.902129][T10333] ? __pfx_lock_release+0x10/0x10 [ 207.907155][T10333] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.912283][T10333] ? __pfx_vfs_write+0x10/0x10 [ 207.917059][T10333] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.923408][T10333] ? do_syscall_64+0x100/0x230 [ 207.928184][T10333] ? do_syscall_64+0xb6/0x230 [ 207.932865][T10333] do_syscall_64+0xf3/0x230 [ 207.937378][T10333] ? clear_bhb_loop+0x35/0x90 [ 207.942047][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.948026][T10333] RIP: 0033:0x7fab29d85d29 [ 207.952435][T10333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.972036][T10333] RSP: 002b:00007fab2ac29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.980453][T10333] RAX: ffffffffffffffda RBX: 00007fab29f75fa0 RCX: 00007fab29d85d29 [ 207.988433][T10333] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000003 [ 207.996403][T10333] RBP: 00007fab2ac29090 R08: 0000000000000000 R09: 0000000000000000 [ 208.004371][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.012338][T10333] R13: 0000000000000000 R14: 00007fab29f75fa0 R15: 00007ffc6803bf68 [ 208.020319][T10333] [ 208.142922][T10342] FAULT_INJECTION: forcing a failure. [ 208.142922][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 208.164246][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.4.1675 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 208.175060][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.185143][T10342] Call Trace: [ 208.188448][T10342] [ 208.191404][T10342] dump_stack_lvl+0x241/0x360 [ 208.196118][T10342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.201339][T10342] ? __pfx__printk+0x10/0x10 [ 208.205942][T10342] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 208.212041][T10342] ? __pfx___might_resched+0x10/0x10 [ 208.217354][T10342] should_fail_ex+0x3b0/0x4e0 [ 208.222068][T10342] should_failslab+0xac/0x100 [ 208.226856][T10342] ? sock_alloc_inode+0x28/0xc0 [ 208.231723][T10342] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 208.237470][T10342] sock_alloc_inode+0x28/0xc0 [ 208.242174][T10342] ? __pfx_sock_alloc_inode+0x10/0x10 [ 208.247588][T10342] alloc_inode+0x65/0x1a0 [ 208.251949][T10342] __sock_create+0x127/0xa30 [ 208.256581][T10342] mptcp_subflow_create_socket+0x132/0xdf0 [ 208.262418][T10342] ? mark_lock+0x9a/0x360 [ 208.266764][T10342] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 208.273087][T10342] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.279425][T10342] __mptcp_nmpc_sk+0x178/0x800 [ 208.284210][T10342] ? __local_bh_enable_ip+0x168/0x200 [ 208.289586][T10342] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 208.294889][T10342] mptcp_bind+0xa5/0x1c0 [ 208.299128][T10342] __sys_bind+0x1e4/0x290 [ 208.303458][T10342] ? __pfx___sys_bind+0x10/0x10 [ 208.308327][T10342] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.314649][T10342] ? do_syscall_64+0x100/0x230 [ 208.319409][T10342] __x64_sys_bind+0x7a/0x90 [ 208.323906][T10342] do_syscall_64+0xf3/0x230 [ 208.328406][T10342] ? clear_bhb_loop+0x35/0x90 [ 208.333075][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.338982][T10342] RIP: 0033:0x7fde72985d29 [ 208.343432][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.363064][T10342] RSP: 002b:00007fde737b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 208.371515][T10342] RAX: ffffffffffffffda RBX: 00007fde72b75fa0 RCX: 00007fde72985d29 [ 208.379578][T10342] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 208.387648][T10342] RBP: 00007fde737b4090 R08: 0000000000000000 R09: 0000000000000000 [ 208.395619][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.403597][T10342] R13: 0000000000000000 R14: 00007fde72b75fa0 R15: 00007fffc851bdd8 [ 208.411587][T10342] [ 208.426015][T10342] socket: no more sockets [ 208.717868][T10361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.736812][T10363] FAULT_INJECTION: forcing a failure. [ 208.736812][T10363] name failslab, interval 1, probability 0, space 0, times 0 [ 208.750212][T10361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.791801][T10363] CPU: 1 UID: 0 PID: 10363 Comm: syz.0.1682 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 208.802713][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.812801][T10363] Call Trace: [ 208.816094][T10363] [ 208.819038][T10363] dump_stack_lvl+0x241/0x360 [ 208.823745][T10363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.828971][T10363] ? __pfx__printk+0x10/0x10 [ 208.833581][T10363] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 208.839760][T10363] ? __pfx___might_resched+0x10/0x10 [ 208.845063][T10363] should_fail_ex+0x3b0/0x4e0 [ 208.849761][T10363] should_failslab+0xac/0x100 [ 208.854442][T10363] kmem_cache_alloc_node_noprof+0x77/0x380 [ 208.860253][T10363] ? __alloc_skb+0x1c3/0x440 [ 208.864843][T10363] __alloc_skb+0x1c3/0x440 [ 208.869258][T10363] ? __pfx___alloc_skb+0x10/0x10 [ 208.874193][T10363] ? netlink_autobind+0xd6/0x2f0 [ 208.879125][T10363] ? netlink_autobind+0x2b0/0x2f0 [ 208.884157][T10363] netlink_sendmsg+0x638/0xcb0 [ 208.888923][T10363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.894210][T10363] ? aa_sock_msg_perm+0x91/0x160 [ 208.899148][T10363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.904439][T10363] __sock_sendmsg+0x221/0x270 [ 208.909125][T10363] ____sys_sendmsg+0x52a/0x7e0 [ 208.913894][T10363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.919170][T10363] ? __fget_files+0x2a/0x410 [ 208.923759][T10363] ? __fget_files+0x2a/0x410 [ 208.928351][T10363] __sys_sendmmsg+0x36a/0x720 [ 208.933042][T10363] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.938244][T10363] ? __pfx_lock_release+0x10/0x10 [ 208.943263][T10363] ? kstrtouint_from_user+0x128/0x190 [ 208.948645][T10363] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 208.954547][T10363] ? ksys_write+0x22a/0x2b0 [ 208.959046][T10363] ? __pfx_lock_release+0x10/0x10 [ 208.964073][T10363] ? vfs_write+0x730/0xd30 [ 208.968501][T10363] ? __mutex_unlock_slowpath+0x21e/0x790 [ 208.974151][T10363] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 208.980130][T10363] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.986458][T10363] ? do_syscall_64+0x100/0x230 [ 208.991229][T10363] __x64_sys_sendmmsg+0xa0/0xb0 [ 208.996080][T10363] do_syscall_64+0xf3/0x230 [ 209.000586][T10363] ? clear_bhb_loop+0x35/0x90 [ 209.005262][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.011153][T10363] RIP: 0033:0x7fab29d85d29 [ 209.015571][T10363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.035178][T10363] RSP: 002b:00007fab2ac29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 209.043593][T10363] RAX: ffffffffffffffda RBX: 00007fab29f75fa0 RCX: 00007fab29d85d29 [ 209.051565][T10363] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 209.059531][T10363] RBP: 00007fab2ac29090 R08: 0000000000000000 R09: 0000000000000000 [ 209.067501][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.075469][T10363] R13: 0000000000000000 R14: 00007fab29f75fa0 R15: 00007ffc6803bf68 [ 209.083464][T10363] [ 209.211622][ T5885] IPVS: starting estimator thread 0... [ 209.304051][T10373] IPVS: using max 22 ests per chain, 52800 per kthread [ 209.665966][T10397] netlink: 'syz.0.1697': attribute type 2 has an invalid length. [ 209.820405][T10411] netlink: 'syz.0.1703': attribute type 9 has an invalid length. [ 210.370073][T10439] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 210.389425][T10439] netlink: 'syz.4.1716': attribute type 2 has an invalid length. [ 210.917902][T10477] FAULT_INJECTION: forcing a failure. [ 210.917902][T10477] name failslab, interval 1, probability 0, space 0, times 0 [ 210.930936][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.1.1732 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 210.941719][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.951804][T10477] Call Trace: [ 210.955113][T10477] [ 210.958063][T10477] dump_stack_lvl+0x241/0x360 [ 210.962778][T10477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.968006][T10477] ? __pfx__printk+0x10/0x10 [ 210.972633][T10477] should_fail_ex+0x3b0/0x4e0 [ 210.977352][T10477] should_failslab+0xac/0x100 [ 210.982052][T10477] ? radix_tree_node_alloc+0x8b/0x3c0 [ 210.987453][T10477] kmem_cache_alloc_noprof+0x70/0x380 [ 210.992863][T10477] radix_tree_node_alloc+0x8b/0x3c0 [ 210.998099][T10477] idr_get_free+0x296/0xab0 [ 211.002653][T10477] idr_alloc_u32+0x195/0x330 [ 211.007771][T10477] ? __pfx_idr_alloc_u32+0x10/0x10 [ 211.012917][T10477] ? __pfx_lock_acquire+0x10/0x10 [ 211.017970][T10477] idr_alloc_cyclic+0x106/0x300 [ 211.022848][T10477] ? __fget_files+0x2a/0x410 [ 211.027482][T10477] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 211.032886][T10477] ? __radix_tree_preload+0x71c/0x860 [ 211.038282][T10477] ? __radix_tree_preload+0x80/0x860 [ 211.043602][T10477] ? bpf_map_alloc_id+0x21/0xe0 [ 211.048489][T10477] bpf_map_alloc_id+0x40/0xe0 [ 211.053200][T10477] map_create+0xdc3/0x11c0 [ 211.057655][T10477] __sys_bpf+0x6d1/0x810 [ 211.061927][T10477] ? __pfx___sys_bpf+0x10/0x10 [ 211.066733][T10477] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.072743][T10477] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.079094][T10477] ? do_syscall_64+0x100/0x230 [ 211.083895][T10477] __x64_sys_bpf+0x7c/0x90 [ 211.088339][T10477] do_syscall_64+0xf3/0x230 [ 211.092869][T10477] ? clear_bhb_loop+0x35/0x90 [ 211.097568][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.103488][T10477] RIP: 0033:0x7f0fa9985d29 [ 211.107925][T10477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.127563][T10477] RSP: 002b:00007f0faa7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.136011][T10477] RAX: ffffffffffffffda RBX: 00007f0fa9b75fa0 RCX: 00007f0fa9985d29 [ 211.144015][T10477] RDX: 0000000000000048 RSI: 0000000020004440 RDI: 0000000000000000 [ 211.152017][T10477] RBP: 00007f0faa7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 211.160019][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.168020][T10477] R13: 0000000000000000 R14: 00007f0fa9b75fa0 R15: 00007ffe50a1d898 [ 211.176038][T10477] [ 211.548600][T10504] FAULT_INJECTION: forcing a failure. [ 211.548600][T10504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.562906][T10504] CPU: 0 UID: 0 PID: 10504 Comm: syz.1.1745 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 211.573806][T10504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.583887][T10504] Call Trace: [ 211.587191][T10504] [ 211.590145][T10504] dump_stack_lvl+0x241/0x360 [ 211.594855][T10504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.600173][T10504] ? __pfx__printk+0x10/0x10 [ 211.604806][T10504] should_fail_ex+0x3b0/0x4e0 [ 211.609877][T10504] _copy_from_user+0x2f/0xc0 [ 211.614502][T10504] bpf_test_init+0x11f/0x180 [ 211.619122][T10504] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 211.624537][T10504] ? __pfx_lock_release+0x10/0x10 [ 211.629601][T10504] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.635430][T10504] ? __fget_files+0x2a/0x410 [ 211.640052][T10504] ? __fget_files+0x2a/0x410 [ 211.644677][T10504] ? fput+0x21b/0x290 [ 211.648682][T10504] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.654517][T10504] bpf_prog_test_run+0x2e4/0x360 [ 211.659502][T10504] __sys_bpf+0x48d/0x810 [ 211.663775][T10504] ? __pfx___sys_bpf+0x10/0x10 [ 211.668579][T10504] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.674597][T10504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.680958][T10504] ? do_syscall_64+0x100/0x230 [ 211.685756][T10504] __x64_sys_bpf+0x7c/0x90 [ 211.690205][T10504] do_syscall_64+0xf3/0x230 [ 211.694740][T10504] ? clear_bhb_loop+0x35/0x90 [ 211.699530][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.705430][T10504] RIP: 0033:0x7f0fa9985d29 [ 211.709843][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.729446][T10504] RSP: 002b:00007f0faa7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.737872][T10504] RAX: ffffffffffffffda RBX: 00007f0fa9b75fa0 RCX: 00007f0fa9985d29 [ 211.745854][T10504] RDX: 0000000000000050 RSI: 0000000020000180 RDI: 000000000000000a [ 211.747602][T10512] __nla_validate_parse: 53 callbacks suppressed [ 211.747618][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1746'. [ 211.753826][T10504] RBP: 00007f0faa7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 211.753845][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.753857][T10504] R13: 0000000000000000 R14: 00007f0fa9b75fa0 R15: 00007ffe50a1d898 [ 211.753886][T10504] [ 211.807160][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1746'. [ 212.137679][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 212.189901][T10529] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 212.219449][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1755'. [ 212.330044][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 212.577536][T10559] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20002 [ 212.607018][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 212.698589][T10567] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1767'. [ 212.756047][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 212.793995][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 212.837575][T10571] FAULT_INJECTION: forcing a failure. [ 212.837575][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.856912][T10571] CPU: 0 UID: 0 PID: 10571 Comm: syz.1.1769 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 212.867827][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 212.877896][T10571] Call Trace: [ 212.881175][T10571] [ 212.884122][T10571] dump_stack_lvl+0x241/0x360 [ 212.888817][T10571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.894018][T10571] ? __pfx__printk+0x10/0x10 [ 212.898612][T10571] ? __pfx_lock_release+0x10/0x10 [ 212.903643][T10571] should_fail_ex+0x3b0/0x4e0 [ 212.908322][T10571] _copy_from_iter+0x1e9/0x1c20 [ 212.913170][T10571] ? __virt_addr_valid+0x183/0x530 [ 212.918298][T10571] ? lockdep_hardirqs_on+0x99/0x150 [ 212.923524][T10571] ? __pfx__copy_from_iter+0x10/0x10 [ 212.928909][T10571] ? __virt_addr_valid+0x183/0x530 [ 212.934023][T10571] ? __virt_addr_valid+0x183/0x530 [ 212.939142][T10571] ? __virt_addr_valid+0x45f/0x530 [ 212.944280][T10571] ? __phys_addr_symbol+0x2f/0x70 [ 212.949316][T10571] ? __check_object_size+0x47a/0x730 [ 212.954695][T10571] af_alg_sendmsg+0x9a9/0x2650 [ 212.959489][T10571] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 212.964691][T10571] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.969543][T10571] ? __pfx_lock_release+0x10/0x10 [ 212.974561][T10571] ? __import_iovec+0x590/0x870 [ 212.979407][T10571] ? aa_sock_msg_perm+0x91/0x160 [ 212.984598][T10571] ? skcipher_sendmsg+0x28/0xf0 [ 212.989448][T10571] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 212.994816][T10571] __sock_sendmsg+0x221/0x270 [ 212.999584][T10571] ____sys_sendmsg+0x52a/0x7e0 [ 213.004353][T10571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.010012][T10571] ? __fget_files+0x2a/0x410 [ 213.014620][T10571] ? __fget_files+0x2a/0x410 [ 213.019246][T10571] __sys_sendmsg+0x269/0x350 [ 213.023839][T10571] ? __pfx_lock_release+0x10/0x10 [ 213.028868][T10571] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.033985][T10571] ? __pfx_vfs_write+0x10/0x10 [ 213.038764][T10571] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 213.045088][T10571] ? do_syscall_64+0x100/0x230 [ 213.049854][T10571] ? do_syscall_64+0xb6/0x230 [ 213.054529][T10571] do_syscall_64+0xf3/0x230 [ 213.059033][T10571] ? clear_bhb_loop+0x35/0x90 [ 213.063716][T10571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.069622][T10571] RIP: 0033:0x7f0fa9985d29 [ 213.074034][T10571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.093633][T10571] RSP: 002b:00007f0faa7f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.102048][T10571] RAX: ffffffffffffffda RBX: 00007f0fa9b75fa0 RCX: 00007f0fa9985d29 [ 213.110018][T10571] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000004 [ 213.117984][T10571] RBP: 00007f0faa7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 213.125950][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.133914][T10571] R13: 0000000000000000 R14: 00007f0fa9b75fa0 R15: 00007ffe50a1d898 [ 213.141891][T10571] [ 213.310904][T10552] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.329832][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 213.410762][ T3521] ------------[ cut here ]------------ [ 213.416501][ T3521] WARNING: CPU: 1 PID: 3521 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x1e3/0x250 [ 213.427449][ T3521] Modules linked in: [ 213.431367][ T3521] CPU: 1 UID: 0 PID: 3521 Comm: kworker/u8:9 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 213.442495][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.452750][ T3521] Workqueue: events_unbound cfg80211_wiphy_work [ 213.459078][ T3521] RIP: 0010:ieee80211_start_next_roc+0x1e3/0x250 [ 213.465520][ T3521] Code: f6 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f e9 b1 91 dd ff e8 6c e3 69 f6 90 0f 0b 90 e9 b5 fe ff ff e8 5e e3 69 f6 90 <0f> 0b 90 e9 fc fe ff ff 48 c7 c1 d0 ae 19 90 80 e1 07 80 c1 03 38 [ 213.485348][ T3521] RSP: 0018:ffffc9000c457998 EFLAGS: 00010293 [ 213.491456][ T3521] RAX: ffffffff8b359092 RBX: 0000000000000001 RCX: ffff888031d59e00 [ 213.499905][ T3521] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 213.508007][ T3521] RBP: ffffc9000c457b60 R08: ffffffff8b358fdc R09: 1ffff1100feca2e6 [ 213.516618][ T3521] R10: dffffc0000000000 R11: ffffed100feca2e7 R12: dffffc0000000000 [ 213.524925][ T3521] R13: dffffc0000000000 R14: ffff8880299a8e40 R15: ffff8880291eba20 [ 213.532991][ T3521] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 213.533944][T10587] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 213.542250][ T3521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.557718][ T3521] CR2: 00007f6372547ab8 CR3: 000000005fc6e000 CR4: 00000000003526f0 [ 213.565749][ T3521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.573821][ T3521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.581816][ T3521] Call Trace: [ 213.585190][ T3521] [ 213.588155][ T3521] ? __warn+0x165/0x4d0 [ 213.592398][ T3521] ? ieee80211_start_next_roc+0x1e3/0x250 [ 213.598360][ T3521] ? report_bug+0x2b3/0x500 [ 213.602906][ T3521] ? ieee80211_start_next_roc+0x1e3/0x250 [ 213.608701][ T3521] ? handle_bug+0x60/0x90 [ 213.613587][ T3521] ? exc_invalid_op+0x1a/0x50 [ 213.618684][ T3521] ? asm_exc_invalid_op+0x1a/0x20 [ 213.623819][ T3521] ? ieee80211_start_next_roc+0x12c/0x250 [ 213.629566][ T3521] ? ieee80211_start_next_roc+0x1e2/0x250 [ 213.635402][ T3521] ? ieee80211_start_next_roc+0x1e3/0x250 [ 213.641159][ T3521] ? ieee80211_start_next_roc+0x1e2/0x250 [ 213.647008][ T3521] ieee80211_scan_work+0x1cc/0x1d30 [ 213.652303][ T3521] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 213.658410][ T3521] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 213.664162][ T3521] ? rcu_is_watching+0x15/0xb0 [ 213.668969][ T3521] cfg80211_wiphy_work+0x2db/0x480 [ 213.674384][ T3521] ? process_scheduled_works+0x976/0x1840 [ 213.680141][ T3521] process_scheduled_works+0xa66/0x1840 [ 213.685809][ T3521] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.691866][ T3521] ? assign_work+0x364/0x3d0 [ 213.692237][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 213.696499][ T3521] worker_thread+0x870/0xd30 [ 213.696541][ T3521] ? __kthread_parkme+0x169/0x1d0 [ 213.696566][ T3521] ? __pfx_worker_thread+0x10/0x10 [ 213.696587][ T3521] kthread+0x2f0/0x390 [ 213.696609][ T3521] ? __pfx_worker_thread+0x10/0x10 [ 213.696629][ T3521] ? __pfx_kthread+0x10/0x10 [ 213.696651][ T3521] ret_from_fork+0x4b/0x80 [ 213.696669][ T3521] ? __pfx_kthread+0x10/0x10 [ 213.696691][ T3521] ret_from_fork_asm+0x1a/0x30 [ 213.696724][ T3521] [ 213.751988][ T3521] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.759289][ T3521] CPU: 1 UID: 0 PID: 3521 Comm: kworker/u8:9 Not tainted 6.13.0-rc3-syzkaller-00183-g5b0af621c3f6 #0 [ 213.770155][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.780213][ T3521] Workqueue: events_unbound cfg80211_wiphy_work [ 213.786461][ T3521] Call Trace: [ 213.789732][ T3521] [ 213.792659][ T3521] dump_stack_lvl+0x241/0x360 [ 213.797340][ T3521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.802534][ T3521] ? __pfx__printk+0x10/0x10 [ 213.807131][ T3521] ? vscnprintf+0x5d/0x90 [ 213.811462][ T3521] panic+0x349/0x880 [ 213.815354][ T3521] ? __warn+0x174/0x4d0 [ 213.819511][ T3521] ? __pfx_panic+0x10/0x10 [ 213.823935][ T3521] ? ret_from_fork_asm+0x1a/0x30 [ 213.828870][ T3521] __warn+0x344/0x4d0 [ 213.832845][ T3521] ? ieee80211_start_next_roc+0x1e3/0x250 [ 213.838564][ T3521] report_bug+0x2b3/0x500 [ 213.842888][ T3521] ? ieee80211_start_next_roc+0x1e3/0x250 [ 213.848606][ T3521] handle_bug+0x60/0x90 [ 213.852757][ T3521] exc_invalid_op+0x1a/0x50 [ 213.857249][ T3521] asm_exc_invalid_op+0x1a/0x20 [ 213.862098][ T3521] RIP: 0010:ieee80211_start_next_roc+0x1e3/0x250 [ 213.868430][ T3521] Code: f6 48 89 df 4c 89 f6 48 89 c2 5b 41 5c 41 5e 41 5f e9 b1 91 dd ff e8 6c e3 69 f6 90 0f 0b 90 e9 b5 fe ff ff e8 5e e3 69 f6 90 <0f> 0b 90 e9 fc fe ff ff 48 c7 c1 d0 ae 19 90 80 e1 07 80 c1 03 38 [ 213.888216][ T3521] RSP: 0018:ffffc9000c457998 EFLAGS: 00010293 [ 213.894286][ T3521] RAX: ffffffff8b359092 RBX: 0000000000000001 RCX: ffff888031d59e00 [ 213.902695][ T3521] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 213.910666][ T3521] RBP: ffffc9000c457b60 R08: ffffffff8b358fdc R09: 1ffff1100feca2e6 [ 213.918635][ T3521] R10: dffffc0000000000 R11: ffffed100feca2e7 R12: dffffc0000000000 [ 213.926605][ T3521] R13: dffffc0000000000 R14: ffff8880299a8e40 R15: ffff8880291eba20 [ 213.934587][ T3521] ? ieee80211_start_next_roc+0x12c/0x250 [ 213.940325][ T3521] ? ieee80211_start_next_roc+0x1e2/0x250 [ 213.946062][ T3521] ? ieee80211_start_next_roc+0x1e2/0x250 [ 213.951787][ T3521] ieee80211_scan_work+0x1cc/0x1d30 [ 213.957003][ T3521] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 213.962990][ T3521] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 213.968642][ T3521] ? rcu_is_watching+0x15/0xb0 [ 213.973418][ T3521] cfg80211_wiphy_work+0x2db/0x480 [ 213.978547][ T3521] ? process_scheduled_works+0x976/0x1840 [ 213.984273][ T3521] process_scheduled_works+0xa66/0x1840 [ 213.989842][ T3521] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.995827][ T3521] ? assign_work+0x364/0x3d0 [ 214.000419][ T3521] worker_thread+0x870/0xd30 [ 214.005014][ T3521] ? __kthread_parkme+0x169/0x1d0 [ 214.010038][ T3521] ? __pfx_worker_thread+0x10/0x10 [ 214.015229][ T3521] kthread+0x2f0/0x390 [ 214.019291][ T3521] ? __pfx_worker_thread+0x10/0x10 [ 214.024402][ T3521] ? __pfx_kthread+0x10/0x10 [ 214.028990][ T3521] ret_from_fork+0x4b/0x80 [ 214.033401][ T3521] ? __pfx_kthread+0x10/0x10 [ 214.037991][ T3521] ret_from_fork_asm+0x1a/0x30 [ 214.042758][ T3521] [ 214.046054][ T3521] Kernel Offset: disabled [ 214.050441][ T3521] Rebooting in 86400 seconds..