last executing test programs: 1.805476295s ago: executing program 3 (id=933): sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 1.805105636s ago: executing program 2 (id=934): socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0060001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) 1.803487402s ago: executing program 3 (id=936): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x20000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) pread64(r1, 0x0, 0x49, 0x1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'veth1_to_bridge\x00', &(0x7f0000001a40)=@ethtool_per_queue_op={0x4b, 0x4e}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c80)={&(0x7f0000000000), 0xc, &(0x7f0000000c40)={&(0x7f0000003fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x64, 0x7, 0x1, 0x0, "7783b752929110b50f462fc560772b33f66d0bdd91659414391f4e2a71b6852bf9ffe1567fa1686235f0b2c6e5650857f4b086dff901d519529af9b1fa29a60b1075dfdd0064822c9427deb7dfb4e268c783b9eee2476c77eee72abc4b09592e"}, @NFTA_RULE_USERDATA={0x6f, 0x7, 0x1, 0x0, "7c42a26e360a3ec9727a0959ed3e7cff88923c035be1f16e528023354523c8f640bd22cf814823dd9866b2c2cf4f4f11d39a796ff260dc7495ab08d0aa55ca6f9adbc71f8417d9b325930718bc2957494252eaad3ecd97ae9569ee4efa42eec9ef5ad9c2b779fc8ce3d2cf"}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa4, 0x6, "7e232a7e54a9c45f73571d64c15070099e003b1681abdd3ca6bccb7b7da86182c07b460fe0685b181a9bdcdd0cbef2e757010210d8771fd6b8df50f67120216f55171c6914d516406b3f330a7853bf150d405d7fcaf7c0a055706c865a6a5627b6cd74c0acdb7d7b1c85ce046f5c10a167a1bce4db887501c50e0878adfd106e4d7457c4c8dde46e834b5f081a907732ed27f9748cf386da7000c32678ae387a"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x2dc, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0xc1, 0x8, "49e1f68a806217a2ce38158840c142b7516e1b3c514971ba8fb21a9889313b2af387913cb3ecc1278fcaf93bf7d82b7fa509f1bb2e448dc78a1870f696bf615ded34ed76d7bdb91b8e631277efb5788358e57378d52800d652bdde9f2203b75dace32e1a35349ec96e3b7d24a138fddc7bd1b20ff5907495f128487e1a9a1af97a6d170a08cb3d0210ba21e01920ab3ef706cc2b482f46334ce5da0a86972d337f57e5bd780df153a682d302443649514a0adb8b45fcc6122e7f0689f1"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xf2, 0x8, "47ff33f4cd52b1bda219e7968ce1a074d6200d595225b75b45cab10584a64777ca4dbc593818cc9898eaac3cb2b9c40a0fa0805973777753833ab165574fec52b8402b57b509b8702fe054e3b79aacc145b6fde8601427ce8a10797e20ce7272e23c45f11ac6b58d83660546f1725ffb2b9d732ae01c1171243b9467293979ba92ec802715f6318f4f06f788188c7efa7c3b3349e7622bb4c948f06ba63e3dc9a951ffd07f75a498464c30b757133410373828e676b23594574b24c9fab2950312caf95739f7641d48fd3d4b699f9b4a684eefdf9cd89973b2625d103722fe9303029df905d69ec1b69135f69c24"}, @NFTA_OBJ_USERDATA={0x5c, 0x8, "2f552265c77d98582309795e0c3372200db229b050779006a047aa6f0bc711d93bd6fc1dab34770dbecfc76e4bac01df2c95b81f6b435f3dff01baf8a344cb9f869888e9332d807da54cb3066cb22a855060e60db7b4319f"}, @NFTA_OBJ_USERDATA={0x8b, 0x8, "b34f9200823da8d0e732793aa89b299b298102a0f717f389ea304471f2cc3b6719dcf5f5865051835ce22d02b4ae6d6da21666f268aebcf67ecc08b1cf1b2c416acc47a0aa8c5840fad21c301415c565851156b24506fbdc2ccdcd08c3e449d7fbfe1bad8a027b74451e9e4c812ecfe848d4a06981cd22e2821541f81689baafd0bc4f4a90c0d2"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x138, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x104, 0x6, "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"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x140, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x5c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x37}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x69}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x60}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xb}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0) unshare(0x44000400) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) 1.803324756s ago: executing program 2 (id=937): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.80255563s ago: executing program 2 (id=939): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x47, 0x9, [0xa, 0x5, 0x2]}}) sendmsg$inet_sctp(r0, 0x0, 0x24000896) 1.796305951s ago: executing program 3 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x21, 0x4ba12, 0x200000f}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) (fail_nth: 3) 1.69646721s ago: executing program 2 (id=942): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$sock(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="266d4dca84", 0x5}], 0x1}, 0x4044094) recvmmsg(r0, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/98, 0x62}], 0x1, 0x0, 0x0, 0x18}, 0xfffffffe}], 0x1, 0x0, 0x0) 1.639425115s ago: executing program 3 (id=943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x100, @local}}, 0x0, 0x40, 0x32, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000003080000e7ffffff000000000000000000000000002000"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d3"}]}], {0x14}}, 0x5c}}, 0x0) 1.353369132s ago: executing program 4 (id=950): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="d41ecd373074179b0ef739ca5055816b3c0ff2dfa854aa73a837e39fd2a873b6c6d08f906a2473df688cc3a9259c40f63011e84f118fc60f48d809344474158332333de9bfd19ff530a1a47735451b92690850c7c23852f5bac801eac05acaf9075658c8c8c936697df6884a31addea84c364a9bde0656", 0x77}, {&(0x7f0000000180)="953d3b0d8df0eddd4d51cb3f8d6ceff78f6e6709218b3b2c59286674914b7c304eb7245ca0cc1bac0f87ec049dab7a09f4d4bb75a334d530c67d417f5112e06400d6dca961057de31db2ac1503ca376c14fd9daf65f45ea515f53ce85106d2501b0b0ca628280aa19903839d0fd0200a534b25bcffa98c86f58b8623d322315282f0319de36688b6580ab441e741ce97bdade44ebfcd874aef51855cbac01794227baab93b2d3c5085393a03768ea47bffde7e8acca5b9864a52ce77777e94d335ea7444eb2110fc", 0xc8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="dfaaf1062ddae3767a9f130f0e3bef77c73d89395146", 0x16}, {&(0x7f00000003c0)="1554ee3d839d49168ed6cae7d3cb93080edf3c839e6620c55f6de80d67cbbde9857ca4f91b6e3e3320a109c684e0f8b375227cf4e8fe85dc21da3c8dadde0031bd5b32e013cbdf0774481dbd6abef20bad7e2f30ce2e2807f4473df39b932b25707662c065", 0x65}, {&(0x7f0000000440)="dce249b36755d1399a3093802d7b63f5b87e9f8579fde587a9c9ba1fe3f58f14995b2f93271e6acda266", 0x2a}], 0x3}}], 0x2, 0x40040) shutdown(r0, 0x1) 1.268311622s ago: executing program 0 (id=952): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x270, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x160, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xf8, 0x160, 0x700, {}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000a2000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) 1.219161505s ago: executing program 4 (id=954): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5120000000900013173797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x240040e4}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000d08000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5120000000900013173797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x240040e4}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000d08000140000000000900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) (async) 1.109122091s ago: executing program 1 (id=955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r2, 0x121, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}}, 0x4010) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x49, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x33, 0x20048040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r8}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x400, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=r10, 0x4) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) ppoll(&(0x7f0000000300)=[{r11, 0x8124}], 0x1, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.108324358s ago: executing program 0 (id=956): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="0200000006"], 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001838000003000000000000000000000018210000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0x38, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r0) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/time\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3000095acc0000", @ANYRES16=r8, @ANYBLOB="010001000000000000001400000008000300", @ANYRES32=r9, @ANYBLOB="ea960530", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000000000"], 0x30}}, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/uts\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r14, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r15, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022dbd7000fcdbdf25070000002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200626f6e643000000000000000000000000c00018008000100", @ANYBLOB="2c00018014004354795ab5bc7a7a00000000000000000000140002000d028000746170300000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x30}, 0x8000) r16 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r17 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r17, 0x0, 0x0) sendmsg$key(r17, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080005"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.073741166s ago: executing program 4 (id=957): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x17, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname(r4, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000001c0), 0x45) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @local}, 0x1c) listen(r5, 0x2c2) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@deltfilter={0x910, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x0, 0xb}, {0x9, 0xffe0}}, [@f_rsvp6={{0xa}, {0x8e0, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x0, 0x7fff}, {0x3, 0xfab, 0x8001}, 0x73, 0x91, 0xdc}}, @TCA_RSVP_SRC={0x14, 0x3, @private0}, @TCA_RSVP_POLICE={0x838, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0xfffffff6, 0x5, 0x1, 0x8, 0x1, 0x6, 0xa, 0x14000, 0x9, 0x2, 0x17d4, 0x93, 0x0, 0x3, 0xc, 0xfffffff9, 0x8, 0x8, 0xffffffff, 0x5, 0x8, 0x891, 0x9, 0x9, 0x8, 0xffffff04, 0x7, 0x100, 0xa, 0x7, 0x2, 0x80000000, 0x5, 0x6, 0x8, 0xa25, 0x8, 0x7, 0x0, 0x101, 0x17, 0x3, 0x6, 0x6, 0xa, 0x8, 0x2, 0x1, 0x7, 0x1, 0x2, 0x91dc, 0x8, 0x0, 0x2, 0x80000001, 0x1, 0x4, 0x8, 0x7, 0xef99, 0xb7bd, 0x7, 0xfffffffc, 0x8001, 0x40, 0xd31a, 0xfffffffe, 0x410, 0x9, 0x6, 0x1, 0x9a7, 0x7, 0x273c7bd6, 0xffff, 0x7, 0x10001, 0xc, 0x6, 0x1, 0x9, 0xff800, 0x7fffffff, 0x80, 0x8, 0x3800, 0xffff7fff, 0x6, 0x0, 0x664, 0x7, 0x6, 0x8, 0x1, 0x2, 0x4, 0x4, 0x7fff, 0x2, 0x2, 0x12f, 0xff, 0x7, 0x4, 0xfff, 0xffffff59, 0x9, 0x3, 0xfffffffc, 0x2, 0x8, 0xfffffffd, 0x240000, 0x6, 0xfffff2af, 0x8, 0x4, 0x5, 0x2, 0xffffffc0, 0x3, 0x6, 0x6, 0x80000000, 0x3, 0x620d9452, 0x9, 0x5, 0x7, 0x6, 0x7ff, 0x9, 0x8, 0xa0000, 0x5, 0x1b, 0x3, 0x1, 0xfffffffd, 0x3, 0x5, 0xdde, 0x800, 0x1d89c67f, 0x2, 0x8, 0x7c0, 0x5, 0x485, 0xed1, 0x4, 0x0, 0x3, 0x1, 0x7, 0x9, 0xffff7fff, 0xff, 0x7, 0x80000000, 0x6, 0xbd32, 0xf, 0x8, 0x0, 0x9, 0x9, 0xeed, 0x4, 0x80000001, 0xffffffff, 0x7fffffff, 0x5, 0x10001, 0x1, 0x200, 0x2, 0x3, 0x2, 0x9, 0x5a26, 0x8000, 0x33, 0x5, 0x1, 0x3d, 0x5, 0x7, 0xfffffffe, 0x1, 0x7, 0x3, 0x9, 0x400, 0x3, 0x8, 0x9, 0x9, 0xe3d6, 0x227e, 0x6f5, 0x2, 0x3, 0x1, 0x8001, 0x8, 0x9, 0x27d0, 0x10, 0x5, 0xe960, 0x9, 0x3, 0x3, 0x401, 0x9b69, 0xa0d41f9, 0x7fffffff, 0x100, 0x400, 0x3, 0xffffffff, 0x40, 0xb0e, 0x56c, 0xfffffffd, 0x31, 0x8, 0x40, 0x4, 0x1, 0x5, 0x9, 0x4f3, 0x10001, 0x9, 0x7, 0x0, 0x1f, 0x7fff, 0x80, 0x3c, 0x5, 0x4, 0xa76, 0x4, 0x1000, 0xcf5, 0x1, 0x9, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x2, 0x3, 0xe, 0x3, 0x8, 0x5, 0x1, 0x8001, 0x2, 0x9, 0x2, 0x7, 0xeefa, 0x0, 0x5, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xffffffec, 0x9, 0x3ff, 0x4, 0xf1b4, 0x60, 0x0, 0x2, 0x991, 0xfffffc00, 0x5, 0xff9, 0x1, 0x27ec, 0x8cf, 0x80000000, 0x9, 0x34cc1300, 0x7, 0x8, 0x8, 0x6, 0x4, 0x91, 0x800, 0x1b83, 0x8, 0x6, 0x2, 0x1, 0xed25, 0xfffffffb, 0xb44, 0x721, 0x0, 0x8, 0x200, 0xfffffffb, 0xffffffff, 0x3, 0x9, 0xffff, 0x5, 0x9, 0x113e, 0x0, 0x3ff, 0x10001, 0x0, 0x7, 0x6, 0x62d, 0x2, 0x206, 0x0, 0xd, 0x3, 0x6, 0xffffff61, 0x82cf, 0x7, 0x3f80000, 0xfffffffe, 0x8, 0x1, 0x9, 0x6, 0xfff, 0xd, 0x80000000, 0x6, 0x2, 0x1, 0x5, 0x8, 0x8, 0x5, 0xd, 0xf, 0x6, 0xb, 0x227d, 0x4, 0xc1, 0x9268, 0xe, 0x8, 0x23, 0x1, 0xa, 0x1, 0xa6, 0xfffffb1d, 0x9, 0x0, 0x5, 0x2, 0x5b, 0xd, 0x1, 0x16efc85b, 0xc, 0x8, 0x11, 0x3, 0x3, 0x3, 0x5, 0x10000, 0x7, 0x7, 0x2, 0x6, 0x10000, 0x1, 0x9, 0x2, 0x5, 0x4, 0x43e, 0x27, 0x51c, 0x3, 0x1, 0x3, 0x1, 0x400, 0x7, 0x3, 0x6, 0x3, 0x1, 0xd7400000, 0x1, 0x3c22, 0x80000000, 0x3, 0xa, 0x7d03, 0x3, 0x968, 0x6, 0x9, 0xb744, 0x7f, 0xe, 0x7, 0xbd, 0xfffffffb, 0x6, 0x4, 0x8000, 0xffff, 0x1, 0x19d5, 0x54, 0x10, 0x7fff, 0x6, 0x4, 0x200, 0x80000000, 0xff, 0x8, 0x3, 0x9, 0x1, 0x6, 0x1, 0xeace, 0x3, 0x2a, 0x1, 0x2, 0x28, 0x7fffffff, 0x7, 0x5, 0x80000000, 0x100, 0x2, 0x3, 0x6d, 0x10, 0x7, 0x7, 0x80, 0xf, 0x7f, 0xa0000, 0x5c, 0x5, 0x401, 0x5, 0x8, 0x3, 0x1, 0x7f, 0xa3, 0x5f7, 0x5, 0x4, 0x8, 0x8, 0xd6, 0x13, 0x7, 0x5, 0x9, 0x94f, 0x1, 0x2, 0x3, 0x1000, 0x3, 0x8, 0xe, 0x0, 0x10001, 0x8, 0x1, 0x80, 0x5, 0x4, 0x1, 0x1, 0x7, 0x25, 0x1ff, 0x9, 0xda84, 0x6, 0x4, 0xfffffffa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x888}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_RSVP_ACT={0x68, 0x6, [@m_pedit={0x64, 0x1b, 0x0, 0x0, {{0xa}, {0x4}, {0x36, 0x6, "2910ac64666659360637ae628bda538a62c976fe5bc2f26306a32f44623ccecac8105d55b87d9def9371d39dd0a543fbceb6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x910}}, 0x4000000) 970.031031ms ago: executing program 1 (id=958): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x6, 0x0, 0xd4, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8000, 0x81, 0x1}}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000002c0)={@local, @remote, 0x0, "e64451adc186cb2d42999d31e3237303193ee6666d16dd3dd19d68412c73ef2d", 0x0, 0x1, 0x4}, 0x3c) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket(0x2a, 0x2, 0x9) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2}, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x1, 0x70bd28, 0x25df5bfd, {0x0, 0x0, 0x0, r6, {0x4, 0xffe0}, {0xe, 0xf}, {0x3, 0xc}}}, 0x24}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0xca0, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc70, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x7}}, @TCA_BASIC_POLICE={0xc64, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x1, 0x2, 0x365, 0x4, 0x7, 0x5, 0x9, 0x7ff, 0x0, 0x0, 0xa98a, 0x0, 0x101, 0x8, 0x1, 0xe403, 0x4, 0x6, 0x8001, 0x9, 0xf89, 0x0, 0x4, 0x5, 0xfffffffd, 0x3c, 0x2, 0x10, 0x5, 0x8, 0xfff, 0x2, 0x4, 0x85, 0x401, 0x8, 0x5, 0x9, 0x4, 0x7ac, 0x9, 0x3, 0xfffffffc, 0x1000, 0x1000, 0x3, 0xfa, 0x1, 0x31c8, 0x4, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x735, 0xf7, 0x800, 0x7, 0x41, 0x1, 0x7, 0x1, 0x0, 0xffffff7f, 0x0, 0x1, 0xa, 0x40, 0x3, 0xb, 0x0, 0x69e, 0x2ac, 0x0, 0x8001, 0x4, 0x1, 0x8, 0x3, 0x4, 0x80, 0x1, 0xc4, 0x1, 0x4b, 0x1, 0x0, 0x5, 0x2, 0x2, 0x1, 0x81, 0xfffffff3, 0x7, 0xc9, 0xaf2, 0x9, 0x2a, 0x800, 0x9, 0x6, 0xfff, 0x8, 0x9, 0x7fffffff, 0xa, 0x200, 0x4, 0x5, 0x7, 0x6, 0x9, 0x7, 0x101, 0x6, 0x6, 0xe5, 0x80000001, 0x1, 0x0, 0x5, 0x3ff, 0x9, 0xfff, 0xff, 0x587a, 0xfffffff9, 0x2, 0x8, 0xafd, 0x10, 0xa076, 0xc2, 0x4, 0xfd4, 0x89b9, 0x1ff, 0x5, 0x6, 0x4d50, 0x1, 0x3ff, 0x57, 0x7, 0x7ff, 0x401, 0x1a, 0x68aa8f9e, 0x0, 0x4, 0x4, 0x0, 0x0, 0xef, 0x3ff, 0xfe2, 0x7ff, 0xfffffff8, 0x3, 0x5, 0x8ef7, 0xfff, 0x0, 0x1, 0x276f, 0x6, 0x3, 0x1, 0x9, 0x9, 0x4, 0x2, 0x1, 0x3841, 0x2, 0x1, 0x80000000, 0xe3bb, 0x2, 0x10000, 0x3, 0x1000, 0x10, 0x7, 0x500, 0x1, 0x6, 0xfffffff7, 0x800, 0x7fffffff, 0x5, 0x37, 0xfffffffb, 0x5, 0x0, 0x3, 0x80000001, 0x6, 0x4, 0x9, 0x1, 0xfffffffe, 0x3d16, 0x3, 0x400, 0x400, 0x9, 0xfff, 0x0, 0xae, 0xe8a2, 0x7, 0x8, 0x7, 0x7, 0x7, 0x0, 0x6, 0x6, 0x2, 0xb9f, 0x6, 0x5, 0x7, 0xa6, 0x1000, 0x0, 0x6, 0x81, 0x7, 0x80000001, 0x80, 0x8, 0x0, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, 0x8, 0x0, 0x1, 0x8000, 0x1, 0xd2, 0xd733, 0x1ff, 0x9, 0xc, 0x2, 0x5, 0x1, 0x10001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x8, 0x5, 0x8, 0x6, 0x0, 0x1000, 0xa092, 0x9, 0x1800, 0x4, 0x5, 0x7fff, 0xfd9, 0x80000000, 0x0, 0x8, 0x9, 0x10001, 0x1, 0x0, 0xffff41a1, 0x5, 0x8, 0xa, 0x7, 0x40, 0x1, 0x10001, 0x5, 0xfff, 0x3d3, 0x1, 0x2, 0xee, 0x0, 0x0, 0xffffc038, 0x5, 0x7fffffff, 0x7, 0x9, 0x5db4, 0x976, 0x9, 0x8, 0x6, 0x7, 0x0, 0x38, 0x7, 0x3, 0x7, 0x8000, 0x1, 0x9, 0x5, 0x80000000, 0xf, 0x7fffffff, 0x6, 0x6, 0x6, 0x3, 0x5, 0x8, 0xb, 0x9, 0x16, 0xbe, 0x4, 0x3384, 0x2, 0xf4ff, 0x8, 0x6, 0x9, 0x4ee05a66, 0x7, 0x6, 0x38, 0x7b0, 0xffffffff, 0x8, 0x101, 0x7, 0x7ff, 0x80, 0x80000001, 0xec0, 0x9, 0x6000, 0x8, 0x4, 0x86, 0x8, 0x6, 0x3d8, 0x6, 0x0, 0xf4, 0x5, 0xf7b, 0xe, 0x80, 0x0, 0x0, 0x8, 0x1000, 0x8001, 0x7fff, 0x8001, 0x2, 0x1, 0x7fff, 0x8a67, 0x0, 0x3, 0x0, 0x5, 0xb5, 0xf, 0x1, 0x7, 0xa5d, 0x7, 0x2, 0x2, 0x3, 0x9d, 0x5, 0x81, 0x7f6, 0x6, 0xff, 0x1, 0x9, 0x1, 0x10aa, 0x8, 0x80, 0x7, 0xa07, 0xf, 0x4, 0x0, 0x2, 0x5c, 0x1, 0x50b, 0xfffffff8, 0x3, 0xfffffffa, 0x3, 0x13cb, 0x9, 0x9ae8, 0x2, 0x0, 0x5, 0x1, 0xfff, 0xfffffff7, 0x1, 0x5, 0x40, 0x7fffffff, 0x10, 0xfff, 0x2, 0x9, 0xd1, 0x7fffffff, 0x9, 0x79000, 0x7, 0x8000, 0x8, 0xde08, 0x4, 0x9, 0x2, 0x4, 0x5, 0x5069a37f, 0x80000001, 0x6, 0x0, 0x7f, 0x8, 0x7f, 0x1, 0xfffff6c0, 0x2, 0x7fffffff, 0x4, 0x2, 0x575, 0x1, 0x6, 0x7, 0x7, 0xff, 0x0, 0x4, 0x0, 0x6, 0xd6d2, 0x2, 0x8, 0x5, 0x0, 0x2, 0x7f, 0x5, 0x5, 0x4, 0xb44, 0x7, 0x3, 0x3, 0x8001, 0x3, 0x1000, 0x1, 0x17, 0x4, 0x3, 0x3a7, 0x6, 0x10000, 0xd57, 0x6, 0x8, 0x6bcb, 0x3, 0x3ff, 0xcf, 0x7, 0x7f, 0x3, 0x8001, 0xd02, 0x8, 0x0, 0xc2d2, 0x2ec, 0x8, 0xf673, 0x3, 0x4, 0x2, 0x4, 0xffaf, 0x7ff, 0xbcc9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x6, 0x9, 0xbe1, 0x9, 0x3, 0x2, 0x4, 0x6, 0x2, 0x48b7, 0x5, 0x1, 0x3, 0x7, 0x0, 0xb9d, 0x6, 0xb4ea, 0x9, 0x4, 0x41, 0x6, 0xffff, 0xf43b, 0x4, 0x1, 0x0, 0x8, 0x5, 0xd85, 0x401, 0x5, 0x8, 0x4, 0x9, 0x5, 0xb44, 0x9, 0x5, 0xe4d5, 0x6, 0x3, 0x4, 0x5, 0x98, 0x2, 0x2, 0x6, 0x5, 0xb, 0xef, 0x1, 0x9, 0x1, 0x9, 0x7, 0x6, 0x8, 0x6a1, 0xd66, 0xb, 0x10, 0x1, 0x4, 0x80000000, 0x3ff, 0x7fff, 0xfffff8a7, 0x0, 0x6, 0x0, 0x5, 0x2, 0x0, 0x5, 0x4, 0x25, 0x9, 0x3, 0x8, 0x1, 0x1, 0x3, 0x0, 0x7, 0xa000, 0xffff, 0xfffffff5, 0x1, 0x3, 0x2eb, 0x93, 0x2, 0x7, 0x7, 0xffffff2b, 0xa, 0xfffffff7, 0x5, 0x9, 0xc0, 0x3, 0x3, 0x5, 0x7, 0x2, 0x7, 0x9f72, 0xc, 0xffff, 0x8, 0x1ff, 0x6, 0x7, 0x6, 0x2, 0x554d, 0x401, 0x9, 0x6, 0x6, 0x8, 0xe, 0x5, 0x8aa, 0x9, 0x4, 0x4, 0x6, 0x0, 0x8b, 0xffff0001, 0x7, 0x3, 0xa, 0x10000, 0x4, 0x10001, 0x80000000, 0xffff, 0x81, 0x3, 0xd629, 0xfffffffa, 0x6, 0x10, 0x1000, 0xffff2bf6, 0x74, 0xfffffff8, 0x7f, 0x4, 0x8001, 0xe01, 0x2, 0x8, 0xa, 0x7f, 0x7, 0x2, 0x7, 0x4, 0xfffffff9, 0x3ff, 0x1, 0x7fff, 0x3, 0x2, 0x7, 0x6, 0x5, 0xbc7f, 0x401, 0xe, 0x6, 0x7ff, 0x6, 0xfffffff0, 0x2, 0x6, 0x8, 0x1, 0x0, 0x7, 0x10, 0x1, 0x0, 0x10, 0xfff, 0x0, 0x154, 0xb, 0x10001, 0xb, 0x8, 0x4, 0x6, 0x7, 0x565b8f52, 0x0, 0x1000, 0x0, 0x9, 0x8, 0x3, 0x6, 0x3, 0xc, 0x7, 0x0, 0xfffffffe, 0x1, 0xef9, 0x9, 0x10001, 0xfff, 0x7, 0x8, 0x7, 0xda6, 0xffff, 0x5, 0x9, 0x5, 0xfffffffd, 0x6, 0x5, 0xffff, 0x4, 0x0, 0x0, 0x1000, 0xab, 0x1, 0xfffffff7, 0xe, 0x0, 0x8, 0x8, 0x4, 0x8, 0x5, 0x5, 0x6, 0x8, 0xc, 0xffff8000, 0x5, 0x7, 0x6, 0x7, 0x6, 0x1, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffff01}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x20000004, 0x2f62, 0x6, 0x8, {0x0, 0x0, 0x1, 0x4, 0xf, 0x400}, {0x40, 0x1, 0x7fff, 0x3, 0x27, 0x5}, 0x7fff, 0x7, 0x3}}]}]}}]}, 0xca0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', r1, @cgroup_sock_addr=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffefa) r10 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="07000000000000000a004e230000000020010000000000000000000000000002050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e210000000100000000000000000000ffff6401010200"/250], 0x110) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000300)={0x6, 'bond_slave_0\x00', {0xfffffffb}, 0x8}) socket$netlink(0x10, 0x3, 0x10) 874.4212ms ago: executing program 0 (id=959): sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040), 0x0}, 0x20) 820.952124ms ago: executing program 4 (id=960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x31, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0xdf, &(0x7f0000000340)="5f604dffc86153db93862df1d87d9a9f2ee50b3e4f5d3c5d3bfa27b129878842d32a6f7a7395e9cbf1ee46d899b853125897a60da54fedbf193ac4d0ac36694c1fd01730e7289fc5e2fa1c60f0b79966c22c817de86960d23b7fad1f6b1010ae4c2a078b117a28237a1b57ac4917b0976321de8c263b8005c2b1d8561fda2778922ab9f562858bd1203a95f0db89fd964a16a78040b2fc36648c919eed164f99ffc5b70b4e0d5ea1a9e58c0c797c4b05e1d89558760307047f93b3cf4076e2051009cb4ec07b38b86c3ca57e12ff26e64aa7a5763e1bb2c90c6730f3c4084a", 0x1000, 0x0, &(0x7f0000000bc0)="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"}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x3c, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) (async) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa8, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x345}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x47}]}, 0xa8}}, 0x24040800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8050}, 0x20000800) 815.583848ms ago: executing program 0 (id=961): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x47fab000) (fail_nth: 16) 787.93568ms ago: executing program 1 (id=962): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 696.684115ms ago: executing program 2 (id=963): r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x8100, {0x0, 0x0, 0x0, 0x0, 0x4200, 0x20002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x4000) 696.154705ms ago: executing program 1 (id=964): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="d41ecd373074179b0ef739ca5055816b3c0ff2dfa854aa73a837e39fd2a873b6c6d08f906a2473df688cc3a9259c40f63011e84f118fc60f48d809344474158332333de9bfd19ff530a1a47735451b92690850c7c23852f5bac801eac05acaf9075658c8c8c936697df6884a31addea84c364a9bde0656", 0x77}, {&(0x7f0000000180)="953d3b0d8df0eddd4d51cb3f8d6ceff78f6e6709218b3b2c59286674914b7c304eb7245ca0cc1bac0f87ec049dab7a09f4d4bb75a334d530c67d417f5112e06400d6dca961057de31db2ac1503ca376c14fd9daf65f45ea515f53ce85106d2501b0b0ca628280aa19903839d0fd0200a534b25bcffa98c86f58b8623d322315282f0319de36688b6580ab441e741ce97bdade44ebfcd874aef51855cbac01794227baab93b2d3c5085393a03768ea47bffde7e8acca5b9864a52ce77777e94d335ea7444eb2110fc", 0xc8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="dfaaf1062ddae3767a9f130f0e3bef77c73d89395146", 0x16}, {&(0x7f00000003c0)="1554ee3d839d49168ed6cae7d3cb93080edf3c839e6620c55f6de80d67cbbde9857ca4f91b6e3e3320a109c684e0f8b375227cf4e8fe85dc21da3c8dadde0031bd5b32e013cbdf0774481dbd6abef20bad7e2f30ce2e2807f4473df39b932b25707662c065", 0x65}, {&(0x7f0000000440)="dce249b36755d1399a3093802d7b63f5b87e9f8579fde587a9c9ba1fe3f58f14995b2f93271e6acda266", 0x2a}], 0x3}}], 0x2, 0x40040) shutdown(r0, 0x1) 655.396744ms ago: executing program 3 (id=965): r0 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x20400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'hsr0\x00', 0x1}) 596.317468ms ago: executing program 1 (id=966): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000100001008100"/20, @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) 221.514379ms ago: executing program 0 (id=967): r0 = socket(0x22, 0x800, 0x8) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @local}, 0x10) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000100)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095", @ANYRES16=r1, @ANYBLOB="f59a5e9ba38610efd92f27df8926478243de30b71fdf15db000000000963c34c0219f74b33eb281411d01b2a6ae784bda82c29bea59370d50002931484bfbbfad43694646aa29e825c0d80ea2c2b690eebb5de280f9cec55bac39a4924aa92d21edb8c1f27c57f78c81baac48e0dfc8a2122e8854502d87e18a5c84fb9c8ab492a4d6b26a2ecf9002181c895369d813aa9fb22a58299066848703c2e67ac7a1025a667b4e211c7d3c41611cdf4f9ecc4f794c3a86b1851ae99f127cfe32f73cf13b811b33c6686f4cc615ccd58a7db27f804b5e2705919839ad984457ede423436df49ee9a6c05000000472281", @ANYRESDEC=r0, @ANYRES64], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x801, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x60000081) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) socket$inet_sctp(0x2, 0xb24f2c29d82e0b1a, 0x84) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=@gettaction={0x68, 0x32, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x442d}]}, 0x68}, 0x1, 0xf0ffffffffffff}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r4 = socket(0x1, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRES8=r3, @ANYRES16=r2], 0x6c}, 0x1, 0x0, 0x0, 0x4008881}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x7, 0x80000082, &(0x7f0000000680)="00000000000000000b7ec7658d3feeef8c9d532c01638e948284ca489fe26693dc6c806813283ef8b6045c9d4f27e8f60fcfd0f7b14f23d1771b4bf4b28b3a09b0cbfd3922b80326be54b113f068f8d24540aea1d75d80d261d59d8e85258e021e8c8c524d82b05e4ce6240e357678526fdc4ce8b26e2033fe628cabdd49b49dac4ab6076009ba5789b0262185e250df", 0x90) sendto$inet6(r5, &(0x7f0000000d00)="002bcca89b57b7670ae37762b0841a78a04ca07010cb50ae4d7e50798096b458bb5fecad40cb8c12b3bfdcc037bed0767e26566cad15a4efd92c4be523f250bda69c212e5f9a204fe8f29289575bb1da1d9313d329edfccdd56edbb0d14d8bac133fd9019aac683041f59e12117b1b3ee63c399fbab15915c390e4b2ad49c339af60792b61b64ff68689ee26593c8b0b9f9275a5189d52e74d84a9e163dbced5822c0f4987d56def44c0d89cd8b2eb5ebeccb48f443be6b7506f069374ab2733da8b6cc12d6aa7f0db909f60ad151d652a5b04512ee67d2bd8fedbd386", 0xdd, 0x4004041, &(0x7f0000000140)={0xa, 0x4e21, 0x9e11, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c) (async) r6 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x7a2a88fbe43c37db}, 0x80) sendmmsg(r4, &(0x7f0000000440), 0x0, 0x8000) (async) socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x3b6, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x0) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r7, &(0x7f0000003b00)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x90) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getpeername$ax25(r6, &(0x7f0000000e00)={{0x3, @rose}, [@remote, @bcast, @null, @netrom, @bcast, @default, @null, @null]}, &(0x7f0000000380)=0x48) 140.928214ms ago: executing program 1 (id=968): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000200)={0x0, 0xea60}, 0x10) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) accept$unix(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="6e7385d91882ac8c1c000000240006000300"/36], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) 140.659192ms ago: executing program 4 (id=969): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) 68.373357ms ago: executing program 3 (id=970): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) unshare(0x22020600) r2 = socket(0x23, 0x4000000000080002, 0x0) bind$packet(r2, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbe, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000005600010600020000000000000700000000000000"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x8000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2400000000000000290000003200000002"], 0x28}}], 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0xc], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x1370, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}}, 0x20000000) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2b, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000090000000000000007000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000b7080000000000007b8af8ff00000000b7080000f70d00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000ec06040000f0ffffffb70201000000000000800000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r4, @ANYBLOB="000000000400fbff172a0000c9997f5bf3c6275b7f5f2cb2", @ANYRES32, @ANYBLOB="000000000100000085000000010000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000230001"], 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 67.459403ms ago: executing program 2 (id=971): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0x43, 0xa0, 0xd8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00', {}, {}, 0x6f}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001580), &(0x7f00000015c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c00168048000880440001803e0003"], 0x70}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2e, 0x0, 0x0, @void, @value}, 0x20) syz_emit_ethernet(0x1e, &(0x7f0000000340)={@local, @local, @void, {@can={0xc, {{}, 0x5, 0x1, 0x0, 0x0, "51f8ff0800000037"}}}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in, 0x4d4, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x3, 0xb7, 0x0, 0x7, 0x5}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee, 0x1}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r7, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}]]}, 0x30}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001540)={r12, &(0x7f0000000280)="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", &(0x7f0000000380)=""/15}, 0x20) 25.896113ms ago: executing program 4 (id=972): r0 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x100}, 0xc) 0s ago: executing program 0 (id=973): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x24000004) kernel console output (not intermixed with test programs): 2663][ T6348] __xdp_reg_mem_model+0x16b/0x620 [ 77.937800][ T6348] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 77.943451][ T6348] ? page_pool_list+0x232/0x280 [ 77.948324][ T6348] ? page_pool_create_percpu+0x64a/0xa00 [ 77.953989][ T6348] xdp_reg_mem_model+0x22/0x40 [ 77.959043][ T6348] bpf_test_run_xdp_live+0x32f/0x21b0 [ 77.964445][ T6348] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 77.970359][ T6348] ? __pfx_lock_release+0x10/0x10 [ 77.975417][ T6348] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 77.980726][ T6348] ? __pfx___might_resched+0x10/0x10 [ 77.986040][ T6348] ? __mutex_unlock_slowpath+0x21d/0x750 [ 77.991700][ T6348] ? __pfx_autoremove_wake_function+0x10/0x10 [ 77.997795][ T6348] ? __mutex_unlock_slowpath+0x21d/0x750 [ 78.003456][ T6348] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 78.009279][ T6348] ? synchronize_rcu+0x11b/0x360 [ 78.014242][ T6348] ? __pfx_synchronize_rcu+0x10/0x10 [ 78.019576][ T6348] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 78.025840][ T6348] ? 0xffffffffa0000950 [ 78.030034][ T6348] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.035971][ T6348] ? _copy_from_user+0x99/0xc0 [ 78.040764][ T6348] ? bpf_test_init+0x15a/0x180 [ 78.043446][ T6364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.150'. [ 78.045533][ T6348] ? xdp_convert_md_to_buff+0x5b/0x330 [ 78.045580][ T6348] bpf_prog_test_run_xdp+0x805/0x11e0 [ 78.065253][ T6348] ? __pfx_lock_release+0x10/0x10 [ 78.070315][ T6348] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.076318][ T6348] ? __fget_files+0x29/0x470 [ 78.081127][ T6348] ? fput+0x1a8/0x230 [ 78.085135][ T6348] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.090971][ T6348] bpf_prog_test_run+0x2e4/0x360 [ 78.095940][ T6348] __sys_bpf+0x48d/0x810 [ 78.100211][ T6348] ? __pfx___sys_bpf+0x10/0x10 [ 78.105003][ T6348] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.111016][ T6348] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.117377][ T6348] ? do_syscall_64+0x100/0x230 [ 78.122172][ T6348] __x64_sys_bpf+0x7c/0x90 [ 78.126614][ T6348] do_syscall_64+0xf3/0x230 [ 78.131146][ T6348] ? clear_bhb_loop+0x35/0x90 [ 78.135407][ T6366] netlink: 464 bytes leftover after parsing attributes in process `syz.4.155'. [ 78.135859][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.135888][ T6348] RIP: 0033:0x7f1d0a17e819 [ 78.135907][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.135922][ T6348] RSP: 002b:00007f1d07ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.183182][ T6348] RAX: ffffffffffffffda RBX: 00007f1d0a335fa0 RCX: 00007f1d0a17e819 [ 78.191176][ T6348] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 78.199168][ T6348] RBP: 00007f1d07ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.207159][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.215146][ T6348] R13: 0000000000000000 R14: 00007f1d0a335fa0 R15: 00007ffda18ec6c8 [ 78.223154][ T6348] [ 78.244953][ T6348] Illegal XDP return value 6348 on prog (id 33) dev N/A, expect packet loss! [ 78.385811][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.160'. [ 78.531208][ T6386] syz.0.161 uses obsolete (PF_INET,SOCK_PACKET) [ 78.815427][ T6405] FAULT_INJECTION: forcing a failure. [ 78.815427][ T6405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.828994][ T6405] CPU: 1 UID: 0 PID: 6405 Comm: syz.2.164 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 78.839625][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 78.849697][ T6405] Call Trace: [ 78.852982][ T6405] [ 78.855907][ T6405] dump_stack_lvl+0x241/0x360 [ 78.860582][ T6405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.865775][ T6405] ? __pfx__printk+0x10/0x10 [ 78.870373][ T6405] ? __pfx_lock_release+0x10/0x10 [ 78.875427][ T6405] should_fail_ex+0x3b0/0x4e0 [ 78.880131][ T6405] _copy_from_user+0x2f/0xc0 [ 78.884753][ T6405] copy_msghdr_from_user+0xae/0x680 [ 78.889982][ T6405] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 78.895832][ T6405] __sys_sendmsg+0x22d/0x380 [ 78.900458][ T6405] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.905597][ T6405] ? __pfx_vfs_write+0x10/0x10 [ 78.910388][ T6405] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.916740][ T6405] ? do_syscall_64+0x100/0x230 [ 78.921516][ T6405] ? do_syscall_64+0xb6/0x230 [ 78.926190][ T6405] do_syscall_64+0xf3/0x230 [ 78.930701][ T6405] ? clear_bhb_loop+0x35/0x90 [ 78.935391][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.941279][ T6405] RIP: 0033:0x7f1d0a17e819 [ 78.945694][ T6405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.965302][ T6405] RSP: 002b:00007f1d07ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.973713][ T6405] RAX: ffffffffffffffda RBX: 00007f1d0a335fa0 RCX: 00007f1d0a17e819 [ 78.981682][ T6405] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 78.989657][ T6405] RBP: 00007f1d07ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.997645][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.005630][ T6405] R13: 0000000000000000 R14: 00007f1d0a335fa0 R15: 00007ffda18ec6c8 [ 79.013640][ T6405] [ 79.603730][ T6433] block nbd0: not configured, cannot reconfigure [ 80.558521][ T29] audit: type=1107 audit(1732163354.185:4): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 80.772431][ T6480] FAULT_INJECTION: forcing a failure. [ 80.772431][ T6480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.878524][ T6480] CPU: 1 UID: 0 PID: 6480 Comm: syz.0.189 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 80.889160][ T6480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 80.899213][ T6480] Call Trace: [ 80.902486][ T6480] [ 80.905414][ T6480] dump_stack_lvl+0x241/0x360 [ 80.910099][ T6480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.915291][ T6480] ? __pfx__printk+0x10/0x10 [ 80.919884][ T6480] ? __pfx_lock_release+0x10/0x10 [ 80.924917][ T6480] should_fail_ex+0x3b0/0x4e0 [ 80.929593][ T6480] _copy_to_iter+0x21f/0x1e70 [ 80.934267][ T6480] ? do_raw_spin_unlock+0x13c/0x8b0 [ 80.939469][ T6480] ? free_unref_page+0x741/0x1140 [ 80.944495][ T6480] ? __pfx__copy_to_iter+0x10/0x10 [ 80.949610][ T6480] ? __folio_put+0x2c7/0x440 [ 80.954199][ T6480] ? page_copy_sane+0x46/0x260 [ 80.958963][ T6480] copy_page_to_iter+0xb1/0x160 [ 80.963816][ T6480] pipe_to_user+0xa9/0x140 [ 80.968243][ T6480] __splice_from_pipe+0x346/0x8b0 [ 80.973277][ T6480] ? __pfx_pipe_to_user+0x10/0x10 [ 80.978301][ T6480] __se_sys_vmsplice+0x40f/0x1470 [ 80.983342][ T6480] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 80.988804][ T6480] ? vfs_write+0x730/0xd30 [ 80.993219][ T6480] ? __mutex_unlock_slowpath+0x21d/0x750 [ 80.998858][ T6480] ? __pfx_vfs_write+0x10/0x10 [ 81.003624][ T6480] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.009614][ T6480] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.015617][ T6480] ? do_syscall_64+0x100/0x230 [ 81.020382][ T6480] ? do_syscall_64+0xb6/0x230 [ 81.025055][ T6480] do_syscall_64+0xf3/0x230 [ 81.029559][ T6480] ? clear_bhb_loop+0x35/0x90 [ 81.034235][ T6480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.040126][ T6480] RIP: 0033:0x7f7c2897e819 [ 81.044538][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.064142][ T6480] RSP: 002b:00007f7c296b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 81.072551][ T6480] RAX: ffffffffffffffda RBX: 00007f7c28b36080 RCX: 00007f7c2897e819 [ 81.080519][ T6480] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 81.088484][ T6480] RBP: 00007f7c296b0090 R08: 0000000000000000 R09: 0000000000000000 [ 81.096457][ T6480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.104427][ T6480] R13: 0000000000000001 R14: 00007f7c28b36080 R15: 00007ffda2fda0f8 [ 81.112440][ T6480] [ 81.489716][ T6499] FAULT_INJECTION: forcing a failure. [ 81.489716][ T6499] name failslab, interval 1, probability 0, space 0, times 0 [ 81.529731][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.4.197 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 81.538196][ T6501] netlink: 'syz.0.198': attribute type 2 has an invalid length. [ 81.540348][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 81.540365][ T6499] Call Trace: [ 81.540373][ T6499] [ 81.540382][ T6499] dump_stack_lvl+0x241/0x360 [ 81.568977][ T6499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.574216][ T6499] ? __pfx__printk+0x10/0x10 [ 81.578837][ T6499] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 81.584327][ T6499] ? __pfx___might_resched+0x10/0x10 [ 81.589644][ T6499] should_fail_ex+0x3b0/0x4e0 [ 81.594350][ T6499] should_failslab+0xac/0x100 [ 81.599050][ T6499] ? rtnl_newlink+0x12e/0x24f0 [ 81.603837][ T6499] __kmalloc_cache_noprof+0x6c/0x2c0 [ 81.609153][ T6499] rtnl_newlink+0x12e/0x24f0 [ 81.613765][ T6499] ? kasan_save_track+0x51/0x80 [ 81.618633][ T6499] ? kasan_save_free_info+0x40/0x50 [ 81.623855][ T6499] ? kmem_cache_free+0x1a2/0x420 [ 81.628816][ T6499] ? nlmon_xmit+0xaf/0x100 [ 81.633255][ T6499] ? dev_hard_start_xmit+0x27a/0x7e0 [ 81.638567][ T6499] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.643614][ T6499] ? netlink_unicast+0x7c4/0x990 [ 81.648577][ T6499] ? __pfx_validate_chain+0x10/0x10 [ 81.653798][ T6499] ? __sys_sendmsg+0x292/0x380 [ 81.658583][ T6499] ? do_syscall_64+0xf3/0x230 [ 81.663282][ T6499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.669392][ T6499] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.675402][ T6499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.681301][ T6506] netlink: 'syz.2.201': attribute type 11 has an invalid length. [ 81.681741][ T6499] ? mark_lock+0x9a/0x360 [ 81.681769][ T6499] ? __lock_acquire+0x1384/0x2050 [ 81.698866][ T6499] ? rcu_read_unlock+0x87/0xa0 [ 81.703653][ T6499] ? __dev_queue_xmit+0x1775/0x3f50 [ 81.708892][ T6499] ? __pfx_lock_release+0x10/0x10 [ 81.713956][ T6499] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.719018][ T6499] rtnetlink_rcv_msg+0x791/0xcf0 [ 81.723976][ T6499] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 81.729122][ T6499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.734609][ T6499] ? ref_tracker_free+0x643/0x7e0 [ 81.739663][ T6499] netlink_rcv_skb+0x1e3/0x430 [ 81.744453][ T6499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.749934][ T6499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.755270][ T6499] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.760498][ T6499] netlink_unicast+0x7f6/0x990 [ 81.765296][ T6499] ? __pfx_netlink_unicast+0x10/0x10 [ 81.770599][ T6499] ? __virt_addr_valid+0x183/0x530 [ 81.775734][ T6499] ? __check_object_size+0x48e/0x900 [ 81.781045][ T6499] netlink_sendmsg+0x8e4/0xcb0 [ 81.785845][ T6499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.791158][ T6499] ? aa_sock_msg_perm+0x91/0x160 [ 81.796125][ T6499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.801432][ T6499] __sock_sendmsg+0x221/0x270 [ 81.806139][ T6499] ____sys_sendmsg+0x52a/0x7e0 [ 81.810938][ T6499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.816273][ T6499] __sys_sendmsg+0x292/0x380 [ 81.820898][ T6499] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.826049][ T6499] ? __pfx_vfs_write+0x10/0x10 [ 81.830859][ T6499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.837212][ T6499] ? do_syscall_64+0x100/0x230 [ 81.841530][ T6512] __nla_validate_parse: 8 callbacks suppressed [ 81.841545][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 81.841986][ T6499] ? do_syscall_64+0xb6/0x230 [ 81.842016][ T6499] do_syscall_64+0xf3/0x230 [ 81.866076][ T6499] ? clear_bhb_loop+0x35/0x90 [ 81.870780][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.876694][ T6499] RIP: 0033:0x7fc10777e819 [ 81.881130][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.900754][ T6499] RSP: 002b:00007fc1084fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.909193][ T6499] RAX: ffffffffffffffda RBX: 00007fc107935fa0 RCX: 00007fc10777e819 [ 81.917184][ T6499] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 81.925179][ T6499] RBP: 00007fc1084fe090 R08: 0000000000000000 R09: 0000000000000000 [ 81.933173][ T6499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.941168][ T6499] R13: 0000000000000000 R14: 00007fc107935fa0 R15: 00007fff5dd0ecb8 [ 81.949173][ T6499] [ 82.076330][ T6516] netlink: 'syz.4.205': attribute type 3 has an invalid length. [ 82.135679][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 82.452035][ T6537] netlink: 'syz.2.214': attribute type 11 has an invalid length. [ 82.470255][ T6537] netlink: 204 bytes leftover after parsing attributes in process `syz.2.214'. [ 82.558197][ T6544] netlink: 108 bytes leftover after parsing attributes in process `syz.3.217'. [ 82.567448][ T6544] netlink: 108 bytes leftover after parsing attributes in process `syz.3.217'. [ 82.641704][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 82.762189][ T6557] FAULT_INJECTION: forcing a failure. [ 82.762189][ T6557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.775412][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.3.221 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 82.786028][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 82.796105][ T6557] Call Trace: [ 82.799408][ T6557] [ 82.802355][ T6557] dump_stack_lvl+0x241/0x360 [ 82.807058][ T6557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.812277][ T6557] ? __pfx__printk+0x10/0x10 [ 82.816935][ T6557] ? snprintf+0xda/0x120 [ 82.821213][ T6557] should_fail_ex+0x3b0/0x4e0 [ 82.825917][ T6557] _copy_to_user+0x31/0xb0 [ 82.830357][ T6557] simple_read_from_buffer+0xca/0x150 [ 82.835759][ T6557] proc_fail_nth_read+0x1e9/0x250 [ 82.840807][ T6557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.846387][ T6557] ? rw_verify_area+0x55e/0x6f0 [ 82.851269][ T6557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.856844][ T6557] vfs_read+0x1fc/0xb70 [ 82.861020][ T6557] ? fdget_pos+0x24e/0x320 [ 82.865459][ T6557] ? __pfx_vfs_read+0x10/0x10 [ 82.870170][ T6557] ? __fget_files+0x3f3/0x470 [ 82.874878][ T6557] ? fdget_pos+0x24e/0x320 [ 82.879319][ T6557] ksys_read+0x183/0x2b0 [ 82.883585][ T6557] ? __pfx_ksys_read+0x10/0x10 [ 82.888384][ T6557] ? do_syscall_64+0x100/0x230 [ 82.893175][ T6557] ? do_syscall_64+0xb6/0x230 [ 82.897963][ T6557] do_syscall_64+0xf3/0x230 [ 82.902487][ T6557] ? clear_bhb_loop+0x35/0x90 [ 82.907190][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.913105][ T6557] RIP: 0033:0x7fa819d7d25c [ 82.917541][ T6557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 82.937166][ T6557] RSP: 002b:00007fa81aaef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.945585][ T6557] RAX: ffffffffffffffda RBX: 00007fa819f35fa0 RCX: 00007fa819d7d25c [ 82.953552][ T6557] RDX: 000000000000000f RSI: 00007fa81aaef0a0 RDI: 0000000000000004 [ 82.961521][ T6557] RBP: 00007fa81aaef090 R08: 0000000000000000 R09: 0000000000000000 [ 82.969505][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.977470][ T6557] R13: 0000000000000000 R14: 00007fa819f35fa0 R15: 00007ffffbedb968 [ 82.985445][ T6557] [ 83.045911][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'. [ 83.062387][ T6562] netlink: 228 bytes leftover after parsing attributes in process `syz.0.213'. [ 83.074122][ T6562] netlink: 72 bytes leftover after parsing attributes in process `syz.0.213'. [ 83.092344][ T6539] bond3 (unregistering): Released all slaves [ 83.178738][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 84.300956][ T6618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.326034][ T6618] bond1: (slave bond2): Enslaving as an active interface with an up link [ 84.844737][ T6642] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 85.660337][ T6662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.688232][ T6662] bond1: (slave bond2): Enslaving as an active interface with an up link [ 86.156078][ T6667] xt_ecn: cannot match TCP bits for non-tcp packets [ 86.304844][ T6675] netlink: 'syz.1.258': attribute type 6 has an invalid length. [ 86.546027][ T6682] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 86.773865][ T6691] xt_policy: too many policy elements [ 87.413732][ T6703] netlink: 'syz.2.266': attribute type 4 has an invalid length. [ 88.532180][ T6729] __nla_validate_parse: 16 callbacks suppressed [ 88.532198][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 88.547762][ T6729] FAULT_INJECTION: forcing a failure. [ 88.547762][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 88.560733][ T6729] CPU: 1 UID: 0 PID: 6729 Comm: syz.3.279 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 88.571343][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 88.581401][ T6729] Call Trace: [ 88.584680][ T6729] [ 88.587608][ T6729] dump_stack_lvl+0x241/0x360 [ 88.592290][ T6729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.597485][ T6729] ? __pfx__printk+0x10/0x10 [ 88.602072][ T6729] ? __kmalloc_noprof+0xb0/0x400 [ 88.607006][ T6729] ? __pfx___might_resched+0x10/0x10 [ 88.612295][ T6729] should_fail_ex+0x3b0/0x4e0 [ 88.616977][ T6729] ? nft_obj_init+0x1c3/0x2f0 [ 88.621653][ T6729] should_failslab+0xac/0x100 [ 88.626325][ T6729] ? nft_obj_init+0x1c3/0x2f0 [ 88.630994][ T6729] __kmalloc_noprof+0xd8/0x400 [ 88.635759][ T6729] nft_obj_init+0x1c3/0x2f0 [ 88.640262][ T6729] nf_tables_newobj+0xd3f/0x17e0 [ 88.645212][ T6729] ? __pfx_nf_tables_newobj+0x10/0x10 [ 88.650591][ T6729] ? __nla_parse+0x40/0x60 [ 88.655006][ T6729] nfnetlink_rcv+0x14e3/0x2ab0 [ 88.659792][ T6729] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 88.664936][ T6729] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.670137][ T6729] ? skb_clone+0x240/0x390 [ 88.674547][ T6729] ? __pfx_lock_release+0x10/0x10 [ 88.679584][ T6729] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.684785][ T6729] netlink_unicast+0x7f6/0x990 [ 88.689554][ T6729] ? __pfx_netlink_unicast+0x10/0x10 [ 88.694830][ T6729] ? __virt_addr_valid+0x183/0x530 [ 88.699938][ T6729] ? __check_object_size+0x48e/0x900 [ 88.705228][ T6729] netlink_sendmsg+0x8e4/0xcb0 [ 88.710002][ T6729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.715307][ T6729] ? aa_sock_msg_perm+0x91/0x160 [ 88.720244][ T6729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.725523][ T6729] __sock_sendmsg+0x221/0x270 [ 88.730197][ T6729] ____sys_sendmsg+0x52a/0x7e0 [ 88.734962][ T6729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.740258][ T6729] __sys_sendmsg+0x292/0x380 [ 88.744850][ T6729] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.749968][ T6729] ? __pfx_vfs_write+0x10/0x10 [ 88.754750][ T6729] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.761075][ T6729] ? do_syscall_64+0x100/0x230 [ 88.765840][ T6729] ? do_syscall_64+0xb6/0x230 [ 88.770517][ T6729] do_syscall_64+0xf3/0x230 [ 88.775021][ T6729] ? clear_bhb_loop+0x35/0x90 [ 88.779699][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.785589][ T6729] RIP: 0033:0x7fa819d7e819 [ 88.790001][ T6729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.809606][ T6729] RSP: 002b:00007fa81aaef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.818018][ T6729] RAX: ffffffffffffffda RBX: 00007fa819f35fa0 RCX: 00007fa819d7e819 [ 88.825991][ T6729] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 88.833952][ T6729] RBP: 00007fa81aaef090 R08: 0000000000000000 R09: 0000000000000000 [ 88.841917][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.849883][ T6729] R13: 0000000000000000 R14: 00007fa819f35fa0 R15: 00007ffffbedb968 [ 88.857860][ T6729] [ 88.940631][ T6731] netlink: 9 bytes leftover after parsing attributes in process `syz.4.280'. [ 88.967638][ T6731] 0·: renamed from hsr_slave_1 (while UP) [ 89.029435][ T29] audit: type=1107 audit(1732163362.655:5): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 89.033953][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 89.065697][ T6731] 0·: entered allmulticast mode [ 89.141255][ T6731] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 90.245183][ T6768] netlink: 'syz.2.290': attribute type 13 has an invalid length. [ 90.814796][ T6780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.295'. [ 90.915954][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 90.954172][ T6784] block nbd0: not configured, cannot reconfigure [ 91.424148][ T6795] x_tables: duplicate underflow at hook 1 [ 91.666616][ T6801] netlink: 52 bytes leftover after parsing attributes in process `syz.4.303'. [ 92.066284][ T46] IPVS: starting estimator thread 0... [ 92.167070][ T6807] IPVS: using max 17 ests per chain, 40800 per kthread [ 92.310178][ T6815] netlink: 'syz.2.304': attribute type 10 has an invalid length. [ 92.459395][ T6815] team0: Device ipvlan1 failed to register rx_handler [ 92.802081][ T6818] veth2: entered allmulticast mode [ 92.958332][ T6825] netlink: 'syz.3.311': attribute type 7 has an invalid length. [ 93.360061][ T6841] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 93.599117][ T6857] netlink: 52 bytes leftover after parsing attributes in process `syz.4.317'. [ 93.718151][ T6861] netlink: 'syz.0.318': attribute type 9 has an invalid length. [ 93.733511][ T6861] tipc: Started in network mode [ 93.738854][ T6861] tipc: Node identity fec0000000000000400000000000002d, cluster identity 4711 [ 93.748184][ T6861] tipc: Enabling of bearer rejected, failed to enable media [ 93.933094][ T6873] netlink: 'syz.4.324': attribute type 1 has an invalid length. [ 93.995729][ T6869] Bluetooth: MGMT ver 1.23 [ 94.024605][ T6877] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 94.063428][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.325'. [ 94.093811][ T6877] bridge0: port 3(macvlan1) entered blocking state [ 94.152312][ T6877] bridge0: port 3(macvlan1) entered disabled state [ 94.186854][ T6877] macvlan1: entered allmulticast mode [ 94.197006][ T6877] veth1_vlan: entered allmulticast mode [ 94.211384][ T6877] macvlan1: entered promiscuous mode [ 94.222534][ T6877] bridge0: port 3(macvlan1) entered blocking state [ 94.229485][ T6877] bridge0: port 3(macvlan1) entered forwarding state [ 94.422067][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 94.691178][ T6914] x_tables: duplicate underflow at hook 2 [ 94.705057][ T6912] tap0: tun_chr_ioctl cmd 1074025673 [ 94.737817][ T6913] x_tables: duplicate underflow at hook 2 [ 95.076184][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.341'. [ 95.664069][ T6955] FAULT_INJECTION: forcing a failure. [ 95.664069][ T6955] name failslab, interval 1, probability 0, space 0, times 0 [ 95.706919][ T6955] CPU: 0 UID: 0 PID: 6955 Comm: syz.4.353 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 95.717565][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 95.727652][ T6955] Call Trace: [ 95.730958][ T6955] [ 95.733915][ T6955] dump_stack_lvl+0x241/0x360 [ 95.738627][ T6955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.743856][ T6955] ? __pfx__printk+0x10/0x10 [ 95.748483][ T6955] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 95.754067][ T6955] ? __pfx___might_resched+0x10/0x10 [ 95.759392][ T6955] should_fail_ex+0x3b0/0x4e0 [ 95.764113][ T6955] ? ima_d_path+0xc4/0x270 [ 95.768564][ T6955] should_failslab+0xac/0x100 [ 95.773272][ T6955] ? ima_d_path+0xc4/0x270 [ 95.777722][ T6955] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 95.783128][ T6955] ima_d_path+0xc4/0x270 [ 95.787400][ T6955] ? __pfx_ima_d_path+0x10/0x10 [ 95.792296][ T6955] process_measurement+0x13e0/0x1fb0 [ 95.797675][ T6955] ? __pfx_process_measurement+0x10/0x10 [ 95.803343][ T6955] ? __pfx_lock_acquire+0x10/0x10 [ 95.808394][ T6955] ? aa_file_perm+0x137/0xf50 [ 95.813097][ T6955] ? alloc_empty_file+0xb8/0x1d0 [ 95.818096][ T6955] ? __asan_memset+0x23/0x50 [ 95.822716][ T6955] ? lockdep_init_map_type+0xa1/0x910 [ 95.828117][ T6955] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 95.833951][ T6955] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 95.840135][ T6955] ima_file_mmap+0x1f4/0x2b0 [ 95.844758][ T6955] ? __raw_spin_lock_init+0x45/0x100 [ 95.850072][ T6955] ? __pfx_ima_file_mmap+0x10/0x10 [ 95.855203][ T6955] ? file_init_path+0x3b/0x570 [ 95.859987][ T6955] ? end_current_label_crit_section+0x151/0x180 [ 95.866233][ T6955] ? common_file_perm+0x1a6/0x210 [ 95.871261][ T6955] security_mmap_file+0x7e7/0xa40 [ 95.876283][ T6955] vm_mmap_pgoff+0x141/0x3d0 [ 95.880872][ T6955] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 95.885987][ T6955] ? hugetlb_file_setup+0x3dc/0x5c0 [ 95.891193][ T6955] ksys_mmap_pgoff+0x53e/0x720 [ 95.895963][ T6955] do_syscall_64+0xf3/0x230 [ 95.900466][ T6955] ? clear_bhb_loop+0x35/0x90 [ 95.905143][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.911034][ T6955] RIP: 0033:0x7fc10777e819 [ 95.915447][ T6955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.935061][ T6955] RSP: 002b:00007fc1084fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.943481][ T6955] RAX: ffffffffffffffda RBX: 00007fc107935fa0 RCX: 00007fc10777e819 [ 95.951454][ T6955] RDX: 0000000000000004 RSI: 0000000000400000 RDI: 0000000020000000 [ 95.959424][ T6955] RBP: 00007fc1084fe090 R08: ffffffffffffffff R09: 0000000047fab000 [ 95.967394][ T6955] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000002 [ 95.975389][ T6955] R13: 0000000000000001 R14: 00007fc107935fa0 R15: 00007fff5dd0ecb8 [ 95.983373][ T6955] [ 96.497171][ T6992] netlink: 'syz.4.363': attribute type 13 has an invalid length. [ 96.611750][ T6997] Cannot find add_set index 0 as target [ 96.921265][ T7003] netlink: 'syz.1.368': attribute type 2 has an invalid length. [ 97.369988][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 97.724576][ T7026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.374'. [ 98.019563][ T7032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.376'. [ 98.193916][ T7034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.377'. [ 98.367415][ T7034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 98.580672][ T7041] FAULT_INJECTION: forcing a failure. [ 98.580672][ T7041] name failslab, interval 1, probability 0, space 0, times 0 [ 98.628013][ T7041] CPU: 1 UID: 0 PID: 7041 Comm: syz.1.380 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 98.638662][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.648746][ T7041] Call Trace: [ 98.652047][ T7041] [ 98.655008][ T7041] dump_stack_lvl+0x241/0x360 [ 98.659714][ T7041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.664941][ T7041] ? __pfx__printk+0x10/0x10 [ 98.669564][ T7041] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 98.675582][ T7041] ? __pfx___might_resched+0x10/0x10 [ 98.680897][ T7041] should_fail_ex+0x3b0/0x4e0 [ 98.685598][ T7041] should_failslab+0xac/0x100 [ 98.690279][ T7041] ? __alloc_skb+0x1c3/0x440 [ 98.694872][ T7041] kmem_cache_alloc_node_noprof+0x71/0x320 [ 98.700681][ T7041] ? genl_rcv_msg+0x88c/0xec0 [ 98.705378][ T7041] __alloc_skb+0x1c3/0x440 [ 98.709815][ T7041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.715901][ T7041] ? __pfx___alloc_skb+0x10/0x10 [ 98.720851][ T7041] netlink_dump+0x239/0xe10 [ 98.725367][ T7041] ? __pfx_netlink_dump+0x10/0x10 [ 98.730399][ T7041] ? __asan_memset+0x23/0x50 [ 98.734984][ T7041] ? genl_start+0x4ae/0x6d0 [ 98.739487][ T7041] __netlink_dump_start+0x5a2/0x790 [ 98.744775][ T7041] genl_rcv_msg+0x88c/0xec0 [ 98.749282][ T7041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.754311][ T7041] ? __pfx_genl_start+0x10/0x10 [ 98.759152][ T7041] ? __pfx_genl_dumpit+0x10/0x10 [ 98.764085][ T7041] ? __pfx_genl_done+0x10/0x10 [ 98.768857][ T7041] ? __pfx_lock_acquire+0x10/0x10 [ 98.773884][ T7041] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 98.779774][ T7041] ? __pfx___might_resched+0x10/0x10 [ 98.785065][ T7041] netlink_rcv_skb+0x1e3/0x430 [ 98.789826][ T7041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.794860][ T7041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.800172][ T7041] genl_rcv+0x28/0x40 [ 98.804154][ T7041] netlink_unicast+0x7f6/0x990 [ 98.808927][ T7041] ? __pfx_netlink_unicast+0x10/0x10 [ 98.814216][ T7041] ? __virt_addr_valid+0x183/0x530 [ 98.819417][ T7041] ? __check_object_size+0x48e/0x900 [ 98.824879][ T7041] netlink_sendmsg+0x8e4/0xcb0 [ 98.829655][ T7041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.834942][ T7041] ? aa_sock_msg_perm+0x91/0x160 [ 98.839881][ T7041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.845168][ T7041] __sock_sendmsg+0x221/0x270 [ 98.849843][ T7041] ____sys_sendmsg+0x52a/0x7e0 [ 98.855053][ T7041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.860356][ T7041] __sys_sendmsg+0x292/0x380 [ 98.864950][ T7041] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.870072][ T7041] ? __pfx_vfs_write+0x10/0x10 [ 98.874847][ T7041] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.881178][ T7041] ? do_syscall_64+0x100/0x230 [ 98.886117][ T7041] ? do_syscall_64+0xb6/0x230 [ 98.890795][ T7041] do_syscall_64+0xf3/0x230 [ 98.895294][ T7041] ? clear_bhb_loop+0x35/0x90 [ 98.899971][ T7041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.905861][ T7041] RIP: 0033:0x7fd01ed7e819 [ 98.910273][ T7041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.929878][ T7041] RSP: 002b:00007fd01fb6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.938291][ T7041] RAX: ffffffffffffffda RBX: 00007fd01ef35fa0 RCX: 00007fd01ed7e819 [ 98.946258][ T7041] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 98.954219][ T7041] RBP: 00007fd01fb6e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.962181][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.970150][ T7041] R13: 0000000000000000 R14: 00007fd01ef35fa0 R15: 00007ffc6745b558 [ 98.978129][ T7041] [ 99.434507][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 99.546184][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 99.968589][ T7073] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 99.994322][ T7079] x_tables: duplicate entry at hook 1 [ 100.290238][ T7086] bridge2: entered promiscuous mode [ 100.316176][ T7086] bridge2: entered allmulticast mode [ 100.354339][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 100.371281][ T7086] team0: Port device bridge2 added [ 100.487955][ T7092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.399'. [ 100.566085][ T7092] netlink: 120 bytes leftover after parsing attributes in process `syz.2.399'. [ 100.629638][ T7088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.658492][ T7088] bond3: (slave bond4): Enslaving as an active interface with an up link [ 100.682924][ T7092] netlink: 72 bytes leftover after parsing attributes in process `syz.2.399'. [ 100.777955][ T7094] FAULT_INJECTION: forcing a failure. [ 100.777955][ T7094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.833174][ T7094] CPU: 1 UID: 0 PID: 7094 Comm: syz.0.400 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 100.843815][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 100.853979][ T7094] Call Trace: [ 100.857277][ T7094] [ 100.860218][ T7094] dump_stack_lvl+0x241/0x360 [ 100.864918][ T7094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.870137][ T7094] ? __pfx__printk+0x10/0x10 [ 100.874749][ T7094] ? snprintf+0xda/0x120 [ 100.879013][ T7094] should_fail_ex+0x3b0/0x4e0 [ 100.883709][ T7094] _copy_to_user+0x31/0xb0 [ 100.888139][ T7094] simple_read_from_buffer+0xca/0x150 [ 100.893537][ T7094] proc_fail_nth_read+0x1e9/0x250 [ 100.898579][ T7094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.904150][ T7094] ? rw_verify_area+0x55e/0x6f0 [ 100.909027][ T7094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.914602][ T7094] vfs_read+0x1fc/0xb70 [ 100.918774][ T7094] ? fdget_pos+0x24e/0x320 [ 100.923296][ T7094] ? __pfx_vfs_read+0x10/0x10 [ 100.928000][ T7094] ? __fget_files+0x3f3/0x470 [ 100.932700][ T7094] ? fdget_pos+0x24e/0x320 [ 100.937131][ T7094] ksys_read+0x183/0x2b0 [ 100.941385][ T7094] ? __pfx_ksys_read+0x10/0x10 [ 100.946164][ T7094] ? rcu_is_watching+0x15/0xb0 [ 100.950955][ T7094] ? trace_sys_enter+0x1f/0xd0 [ 100.955736][ T7094] do_syscall_64+0xf3/0x230 [ 100.960263][ T7094] ? clear_bhb_loop+0x35/0x90 [ 100.964969][ T7094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.970893][ T7094] RIP: 0033:0x7f7c2897d25c [ 100.975322][ T7094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 100.994952][ T7094] RSP: 002b:00007f7c296d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.003388][ T7094] RAX: ffffffffffffffda RBX: 00007f7c28b35fa0 RCX: 00007f7c2897d25c [ 101.011376][ T7094] RDX: 000000000000000f RSI: 00007f7c296d10a0 RDI: 0000000000000004 [ 101.019360][ T7094] RBP: 00007f7c296d1090 R08: 0000000000000000 R09: 0000000000000000 [ 101.027351][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.035343][ T7094] R13: 0000000000000000 R14: 00007f7c28b35fa0 R15: 00007ffda2fda0f8 [ 101.043344][ T7094] [ 101.702117][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 101.711341][ T7098] FAULT_INJECTION: forcing a failure. [ 101.711341][ T7098] name failslab, interval 1, probability 0, space 0, times 0 [ 101.724664][ T7098] CPU: 0 UID: 0 PID: 7098 Comm: syz.4.402 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 101.735297][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 101.745384][ T7098] Call Trace: [ 101.748687][ T7098] [ 101.751630][ T7098] dump_stack_lvl+0x241/0x360 [ 101.756337][ T7098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.761559][ T7098] ? __pfx__printk+0x10/0x10 [ 101.766181][ T7098] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 101.771668][ T7098] ? __pfx___might_resched+0x10/0x10 [ 101.776994][ T7098] should_fail_ex+0x3b0/0x4e0 [ 101.781701][ T7098] should_failslab+0xac/0x100 [ 101.786404][ T7098] ? nfnetlink_rcv+0x1265/0x2ab0 [ 101.791382][ T7098] __kmalloc_cache_noprof+0x6c/0x2c0 [ 101.796696][ T7098] nfnetlink_rcv+0x1265/0x2ab0 [ 101.801526][ T7098] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.806722][ T7098] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.811944][ T7098] ? skb_clone+0x240/0x390 [ 101.816389][ T7098] ? __pfx_lock_release+0x10/0x10 [ 101.821451][ T7098] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.826682][ T7098] netlink_unicast+0x7f6/0x990 [ 101.831477][ T7098] ? __pfx_netlink_unicast+0x10/0x10 [ 101.836780][ T7098] ? __virt_addr_valid+0x183/0x530 [ 101.841916][ T7098] ? __check_object_size+0x48e/0x900 [ 101.847234][ T7098] netlink_sendmsg+0x8e4/0xcb0 [ 101.852034][ T7098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.857347][ T7098] ? aa_sock_msg_perm+0x91/0x160 [ 101.862315][ T7098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.867625][ T7098] __sock_sendmsg+0x221/0x270 [ 101.872340][ T7098] ____sys_sendmsg+0x52a/0x7e0 [ 101.877137][ T7098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.882474][ T7098] __sys_sendmsg+0x292/0x380 [ 101.887101][ T7098] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.892262][ T7098] ? bpf_trace_run2+0x1fc/0x540 [ 101.897135][ T7098] ? bpf_trace_run2+0x36e/0x540 [ 101.902018][ T7098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.908376][ T7098] ? rcu_is_watching+0x15/0xb0 [ 101.913159][ T7098] ? trace_sys_enter+0x1f/0xd0 [ 101.917951][ T7098] do_syscall_64+0xf3/0x230 [ 101.922483][ T7098] ? clear_bhb_loop+0x35/0x90 [ 101.927187][ T7098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.933105][ T7098] RIP: 0033:0x7fc10777e819 [ 101.937539][ T7098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.957167][ T7098] RSP: 002b:00007fc1084fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.965612][ T7098] RAX: ffffffffffffffda RBX: 00007fc107935fa0 RCX: 00007fc10777e819 [ 101.973604][ T7098] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 101.981596][ T7098] RBP: 00007fc1084fe090 R08: 0000000000000000 R09: 0000000000000000 [ 101.989590][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.997580][ T7098] R13: 0000000000000000 R14: 00007fc107935fa0 R15: 00007fff5dd0ecb8 [ 102.005586][ T7098] [ 102.297276][ T7105] xt_TCPMSS: Only works on TCP SYN packets [ 102.448212][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.408'. [ 102.557154][ T7116] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 102.592966][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 102.693280][ T7116] 8021q: adding VLAN 0 to HW filter on device bond5 [ 102.728060][ T7129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 102.740397][ T7129] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 102.757819][ T7129] bond5: (slave vcan1): Error -95 calling set_mac_address [ 102.768741][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 102.848341][ T7140] nbd: must specify at least one socket [ 102.886034][ T7116] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 102.913959][ T7116] bond5: (slave batadv1): making interface the new active one [ 102.962380][ T7116] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 103.070846][ T7135] 8021q: adding VLAN 0 to HW filter on device bond7 [ 103.112486][ T7135] bond6: (slave bond7): Enslaving as an active interface with an up link [ 103.198676][ T7142] bridge1: entered promiscuous mode [ 103.247317][ T7142] bridge1: entered allmulticast mode [ 103.420181][ T7158] FAULT_INJECTION: forcing a failure. [ 103.420181][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.463900][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.2.421 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 103.474546][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 103.484631][ T7158] Call Trace: [ 103.487933][ T7158] [ 103.490892][ T7158] dump_stack_lvl+0x241/0x360 [ 103.495614][ T7158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.500858][ T7158] ? __pfx__printk+0x10/0x10 [ 103.505485][ T7158] ? __pfx_lock_release+0x10/0x10 [ 103.510562][ T7158] should_fail_ex+0x3b0/0x4e0 [ 103.515275][ T7158] _copy_to_iter+0x21f/0x1e70 [ 103.519991][ T7158] ? do_raw_spin_unlock+0x13c/0x8b0 [ 103.525253][ T7158] ? free_unref_page+0x741/0x1140 [ 103.530320][ T7158] ? __pfx__copy_to_iter+0x10/0x10 [ 103.535473][ T7158] ? __folio_put+0x2c7/0x440 [ 103.540093][ T7158] ? page_copy_sane+0x46/0x260 [ 103.544899][ T7158] copy_page_to_iter+0xb1/0x160 [ 103.549788][ T7158] pipe_to_user+0xa9/0x140 [ 103.554229][ T7158] __splice_from_pipe+0x346/0x8b0 [ 103.559299][ T7158] ? __pfx_pipe_to_user+0x10/0x10 [ 103.564357][ T7158] __se_sys_vmsplice+0x40f/0x1470 [ 103.569414][ T7158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.575782][ T7158] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 103.581734][ T7158] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 103.587662][ T7158] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 103.594049][ T7158] ? __send_signal_locked+0xb44/0xdc0 [ 103.599454][ T7158] ? __lock_task_sighand+0x2a5/0x2d0 [ 103.604772][ T7158] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 103.610273][ T7158] ? bpf_trace_run2+0x1fc/0x540 [ 103.615150][ T7158] ? bpf_send_signal_common+0x2dd/0x430 [ 103.620734][ T7158] ? __pfx_lock_release+0x10/0x10 [ 103.625800][ T7158] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 103.631830][ T7158] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.637856][ T7158] ? rcu_is_watching+0x15/0xb0 [ 103.642647][ T7158] ? trace_sys_enter+0x1f/0xd0 [ 103.647447][ T7158] do_syscall_64+0xf3/0x230 [ 103.651984][ T7158] ? clear_bhb_loop+0x35/0x90 [ 103.656690][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.662622][ T7158] RIP: 0033:0x7f1d0a17e819 [ 103.667060][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.686670][ T7158] RSP: 002b:00007f1d07fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 103.695088][ T7158] RAX: ffffffffffffffda RBX: 00007f1d0a336080 RCX: 00007f1d0a17e819 [ 103.703054][ T7158] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 103.711020][ T7158] RBP: 00007f1d07fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 103.718992][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.726976][ T7158] R13: 0000000000000001 R14: 00007f1d0a336080 R15: 00007ffda18ec6c8 [ 103.734963][ T7158] [ 104.037922][ T7173] tipc: Failed to obtain node identity [ 104.043460][ T7173] tipc: Enabling of bearer rejected, failed to enable media [ 104.134937][ T7173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.445288][ T7185] __nla_validate_parse: 8 callbacks suppressed [ 104.445306][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 104.569576][ T7185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.593486][ T7197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.432'. [ 104.607887][ T7185] bond1: (slave bond2): Enslaving as an active interface with an up link [ 104.616475][ T7197] netlink: 120 bytes leftover after parsing attributes in process `syz.4.432'. [ 104.627899][ T7197] netlink: 72 bytes leftover after parsing attributes in process `syz.4.432'. [ 104.807714][ T7204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.831042][ T7204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.835263][ T7210] bridge2: entered promiscuous mode [ 104.872784][ T7210] bridge2: entered allmulticast mode [ 105.058132][ T7218] netlink: 'syz.0.441': attribute type 3 has an invalid length. [ 105.378828][ T46] IPVS: starting estimator thread 0... [ 105.516722][ T7229] IPVS: using max 21 ests per chain, 50400 per kthread [ 105.872200][ T7241] IPv6: sit1: Disabled Multicast RS [ 105.892803][ T7247] netlink: 5 bytes leftover after parsing attributes in process `syz.4.451'. [ 105.989088][ T29] audit: type=1107 audit(1732163379.615:6): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 106.048222][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 106.506302][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 106.543059][ T7277] netlink: 60 bytes leftover after parsing attributes in process `syz.4.465'. [ 106.838257][ T7296] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 107.097899][ T7310] FAULT_INJECTION: forcing a failure. [ 107.097899][ T7310] name failslab, interval 1, probability 0, space 0, times 0 [ 107.099431][ T29] audit: type=1107 audit(1732163380.705:7): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.111284][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz.1.479 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 107.111339][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 107.111351][ T7310] Call Trace: [ 107.111359][ T7310] [ 107.111367][ T7310] dump_stack_lvl+0x241/0x360 [ 107.111399][ T7310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.111421][ T7310] ? __pfx__printk+0x10/0x10 [ 107.111446][ T7310] ? fs_reclaim_acquire+0x93/0x130 [ 107.111465][ T7310] ? __pfx___might_resched+0x10/0x10 [ 107.254048][ T7310] should_fail_ex+0x3b0/0x4e0 [ 107.258751][ T7310] ? ima_inode_get+0xf3/0x4e0 [ 107.263428][ T7310] should_failslab+0xac/0x100 [ 107.268128][ T7310] ? ima_inode_get+0xf3/0x4e0 [ 107.272824][ T7310] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 107.278216][ T7310] ima_inode_get+0xf3/0x4e0 [ 107.282733][ T7310] process_measurement+0x449/0x1fb0 [ 107.287946][ T7310] ? __pfx_process_measurement+0x10/0x10 [ 107.293581][ T7310] ? __pfx_lock_acquire+0x10/0x10 [ 107.298609][ T7310] ? aa_file_perm+0x137/0xf50 [ 107.303285][ T7310] ? alloc_empty_file+0xb8/0x1d0 [ 107.308248][ T7310] ? __asan_memset+0x23/0x50 [ 107.312839][ T7310] ? lockdep_init_map_type+0xa1/0x910 [ 107.318219][ T7310] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 107.324028][ T7310] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 107.330184][ T7310] ima_file_mmap+0x1f4/0x2b0 [ 107.334773][ T7310] ? __raw_spin_lock_init+0x45/0x100 [ 107.340058][ T7310] ? __pfx_ima_file_mmap+0x10/0x10 [ 107.345170][ T7310] ? file_init_path+0x3b/0x570 [ 107.349931][ T7310] ? end_current_label_crit_section+0x151/0x180 [ 107.356168][ T7310] ? common_file_perm+0x1a6/0x210 [ 107.361193][ T7310] security_mmap_file+0x7e7/0xa40 [ 107.366218][ T7310] vm_mmap_pgoff+0x141/0x3d0 [ 107.370807][ T7310] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 107.375916][ T7310] ? hugetlb_file_setup+0x3dc/0x5c0 [ 107.381118][ T7310] ksys_mmap_pgoff+0x53e/0x720 [ 107.385888][ T7310] do_syscall_64+0xf3/0x230 [ 107.390392][ T7310] ? clear_bhb_loop+0x35/0x90 [ 107.395074][ T7310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.400967][ T7310] RIP: 0033:0x7fd01ed7e819 [ 107.405380][ T7310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.424993][ T7310] RSP: 002b:00007fd01fb6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 107.433439][ T7310] RAX: ffffffffffffffda RBX: 00007fd01ef35fa0 RCX: 00007fd01ed7e819 [ 107.441428][ T7310] RDX: 0000000000000004 RSI: 0000000000400000 RDI: 0000000020000000 [ 107.449401][ T7310] RBP: 00007fd01fb6e090 R08: ffffffffffffffff R09: 0000000047fab000 [ 107.457370][ T7310] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000002 [ 107.465340][ T7310] R13: 0000000000000001 R14: 00007fd01ef35fa0 R15: 00007ffc6745b558 [ 107.473321][ T7310] [ 107.555746][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 107.577535][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 107.704427][ T7317] IPv6: sit1: Disabled Multicast RS [ 107.776676][ T7325] FAULT_INJECTION: forcing a failure. [ 107.776676][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 107.792301][ T7325] CPU: 1 UID: 0 PID: 7325 Comm: syz.3.484 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 107.802945][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 107.813031][ T7325] Call Trace: [ 107.816329][ T7325] [ 107.819282][ T7325] dump_stack_lvl+0x241/0x360 [ 107.823992][ T7325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.829222][ T7325] ? __pfx__printk+0x10/0x10 [ 107.833845][ T7325] ? fs_reclaim_acquire+0x93/0x130 [ 107.838984][ T7325] ? __pfx___might_resched+0x10/0x10 [ 107.844294][ T7325] ? dynamic_dname+0x141/0x1b0 [ 107.849110][ T7325] should_fail_ex+0x3b0/0x4e0 [ 107.853840][ T7325] ? tomoyo_encode+0x26f/0x540 [ 107.858642][ T7325] should_failslab+0xac/0x100 [ 107.863367][ T7325] ? tomoyo_encode+0x26f/0x540 [ 107.868166][ T7325] __kmalloc_noprof+0xd8/0x400 [ 107.872987][ T7325] tomoyo_encode+0x26f/0x540 [ 107.877621][ T7325] ? __pfx_sockfs_dname+0x10/0x10 [ 107.882687][ T7325] tomoyo_realpath_from_path+0x59e/0x5e0 [ 107.888373][ T7325] tomoyo_path_number_perm+0x23a/0x880 [ 107.893876][ T7325] ? tomoyo_path_number_perm+0x208/0x880 [ 107.899557][ T7325] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.905742][ T7325] ? __fget_files+0x29/0x470 [ 107.910372][ T7325] ? __fget_files+0x3f3/0x470 [ 107.915097][ T7325] security_file_ioctl+0xc6/0x2a0 [ 107.920175][ T7325] __se_sys_ioctl+0x47/0x170 [ 107.924805][ T7325] do_syscall_64+0xf3/0x230 [ 107.929351][ T7325] ? clear_bhb_loop+0x35/0x90 [ 107.934073][ T7325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.940006][ T7325] RIP: 0033:0x7fa819d7e819 [ 107.944452][ T7325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.946738][ T29] audit: type=1107 audit(1732163381.425:8): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.964063][ T7325] RSP: 002b:00007fa81aaef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.964106][ T7325] RAX: ffffffffffffffda RBX: 00007fa819f35fa0 RCX: 00007fa819d7e819 [ 107.964120][ T7325] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 107.964131][ T7325] RBP: 00007fa81aaef090 R08: 0000000000000000 R09: 0000000000000000 [ 107.964143][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.964154][ T7325] R13: 0000000000000000 R14: 00007fa819f35fa0 R15: 00007ffffbedb968 [ 107.964182][ T7325] [ 107.965227][ T7325] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.975456][ T7362] syz.1.497 uses old SIOCAX25GETINFO [ 109.125451][ T7370] netlink: 'syz.4.501': attribute type 7 has an invalid length. [ 109.201035][ T7377] FAULT_INJECTION: forcing a failure. [ 109.201035][ T7377] name failslab, interval 1, probability 0, space 0, times 0 [ 109.233437][ T7377] CPU: 0 UID: 0 PID: 7377 Comm: syz.3.503 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 109.244081][ T7377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.254165][ T7377] Call Trace: [ 109.257465][ T7377] [ 109.260424][ T7377] dump_stack_lvl+0x241/0x360 [ 109.265146][ T7377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.270391][ T7377] ? __pfx__printk+0x10/0x10 [ 109.275048][ T7377] should_fail_ex+0x3b0/0x4e0 [ 109.279772][ T7377] should_failslab+0xac/0x100 [ 109.284494][ T7377] ? __alloc_skb+0x1c3/0x440 [ 109.289133][ T7377] kmem_cache_alloc_node_noprof+0x71/0x320 [ 109.294992][ T7377] __alloc_skb+0x1c3/0x440 [ 109.299453][ T7377] ? __pfx___alloc_skb+0x10/0x10 [ 109.304446][ T7377] ? __pfx___alloc_skb+0x10/0x10 [ 109.309437][ T7377] create_monitor_ctrl_event+0x35/0x4d0 [ 109.315022][ T7377] ? mgmt_cmd_complete+0x1b5/0x580 [ 109.320177][ T7377] mgmt_cmd_complete+0x220/0x580 [ 109.325165][ T7377] set_debug_keys+0x37b/0x620 [ 109.329903][ T7377] ? __pfx_set_debug_keys+0x10/0x10 [ 109.335150][ T7377] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 109.340403][ T7377] ? mgmt_init_hdev+0x453/0x470 [ 109.345284][ T7377] hci_mgmt_cmd+0xc47/0x11d0 [ 109.349931][ T7377] hci_sock_sendmsg+0x7b8/0x11c0 [ 109.354921][ T7377] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.359811][ T7377] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 109.365230][ T7377] ? __pfx_aa_file_perm+0x10/0x10 [ 109.370295][ T7377] ? aa_sock_msg_perm+0x91/0x160 [ 109.375286][ T7377] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 109.380709][ T7377] __sock_sendmsg+0x221/0x270 [ 109.385417][ T7377] sock_write_iter+0x2d7/0x3f0 [ 109.390225][ T7377] ? __pfx_sock_write_iter+0x10/0x10 [ 109.395573][ T7377] ? bpf_lsm_file_permission+0x9/0x10 [ 109.400984][ T7377] ? security_file_permission+0x74/0x280 [ 109.406673][ T7377] vfs_write+0xaeb/0xd30 [ 109.410964][ T7377] ? __pfx_sock_write_iter+0x10/0x10 [ 109.416315][ T7377] ? __pfx_vfs_write+0x10/0x10 [ 109.421157][ T7377] ? fdget_pos+0x19a/0x320 [ 109.425631][ T7377] ksys_write+0x183/0x2b0 [ 109.430000][ T7377] ? __pfx_ksys_write+0x10/0x10 [ 109.434889][ T7377] ? do_syscall_64+0x100/0x230 [ 109.439697][ T7377] ? do_syscall_64+0xb6/0x230 [ 109.444419][ T7377] do_syscall_64+0xf3/0x230 [ 109.448970][ T7377] ? clear_bhb_loop+0x35/0x90 [ 109.453692][ T7377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.459628][ T7377] RIP: 0033:0x7fa819d7e819 [ 109.464074][ T7377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.483714][ T7377] RSP: 002b:00007fa81aaef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.492171][ T7377] RAX: ffffffffffffffda RBX: 00007fa819f35fa0 RCX: 00007fa819d7e819 [ 109.500178][ T7377] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000004 [ 109.508184][ T7377] RBP: 00007fa81aaef090 R08: 0000000000000000 R09: 0000000000000000 [ 109.516187][ T7377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.524191][ T7377] R13: 0000000000000000 R14: 00007fa819f35fa0 R15: 00007ffffbedb968 [ 109.532216][ T7377] [ 109.846306][ T7404] FAULT_INJECTION: forcing a failure. [ 109.846306][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 109.883737][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.2.513 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 109.894383][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.904476][ T7404] Call Trace: [ 109.907770][ T7404] [ 109.910722][ T7404] dump_stack_lvl+0x241/0x360 [ 109.914061][ T7407] netlink: 'syz.4.514': attribute type 4 has an invalid length. [ 109.915413][ T7404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.928281][ T7404] ? __pfx__printk+0x10/0x10 [ 109.932897][ T7404] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 109.938916][ T7404] ? __pfx___might_resched+0x10/0x10 [ 109.944247][ T7404] should_fail_ex+0x3b0/0x4e0 [ 109.944784][ T7407] __nla_validate_parse: 6 callbacks suppressed [ 109.944799][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 109.948937][ T7404] should_failslab+0xac/0x100 [ 109.948967][ T7404] ? __alloc_skb+0x1c3/0x440 [ 109.948991][ T7404] kmem_cache_alloc_node_noprof+0x71/0x320 [ 109.949020][ T7404] __alloc_skb+0x1c3/0x440 [ 109.983530][ T7404] ? __pfx___alloc_skb+0x10/0x10 [ 109.988507][ T7404] ? nft_pernet+0x23/0x240 [ 109.992964][ T7404] nf_tables_rule_notify+0xcd/0x570 [ 109.998207][ T7404] nf_tables_commit+0x1d5c/0x9140 [ 110.003303][ T7404] ? __pfx_nf_tables_commit+0x10/0x10 [ 110.008711][ T7404] ? nf_tables_newrule+0x23cc/0x2980 [ 110.014025][ T7404] ? rcu_is_watching+0x15/0xb0 [ 110.018814][ T7404] ? nf_tables_newrule+0x23cc/0x2980 [ 110.024124][ T7404] ? kfree+0x4e/0x440 [ 110.028128][ T7404] ? nft_trans_rule_add+0x30f/0x430 [ 110.033359][ T7404] ? nf_tables_newrule+0x2461/0x2980 [ 110.038686][ T7404] ? nfnl_pernet+0x23/0x240 [ 110.043216][ T7404] ? __pfx_nf_tables_newrule+0x10/0x10 [ 110.048715][ T7404] ? __nla_parse+0x40/0x60 [ 110.053170][ T7404] nfnetlink_rcv+0xc77/0x2ab0 [ 110.057902][ T7404] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 110.063094][ T7404] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.068321][ T7404] ? skb_clone+0x240/0x390 [ 110.072761][ T7404] ? __pfx_lock_release+0x10/0x10 [ 110.077826][ T7404] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.083054][ T7404] netlink_unicast+0x7f6/0x990 [ 110.087857][ T7404] ? __pfx_netlink_unicast+0x10/0x10 [ 110.093165][ T7404] ? __virt_addr_valid+0x183/0x530 [ 110.098298][ T7404] ? __check_object_size+0x48e/0x900 [ 110.103615][ T7404] netlink_sendmsg+0x8e4/0xcb0 [ 110.108424][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.113745][ T7404] ? aa_sock_msg_perm+0x91/0x160 [ 110.118723][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.124040][ T7404] __sock_sendmsg+0x221/0x270 [ 110.128752][ T7404] ____sys_sendmsg+0x52a/0x7e0 [ 110.133556][ T7404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.138883][ T7404] __sys_sendmsg+0x292/0x380 [ 110.143506][ T7404] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.148654][ T7404] ? __pfx_vfs_write+0x10/0x10 [ 110.153467][ T7404] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.159824][ T7404] ? do_syscall_64+0x100/0x230 [ 110.164619][ T7404] ? do_syscall_64+0xb6/0x230 [ 110.169331][ T7404] do_syscall_64+0xf3/0x230 [ 110.173865][ T7404] ? clear_bhb_loop+0x35/0x90 [ 110.178574][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.184493][ T7404] RIP: 0033:0x7f1d0a17e819 [ 110.188928][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.208561][ T7404] RSP: 002b:00007f1d07ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.217011][ T7404] RAX: ffffffffffffffda RBX: 00007f1d0a335fa0 RCX: 00007f1d0a17e819 [ 110.225009][ T7404] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 110.232994][ T7404] RBP: 00007f1d07ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.240976][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.248966][ T7404] R13: 0000000000000000 R14: 00007f1d0a335fa0 R15: 00007ffda18ec6c8 [ 110.256948][ T7404] [ 110.519024][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.596884][ T5850] Bluetooth: hci2: command tx timeout [ 110.597497][ T3070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.922724][ T7443] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 110.955189][ T7443] netlink: 'syz.1.528': attribute type 3 has an invalid length. [ 110.991472][ T7443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.528'. [ 111.066263][ T7443] NCSI netlink: No device for ifindex 0 [ 111.260367][ T7466] netlink: 'syz.0.535': attribute type 29 has an invalid length. [ 111.268661][ T7456] netlink: 'syz.0.535': attribute type 29 has an invalid length. [ 111.302300][ T7468] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 111.348711][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 111.458233][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 111.458571][ T7470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 111.478420][ T7470] bond6: (slave bond7): Enslaving as an active interface with an up link [ 111.498702][ T7476] FAULT_INJECTION: forcing a failure. [ 111.498702][ T7476] name failslab, interval 1, probability 0, space 0, times 0 [ 111.525693][ T7476] CPU: 0 UID: 0 PID: 7476 Comm: syz.2.541 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 111.530967][ T7470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.540'. [ 111.536352][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 111.545363][ T7470] netlink: 120 bytes leftover after parsing attributes in process `syz.1.540'. [ 111.555228][ T7476] Call Trace: [ 111.555245][ T7476] [ 111.555255][ T7476] dump_stack_lvl+0x241/0x360 [ 111.555284][ T7476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.555306][ T7476] ? __pfx__printk+0x10/0x10 [ 111.565256][ T7470] netlink: 72 bytes leftover after parsing attributes in process `syz.1.540'. [ 111.567490][ T7476] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 111.567522][ T7476] ? __pfx___might_resched+0x10/0x10 [ 111.604491][ T7476] should_fail_ex+0x3b0/0x4e0 [ 111.609190][ T7476] should_failslab+0xac/0x100 [ 111.613870][ T7476] ? nfnetlink_rcv+0x1265/0x2ab0 [ 111.618812][ T7476] __kmalloc_cache_noprof+0x6c/0x2c0 [ 111.624103][ T7476] nfnetlink_rcv+0x1265/0x2ab0 [ 111.628896][ T7476] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.634071][ T7476] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.639269][ T7476] ? skb_clone+0x240/0x390 [ 111.643678][ T7476] ? __pfx_lock_release+0x10/0x10 [ 111.648713][ T7476] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.653912][ T7476] netlink_unicast+0x7f6/0x990 [ 111.658682][ T7476] ? __pfx_netlink_unicast+0x10/0x10 [ 111.663985][ T7476] ? __virt_addr_valid+0x183/0x530 [ 111.669094][ T7476] ? __check_object_size+0x48e/0x900 [ 111.674377][ T7476] netlink_sendmsg+0x8e4/0xcb0 [ 111.679150][ T7476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.684441][ T7476] ? aa_sock_msg_perm+0x91/0x160 [ 111.689381][ T7476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.694665][ T7476] __sock_sendmsg+0x221/0x270 [ 111.699343][ T7476] ____sys_sendmsg+0x52a/0x7e0 [ 111.704128][ T7476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.709434][ T7476] __sys_sendmsg+0x292/0x380 [ 111.714031][ T7476] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.719154][ T7476] ? __pfx_vfs_write+0x10/0x10 [ 111.723935][ T7476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.730275][ T7476] ? do_syscall_64+0x100/0x230 [ 111.735040][ T7476] ? do_syscall_64+0xb6/0x230 [ 111.739716][ T7476] do_syscall_64+0xf3/0x230 [ 111.744217][ T7476] ? clear_bhb_loop+0x35/0x90 [ 111.748893][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.754782][ T7476] RIP: 0033:0x7f1d0a17e819 [ 111.759194][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.778797][ T7476] RSP: 002b:00007f1d07ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.787212][ T7476] RAX: ffffffffffffffda RBX: 00007f1d0a335fa0 RCX: 00007f1d0a17e819 [ 111.795180][ T7476] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 111.803147][ T7476] RBP: 00007f1d07ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.811111][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.819079][ T7476] R13: 0000000000000000 R14: 00007f1d0a335fa0 R15: 00007ffda18ec6c8 [ 111.827058][ T7476] [ 111.874176][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.115044][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'. [ 112.182198][ T7495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.249469][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.552'. [ 112.302904][ T7503] netlink: 104 bytes leftover after parsing attributes in process `syz.1.551'. [ 112.572282][ T7514] sctp: [Deprecated]: syz.1.556 (pid 7514) Use of int in max_burst socket option. [ 112.572282][ T7514] Use struct sctp_assoc_value instead [ 112.924852][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.163904][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.280368][ T7539] wg2: entered allmulticast mode [ 113.316652][ T5850] Bluetooth: hci0: command tx timeout [ 113.577378][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.992619][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.996195][ T7590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.079411][ T7598] pim6reg1: entered promiscuous mode [ 114.085735][ T7598] pim6reg1: entered allmulticast mode [ 114.103481][ T7598] netlink: 'syz.0.585': attribute type 3 has an invalid length. [ 114.868578][ T7640] x_tables: duplicate underflow at hook 3 [ 114.944774][ T7643] netlink: 'syz.1.597': attribute type 10 has an invalid length. [ 114.995988][ T7643] batman_adv: batadv0: Adding interface: team0 [ 115.018758][ T7643] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.021137][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.192687][ T7643] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 115.430158][ T7673] __nla_validate_parse: 12 callbacks suppressed [ 115.430177][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 115.537851][ T7673] 8021q: adding VLAN 0 to HW filter on device bond9 [ 115.567257][ T7673] bond8: (slave bond9): Enslaving as an active interface with an up link [ 115.568375][ T7684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 115.592863][ T7683] netlink: 'syz.4.605': attribute type 11 has an invalid length. [ 115.596273][ T7684] netlink: 120 bytes leftover after parsing attributes in process `syz.0.603'. [ 115.612726][ T7684] netlink: 72 bytes leftover after parsing attributes in process `syz.0.603'. [ 115.764199][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 115.998287][ T7705] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.007778][ T7705] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.017313][ T7705] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.027195][ T7705] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.039424][ T7704] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 116.066720][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.169106][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.615'. [ 116.243534][ T7707] batadv1: entered promiscuous mode [ 116.300645][ T7707] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 116.388652][ T7717] SET target dimension over the limit! [ 116.531892][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 116.592565][ T3512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.644415][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.657624][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.621'. [ 116.674676][ T7728] netlink: 120 bytes leftover after parsing attributes in process `syz.4.621'. [ 116.685032][ T7728] netlink: 72 bytes leftover after parsing attributes in process `syz.4.621'. [ 116.742451][ T7734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.754035][ T7734] bond3: (slave bond4): Enslaving as an active interface with an up link [ 116.875492][ T7744] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 116.886657][ T29] audit: type=1107 audit(1732163390.495:9): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 117.085173][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.143630][ T7760] tipc: Enabling of bearer rejected, failed to enable media [ 117.278442][ T7766] vlan3: entered promiscuous mode [ 117.284798][ T7766] vlan3: entered allmulticast mode [ 117.974811][ T7793] bridge2: entered promiscuous mode [ 118.027390][ T7793] bridge2: entered allmulticast mode [ 118.033186][ T7796] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 118.091520][ T7796] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 118.139335][ T7802] netlink: 'syz.4.645': attribute type 10 has an invalid length. [ 118.168078][ T7802] team0: Device ipvlan1 failed to register rx_handler [ 118.180606][ T29] audit: type=1107 audit(1732163391.805:10): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 118.252439][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.407847][ T7812] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 118.408827][ T7800] bridge_slave_0: left allmulticast mode [ 118.450603][ T7800] bridge_slave_0: left promiscuous mode [ 118.457694][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.587625][ T7800] bridge_slave_1: left allmulticast mode [ 118.605768][ T7814] netlink: 'syz.4.648': attribute type 27 has an invalid length. [ 118.620220][ T7800] bridge_slave_1: left promiscuous mode [ 118.747765][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.816061][ T7800] bond0: (slave bond_slave_0): Releasing backup interface [ 118.833885][ T7800] bond0: (slave bond_slave_1): Releasing backup interface [ 118.852110][ T7800] team0: Port device team_slave_0 removed [ 118.862432][ T7800] team0: Port device team_slave_1 removed [ 118.870297][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.879041][ T7800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.894158][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.902806][ T7800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.920433][ T7800] bond1: (slave bond2): Releasing backup interface [ 118.942491][ T7800] bond3: (slave bond4): Releasing backup interface [ 118.955493][ T7808] netlink: 'syz.1.647': attribute type 2 has an invalid length. [ 118.963989][ T7812] team0: entered promiscuous mode [ 118.970190][ T7812] bridge0: port 1(team0) entered blocking state [ 118.980928][ T7812] bridge0: port 1(team0) entered disabled state [ 118.996803][ T7812] team0: entered allmulticast mode [ 119.004036][ T7812] bridge0: port 1(team0) entered blocking state [ 119.010442][ T7812] bridge0: port 1(team0) entered forwarding state [ 119.034075][ T1102] bridge0: port 1(team0) entered disabled state [ 119.055169][ T7814] C: renamed from team_slave_0 (while UP) [ 119.063871][ T7819] netdevsim netdevsim3 »»»»»»: renamed from netdevsim0 (while UP) [ 119.317146][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.721395][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.361954][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.437719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.607299][ T7907] __nla_validate_parse: 10 callbacks suppressed [ 120.607320][ T7907] netlink: 244 bytes leftover after parsing attributes in process `syz.4.677'. [ 120.719013][ T7907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.677'. [ 121.052683][ T7926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.683'. [ 121.177979][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 121.404537][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.493630][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 121.700349][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 121.712442][ T7943] netlink: 'syz.3.692': attribute type 4 has an invalid length. [ 121.720492][ T7943] netlink: 17 bytes leftover after parsing attributes in process `syz.3.692'. [ 121.807919][ T7946] FAULT_INJECTION: forcing a failure. [ 121.807919][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.827524][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.1.690 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 121.838167][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 121.848246][ T7946] Call Trace: [ 121.851542][ T7946] [ 121.854483][ T7946] dump_stack_lvl+0x241/0x360 [ 121.859196][ T7946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.864427][ T7946] ? __pfx__printk+0x10/0x10 [ 121.869044][ T7946] ? __pfx_lock_release+0x10/0x10 [ 121.874108][ T7946] should_fail_ex+0x3b0/0x4e0 [ 121.878808][ T7946] _copy_from_iter+0x21f/0x1e70 [ 121.883682][ T7946] ? __virt_addr_valid+0x183/0x530 [ 121.888811][ T7946] ? __pfx_lock_release+0x10/0x10 [ 121.893865][ T7946] ? alloc_pages_mpol_noprof+0x417/0x680 [ 121.899518][ T7946] ? __pfx__copy_from_iter+0x10/0x10 [ 121.904829][ T7946] ? __virt_addr_valid+0x183/0x530 [ 121.909959][ T7946] ? __virt_addr_valid+0x183/0x530 [ 121.915087][ T7946] ? __virt_addr_valid+0x45f/0x530 [ 121.920215][ T7946] ? __check_object_size+0x48e/0x900 [ 121.925522][ T7946] af_alg_sendmsg+0x1519/0x2650 [ 121.930415][ T7946] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 121.935631][ T7946] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.940507][ T7946] ? __fget_files+0x29/0x470 [ 121.945127][ T7946] ? aa_sock_msg_perm+0x91/0x160 [ 121.950097][ T7946] ? skcipher_sendmsg+0x28/0xf0 [ 121.954988][ T7946] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 121.960386][ T7946] __sock_sendmsg+0x221/0x270 [ 121.965090][ T7946] __sys_sendto+0x39b/0x4f0 [ 121.969624][ T7946] ? __pfx___sys_sendto+0x10/0x10 [ 121.974698][ T7946] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.980712][ T7946] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.987085][ T7946] ? exc_page_fault+0x590/0x8c0 [ 121.991961][ T7946] __x64_sys_sendto+0xde/0x100 [ 121.996752][ T7946] do_syscall_64+0xf3/0x230 [ 122.001283][ T7946] ? clear_bhb_loop+0x35/0x90 [ 122.005984][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.011898][ T7946] RIP: 0033:0x7fd01ed806ac [ 122.016331][ T7946] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 122.035965][ T7946] RSP: 002b:00007fd01fb6cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 122.044422][ T7946] RAX: ffffffffffffffda RBX: 00007fd01fb6cfc0 RCX: 00007fd01ed806ac [ 122.052414][ T7946] RDX: 0000000000000020 RSI: 00007fd01fb6d010 RDI: 0000000000000004 [ 122.060406][ T7946] RBP: 0000000000000000 R08: 00007fd01fb6cf14 R09: 000000000000000c [ 122.068395][ T7946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 122.076382][ T7946] R13: 00007fd01fb6cf68 R14: 00007fd01fb6d010 R15: 0000000000000000 [ 122.084480][ T7946] [ 122.152462][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.435253][ T7963] FAULT_INJECTION: forcing a failure. [ 122.435253][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.468657][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.492400][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: syz.1.697 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 122.503047][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 122.513133][ T7963] Call Trace: [ 122.516791][ T7963] [ 122.519736][ T7963] dump_stack_lvl+0x241/0x360 [ 122.524439][ T7963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.529679][ T7963] ? __pfx__printk+0x10/0x10 [ 122.534309][ T7963] ? __pfx_lock_release+0x10/0x10 [ 122.539367][ T7963] ? dev_ifsioc+0xaec/0xe70 [ 122.543904][ T7963] should_fail_ex+0x3b0/0x4e0 [ 122.548633][ T7963] _copy_to_user+0x31/0xb0 [ 122.553069][ T7963] put_user_ifreq+0xe8/0x130 [ 122.557680][ T7963] sock_ioctl+0x84a/0x8e0 [ 122.562028][ T7963] ? __pfx_sock_ioctl+0x10/0x10 [ 122.566899][ T7963] ? __fget_files+0x3f3/0x470 [ 122.571604][ T7963] ? __pfx_sock_ioctl+0x10/0x10 [ 122.576476][ T7963] __se_sys_ioctl+0xf9/0x170 [ 122.581089][ T7963] do_syscall_64+0xf3/0x230 [ 122.585616][ T7963] ? clear_bhb_loop+0x35/0x90 [ 122.590322][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.596241][ T7963] RIP: 0033:0x7fd01ed7e819 [ 122.600676][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.620310][ T7963] RSP: 002b:00007fd01fb6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.628764][ T7963] RAX: ffffffffffffffda RBX: 00007fd01ef35fa0 RCX: 00007fd01ed7e819 [ 122.636756][ T7963] RDX: 0000000020001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 122.644745][ T7963] RBP: 00007fd01fb6e090 R08: 0000000000000000 R09: 0000000000000000 [ 122.652739][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.660729][ T7963] R13: 0000000000000000 R14: 00007fd01ef35fa0 R15: 00007ffc6745b558 [ 122.668737][ T7963] [ 122.713426][ T7966] FAULT_INJECTION: forcing a failure. [ 122.713426][ T7966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.758593][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.769627][ T7966] CPU: 0 UID: 0 PID: 7966 Comm: syz.0.698 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 122.780510][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 122.790599][ T7966] Call Trace: [ 122.793905][ T7966] [ 122.796851][ T7966] dump_stack_lvl+0x241/0x360 [ 122.801569][ T7966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.806791][ T7966] ? __pfx__printk+0x10/0x10 [ 122.811404][ T7966] ? snprintf+0xda/0x120 [ 122.815668][ T7966] should_fail_ex+0x3b0/0x4e0 [ 122.820379][ T7966] _copy_to_user+0x31/0xb0 [ 122.824822][ T7966] simple_read_from_buffer+0xca/0x150 [ 122.830220][ T7966] proc_fail_nth_read+0x1e9/0x250 [ 122.835244][ T7966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.840790][ T7966] ? rw_verify_area+0x55e/0x6f0 [ 122.845640][ T7966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.851185][ T7966] vfs_read+0x1fc/0xb70 [ 122.855424][ T7966] ? fdget_pos+0x24e/0x320 [ 122.859839][ T7966] ? __pfx_vfs_read+0x10/0x10 [ 122.864517][ T7966] ? __fget_files+0x3f3/0x470 [ 122.869193][ T7966] ? fdget_pos+0x24e/0x320 [ 122.873610][ T7966] ksys_read+0x183/0x2b0 [ 122.877854][ T7966] ? __pfx_ksys_read+0x10/0x10 [ 122.882621][ T7966] ? do_syscall_64+0x100/0x230 [ 122.887386][ T7966] ? do_syscall_64+0xb6/0x230 [ 122.892061][ T7966] do_syscall_64+0xf3/0x230 [ 122.896566][ T7966] ? clear_bhb_loop+0x35/0x90 [ 122.901243][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.907129][ T7966] RIP: 0033:0x7f7c2897d25c [ 122.911538][ T7966] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 122.931138][ T7966] RSP: 002b:00007f7c296d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.939547][ T7966] RAX: ffffffffffffffda RBX: 00007f7c28b35fa0 RCX: 00007f7c2897d25c [ 122.947509][ T7966] RDX: 000000000000000f RSI: 00007f7c296d10a0 RDI: 0000000000000004 [ 122.955473][ T7966] RBP: 00007f7c296d1090 R08: 0000000000000000 R09: 0000000000000000 [ 122.963432][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.971391][ T7966] R13: 0000000000000000 R14: 00007f7c28b35fa0 R15: 00007ffda2fda0f8 [ 122.979373][ T7966] [ 123.305135][ T7977] netlink: 'syz.1.702': attribute type 2 has an invalid length. [ 123.452775][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 123.499667][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.652552][ T7995] netlink: 104 bytes leftover after parsing attributes in process `syz.4.709'. [ 123.847208][ T7998] netlink: 180 bytes leftover after parsing attributes in process `syz.4.713'. [ 124.476052][ T8027] x_tables: ip_tables: udp match: only valid for protocol 17 [ 124.525091][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.526147][ T8029] netlink: 'syz.1.724': attribute type 2 has an invalid length. [ 124.684846][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.746699][ T8036] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11) [ 125.329774][ T8055] netlink: 'syz.2.735': attribute type 5 has an invalid length. [ 125.414457][ T8063] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 125.471871][ T8063] veth6: entered allmulticast mode [ 125.578428][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.762149][ T8074] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 125.801476][ T1201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.817586][ T8074] team0: Device ipvlan1 failed to register rx_handler [ 126.444240][ T8091] gre1: entered promiscuous mode [ 126.609770][ T8102] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.650281][ T8102] tipc: Enabled bearer , priority 10 [ 126.748161][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.853654][ T8113] __nla_validate_parse: 6 callbacks suppressed [ 126.853674][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 126.886689][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.895805][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 126.947530][ T8116] netlink: 'syz.0.754': attribute type 10 has an invalid length. [ 126.968553][ T8116] team0: Device ipvlan1 failed to register rx_handler [ 127.026840][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.092008][ T8120] veth6: entered allmulticast mode [ 127.167119][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.266097][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 127.306673][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.328558][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.757'. [ 127.446695][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.586727][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.635678][ T8137] rdma_op ffff888030ee91f0 conn xmit_rdma 0000000000000000 [ 127.728349][ T1201] tipc: Node number set to 3200253997 [ 127.866731][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.136684][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.163017][ T8155] netlink: 'syz.1.767': attribute type 10 has an invalid length. [ 128.286350][ T8154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.354830][ T8155] team0: Device ipvlan1 failed to register rx_handler [ 128.398274][ T8152] veth2: entered allmulticast mode [ 128.410228][ T8161] FAULT_INJECTION: forcing a failure. [ 128.410228][ T8161] name failslab, interval 1, probability 0, space 0, times 0 [ 128.432102][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.2.771 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 128.442745][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 128.452830][ T8161] Call Trace: [ 128.456132][ T8161] [ 128.459084][ T8161] dump_stack_lvl+0x241/0x360 [ 128.463794][ T8161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.469023][ T8161] ? __pfx__printk+0x10/0x10 [ 128.473646][ T8161] ? __kmalloc_noprof+0xb0/0x400 [ 128.478626][ T8161] ? __pfx___might_resched+0x10/0x10 [ 128.483982][ T8161] should_fail_ex+0x3b0/0x4e0 [ 128.488705][ T8161] ? ima_eventdigest_ng_init+0x28e/0x410 [ 128.494358][ T8161] should_failslab+0xac/0x100 [ 128.499070][ T8161] ? ima_eventdigest_ng_init+0x28e/0x410 [ 128.504731][ T8161] __kmalloc_noprof+0xd8/0x400 [ 128.509538][ T8161] ima_eventdigest_ng_init+0x28e/0x410 [ 128.515031][ T8161] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 128.521067][ T8161] ? ima_alloc_init_template+0x162/0x6e0 [ 128.526735][ T8161] ? ima_alloc_init_template+0x162/0x6e0 [ 128.532403][ T8161] ? rcu_is_watching+0x15/0xb0 [ 128.537195][ T8161] ? ima_alloc_init_template+0x162/0x6e0 [ 128.542866][ T8161] ? trace_kmalloc+0x1f/0xd0 [ 128.547491][ T8161] ? __kmalloc_noprof+0x21a/0x400 [ 128.552558][ T8161] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 128.558572][ T8161] ima_alloc_init_template+0x2f9/0x6e0 [ 128.564079][ T8161] ima_store_measurement+0x289/0x6f0 [ 128.569412][ T8161] ? sized_strscpy+0x8d/0x220 [ 128.574118][ T8161] ? __pfx_ima_store_measurement+0x10/0x10 [ 128.579957][ T8161] ? release_dentry_name_snapshot+0x42/0xb0 [ 128.585882][ T8161] ? ima_d_path+0x222/0x270 [ 128.590457][ T8161] process_measurement+0x150b/0x1fb0 [ 128.595795][ T8161] ? __pfx_process_measurement+0x10/0x10 [ 128.601463][ T8161] ? __pfx_lock_acquire+0x10/0x10 [ 128.606523][ T8161] ? aa_file_perm+0x137/0xf50 [ 128.611227][ T8161] ? alloc_empty_file+0xb8/0x1d0 [ 128.616223][ T8161] ? __asan_memset+0x23/0x50 [ 128.620838][ T8161] ? lockdep_init_map_type+0xa1/0x910 [ 128.626263][ T8161] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 128.632102][ T8161] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 128.638294][ T8161] ima_file_mmap+0x1f4/0x2b0 [ 128.642917][ T8161] ? __raw_spin_lock_init+0x45/0x100 [ 128.648227][ T8161] ? __pfx_ima_file_mmap+0x10/0x10 [ 128.653362][ T8161] ? file_init_path+0x3b/0x570 [ 128.658156][ T8161] ? end_current_label_crit_section+0x151/0x180 [ 128.664440][ T8161] ? common_file_perm+0x1a6/0x210 [ 128.669501][ T8161] security_mmap_file+0x7e7/0xa40 [ 128.674554][ T8161] vm_mmap_pgoff+0x141/0x3d0 [ 128.679174][ T8161] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 128.684319][ T8161] ? hugetlb_file_setup+0x3dc/0x5c0 [ 128.689561][ T8161] ksys_mmap_pgoff+0x53e/0x720 [ 128.694367][ T8161] do_syscall_64+0xf3/0x230 [ 128.698894][ T8161] ? clear_bhb_loop+0x35/0x90 [ 128.703596][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.709528][ T8161] RIP: 0033:0x7f1d0a17e819 [ 128.713964][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.723685][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 128.733661][ T8161] RSP: 002b:00007f1d07ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 128.733709][ T8161] RAX: ffffffffffffffda RBX: 00007f1d0a335fa0 RCX: 00007f1d0a17e819 [ 128.733724][ T8161] RDX: 0000000000000004 RSI: 0000000000400000 RDI: 0000000020000000 [ 128.733737][ T8161] RBP: 00007f1d07ff6090 R08: ffffffffffffffff R09: 0000000047fab000 [ 128.733751][ T8161] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000002 [ 128.733764][ T8161] R13: 0000000000000001 R14: 00007f1d0a335fa0 R15: 00007ffda18ec6c8 [ 128.733790][ T8161] [ 128.807333][ T29] audit: type=1804 audit(1732163402.425:11): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.771" name="anon_hugepage" dev="hugetlbfs" ino=16964 res=0 errno=0 [ 128.862439][ T8154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.039121][ T8154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.169156][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.775'. [ 129.195135][ T8180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.775'. [ 129.220880][ T8154] bond0: (slave netdevsim0): Releasing backup interface [ 129.257041][ T8154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.295428][ T8187] FAULT_INJECTION: forcing a failure. [ 129.295428][ T8187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.346944][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.4.780 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 129.357605][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 129.367680][ T8187] Call Trace: [ 129.370974][ T8187] [ 129.373926][ T8187] dump_stack_lvl+0x241/0x360 [ 129.378637][ T8187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.383866][ T8187] ? __pfx__printk+0x10/0x10 [ 129.388485][ T8187] ? snprintf+0xda/0x120 [ 129.392760][ T8187] should_fail_ex+0x3b0/0x4e0 [ 129.397505][ T8187] _copy_to_user+0x31/0xb0 [ 129.401955][ T8187] simple_read_from_buffer+0xca/0x150 [ 129.407376][ T8187] proc_fail_nth_read+0x1e9/0x250 [ 129.412450][ T8187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.418030][ T8187] ? rw_verify_area+0x55e/0x6f0 [ 129.422940][ T8187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.428512][ T8187] vfs_read+0x1fc/0xb70 [ 129.432684][ T8187] ? fdget_pos+0x24e/0x320 [ 129.437099][ T8187] ? __pfx_vfs_read+0x10/0x10 [ 129.441787][ T8187] ? __fget_files+0x3f3/0x470 [ 129.446567][ T8187] ? fdget_pos+0x24e/0x320 [ 129.450990][ T8187] ksys_read+0x183/0x2b0 [ 129.455228][ T8187] ? __pfx_ksys_read+0x10/0x10 [ 129.459993][ T8187] ? do_syscall_64+0x100/0x230 [ 129.464760][ T8187] ? do_syscall_64+0xb6/0x230 [ 129.469438][ T8187] do_syscall_64+0xf3/0x230 [ 129.473938][ T8187] ? clear_bhb_loop+0x35/0x90 [ 129.478616][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.484510][ T8187] RIP: 0033:0x7fc10777d25c [ 129.488923][ T8187] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 129.508539][ T8187] RSP: 002b:00007fc1084fe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.516981][ T8187] RAX: ffffffffffffffda RBX: 00007fc107935fa0 RCX: 00007fc10777d25c [ 129.524959][ T8187] RDX: 000000000000000f RSI: 00007fc1084fe0a0 RDI: 0000000000000006 [ 129.532952][ T8187] RBP: 00007fc1084fe090 R08: 0000000000000000 R09: 0000000000000000 [ 129.540947][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.548926][ T8187] R13: 0000000000000000 R14: 00007fc107935fa0 R15: 00007fff5dd0ecb8 [ 129.556911][ T8187] [ 129.629960][ T8154] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.645358][ T8154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.661033][ T8154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.676210][ T8154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.887748][ T8211] netlink: 'syz.1.786': attribute type 12 has an invalid length. [ 129.930481][ T8211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.786'. [ 129.958674][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 129.971549][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 130.146233][ T8220] tap0: tun_chr_ioctl cmd 1074025677 [ 130.162366][ T8220] tap0: linktype set to 825 [ 130.355479][ T8232] bridge1: entered promiscuous mode [ 130.447830][ T8234] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 130.524590][ T8234] bond10: entered promiscuous mode [ 130.555115][ T8234] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 130.621647][ T8243] FAULT_INJECTION: forcing a failure. [ 130.621647][ T8243] name failslab, interval 1, probability 0, space 0, times 0 [ 130.636005][ T8243] CPU: 1 UID: 0 PID: 8243 Comm: syz.3.799 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 130.646639][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 130.656724][ T8243] Call Trace: [ 130.660023][ T8243] [ 130.662981][ T8243] dump_stack_lvl+0x241/0x360 [ 130.667693][ T8243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.672910][ T8243] ? __pfx__printk+0x10/0x10 [ 130.677510][ T8243] ? __kmalloc_noprof+0xb0/0x400 [ 130.682450][ T8243] ? __pfx___might_resched+0x10/0x10 [ 130.687739][ T8243] should_fail_ex+0x3b0/0x4e0 [ 130.692415][ T8243] ? sock_kmalloc+0xd7/0x160 [ 130.697001][ T8243] should_failslab+0xac/0x100 [ 130.701686][ T8243] ? sock_kmalloc+0xd7/0x160 [ 130.706270][ T8243] __kmalloc_noprof+0xd8/0x400 [ 130.711042][ T8243] sock_kmalloc+0xd7/0x160 [ 130.715456][ T8243] skcipher_recvmsg+0x5ff/0x1230 [ 130.720404][ T8243] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 130.725772][ T8243] ? aa_sock_msg_perm+0x91/0x160 [ 130.730732][ T8243] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 130.736016][ T8243] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 130.741388][ T8243] sock_recvmsg+0x22f/0x280 [ 130.745899][ T8243] __sys_recvfrom+0x246/0x3d0 [ 130.750578][ T8243] ? __pfx___sys_recvfrom+0x10/0x10 [ 130.755802][ T8243] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 130.761801][ T8243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.768135][ T8243] __x64_sys_recvfrom+0xde/0x100 [ 130.773077][ T8243] do_syscall_64+0xf3/0x230 [ 130.777588][ T8243] ? clear_bhb_loop+0x35/0x90 [ 130.782270][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.788166][ T8243] RIP: 0033:0x7fa819d805e4 [ 130.792580][ T8243] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 130.812183][ T8243] RSP: 002b:00007fa81aaeded0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 130.820627][ T8243] RAX: ffffffffffffffda RBX: 00007fa81aaedfc0 RCX: 00007fa819d805e4 [ 130.828597][ T8243] RDX: 0000000000001000 RSI: 00007fa81aaee010 RDI: 0000000000000004 [ 130.836569][ T8243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.844551][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 130.852517][ T8243] R13: 00007fa81aaedf68 R14: 00007fa81aaee010 R15: 0000000000000000 [ 130.860500][ T8243] [ 131.098517][ T8250] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 131.131494][ T8250] netlink: 'syz.3.802': attribute type 3 has an invalid length. [ 131.142605][ T8250] NCSI netlink: No device for ifindex 813332851 [ 131.235608][ T8261] FAULT_INJECTION: forcing a failure. [ 131.235608][ T8261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.249082][ T8261] CPU: 0 UID: 0 PID: 8261 Comm: syz.1.806 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 131.259708][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 131.269812][ T8261] Call Trace: [ 131.273117][ T8261] [ 131.276066][ T8261] dump_stack_lvl+0x241/0x360 [ 131.280779][ T8261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.286014][ T8261] ? __pfx__printk+0x10/0x10 [ 131.290636][ T8261] ? __pfx_lock_release+0x10/0x10 [ 131.295706][ T8261] should_fail_ex+0x3b0/0x4e0 [ 131.300422][ T8261] _copy_from_user+0x2f/0xc0 [ 131.305048][ T8261] copy_msghdr_from_user+0xae/0x680 [ 131.310290][ T8261] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 131.316139][ T8261] __sys_sendmsg+0x22d/0x380 [ 131.320768][ T8261] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.325923][ T8261] ? __pfx_vfs_write+0x10/0x10 [ 131.330738][ T8261] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.337099][ T8261] ? do_syscall_64+0x100/0x230 [ 131.341894][ T8261] ? do_syscall_64+0xb6/0x230 [ 131.346597][ T8261] do_syscall_64+0xf3/0x230 [ 131.351128][ T8261] ? clear_bhb_loop+0x35/0x90 [ 131.355838][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.361757][ T8261] RIP: 0033:0x7fd01ed7e819 [ 131.366199][ T8261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.385829][ T8261] RSP: 002b:00007fd01fb6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.394275][ T8261] RAX: ffffffffffffffda RBX: 00007fd01ef35fa0 RCX: 00007fd01ed7e819 [ 131.402371][ T8261] RDX: 0000000000000000 RSI: 0000000020004340 RDI: 0000000000000007 [ 131.410376][ T8261] RBP: 00007fd01fb6e090 R08: 0000000000000000 R09: 0000000000000000 [ 131.418458][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.426458][ T8261] R13: 0000000000000000 R14: 00007fd01ef35fa0 R15: 00007ffc6745b558 [ 131.434469][ T8261] [ 131.586732][ T8272] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 131.762374][ T8277] 8021q: adding VLAN 0 to HW filter on device bond8 [ 131.772959][ T8277] bond7: (slave bond8): Enslaving as an active interface with an up link [ 131.957081][ C0] net_ratelimit: 3 callbacks suppressed [ 131.957100][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.262294][ T8300] netlink: 'syz.3.816': attribute type 11 has an invalid length. [ 132.350426][ T8306] __nla_validate_parse: 8 callbacks suppressed [ 132.350445][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.820'. [ 132.733383][ T8326] netlink: 'syz.3.826': attribute type 49 has an invalid length. [ 132.918879][ T8333] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 132.961817][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.828'. [ 132.984041][ T8333] bond5: entered promiscuous mode [ 132.992761][ T8338] netlink: 3 bytes leftover after parsing attributes in process `syz.4.827'. [ 133.000387][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.010293][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023035][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106903][ T8333] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.198326][ T8338] batadv1: entered promiscuous mode [ 133.203568][ T8338] batadv1: entered allmulticast mode [ 133.282094][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 133.314802][ T8338] bond5: (slave batadv1): making interface the new active one [ 133.338491][ T8338] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 133.832978][ T8362] netlink: 59 bytes leftover after parsing attributes in process `syz.3.832'. [ 134.036653][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 134.198287][ T8371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.835'. [ 134.216606][ T8302] syz.0.818: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 134.234797][ T8302] CPU: 0 UID: 0 PID: 8302 Comm: syz.0.818 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 134.245417][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 134.255478][ T8302] Call Trace: [ 134.258764][ T8302] [ 134.261690][ T8302] dump_stack_lvl+0x241/0x360 [ 134.266372][ T8302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.271569][ T8302] ? __pfx__printk+0x10/0x10 [ 134.276160][ T8302] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 134.282571][ T8302] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 134.289081][ T8302] warn_alloc+0x278/0x410 [ 134.293413][ T8302] ? __pfx_warn_alloc+0x10/0x10 [ 134.298263][ T8302] ? translate_table+0x174/0x2330 [ 134.303289][ T8302] ? __get_vm_area_node+0x23d/0x270 [ 134.308519][ T8302] __vmalloc_node_range_noprof+0x691/0x13f0 [ 134.314448][ T8302] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 134.320194][ T8302] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.326544][ T8302] ? rcu_is_watching+0x15/0xb0 [ 134.331319][ T8302] ? trace_kmalloc+0x1f/0xd0 [ 134.335909][ T8302] ? __kmalloc_node_noprof+0x247/0x440 [ 134.341372][ T8302] ? __kvmalloc_node_noprof+0x72/0x190 [ 134.346837][ T8302] __kvmalloc_node_noprof+0x142/0x190 [ 134.352210][ T8302] ? translate_table+0x174/0x2330 [ 134.357238][ T8302] translate_table+0x174/0x2330 [ 134.362109][ T8302] ? __pfx_translate_table+0x10/0x10 [ 134.367392][ T8302] ? __might_fault+0xaa/0x120 [ 134.372071][ T8302] ? __pfx_lock_release+0x10/0x10 [ 134.377110][ T8302] ? __might_fault+0xaa/0x120 [ 134.381786][ T8302] ? __might_fault+0xc6/0x120 [ 134.386462][ T8302] ? _copy_from_user+0x99/0xc0 [ 134.391233][ T8302] ? copy_from_sockptr_offset+0x6b/0xb0 [ 134.396801][ T8302] do_ip6t_set_ctl+0xe4c/0x1270 [ 134.401653][ T8302] ? __pfx___might_resched+0x10/0x10 [ 134.406940][ T8302] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 134.412236][ T8302] ? __pfx_lock_release+0x10/0x10 [ 134.417270][ T8302] ? __mutex_unlock_slowpath+0x21d/0x750 [ 134.422906][ T8302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.428883][ T8302] ? aa_sk_perm+0x96d/0xab0 [ 134.433410][ T8302] ? __pfx_aa_sk_perm+0x10/0x10 [ 134.438275][ T8302] nf_setsockopt+0x295/0x2c0 [ 134.442880][ T8302] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 134.448779][ T8302] do_sock_setsockopt+0x3af/0x720 [ 134.453842][ T8302] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 134.459392][ T8302] ? __fget_files+0x29/0x470 [ 134.463982][ T8302] ? __fget_files+0x3f3/0x470 [ 134.468653][ T8302] ? __fget_files+0x29/0x470 [ 134.473247][ T8302] __sys_setsockopt+0x1a2/0x250 [ 134.478097][ T8302] __x64_sys_setsockopt+0xb5/0xd0 [ 134.483122][ T8302] do_syscall_64+0xf3/0x230 [ 134.487623][ T8302] ? clear_bhb_loop+0x35/0x90 [ 134.492297][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.498186][ T8302] RIP: 0033:0x7f7c2897e819 [ 134.502612][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.522317][ T8302] RSP: 002b:00007f7c296d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 134.530733][ T8302] RAX: ffffffffffffffda RBX: 00007f7c28b35fa0 RCX: 00007f7c2897e819 [ 134.538724][ T8302] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 134.546699][ T8302] RBP: 00007f7c289f175e R08: 0000000000000408 R09: 0000000000000000 [ 134.554667][ T8302] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 134.562633][ T8302] R13: 0000000000000000 R14: 00007f7c28b35fa0 R15: 00007ffda2fda0f8 [ 134.570608][ T8302] [ 134.575352][ T8302] Mem-Info: [ 134.579833][ T8302] active_anon:9584 inactive_anon:0 isolated_anon:0 [ 134.579833][ T8302] active_file:1557 inactive_file:38219 isolated_file:0 [ 134.579833][ T8302] unevictable:768 dirty:355 writeback:0 [ 134.579833][ T8302] slab_reclaimable:9919 slab_unreclaimable:101016 [ 134.579833][ T8302] mapped:28923 shmem:1430 pagetables:774 [ 134.579833][ T8302] sec_pagetables:0 bounce:0 [ 134.579833][ T8302] kernel_misc_reclaimable:0 [ 134.579833][ T8302] free:1309221 free_pcp:1057 free_cma:0 [ 134.625190][ T8302] Node 0 active_anon:38236kB inactive_anon:0kB active_file:6228kB inactive_file:152800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115692kB dirty:1420kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11940kB pagetables:3096kB sec_pagetables:0kB all_unreclaimable? no [ 134.658008][ T8302] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 134.689205][ T8302] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.717174][ T8302] lowmem_reserve[]: 0 2463 2464 0 0 [ 134.722952][ T8302] Node 0 DMA32 free:1316944kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:35400kB inactive_anon:0kB active_file:6228kB inactive_file:152216kB unevictable:1536kB writepending:1420kB present:3129332kB managed:2550488kB mlocked:0kB bounce:0kB free_pcp:2472kB local_pcp:1776kB free_cma:0kB [ 134.753825][ T8302] lowmem_reserve[]: 0 0 0 0 0 [ 134.759659][ T8302] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:584kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.786755][ T8302] lowmem_reserve[]: 0 0 0 0 0 [ 134.791869][ T8302] Node 1 Normal free:3909388kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.820772][ T8302] lowmem_reserve[]: 0 0 0 0 0 [ 134.825552][ T8302] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.838433][ T8302] Node 0 DMA32: 156*4kB (M) 211*8kB (ME) 106*16kB (UME) 45*32kB (UME) 179*64kB (UME) 372*128kB (UME) 361*256kB (UME) 316*512kB (UME) 233*1024kB (U) 24*2048kB (UME) 172*4096kB (UM) = 1310984kB [ 134.857918][ T8302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 134.869865][ T8302] Node 1 Normal: 245*4kB (UE) 75*8kB (UME) 42*16kB (UME) 204*32kB (UME) 99*64kB (UME) 36*128kB (UME) 16*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 4*2048kB (UE) 945*4096kB (M) = 3909388kB [ 134.888471][ T8302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.898115][ T8302] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.907533][ T8302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.919119][ T8302] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.928740][ T8302] 41206 total pagecache pages [ 134.933531][ T8302] 0 pages in swap cache [ 134.937783][ T8302] Free swap = 124996kB [ 134.941957][ T8302] Total swap = 124996kB [ 134.946214][ T8302] 2097051 pages RAM [ 134.950120][ T8302] 0 pages HighMem/MovableOnly [ 134.955393][ T8302] 427643 pages reserved [ 134.959690][ T8302] 0 pages cma reserved [ 135.076625][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.335812][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 135.392873][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 135.414202][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.841'. [ 135.499262][ T8396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 135.502414][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.840'. [ 135.508037][ T8396] bond6: (slave bond7): Enslaving as an active interface with an up link [ 135.536493][ T8393] 8021q: adding VLAN 0 to HW filter on device bond6 [ 135.544676][ T8393] bond5: (slave bond6): Enslaving as an active interface with an up link [ 135.592824][ T8403] netlink: 120 bytes leftover after parsing attributes in process `syz.2.840'. [ 136.046060][ T8386] syz.1.838 (8386) used greatest stack depth: 18040 bytes left [ 136.116620][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 136.795812][ T8471] 8021q: adding VLAN 0 to HW filter on device bond9 [ 136.812225][ T8471] bond8: (slave bond9): Enslaving as an active interface with an up link [ 137.156630][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 137.573432][ T8516] __nla_validate_parse: 12 callbacks suppressed [ 137.573451][ T8516] netlink: 412 bytes leftover after parsing attributes in process `syz.4.869'. [ 137.633234][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 137.723044][ T8526] 8021q: adding VLAN 0 to HW filter on device bond12 [ 137.731257][ T8526] bond11: (slave bond12): Enslaving as an active interface with an up link [ 137.757615][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'. [ 137.771076][ T8526] netlink: 120 bytes leftover after parsing attributes in process `syz.0.872'. [ 137.780320][ T8526] netlink: 72 bytes leftover after parsing attributes in process `syz.0.872'. [ 138.196723][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 138.260003][ T8552] netlink: 'syz.1.880': attribute type 10 has an invalid length. [ 138.292474][ T8552] team0: Device ipvlan1 failed to register rx_handler [ 138.313537][ T8554] FAULT_INJECTION: forcing a failure. [ 138.313537][ T8554] name failslab, interval 1, probability 0, space 0, times 0 [ 138.347623][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.0.882 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 138.358268][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 138.368352][ T8554] Call Trace: [ 138.371656][ T8554] [ 138.374603][ T8554] dump_stack_lvl+0x241/0x360 [ 138.379319][ T8554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.384549][ T8554] ? __pfx__printk+0x10/0x10 [ 138.389171][ T8554] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 138.395183][ T8554] ? __pfx___might_resched+0x10/0x10 [ 138.400510][ T8554] should_fail_ex+0x3b0/0x4e0 [ 138.405220][ T8554] should_failslab+0xac/0x100 [ 138.409930][ T8554] ? __alloc_skb+0x1c3/0x440 [ 138.414550][ T8554] kmem_cache_alloc_node_noprof+0x71/0x320 [ 138.420393][ T8554] __alloc_skb+0x1c3/0x440 [ 138.424841][ T8554] ? __pfx___alloc_skb+0x10/0x10 [ 138.429797][ T8554] ? netlink_autobind+0xd6/0x2f0 [ 138.434760][ T8554] ? netlink_autobind+0x2b0/0x2f0 [ 138.439815][ T8554] netlink_sendmsg+0x638/0xcb0 [ 138.444619][ T8554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.449935][ T8554] ? aa_sock_msg_perm+0x91/0x160 [ 138.454899][ T8554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.460210][ T8554] __sock_sendmsg+0x221/0x270 [ 138.464914][ T8554] ____sys_sendmsg+0x52a/0x7e0 [ 138.469711][ T8554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.475039][ T8554] __sys_sendmsg+0x292/0x380 [ 138.479652][ T8554] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.484795][ T8554] ? __pfx_vfs_write+0x10/0x10 [ 138.489607][ T8554] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.495964][ T8554] ? do_syscall_64+0x100/0x230 [ 138.500754][ T8554] ? do_syscall_64+0xb6/0x230 [ 138.505454][ T8554] do_syscall_64+0xf3/0x230 [ 138.509987][ T8554] ? clear_bhb_loop+0x35/0x90 [ 138.514685][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.520610][ T8554] RIP: 0033:0x7f7c2897e819 [ 138.525043][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.544679][ T8554] RSP: 002b:00007f7c296d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.553124][ T8554] RAX: ffffffffffffffda RBX: 00007f7c28b35fa0 RCX: 00007f7c2897e819 [ 138.561127][ T8554] RDX: 0000000000000000 RSI: 0000000020004340 RDI: 0000000000000007 [ 138.569127][ T8554] RBP: 00007f7c296d1090 R08: 0000000000000000 R09: 0000000000000000 [ 138.577118][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.585106][ T8554] R13: 0000000000000000 R14: 00007f7c28b35fa0 R15: 00007ffda2fda0f8 [ 138.593113][ T8554] [ 138.781414][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 138.962926][ T8568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.887'. [ 138.975615][ T8568] FAULT_INJECTION: forcing a failure. [ 138.975615][ T8568] name failslab, interval 1, probability 0, space 0, times 0 [ 138.996669][ T8568] CPU: 0 UID: 0 PID: 8568 Comm: syz.0.887 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 139.007350][ T8568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 139.017607][ T8568] Call Trace: [ 139.020905][ T8568] [ 139.023858][ T8568] dump_stack_lvl+0x241/0x360 [ 139.028564][ T8568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.033795][ T8568] ? __pfx__printk+0x10/0x10 [ 139.038454][ T8568] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 139.044479][ T8568] ? __pfx___might_resched+0x10/0x10 [ 139.049802][ T8568] ? kfree+0x1a0/0x440 [ 139.053928][ T8568] should_fail_ex+0x3b0/0x4e0 [ 139.058649][ T8568] should_failslab+0xac/0x100 [ 139.063372][ T8568] ? __alloc_skb+0x1c3/0x440 [ 139.068011][ T8568] kmem_cache_alloc_node_noprof+0x71/0x320 [ 139.073857][ T8568] __alloc_skb+0x1c3/0x440 [ 139.078288][ T8568] ? __pfx___alloc_skb+0x10/0x10 [ 139.083239][ T8568] ? netlink_ack_tlv_len+0x6e/0x200 [ 139.088442][ T8568] netlink_ack+0x13f/0xa30 [ 139.092855][ T8568] ? __pfx_lock_acquire+0x10/0x10 [ 139.097880][ T8568] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 139.103771][ T8568] ? __pfx_nl802154_post_doit+0x10/0x10 [ 139.109322][ T8568] netlink_rcv_skb+0x262/0x430 [ 139.114090][ T8568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.119116][ T8568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.124422][ T8568] genl_rcv+0x28/0x40 [ 139.128402][ T8568] netlink_unicast+0x7f6/0x990 [ 139.133169][ T8568] ? __pfx_netlink_unicast+0x10/0x10 [ 139.138449][ T8568] ? __virt_addr_valid+0x183/0x530 [ 139.143560][ T8568] ? __check_object_size+0x48e/0x900 [ 139.148844][ T8568] netlink_sendmsg+0x8e4/0xcb0 [ 139.153616][ T8568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.158925][ T8568] ? aa_sock_msg_perm+0x91/0x160 [ 139.163881][ T8568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.169175][ T8568] __sock_sendmsg+0x221/0x270 [ 139.173864][ T8568] ____sys_sendmsg+0x52a/0x7e0 [ 139.178642][ T8568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.183947][ T8568] __sys_sendmsg+0x292/0x380 [ 139.188541][ T8568] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.193660][ T8568] ? __pfx_vfs_write+0x10/0x10 [ 139.198447][ T8568] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.204775][ T8568] ? do_syscall_64+0x100/0x230 [ 139.209543][ T8568] ? do_syscall_64+0xb6/0x230 [ 139.214226][ T8568] do_syscall_64+0xf3/0x230 [ 139.218727][ T8568] ? clear_bhb_loop+0x35/0x90 [ 139.223407][ T8568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.229295][ T8568] RIP: 0033:0x7f7c2897e819 [ 139.233709][ T8568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.253317][ T8568] RSP: 002b:00007f7c296d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.261739][ T8568] RAX: ffffffffffffffda RBX: 00007f7c28b35fa0 RCX: 00007f7c2897e819 [ 139.269709][ T8568] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 139.277676][ T8568] RBP: 00007f7c296d1090 R08: 0000000000000000 R09: 0000000000000000 [ 139.285646][ T8568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.293614][ T8568] R13: 0000000000000000 R14: 00007f7c28b35fa0 R15: 00007ffda2fda0f8 [ 139.301616][ T8568] [ 139.306379][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 139.340337][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 139.384458][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 139.406674][ T8579] IPv6: Can't replace route, no match found [ 139.424614][ T8579] netlink: 'syz.2.889': attribute type 11 has an invalid length. [ 139.485000][ T8582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.891'. [ 139.819483][ T8597] netlink: 'syz.0.898': attribute type 15 has an invalid length. [ 140.069894][ T8605] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.076900][ T8605] 0·: hsr_addr_subst_dest: Unknown node [ 140.357003][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 140.476310][ T8634] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 140.494865][ T8634] netlink: 'syz.0.914': attribute type 2 has an invalid length. [ 140.944867][ T8655] netlink: 'syz.1.924': attribute type 2 has an invalid length. [ 141.024105][ T8660] netlink: 'syz.1.926': attribute type 13 has an invalid length. [ 141.106412][ T8662] ebt_limit: overflow, try lower: 570423552/2483027968 [ 141.397623][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.778790][ T5889] IPVS: starting estimator thread 0... [ 141.876778][ T8697] IPVS: using max 18 ests per chain, 43200 per kthread [ 142.436622][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.535191][ T8733] 8021q: adding VLAN 0 to HW filter on device bond14 [ 142.543460][ T8733] bond13: (slave bond14): Enslaving as an active interface with an up link [ 142.622548][ T8740] netlink: 'syz.1.958': attribute type 11 has an invalid length. [ 142.870845][ T8745] __nla_validate_parse: 15 callbacks suppressed [ 142.871128][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.960'. [ 142.880373][ T8746] FAULT_INJECTION: forcing a failure. [ 142.880373][ T8746] name failslab, interval 1, probability 0, space 0, times 0 [ 142.902019][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.0.961 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 142.912670][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 142.922753][ T8746] Call Trace: [ 142.926056][ T8746] [ 142.929008][ T8746] dump_stack_lvl+0x241/0x360 [ 142.933708][ T8746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.938915][ T8746] ? __pfx__printk+0x10/0x10 [ 142.943510][ T8746] ? fs_reclaim_acquire+0x93/0x130 [ 142.948628][ T8746] ? __pfx___might_resched+0x10/0x10 [ 142.953915][ T8746] should_fail_ex+0x3b0/0x4e0 [ 142.958599][ T8746] ? ima_alloc_init_template+0x8b/0x6e0 [ 142.964146][ T8746] should_failslab+0xac/0x100 [ 142.968827][ T8746] ? ima_alloc_init_template+0x8b/0x6e0 [ 142.974374][ T8746] __kmalloc_noprof+0xd8/0x400 [ 142.979144][ T8746] ima_alloc_init_template+0x8b/0x6e0 [ 142.984526][ T8746] ima_store_measurement+0x289/0x6f0 [ 142.989815][ T8746] ? sized_strscpy+0x8d/0x220 [ 142.994488][ T8746] ? __pfx_ima_store_measurement+0x10/0x10 [ 143.000292][ T8746] ? release_dentry_name_snapshot+0x42/0xb0 [ 143.006183][ T8746] ? ima_d_path+0x222/0x270 [ 143.010704][ T8746] process_measurement+0x150b/0x1fb0 [ 143.016005][ T8746] ? __pfx_process_measurement+0x10/0x10 [ 143.021640][ T8746] ? __pfx_lock_acquire+0x10/0x10 [ 143.026665][ T8746] ? aa_file_perm+0x137/0xf50 [ 143.031342][ T8746] ? alloc_empty_file+0xb8/0x1d0 [ 143.036303][ T8746] ? __asan_memset+0x23/0x50 [ 143.040887][ T8746] ? lockdep_init_map_type+0xa1/0x910 [ 143.046261][ T8746] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 143.052069][ T8746] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 143.058233][ T8746] ima_file_mmap+0x1f4/0x2b0 [ 143.062822][ T8746] ? __raw_spin_lock_init+0x45/0x100 [ 143.068106][ T8746] ? __pfx_ima_file_mmap+0x10/0x10 [ 143.073216][ T8746] ? file_init_path+0x3b/0x570 [ 143.077980][ T8746] ? end_current_label_crit_section+0x151/0x180 [ 143.084233][ T8746] ? common_file_perm+0x1a6/0x210 [ 143.089257][ T8746] security_mmap_file+0x7e7/0xa40 [ 143.094279][ T8746] vm_mmap_pgoff+0x141/0x3d0 [ 143.098869][ T8746] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 143.103992][ T8746] ? hugetlb_file_setup+0x3dc/0x5c0 [ 143.109208][ T8746] ksys_mmap_pgoff+0x53e/0x720 [ 143.113977][ T8746] do_syscall_64+0xf3/0x230 [ 143.118480][ T8746] ? clear_bhb_loop+0x35/0x90 [ 143.123183][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.129096][ T8746] RIP: 0033:0x7f7c2897e819 [ 143.133523][ T8746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.153132][ T8746] RSP: 002b:00007f7c296d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 143.161563][ T8746] RAX: ffffffffffffffda RBX: 00007f7c28b35fa0 RCX: 00007f7c2897e819 [ 143.169531][ T8746] RDX: 0000000000000004 RSI: 0000000000400000 RDI: 0000000020000000 [ 143.177498][ T8746] RBP: 00007f7c296d1090 R08: ffffffffffffffff R09: 0000000047fab000 [ 143.185465][ T8746] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000002 [ 143.193433][ T8746] R13: 0000000000000001 R14: 00007f7c28b35fa0 R15: 00007ffda2fda0f8 [ 143.201413][ T8746] [ 143.217773][ T29] audit: type=1804 audit(1732163416.835:12): pid=8746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.961" name="anon_hugepage" dev="hugetlbfs" ino=19368 res=0 errno=0 [ 143.242804][ T8755] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 143.258422][ T8755] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 143.460242][ T8771] No such timeout policy "syz0" [ 143.476752][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.507722][ C1] ------------[ cut here ]------------ [ 143.513418][ C1] refcount_t: underflow; use-after-free. [ 143.519606][ C1] WARNING: CPU: 1 PID: 8771 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 143.529110][ C1] Modules linked in: [ 143.533093][ C1] CPU: 1 UID: 0 PID: 8771 Comm: syz.2.971 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 143.543755][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 143.553913][ C1] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 143.560178][ C1] Code: e0 c8 60 8c e8 d7 13 98 fc 90 0f 0b 90 90 eb 99 e8 5b 1d d7 fc c6 05 7d 6b 49 0b 01 90 48 c7 c7 40 c9 60 8c e8 b7 13 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 1d d7 fc c6 05 57 6b 49 0b 01 90 [ 143.579869][ C1] RSP: 0018:ffffc90000a18788 EFLAGS: 00010246 [ 143.585983][ C1] RAX: 4913dd378b53ce00 RBX: ffff88802fbabd64 RCX: ffff88802fe61e00 [ 143.594023][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.602080][ C1] RBP: 0000000000000003 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0 [ 143.610130][ C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88801cb8e468 [ 143.618175][ C1] R13: ffff88802fbabd64 R14: 1ffff11003971c98 R15: ffff88801cb8e400 [ 143.626225][ C1] FS: 00007f1d07ff66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 143.635229][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.641885][ C1] CR2: 000000110c2aaa26 CR3: 000000007e8a2000 CR4: 00000000003526f0 [ 143.649928][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.657992][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.666009][ C1] Call Trace: [ 143.669353][ C1] [ 143.672222][ C1] ? __warn+0x168/0x4e0 [ 143.676410][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 143.682053][ C1] ? report_bug+0x2b3/0x500 [ 143.686624][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 143.692213][ C1] ? handle_bug+0x60/0x90 [ 143.696602][ C1] ? exc_invalid_op+0x1a/0x50 [ 143.701308][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 143.706931][ C1] ? __warn_printk+0x292/0x360 [ 143.711732][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 143.717365][ C1] ? refcount_warn_saturate+0x159/0x1d0 [ 143.722954][ C1] j1939_session_put+0x1ed/0x440 [ 143.727963][ C1] j1939_can_recv+0x758/0xb20 [ 143.732704][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 143.738003][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 143.743251][ C1] can_rcv_filter+0x359/0x7f0 [ 143.748000][ C1] can_receive+0x327/0x480 [ 143.752463][ C1] ? can_receive+0x1c9/0x480 [ 143.757132][ C1] can_rcv+0x144/0x260 [ 143.761232][ C1] ? __pfx_can_rcv+0x10/0x10 [ 143.765857][ C1] __netif_receive_skb+0x2e0/0x650 [ 143.771019][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 143.776085][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 143.781788][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.787847][ C1] ? __pfx_lock_release+0x10/0x10 [ 143.792924][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 143.798869][ C1] process_backlog+0x662/0x15b0 [ 143.803725][ C1] ? process_backlog+0x33b/0x15b0 [ 143.808798][ C1] ? __pfx_process_backlog+0x10/0x10 [ 143.814101][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.820110][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.826441][ C1] __napi_poll+0xcb/0x490 [ 143.830799][ C1] net_rx_action+0x89b/0x1240 [ 143.835486][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 143.840619][ C1] ? __run_timer_base+0x178/0x8e0 [ 143.845646][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 143.851317][ C1] handle_softirqs+0x2c5/0x980 [ 143.856090][ C1] ? do_softirq+0x11b/0x1e0 [ 143.860616][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 143.865912][ C1] do_softirq+0x11b/0x1e0 [ 143.870266][ C1] [ 143.873196][ C1] [ 143.876121][ C1] ? __pfx_do_softirq+0x10/0x10 [ 143.881008][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 143.886711][ C1] ? j1939_sk_sendmsg+0x1293/0x14c0 [ 143.891948][ C1] ? rcu_is_watching+0x15/0xb0 [ 143.896747][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 143.901969][ C1] ? j1939_sk_sendmsg+0x1293/0x14c0 [ 143.907211][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 143.912962][ C1] j1939_sk_sendmsg+0x1293/0x14c0 [ 143.918061][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 143.923472][ C1] ? __import_iovec+0x590/0x870 [ 143.928386][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 143.933351][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 143.938773][ C1] __sock_sendmsg+0x221/0x270 [ 143.943476][ C1] ____sys_sendmsg+0x52a/0x7e0 [ 143.948303][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.953631][ C1] __sys_sendmsg+0x292/0x380 [ 143.958280][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.963416][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 143.968715][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.975071][ C1] ? do_syscall_64+0x100/0x230 [ 143.979885][ C1] ? do_syscall_64+0xb6/0x230 [ 143.984589][ C1] do_syscall_64+0xf3/0x230 [ 143.989115][ C1] ? clear_bhb_loop+0x35/0x90 [ 143.993791][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.999703][ C1] RIP: 0033:0x7f1d0a17e819 [ 144.004115][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.023748][ C1] RSP: 002b:00007f1d07ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.032209][ C1] RAX: ffffffffffffffda RBX: 00007f1d0a335fa0 RCX: 00007f1d0a17e819 [ 144.040233][ C1] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000a [ 144.048256][ C1] RBP: 00007f1d0a1f175e R08: 0000000000000000 R09: 0000000000000000 [ 144.056248][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.064258][ C1] R13: 0000000000000000 R14: 00007f1d0a335fa0 R15: 00007ffda18ec6c8 [ 144.072278][ C1] [ 144.075320][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.082604][ C1] CPU: 1 UID: 0 PID: 8771 Comm: syz.2.971 Not tainted 6.12.0-rc7-syzkaller-01770-gdd7207838d38 #0 [ 144.093227][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 144.103302][ C1] Call Trace: [ 144.106588][ C1] [ 144.109449][ C1] dump_stack_lvl+0x241/0x360 [ 144.114127][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.119331][ C1] ? __pfx__printk+0x10/0x10 [ 144.123947][ C1] ? vscnprintf+0x5d/0x90 [ 144.128295][ C1] panic+0x349/0x880 [ 144.132218][ C1] ? __warn+0x177/0x4e0 [ 144.136390][ C1] ? __pfx_panic+0x10/0x10 [ 144.140820][ C1] __warn+0x34b/0x4e0 [ 144.144813][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 144.150372][ C1] report_bug+0x2b3/0x500 [ 144.154717][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 144.160306][ C1] handle_bug+0x60/0x90 [ 144.164488][ C1] exc_invalid_op+0x1a/0x50 [ 144.168993][ C1] asm_exc_invalid_op+0x1a/0x20 [ 144.173852][ C1] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 144.180071][ C1] Code: e0 c8 60 8c e8 d7 13 98 fc 90 0f 0b 90 90 eb 99 e8 5b 1d d7 fc c6 05 7d 6b 49 0b 01 90 48 c7 c7 40 c9 60 8c e8 b7 13 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 1d d7 fc c6 05 57 6b 49 0b 01 90 [ 144.199772][ C1] RSP: 0018:ffffc90000a18788 EFLAGS: 00010246 [ 144.205848][ C1] RAX: 4913dd378b53ce00 RBX: ffff88802fbabd64 RCX: ffff88802fe61e00 [ 144.213823][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.221798][ C1] RBP: 0000000000000003 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0 [ 144.229777][ C1] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88801cb8e468 [ 144.237768][ C1] R13: ffff88802fbabd64 R14: 1ffff11003971c98 R15: ffff88801cb8e400 [ 144.245773][ C1] ? __warn_printk+0x292/0x360 [ 144.250547][ C1] ? refcount_warn_saturate+0x159/0x1d0 [ 144.256095][ C1] j1939_session_put+0x1ed/0x440 [ 144.261038][ C1] j1939_can_recv+0x758/0xb20 [ 144.265737][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 144.270996][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 144.276223][ C1] can_rcv_filter+0x359/0x7f0 [ 144.280920][ C1] can_receive+0x327/0x480 [ 144.285375][ C1] ? can_receive+0x1c9/0x480 [ 144.289997][ C1] can_rcv+0x144/0x260 [ 144.294080][ C1] ? __pfx_can_rcv+0x10/0x10 [ 144.298683][ C1] __netif_receive_skb+0x2e0/0x650 [ 144.303812][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 144.308848][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 144.314494][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.320470][ C1] ? __pfx_lock_release+0x10/0x10 [ 144.325489][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 144.330618][ C1] process_backlog+0x662/0x15b0 [ 144.335486][ C1] ? process_backlog+0x33b/0x15b0 [ 144.340508][ C1] ? __pfx_process_backlog+0x10/0x10 [ 144.345787][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.351763][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.358105][ C1] __napi_poll+0xcb/0x490 [ 144.362454][ C1] net_rx_action+0x89b/0x1240 [ 144.367153][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 144.372274][ C1] ? __run_timer_base+0x178/0x8e0 [ 144.377305][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 144.382993][ C1] handle_softirqs+0x2c5/0x980 [ 144.387772][ C1] ? do_softirq+0x11b/0x1e0 [ 144.392292][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 144.397575][ C1] do_softirq+0x11b/0x1e0 [ 144.401905][ C1] [ 144.404843][ C1] [ 144.407778][ C1] ? __pfx_do_softirq+0x10/0x10 [ 144.412673][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 144.418304][ C1] ? j1939_sk_sendmsg+0x1293/0x14c0 [ 144.423493][ C1] ? rcu_is_watching+0x15/0xb0 [ 144.428266][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 144.433482][ C1] ? j1939_sk_sendmsg+0x1293/0x14c0 [ 144.438681][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 144.444423][ C1] j1939_sk_sendmsg+0x1293/0x14c0 [ 144.449471][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 144.454853][ C1] ? __import_iovec+0x590/0x870 [ 144.459706][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 144.464688][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 144.470061][ C1] __sock_sendmsg+0x221/0x270 [ 144.474767][ C1] ____sys_sendmsg+0x52a/0x7e0 [ 144.479536][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.484856][ C1] __sys_sendmsg+0x292/0x380 [ 144.489473][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.494609][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 144.499826][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.506203][ C1] ? do_syscall_64+0x100/0x230 [ 144.510969][ C1] ? do_syscall_64+0xb6/0x230 [ 144.515645][ C1] do_syscall_64+0xf3/0x230 [ 144.520147][ C1] ? clear_bhb_loop+0x35/0x90 [ 144.524822][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.530719][ C1] RIP: 0033:0x7f1d0a17e819 [ 144.535242][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.554861][ C1] RSP: 002b:00007f1d07ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.563281][ C1] RAX: ffffffffffffffda RBX: 00007f1d0a335fa0 RCX: 00007f1d0a17e819 [ 144.571264][ C1] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000a [ 144.579234][ C1] RBP: 00007f1d0a1f175e R08: 0000000000000000 R09: 0000000000000000 [ 144.587221][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.595210][ C1] R13: 0000000000000000 R14: 00007f1d0a335fa0 R15: 00007ffda18ec6c8 [ 144.603193][ C1] [ 144.606367][ C1] Kernel Offset: disabled [ 144.610728][ C1] Rebooting in 86400 seconds..