last executing test programs: 4.504042907s ago: executing program 0 (id=536): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x416b}, &(0x7f0000000040)=0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}}, 0x8800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d40)=@newtfilter={0x38, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.356264836s ago: executing program 0 (id=538): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in=@empty, 0x1900, 0x32}, @in=@dev, {}, {0x0, 0x200000000}, {}, 0x1, 0x0, 0x2, 0x4}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x94}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdrdstopts={{0x18, 0x29, 0x32, {0xaab90fdea6b9fca9}}}], 0x18}, 0x400c4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e24, 0x5, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x30, 0x0, 0xee01}, {0xc2, 0x80000001, 0x8000, 0x9, 0x93a5, 0xd01, 0xb, 0xbc0}, {0x7fffffffffffffff, 0x5, 0xc019, 0x5}, 0x2, 0x6e6bbc, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x3c}, 0xa, @in=@multicast1, 0x3504, 0x4, 0x0, 0x2, 0x5, 0x9a, 0x100}}, 0xe8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x602800, 0x0) ioctl$FICLONE(r5, 0x40049409, r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000001f00)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = accept4(r4, &(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80, 0x100800) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x4801) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x2400, 0x4) r8 = socket(0xa, 0x3, 0x3a) bind$can_j1939(r8, &(0x7f0000000140)={0x1d, 0x0, 0x2, {0x2, 0x1}, 0xff}, 0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000600)={0x0, 0x8}, &(0x7f0000000640)=0x8) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xb327, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000080)={r11, 0x3ff}, 0x8) sendmmsg$inet_sctp(r7, &(0x7f0000001e40)=[{&(0x7f0000000400)=@in6={0xa, 0x4e22, 0xd, @mcast2, 0x4}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000440)="03eb446447b7385e16ec82e40ec22989b91f001b7fd9501bc4cfaf7394d8db39d7f6f9e77c58ef692a377621ccf955023485fbd64089e5bab4fa9a8ff908c61423996c95f3a9a2d015bed2440e524d1a48b5b1479f81dd367b0fd9efc0de9f1378fd23cf4fd9c6fc1e2269b959a1793e4862f90a17d093371e165483c6025ad9bef1cc2d2305522320a29a67e1faa1981630a3b810db64021e48d7e5249d41db62e4d1ac04a1c4b9ca98fc008a8a53ec583bc1", 0xb3}], 0x1, &(0x7f0000000680)=[@init={0x18, 0x84, 0x0, {0x7, 0x0, 0x9af9, 0x5}}], 0x18, 0x20000000}, {&(0x7f00000006c0)=@in6={0xa, 0x4, 0x37a, @mcast2, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000700)="791e13cde4ff1b79f97dd1c27b2dc7022401c6253d3999617d9d22ab53", 0x1d}], 0x1, &(0x7f0000000cc0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7f}}], 0x38, 0x40}, {&(0x7f00000007c0)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000800)="a5701fddd7cf29eb4f5aa7624c011e47cb5d0f9ad050e22ab62a527323f51c12e509f7fc4513050bd29d4b72cc768877cb", 0x31}, {&(0x7f00000008c0)="63da7a47cc09573b3db290617fc7931c2d1d3a50ea5df1872bedbd6bbb999a23610e753d0b936b1a4c452676e345d1b3f9c5689ec5024b0450de3ac44cf644b1265297e765688badf39632b98673f4ee8f1318d9bc60ea29c16a49e3958b7d398eda6598d814c3d9ef866a64a654add2b3ca813352e2b53f20a4283fd53ab0db328a276af4ef1358dbbe7cf5cc03e4a19bbf16ba8cd19d04716498069343a2000be0d47bd66b", 0xa6}, {&(0x7f0000000a40)="d2ff08d1d5b19f1ddf642d4902fb8e65dc8cb9da091d579edbfa00d0a6d44f15b0464d987702aa609ef9d68c3edd3249e2258a87a8a5a4d8ad10b3d1090fa2fddbfa270ddf81a90666438ccc863f114567036f5fff52acae8cb387e909185b4cbb366617dff236ca322a530ec82779a4f70b32dbbd10f61637340be4227b07dbaeb4bfc595578cef8e327a8f2eb40eb4b42720187c5c0257b2d54403c72193db3502d80627592982d35738ac1f3223a9f320bc0c72cc30b06794492a8f", 0xbd}, {&(0x7f0000000b00)="5a072dcc57ab9f42113c3deacd49761c0d4de32744e5d70c58181290daa7b56582fa96d1f1676b937c6f8de6e8929e319959170c092ca607ccd10181f188279cd1874c4b3e0fd04fbfc5a1a92beb55ab26d4460472be25a391bce1b59b588557f747ac7134c25b498fef0f0521c34e6e287d2b4cb3f0fb2832617403544001331008", 0x82}, {&(0x7f0000000840)="092241fb5964e2f2760821835c1cd5c1b8fbc67c77e8716e6a378f3d1884d3979d", 0x21}, {&(0x7f0000000bc0)="0d3e97696e550dc1787391cb46a8b348d0fe05099ce8d33529b1a2fa9ae7c53f2384658c84c808faf57f1dd52f28dcd2b8e8a4e2a1d704d0c60c2a0f79a2155dbda8e14f3aed0a64acce523ecebc03fc1b2341035a70d63a549f83a08ff94debb87fa71b16518640c6c3c6677a0cadb84f48d055e796bb42833128f9f8df9c75f7dd15dcdef893a047468d15a38dbd2a64d5f5729585356352df8b00f8bcb91fa68d616c1a4a91e5b41dd8c9789dabb5589eb66d05dadb168b7b9bb14572ef25c40fc46bda782980371ce72110f5e571f9e3fe197a", 0xd5}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000001cc0)="d72e654660a422557f4366e4012618c75ce17efb1e6cbe86455eb9f7c0dbe24b2fa43f1c08fe5830663b0d7c9e8846b3e2cc7d9bbb53522c2a01c56ceb7c5809ff59817405ad7dd35d5778875a2874c87d39d5f1ecb51e0b701d78e9bb4ba492bd57c9b09c28020e68bc2f83775edee19122d030842b47d467e184bf62320e3d0c52d94f6add96fc64d645b8c5b2255a4e22569d550a4135243fb3221c28c96e0a980ad8d2d41934781bbaac936f2915", 0xb0}], 0x8, &(0x7f0000001d80)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv6={0x20, 0x84, 0x8, @private1}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x70d, 0x8000, r11}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xff}}, @authinfo={0x18, 0x84, 0x6, {0xd}}], 0xc0, 0x11}], 0x3, 0x8000) 4.1936624s ago: executing program 0 (id=541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.983741616s ago: executing program 0 (id=543): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) unshare(0x6a040000) socket$phonet_pipe(0x23, 0x5, 0x2) unshare(0x20000400) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000caf600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) (async) r1 = socket(0x2b, 0x80801, 0x1) (async, rerun: 64) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) (rerun: 64) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffffffffffff}) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x128, 0x5c, 0x160, 0x128, 0x3e0, 0x320, 0x228, 0x25a, 0x320, 0x228, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2e}, @dev, [], [], 'macvtap0\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x4}, 0x5002, 0x100, 0x128, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh={{0x30}, {0x5e, 0x4, 0xfe, 0x8, 0x0, 0xb}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:depmod_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) (async) listen(r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x7fff, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x3, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0xfc, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xff, 0x3, 0xa, [{@broadcast, 0x80000000}, {@empty, 0x7}, {@private=0xa010102, 0x1}]}]}}}}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40800000300000061104b0000bf06000000000000009500"/37], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x74, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xc, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000020000100feffffff2000000102c40600020000001e0001000c001400", @ANYRES32=0xee01, @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 2.172014716s ago: executing program 0 (id=550): sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x3c, r3, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}) write$tun(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec970000302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r6, &(0x7f0000004380)=[{&(0x7f0000000180)="c37d", 0x2}], 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b6967335", 0x8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018000000000000001701000003000000010000"], 0x60}], 0x1, 0x8001) recvmmsg(r7, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r11, 0x1, 0x2f, 0x0, &(0x7f00000008c0)=0x700) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r9, &(0x7f0000000180), 0x4000190, 0x0) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) socket$inet_udp(0x2, 0x2, 0x0) connect$ax25(r12, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x48) close(r8) 2.155837673s ago: executing program 1 (id=552): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) write(r2, &(0x7f0000003300)="ac", 0x1) write(0xffffffffffffffff, 0x0, 0x0) 2.130182471s ago: executing program 2 (id=553): r0 = socket$inet6(0xa, 0x3, 0x86) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x400, 0x0, 0x2, 0x0, 0x0, 0x3a}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000001, 0x53e5, 0x20}, 0x0, 0x4000001, 0x1, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0x2, @in=@empty, 0x1506, 0x1, 0x0, 0x0, 0x0, 0x8000, 0xffffffff}}, 0xe4) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r2}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r1, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r2}, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.084093593s ago: executing program 4 (id=554): pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80, 0x6) write(r2, &(0x7f0000003300)="ac", 0x1) write(r0, 0x0, 0x0) 2.026094109s ago: executing program 1 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="44020000", @ANYRES16=r1, @ANYBLOB="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"/574], 0x244}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = socket$inet(0x2, 0x800, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000000d07bd91d4e9975b602b0", @ANYRES32=0x0, @ANYBLOB="0000000014000500fe8000000000000000000000000000bb"], 0x30}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r4, 0x0, 0xfffffffffffffff9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r4}, 0x18) unshare(0x62040200) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r8, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r9, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x278, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x265, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x1de, 0x64, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r10}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e", @nested={0x5d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f", @typed={0x8, 0x94, 0x0, 0x0, @fd=r10}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b94825658"]}]}, 0x278}], 0x1}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1d0, 0x1d0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, &(0x7f0000000000), {[{{@arp={@local, @loopback, 0xff000000, 0x0, 0x2, 0x3, {@mac=@remote, {[0x561d814963a614d1, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x7, 0x3, 0x2, 0x4234, 0x2, 0x8, 'geneve0\x00', 'pim6reg\x00', {}, {0xff}, 0x0, 0x81}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2c, 0xfff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0xffffff00, 0x9, 0x4, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x850, 0x7, 0x4, 0x1, 'ip_vti0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x148}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x8}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 1.991928503s ago: executing program 2 (id=556): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r2, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r1, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)}, 0x20040040) 1.936128281s ago: executing program 3 (id=557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) bpf$MAP_CREATE(0x604, &(0x7f0000001a80)=ANY=[], 0x48) 1.878203362s ago: executing program 2 (id=558): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xd, 0x7, 0x7fe2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000070000000600000009000000000000", @ANYRES32=r5, @ANYBLOB="000100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000de28bcf000000000000f8af1e3167d3e90aaa73a5a4477cbf68970337d796862273d03b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 1.851455678s ago: executing program 3 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x101, 0x48, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x12c}}, 0x240040d0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40200002}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000021c0)=0x95) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, &(0x7f0000002840)) unshare(0x24020400) ppoll(&(0x7f0000000000)=[{r1, 0x8503}], 0x1, 0x0, 0x0, 0x0) 1.851249952s ago: executing program 4 (id=560): unshare(0x8000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38) (fail_nth: 10) 1.792012138s ago: executing program 0 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000003000000420000001a57400000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000440), &(0x7f0000000540)=@udp, 0x2}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000080)={r3}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf254d0000000e0001006e657464657673696d0000000f0002006e657464656f6e646e616d65000008000100706369001100020030303030257c9713773a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000005e00a800c4fc5d9e98821a4f1ed984ec68ff9878492ac36c3d1835cbc803134a6601c0f31c3d48f96fef8158ede6d4728429d8f83689e4475119d19289b23dcc45897a5070514956d1057f443ad571138af04b3817387a26890270307ae700000800030001000000"], 0xe8}, 0x1, 0x0, 0x0, 0x43}, 0x4044) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r4, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x100, 0x12}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9fa}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x705}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x47b}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20000880) 1.637120408s ago: executing program 4 (id=562): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000012c0), 0x4) 1.446831154s ago: executing program 3 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x2000, 0x60001008, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.287976122s ago: executing program 4 (id=564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1000f) 1.258908577s ago: executing program 1 (id=565): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r4, &(0x7f0000003300)="ac", 0x1) write(r2, 0x0, 0x0) 1.189639375s ago: executing program 3 (id=566): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="0380c2000003ffffffffffff080045"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x4030582a, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100039040000000000000000000003e4", @ANYRES32=0x0, @ANYBLOB="000000000000010034001280080001007369740028000280b91414f613000b00ff020000000000000000030000000001f2f0767b419a01a48d1bfc2e752e28"], 0x54}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x80000) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x2, &(0x7f00000003c0)={r9, 0x1, 0x4, @remote}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000280)={0x7, 'veth1_to_batadv\x00', {0x6}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r11, 0x11, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x8, 0xf, &(0x7f0000000540)=ANY=[@ANYRESDEC=r4, @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095", @ANYRESDEC=r6, @ANYRES8, @ANYRES16=r4, @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r12, 0x0, 0x0}, 0x10) 1.060074749s ago: executing program 4 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) socket$kcm(0xa, 0x4, 0x106) 834.735324ms ago: executing program 2 (id=568): socket(0x2a, 0x80000, 0x10000) (async) socket(0x2a, 0x80000, 0x10000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="ff0005002600010a00000000000000000a020000"], 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000b000000080000000600000f020000000200000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004977000000000000000f020000001760000000000000000061"], 0x0, 0x87, 0xfffffe0f, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r5, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000000000002000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6544210cd2b3f6cb053cc137ff13bff0000000002005a000900010073797a30000000000900030073"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000020500030000000000080004400000000108000240000000000900010073797a30000000000900020073797a320000"], 0x8c}}, 0x0) 796.324938ms ago: executing program 3 (id=569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) (fail_nth: 1) socket$kcm(0xa, 0x4, 0x106) 775.199284ms ago: executing program 4 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r1, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0x0, 0x0, 0x0, 0x0, 0xd9e, 0x7fffffff}, 0x0, 0x0) r5 = socket$kcm(0xa, 0x4, 0x106) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x4000) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000200)="04fb7ff9e64f2133f0c6a45b425d6cb45d49614de162eec9240193e8afc366484cb2293e8bea14515459e8978ac00369e377ee26bc9d9a52bcbc3343f5347c6c1ba19c002d68fc6e173c75297ef8ee4464bd267e95d11860823fce458803248b586f4569677e2e900cc2bcf39dc98bdb2f4060b6d008aab88d772a7c3aadff51eaf990c16d90871ae70d28501ae436104493907f9300c52fa4d6f668edaa14cbfa6782ffc4c50ca8aaa139e35e14db3e", 0xb0}, {&(0x7f00000002c0)="3980520ec6c659eaa59c697e9105f36cae5cab5f11c933405387a83ae94b0422b042f423ce46bb0e012f3c0270fd95f190c9d63f93d6ce56e569eedeccde3b4bcb7e7f723645646f6f5f5efce62a3a9ba9f66c174fa2c83d1c06eb3d08c9fbc1e5d4910d2224", 0x66}], 0x2) 773.10093ms ago: executing program 1 (id=571): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) write(r2, &(0x7f0000003300)="ac", 0x1) write(0xffffffffffffffff, 0x0, 0x0) 384.083011ms ago: executing program 1 (id=572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x43) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8004}, 0x1c) 383.824949ms ago: executing program 2 (id=573): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="0380c2000003ffffffffffff082145"], 0x0) 106.462991ms ago: executing program 2 (id=574): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0xb3}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (fail_nth: 9) 88.04745ms ago: executing program 3 (id=575): r0 = socket$pptp(0x18, 0x1, 0x2) unshare(0xa020480) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x60}}, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000067897c65e7ad3400c9f908ed1b4ee9f4a366200dc88281bc91b6b37912ffdaca98841274728c3f0f1074536d3979a583def89f719f9997be1eb068824ccb232c09f05b8bae690055f8870ec891bc7b4767dec0d5f8b06a5b61eb2353622a5f01445d26576500ad40d567f9e8b1b74c0d75bce0ea7df50acb2c21378f0dd915a07507d1238d7e994b5e564d10f7504fed5958eafe4a27a88f40933349324878547a628bcd4b865fe20e627124ba2b861dacc8", @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0x51, &(0x7f00000002c0)={&(0x7f0000000400)={0x68, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NET={0x28}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0x0, 0x4, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000040a83e6a43b4448fa036c42bf73d0c1abb00000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = socket$inet6(0x10, 0x3, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) (async) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=576): getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x9, 0xfffeffff}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x7, 0x2, 0x200, 0x5, r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r4, 0x2f, 0x5, 0x80, 0x5, 0x20, @loopback, @remote, 0x8000, 0x80, 0x0, 0x6}}) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4c000000190033444ab8a96272b3ee2502ff0300fe03fe0200010000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x20001080}, 0x40006) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x36, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @rand_addr=0x64010100, @multicast1}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) recvmsg$can_bcm(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000020}, 0x4000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 60.290830][ T5820] cgroup: Unknown subsys name 'net' [ 60.417354][ T5820] cgroup: Unknown subsys name 'cpuset' [ 60.425739][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.735794][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.905397][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.914059][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.923344][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.931341][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.939440][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.946733][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.955733][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.957248][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.963034][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.970238][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.977868][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.986735][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.000286][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.002299][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.015329][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.016153][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.029689][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.035914][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.045204][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.049304][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.053936][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.060685][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.074538][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.076863][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.083877][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.089474][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.096626][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.104059][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.133902][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.142759][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.563561][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 65.580052][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 65.662873][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 65.673087][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 65.709864][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 65.856841][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.864735][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.872143][ T5841] bridge_slave_0: entered allmulticast mode [ 65.880221][ T5841] bridge_slave_0: entered promiscuous mode [ 65.910153][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.917501][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.925295][ T5841] bridge_slave_1: entered allmulticast mode [ 65.932006][ T5841] bridge_slave_1: entered promiscuous mode [ 65.959417][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.966851][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.974033][ T5832] bridge_slave_0: entered allmulticast mode [ 65.981055][ T5832] bridge_slave_0: entered promiscuous mode [ 65.989571][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.997134][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.004382][ T5832] bridge_slave_1: entered allmulticast mode [ 66.011205][ T5832] bridge_slave_1: entered promiscuous mode [ 66.068299][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.089015][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.096314][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.103503][ T5830] bridge_slave_0: entered allmulticast mode [ 66.113438][ T5830] bridge_slave_0: entered promiscuous mode [ 66.121318][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.128672][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.136099][ T5830] bridge_slave_1: entered allmulticast mode [ 66.142691][ T5830] bridge_slave_1: entered promiscuous mode [ 66.149739][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.157097][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.164872][ T5831] bridge_slave_0: entered allmulticast mode [ 66.171475][ T5831] bridge_slave_0: entered promiscuous mode [ 66.178826][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.186406][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.193636][ T5831] bridge_slave_1: entered allmulticast mode [ 66.200599][ T5831] bridge_slave_1: entered promiscuous mode [ 66.216749][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.234730][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.241849][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.249562][ T5834] bridge_slave_0: entered allmulticast mode [ 66.256953][ T5834] bridge_slave_0: entered promiscuous mode [ 66.283283][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.302240][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.309607][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.317206][ T5834] bridge_slave_1: entered allmulticast mode [ 66.324189][ T5834] bridge_slave_1: entered promiscuous mode [ 66.345848][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.358011][ T5841] team0: Port device team_slave_0 added [ 66.375327][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.388304][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.408543][ T5841] team0: Port device team_slave_1 added [ 66.425139][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.436212][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.450254][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.471156][ T5832] team0: Port device team_slave_0 added [ 66.485034][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.524719][ T5832] team0: Port device team_slave_1 added [ 66.555423][ T5830] team0: Port device team_slave_0 added [ 66.591863][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.599171][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.625710][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.641177][ T5834] team0: Port device team_slave_0 added [ 66.649261][ T5830] team0: Port device team_slave_1 added [ 66.661473][ T5831] team0: Port device team_slave_0 added [ 66.668003][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.678199][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.708188][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.719858][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.727033][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.753661][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.766303][ T5834] team0: Port device team_slave_1 added [ 66.792376][ T5831] team0: Port device team_slave_1 added [ 66.808398][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.815855][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.842490][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.890472][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.897800][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.924058][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.935636][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.942604][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.969602][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.981546][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.988863][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.015004][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.050754][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.057874][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.084114][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.100666][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.107767][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.133961][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.145693][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.152683][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.179911][ T5839] Bluetooth: hci3: command tx timeout [ 67.185678][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.185714][ T5851] Bluetooth: hci1: command tx timeout [ 67.185727][ T5843] Bluetooth: hci2: command tx timeout [ 67.186149][ T5843] Bluetooth: hci4: command tx timeout [ 67.197228][ T5147] Bluetooth: hci0: command tx timeout [ 67.231176][ T5841] hsr_slave_0: entered promiscuous mode [ 67.239956][ T5841] hsr_slave_1: entered promiscuous mode [ 67.274048][ T5832] hsr_slave_0: entered promiscuous mode [ 67.282335][ T5832] hsr_slave_1: entered promiscuous mode [ 67.289090][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.297473][ T5832] Cannot create hsr debugfs directory [ 67.327057][ T5834] hsr_slave_0: entered promiscuous mode [ 67.333481][ T5834] hsr_slave_1: entered promiscuous mode [ 67.340786][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.348671][ T5834] Cannot create hsr debugfs directory [ 67.433989][ T5831] hsr_slave_0: entered promiscuous mode [ 67.440594][ T5831] hsr_slave_1: entered promiscuous mode [ 67.446876][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.454506][ T5831] Cannot create hsr debugfs directory [ 67.472031][ T5830] hsr_slave_0: entered promiscuous mode [ 67.479276][ T5830] hsr_slave_1: entered promiscuous mode [ 67.485436][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.493005][ T5830] Cannot create hsr debugfs directory [ 67.796821][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.816076][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.835874][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.853527][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.903211][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.918703][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.936040][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.946127][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.018860][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.029959][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.039728][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.066800][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.128015][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.141367][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.169645][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.180999][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.239259][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.250250][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.260186][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.282294][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.308633][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.351977][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.406602][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.414045][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.447264][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.454521][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.491644][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.523878][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.545291][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.589397][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.601243][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.610723][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.644094][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.651285][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.662347][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.669512][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.686737][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.693878][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.714029][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.721215][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.733206][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.740430][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.753460][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.769091][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.789585][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.796838][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.901298][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.967150][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.974316][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.986355][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.993671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.078755][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.252563][ T5834] veth0_vlan: entered promiscuous mode [ 69.262888][ T5147] Bluetooth: hci4: command tx timeout [ 69.262905][ T5843] Bluetooth: hci0: command tx timeout [ 69.262963][ T5843] Bluetooth: hci1: command tx timeout [ 69.270498][ T5147] Bluetooth: hci3: command tx timeout [ 69.276331][ T5848] Bluetooth: hci2: command tx timeout [ 69.306174][ T5834] veth1_vlan: entered promiscuous mode [ 69.409890][ T5834] veth0_macvtap: entered promiscuous mode [ 69.451454][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.465539][ T5834] veth1_macvtap: entered promiscuous mode [ 69.498267][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.523488][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.539993][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.554648][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.618243][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.641728][ T5832] veth0_vlan: entered promiscuous mode [ 69.650604][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.661856][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.672273][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.681103][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.719077][ T5841] veth0_vlan: entered promiscuous mode [ 69.760573][ T5841] veth1_vlan: entered promiscuous mode [ 69.776128][ T5832] veth1_vlan: entered promiscuous mode [ 69.796079][ T5831] veth0_vlan: entered promiscuous mode [ 69.854036][ T5832] veth0_macvtap: entered promiscuous mode [ 69.863951][ T5831] veth1_vlan: entered promiscuous mode [ 69.899684][ T5832] veth1_macvtap: entered promiscuous mode [ 69.952154][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.957585][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.971431][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.983394][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.992683][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.023834][ T5830] veth0_vlan: entered promiscuous mode [ 70.055378][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.063945][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.079147][ T5831] veth0_macvtap: entered promiscuous mode [ 70.090065][ T5841] veth0_macvtap: entered promiscuous mode [ 70.097730][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.110124][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.121185][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.132558][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.142149][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.151591][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.160824][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.183301][ T5831] veth1_macvtap: entered promiscuous mode [ 70.201656][ T5830] veth1_vlan: entered promiscuous mode [ 70.224110][ T5841] veth1_macvtap: entered promiscuous mode [ 70.251366][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.303472][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.315379][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.327497][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.338405][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.355714][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.372429][ T5830] veth0_macvtap: entered promiscuous mode [ 70.403811][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.417021][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.427358][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.437942][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.448410][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.458973][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.470288][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.500121][ T5830] veth1_macvtap: entered promiscuous mode [ 70.511776][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.535372][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.546176][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.573914][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.586524][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.603295][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.615554][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.626840][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.637330][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.647232][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.657873][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.668492][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.749943][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.759365][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.770312][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.779853][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.796010][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.804931][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.813624][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.822803][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.327288][ T5848] Bluetooth: hci1: command tx timeout [ 71.327297][ T5851] Bluetooth: hci2: command tx timeout [ 71.334587][ T5851] Bluetooth: hci3: command tx timeout [ 71.338223][ T5848] Bluetooth: hci4: command tx timeout [ 71.343512][ T5147] Bluetooth: hci0: command tx timeout [ 71.807503][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.814076][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.910700][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.921382][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.931355][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.941926][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.951822][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.962301][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.974278][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.987266][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.998093][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.034426][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.042300][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.079143][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.094650][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.104618][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.115916][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.126873][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.141860][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.157339][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.170081][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.201278][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.246545][ T5923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7'. [ 72.277239][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.340042][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.370403][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.387349][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.396314][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.405299][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.469808][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.488246][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.514170][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.524217][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.593511][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.608059][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.686884][ T5949] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8'. [ 72.722746][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.744342][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.760179][ T5954] tipc: Started in network mode [ 72.779513][ T5954] tipc: Node identity 6a3ddcbf0a4d, cluster identity 4711 [ 72.804087][ T5954] tipc: Enabled bearer , priority 0 [ 72.828333][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.840848][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.853330][ T5947] tipc: Resetting bearer [ 73.405429][ T5147] Bluetooth: hci3: command tx timeout [ 73.405731][ T5851] Bluetooth: hci4: command 0x0419 tx timeout [ 73.410919][ T5839] Bluetooth: hci1: command tx timeout [ 73.417788][ T5848] Bluetooth: hci0: command tx timeout [ 73.422736][ T5839] Bluetooth: hci2: command tx timeout [ 73.835642][ T908] tipc: Node number set to 1618009279 [ 74.143421][ T5947] tipc: Disabling bearer [ 74.174476][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.193562][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.583816][ T5962] infiniband syz0: set active [ 74.602959][ T5962] infiniband syz0: added syz_tun [ 74.622576][ T5962] syz0: rxe_create_cq: returned err = -12 [ 74.630175][ T5962] infiniband syz0: Couldn't create ib_mad CQ [ 74.656078][ T5962] infiniband syz0: Couldn't open port 1 [ 74.698664][ T5989] tipc: Started in network mode [ 74.708908][ T5989] tipc: Node identity ba7a67af665d, cluster identity 4711 [ 74.718858][ T5989] tipc: Enabled bearer , priority 0 [ 74.720913][ T5962] RDS/IB: syz0: added [ 74.749855][ T5962] smc: adding ib device syz0 with port count 1 [ 74.757895][ T5987] tipc: Resetting bearer [ 74.763906][ T5962] smc: ib device syz0 port 1 has pnetid [ 75.487703][ T5839] Bluetooth: hci4: command 0x0419 tx timeout [ 75.745485][ T975] tipc: Node number set to 3693569967 [ 76.037278][ T5987] tipc: Disabling bearer [ 76.352313][ T6012] tipc: Started in network mode [ 76.360333][ T6012] tipc: Node identity f692e7735687, cluster identity 4711 [ 76.369329][ T6012] tipc: Enabled bearer , priority 0 [ 76.384887][ T6008] tipc: Resetting bearer [ 76.393203][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 77.418080][ T5883] tipc: Node number set to 2685790067 [ 77.751746][ T6008] tipc: Disabling bearer [ 77.991500][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22'. [ 78.219859][ T6033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.25'. [ 78.494638][ T6050] netlink: 36 bytes leftover after parsing attributes in process `syz.1.26'. [ 78.504398][ T6048] tipc: Started in network mode [ 78.519954][ T6048] tipc: Node identity 6e5b0dc25783, cluster identity 4711 [ 78.532857][ T6048] tipc: Enabled bearer , priority 0 [ 78.569565][ T6046] tipc: Resetting bearer [ 79.554480][ T5978] tipc: Node number set to 970460610 [ 79.732059][ T6046] tipc: Disabling bearer [ 79.792581][ T6058] tipc: Enabled bearer , priority 0 [ 79.927418][ T2996] tipc: Resetting bearer [ 81.128451][ T6055] tipc: Resetting bearer [ 82.053196][ T46] cfg80211: failed to load regulatory.db [ 82.322603][ T6055] tipc: Disabling bearer [ 82.337987][ T6076] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.385201][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.406609][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.476720][ T6083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36'. [ 82.572801][ T6094] rdma_rxe: rxe_newlink: failed to add syz_tun [ 82.685922][ T6102] syzkaller1: entered promiscuous mode [ 82.693161][ T6102] syzkaller1: entered allmulticast mode [ 82.748387][ T6109] netlink: 80 bytes leftover after parsing attributes in process `syz.0.45'. [ 83.101157][ T6129] tipc: Enabled bearer , priority 0 [ 83.112570][ T6128] tipc: Resetting bearer [ 84.368083][ T6128] tipc: Disabling bearer [ 84.389471][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.398523][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.441470][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 84.568668][ T6149] rdma_rxe: rxe_newlink: failed to add syz_tun [ 84.801345][ T6164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.826356][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.63'. [ 85.002980][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.011932][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.039340][ T6172] tipc: Enabled bearer , priority 0 [ 85.062553][ T6171] tipc: Resetting bearer [ 85.853524][ T6189] netlink: 104 bytes leftover after parsing attributes in process `syz.1.70'. [ 86.389926][ T6171] tipc: Disabling bearer [ 86.399147][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.68'. [ 86.604834][ T6202] pimreg: entered allmulticast mode [ 86.626512][ T6202] pimreg: left allmulticast mode [ 86.685488][ T6205] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.724194][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.75'. [ 86.848790][ T6210] syz.4.78 uses obsolete (PF_INET,SOCK_PACKET) [ 86.888864][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.78'. [ 87.433260][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.84'. [ 87.676246][ T6240] netlink: 104 bytes leftover after parsing attributes in process `syz.3.88'. [ 87.687918][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 87.696228][ T6239] tipc: Enabled bearer , priority 0 [ 87.697206][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 87.713667][ T6236] tipc: Resetting bearer [ 88.940103][ T6236] tipc: Disabling bearer [ 88.953706][ T6244] bond0: entered promiscuous mode [ 88.960328][ T6244] bond_slave_0: entered promiscuous mode [ 88.966252][ T6244] bond_slave_1: entered promiscuous mode [ 88.973971][ T6244] bridge0: entered promiscuous mode [ 88.984497][ T6246] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 89.023784][ T6249] FAULT_INJECTION: forcing a failure. [ 89.023784][ T6249] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.037297][ T6251] Zero length message leads to an empty skb [ 89.041623][ T6249] CPU: 1 UID: 0 PID: 6249 Comm: syz.3.91 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 89.041647][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.041660][ T6249] Call Trace: [ 89.041665][ T6249] [ 89.041671][ T6249] dump_stack_lvl+0x241/0x360 [ 89.041703][ T6249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.041720][ T6249] ? __pfx__printk+0x10/0x10 [ 89.041738][ T6249] ? __pfx_lock_release+0x10/0x10 [ 89.041767][ T6249] should_fail_ex+0x40a/0x550 [ 89.041792][ T6249] _copy_from_user+0x2d/0xb0 [ 89.041813][ T6249] copy_msghdr_from_user+0xae/0x680 [ 89.041834][ T6249] ? __pfx___might_resched+0x10/0x10 [ 89.041855][ T6249] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 89.041872][ T6249] ? __fget_files+0x2a/0x410 [ 89.041897][ T6249] ? __sys_sendmmsg+0x392/0x720 [ 89.041913][ T6249] ? __might_fault+0xaa/0x120 [ 89.041933][ T6249] __sys_sendmmsg+0x32b/0x720 [ 89.041959][ T6249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 89.041986][ T6249] ? __pfx_lock_release+0x10/0x10 [ 89.042005][ T6249] ? kstrtouint_from_user+0x128/0x190 [ 89.042042][ T6249] ? ksys_write+0x22a/0x2b0 [ 89.042057][ T6249] ? __pfx_lock_release+0x10/0x10 [ 89.042082][ T6249] ? sb_end_write+0xe9/0x1c0 [ 89.042102][ T6249] ? vfs_write+0x7fa/0xd10 [ 89.042120][ T6249] ? __mutex_unlock_slowpath+0x227/0x800 [ 89.042163][ T6249] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.042186][ T6249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.042208][ T6249] ? do_syscall_64+0x100/0x230 [ 89.042236][ T6249] __x64_sys_sendmmsg+0xa0/0xb0 [ 89.042254][ T6249] do_syscall_64+0xf3/0x230 [ 89.042271][ T6249] ? clear_bhb_loop+0x35/0x90 [ 89.042294][ T6249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.042316][ T6249] RIP: 0033:0x7f386d38d169 [ 89.042333][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.042345][ T6249] RSP: 002b:00007f386e173038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.042363][ T6249] RAX: ffffffffffffffda RBX: 00007f386d5a6080 RCX: 00007f386d38d169 [ 89.042374][ T6249] RDX: 04000000000001f2 RSI: 0000400000000000 RDI: 0000000000000003 [ 89.042385][ T6249] RBP: 00007f386e173090 R08: 0000000000000000 R09: 0000000000000000 [ 89.042394][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.042403][ T6249] R13: 0000000000000001 R14: 00007f386d5a6080 R15: 00007ffe1a626b68 [ 89.042427][ T6249] [ 89.299144][ T6256] FAULT_INJECTION: forcing a failure. [ 89.299144][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 89.344579][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: syz.0.93 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 89.344605][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.344614][ T6256] Call Trace: [ 89.344620][ T6256] [ 89.344628][ T6256] dump_stack_lvl+0x241/0x360 [ 89.344653][ T6256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.344671][ T6256] ? __pfx__printk+0x10/0x10 [ 89.344690][ T6256] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 89.344712][ T6256] ? __pfx___might_resched+0x10/0x10 [ 89.344739][ T6256] should_fail_ex+0x40a/0x550 [ 89.344766][ T6256] should_failslab+0xac/0x100 [ 89.344788][ T6256] __kmalloc_node_noprof+0xe1/0x4d0 [ 89.344808][ T6256] ? __kvmalloc_node_noprof+0x72/0x190 [ 89.344836][ T6256] __kvmalloc_node_noprof+0x72/0x190 [ 89.344859][ T6256] alloc_netdev_mqs+0xce7/0x1210 [ 89.344887][ T6256] rtnl_create_link+0x2f9/0xc90 [ 89.344913][ T6256] rtnl_newlink_create+0x2e1/0xbd0 [ 89.344941][ T6256] ? __mutex_lock+0x602/0x1010 [ 89.344964][ T6256] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 89.344990][ T6256] ? __pfx___mutex_lock+0x10/0x10 [ 89.345018][ T6256] ? ns_capable+0x8a/0xf0 [ 89.345041][ T6256] rtnl_newlink+0x167a/0x1d90 [ 89.345064][ T6256] ? stack_depot_save_flags+0x37/0x940 [ 89.345100][ T6256] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.345119][ T6256] ? __netlink_deliver_tap+0x561/0x7f0 [ 89.345140][ T6256] ? __pfx_validate_chain+0x10/0x10 [ 89.345156][ T6256] ? __sock_sendmsg+0x221/0x270 [ 89.345175][ T6256] ? ____sys_sendmsg+0x53a/0x860 [ 89.345189][ T6256] ? __sys_sendmsg+0x269/0x350 [ 89.345202][ T6256] ? do_syscall_64+0xf3/0x230 [ 89.345219][ T6256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.345261][ T6256] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.345286][ T6256] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.345316][ T6256] ? mark_lock+0x9a/0x360 [ 89.345335][ T6256] ? __lock_acquire+0x1397/0x2100 [ 89.345390][ T6256] ? __pfx_lock_release+0x10/0x10 [ 89.345426][ T6256] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.345455][ T6256] rtnetlink_rcv_msg+0x791/0xcf0 [ 89.345474][ T6256] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 89.345500][ T6256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.345528][ T6256] ? ref_tracker_free+0x643/0x7e0 [ 89.345551][ T6256] netlink_rcv_skb+0x206/0x480 [ 89.345570][ T6256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.345597][ T6256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.345637][ T6256] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.345660][ T6256] netlink_unicast+0x7f6/0x990 [ 89.345689][ T6256] ? __pfx_netlink_unicast+0x10/0x10 [ 89.345706][ T6256] ? __virt_addr_valid+0x45f/0x530 [ 89.345722][ T6256] ? __phys_addr_symbol+0x2f/0x70 [ 89.345737][ T6256] ? __check_object_size+0x47a/0x730 [ 89.345762][ T6256] netlink_sendmsg+0x8de/0xcb0 [ 89.345795][ T6256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.345821][ T6256] ? aa_sock_msg_perm+0x91/0x160 [ 89.345849][ T6256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.345868][ T6256] __sock_sendmsg+0x221/0x270 [ 89.345891][ T6256] ____sys_sendmsg+0x53a/0x860 [ 89.345918][ T6256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.345933][ T6256] ? __fget_files+0x2a/0x410 [ 89.345957][ T6256] ? __fget_files+0x2a/0x410 [ 89.345987][ T6256] __sys_sendmsg+0x269/0x350 [ 89.346010][ T6256] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.346041][ T6256] ? do_sys_openat2+0x17a/0x1d0 [ 89.346091][ T6256] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.346114][ T6256] ? do_syscall_64+0x100/0x230 [ 89.346136][ T6256] ? do_syscall_64+0xb6/0x230 [ 89.346157][ T6256] do_syscall_64+0xf3/0x230 [ 89.346174][ T6256] ? clear_bhb_loop+0x35/0x90 [ 89.346197][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.346216][ T6256] RIP: 0033:0x7fbfabf8d169 [ 89.346231][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.346244][ T6256] RSP: 002b:00007fbface7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.346263][ T6256] RAX: ffffffffffffffda RBX: 00007fbfac1a5fa0 RCX: 00007fbfabf8d169 [ 89.346275][ T6256] RDX: 0000000000000000 RSI: 0000400000000380 RDI: 0000000000000003 [ 89.346285][ T6256] RBP: 00007fbface7e090 R08: 0000000000000000 R09: 0000000000000000 [ 89.346295][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.346304][ T6256] R13: 0000000000000000 R14: 00007fbfac1a5fa0 R15: 00007ffede1eeb98 [ 89.346331][ T6256] [ 89.936773][ T6271] __nla_validate_parse: 2 callbacks suppressed [ 89.936790][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.096277][ T6285] netlink: 104 bytes leftover after parsing attributes in process `syz.4.103'. [ 90.224185][ T6289] macsec1: entered promiscuous mode [ 90.229642][ T6289] macsec1: entered allmulticast mode [ 90.248355][ T6287] tipc: Enabled bearer , priority 0 [ 90.258297][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.105'. [ 90.267484][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.105'. [ 90.278325][ T6286] tipc: Resetting bearer [ 91.501858][ T6286] tipc: Disabling bearer [ 91.640573][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 91.653595][ T6298] Bluetooth: MGMT ver 1.23 [ 91.696321][ T6302] netlink: 100 bytes leftover after parsing attributes in process `syz.0.110'. [ 91.721002][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 91.840983][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 91.860351][ T6309] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 91.872061][ T6309] gretap1: entered promiscuous mode [ 91.900650][ T6309] gretap1: entered allmulticast mode [ 91.941686][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 92.040452][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.051322][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.209287][ T6328] netlink: 104 bytes leftover after parsing attributes in process `syz.4.119'. [ 92.219098][ T6326] tipc: Enabled bearer , priority 0 [ 92.231723][ T6325] tipc: Resetting bearer [ 93.604586][ T6325] tipc: Disabling bearer [ 94.495465][ T6382] tipc: Enabled bearer , priority 0 [ 94.503783][ T6381] tipc: Resetting bearer [ 95.070917][ T6384] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 95.079698][ T6384] __nla_validate_parse: 2 callbacks suppressed [ 95.079713][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 95.215853][ T6387] FAULT_INJECTION: forcing a failure. [ 95.215853][ T6387] name failslab, interval 1, probability 0, space 0, times 0 [ 95.242321][ T6387] CPU: 1 UID: 0 PID: 6387 Comm: syz.0.139 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 95.242349][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.242358][ T6387] Call Trace: [ 95.242365][ T6387] [ 95.242373][ T6387] dump_stack_lvl+0x241/0x360 [ 95.242396][ T6387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.242407][ T6387] ? __pfx__printk+0x10/0x10 [ 95.242417][ T6387] ? kmem_cache_alloc_noprof+0x48/0x380 [ 95.242431][ T6387] ? __pfx___might_resched+0x10/0x10 [ 95.242446][ T6387] should_fail_ex+0x40a/0x550 [ 95.242463][ T6387] should_failslab+0xac/0x100 [ 95.242476][ T6387] ? alloc_empty_file+0x9e/0x1d0 [ 95.242489][ T6387] kmem_cache_alloc_noprof+0x70/0x380 [ 95.242504][ T6387] alloc_empty_file+0x9e/0x1d0 [ 95.242518][ T6387] alloc_file_pseudo+0x204/0x320 [ 95.242534][ T6387] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 95.242555][ T6387] anon_inode_getfd+0xce/0x1e0 [ 95.242569][ T6387] map_create+0xe1f/0x11c0 [ 95.242587][ T6387] __sys_bpf+0x6d3/0x820 [ 95.242601][ T6387] ? __pfx___sys_bpf+0x10/0x10 [ 95.242620][ T6387] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.242636][ T6387] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.242652][ T6387] ? do_syscall_64+0x100/0x230 [ 95.242666][ T6387] __x64_sys_bpf+0x7c/0x90 [ 95.242679][ T6387] do_syscall_64+0xf3/0x230 [ 95.242690][ T6387] ? clear_bhb_loop+0x35/0x90 [ 95.242705][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.242718][ T6387] RIP: 0033:0x7fbfabf8d169 [ 95.242727][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.242734][ T6387] RSP: 002b:00007fbface7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.242746][ T6387] RAX: ffffffffffffffda RBX: 00007fbfac1a5fa0 RCX: 00007fbfabf8d169 [ 95.242752][ T6387] RDX: 0000000000000048 RSI: 0000400000000180 RDI: 0000000000000000 [ 95.242758][ T6387] RBP: 00007fbface7e090 R08: 0000000000000000 R09: 0000000000000000 [ 95.242763][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.242769][ T6387] R13: 0000000000000001 R14: 00007fbfac1a5fa0 R15: 00007ffede1eeb98 [ 95.242782][ T6387] [ 96.037248][ T6381] tipc: Disabling bearer [ 96.272559][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.290358][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.363805][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'. [ 96.528479][ T6409] netlink: 104 bytes leftover after parsing attributes in process `syz.2.146'. [ 96.650285][ T6414] openvswitch: netlink: Tunnel attr 52 out of range max 16 [ 96.678240][ T6414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.149'. [ 96.690113][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 96.701367][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 96.711469][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'. [ 96.786121][ T6421] FAULT_INJECTION: forcing a failure. [ 96.786121][ T6421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.800725][ T6421] CPU: 1 UID: 0 PID: 6421 Comm: syz.0.151 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 96.800757][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.800767][ T6421] Call Trace: [ 96.800772][ T6421] [ 96.800780][ T6421] dump_stack_lvl+0x241/0x360 [ 96.800806][ T6421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.800823][ T6421] ? __pfx__printk+0x10/0x10 [ 96.800853][ T6421] ? snprintf+0xda/0x120 [ 96.800887][ T6421] should_fail_ex+0x40a/0x550 [ 96.800914][ T6421] _copy_to_user+0x31/0xb0 [ 96.800936][ T6421] simple_read_from_buffer+0xca/0x150 [ 96.800960][ T6421] proc_fail_nth_read+0x1e9/0x250 [ 96.800984][ T6421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.801007][ T6421] ? rw_verify_area+0x243/0x630 [ 96.801022][ T6421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.801043][ T6421] vfs_read+0x1f8/0xb40 [ 96.801059][ T6421] ? fdget_pos+0x254/0x320 [ 96.801081][ T6421] ? __pfx___mutex_lock+0x10/0x10 [ 96.801099][ T6421] ? __pfx_vfs_read+0x10/0x10 [ 96.801113][ T6421] ? do_sys_openat2+0x17a/0x1d0 [ 96.801136][ T6421] ? __fget_files+0x2a/0x410 [ 96.801158][ T6421] ? __fget_files+0x395/0x410 [ 96.801176][ T6421] ? __fget_files+0x2a/0x410 [ 96.801206][ T6421] ksys_read+0x18f/0x2b0 [ 96.801230][ T6421] ? __pfx_ksys_read+0x10/0x10 [ 96.801247][ T6421] ? do_syscall_64+0x100/0x230 [ 96.801268][ T6421] ? do_syscall_64+0xb6/0x230 [ 96.801294][ T6421] do_syscall_64+0xf3/0x230 [ 96.801311][ T6421] ? clear_bhb_loop+0x35/0x90 [ 96.801334][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.801354][ T6421] RIP: 0033:0x7fbfabf8bb7c [ 96.801369][ T6421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.801382][ T6421] RSP: 002b:00007fbface7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.801399][ T6421] RAX: ffffffffffffffda RBX: 00007fbfac1a5fa0 RCX: 00007fbfabf8bb7c [ 96.801410][ T6421] RDX: 000000000000000f RSI: 00007fbface7e0a0 RDI: 0000000000000003 [ 96.801419][ T6421] RBP: 00007fbface7e090 R08: 0000000000000000 R09: 0000000000000000 [ 96.801428][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.801435][ T6421] R13: 0000000000000000 R14: 00007fbfac1a5fa0 R15: 00007ffede1eeb98 [ 96.801459][ T6421] [ 97.227592][ T6428] tipc: Enabled bearer , priority 0 [ 97.260481][ T6426] tipc: Resetting bearer [ 97.456065][ T6440] ax25_connect(): syz.1.158 uses autobind, please contact jreuter@yaina.de [ 97.697901][ T6450] netlink: 104 bytes leftover after parsing attributes in process `syz.3.160'. [ 98.660328][ T6426] tipc: Disabling bearer [ 98.668771][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 98.774964][ T5839] Bluetooth: hci4: command 0x0419 tx timeout [ 99.025098][ T6470] netlink: 'syz.4.167': attribute type 11 has an invalid length. [ 99.207530][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.172'. [ 99.281700][ T6484] tipc: Enabled bearer , priority 0 [ 99.292960][ T6483] tipc: Resetting bearer [ 100.088506][ T6492] netlink: 104 bytes leftover after parsing attributes in process `syz.0.175'. [ 100.579541][ T6483] tipc: Disabling bearer [ 100.910364][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 100.994082][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 101.221459][ T6524] netlink: 80 bytes leftover after parsing attributes in process `syz.0.185'. [ 101.236398][ T2996] smc: removing ib device syz0 [ 101.991012][ T6533] netlink: 104 bytes leftover after parsing attributes in process `syz.2.188'. [ 102.066501][ T6532] tipc: Enabled bearer , priority 0 [ 102.084598][ T6530] tipc: Resetting bearer [ 103.421362][ T6530] tipc: Disabling bearer [ 103.500627][ T6552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.195'. [ 103.564212][ T6556] FAULT_INJECTION: forcing a failure. [ 103.564212][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 103.591090][ T6556] CPU: 1 UID: 0 PID: 6556 Comm: syz.3.197 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 103.591118][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.591128][ T6556] Call Trace: [ 103.591133][ T6556] [ 103.591141][ T6556] dump_stack_lvl+0x241/0x360 [ 103.591173][ T6556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.591190][ T6556] ? __pfx__printk+0x10/0x10 [ 103.591209][ T6556] ? __kmalloc_noprof+0xb5/0x4c0 [ 103.591230][ T6556] ? __pfx___might_resched+0x10/0x10 [ 103.591249][ T6556] ? aa_get_newest_label+0xff/0x6f0 [ 103.591270][ T6556] ? genl_get_cmd+0x19e/0xce0 [ 103.591290][ T6556] should_fail_ex+0x40a/0x550 [ 103.591317][ T6556] should_failslab+0xac/0x100 [ 103.591343][ T6556] __kmalloc_noprof+0xdd/0x4c0 [ 103.591363][ T6556] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 103.591380][ T6556] ? apparmor_capable+0x13b/0x1b0 [ 103.591402][ T6556] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 103.591427][ T6556] genl_rcv_msg+0x80b/0xec0 [ 103.591452][ T6556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.591501][ T6556] ? __pfx_lock_acquire+0x10/0x10 [ 103.591523][ T6556] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 103.591545][ T6556] ? __pfx___might_resched+0x10/0x10 [ 103.591575][ T6556] netlink_rcv_skb+0x206/0x480 [ 103.591597][ T6556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.591616][ T6556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.591649][ T6556] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 103.591684][ T6556] genl_rcv+0x28/0x40 [ 103.591699][ T6556] netlink_unicast+0x7f6/0x990 [ 103.591727][ T6556] ? __pfx_netlink_unicast+0x10/0x10 [ 103.591744][ T6556] ? __virt_addr_valid+0x45f/0x530 [ 103.591760][ T6556] ? __phys_addr_symbol+0x2f/0x70 [ 103.591775][ T6556] ? __check_object_size+0x47a/0x730 [ 103.591800][ T6556] netlink_sendmsg+0x8de/0xcb0 [ 103.591833][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.591859][ T6556] ? aa_sock_msg_perm+0x91/0x160 [ 103.591886][ T6556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.591904][ T6556] __sock_sendmsg+0x221/0x270 [ 103.591929][ T6556] ____sys_sendmsg+0x53a/0x860 [ 103.591953][ T6556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.591966][ T6556] ? __fget_files+0x2a/0x410 [ 103.591989][ T6556] ? __fget_files+0x2a/0x410 [ 103.592016][ T6556] __sys_sendmsg+0x269/0x350 [ 103.592036][ T6556] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.592066][ T6556] ? do_sys_openat2+0x17a/0x1d0 [ 103.592107][ T6556] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.592127][ T6556] ? do_syscall_64+0x100/0x230 [ 103.592147][ T6556] ? do_syscall_64+0xb6/0x230 [ 103.592174][ T6556] do_syscall_64+0xf3/0x230 [ 103.592190][ T6556] ? clear_bhb_loop+0x35/0x90 [ 103.592214][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.592234][ T6556] RIP: 0033:0x7f386d38d169 [ 103.592249][ T6556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.592261][ T6556] RSP: 002b:00007f386e194038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.592278][ T6556] RAX: ffffffffffffffda RBX: 00007f386d5a5fa0 RCX: 00007f386d38d169 [ 103.592288][ T6556] RDX: 0000000004000000 RSI: 0000400000000400 RDI: 0000000000000003 [ 103.592297][ T6556] RBP: 00007f386e194090 R08: 0000000000000000 R09: 0000000000000000 [ 103.592306][ T6556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.592314][ T6556] R13: 0000000000000000 R14: 00007f386d5a5fa0 R15: 00007ffe1a626b68 [ 103.592340][ T6556] [ 104.115399][ T6569] netlink: 104 bytes leftover after parsing attributes in process `syz.3.202'. [ 104.212777][ T6574] netlink: 120 bytes leftover after parsing attributes in process `syz.1.203'. [ 104.274857][ T6578] FAULT_INJECTION: forcing a failure. [ 104.274857][ T6578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.312649][ T6578] CPU: 0 UID: 0 PID: 6578 Comm: syz.2.205 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 104.312676][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.312685][ T6578] Call Trace: [ 104.312691][ T6578] [ 104.312698][ T6578] dump_stack_lvl+0x241/0x360 [ 104.312723][ T6578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.312740][ T6578] ? __pfx__printk+0x10/0x10 [ 104.312758][ T6578] ? __pfx_lock_release+0x10/0x10 [ 104.312782][ T6578] ? aa_label_sk_perm+0x4f3/0x6c0 [ 104.312807][ T6578] should_fail_ex+0x40a/0x550 [ 104.312833][ T6578] _copy_from_iter+0x1df/0x1c40 [ 104.312864][ T6578] ? __pfx__copy_from_iter+0x10/0x10 [ 104.312896][ T6578] bcm_sendmsg+0x157/0x7a0 [ 104.312921][ T6578] ? __pfx_bcm_sendmsg+0x10/0x10 [ 104.312958][ T6578] ? aa_sock_msg_perm+0x91/0x160 [ 104.312986][ T6578] ? __pfx_bcm_sendmsg+0x10/0x10 [ 104.313012][ T6578] __sock_sendmsg+0x221/0x270 [ 104.313036][ T6578] ____sys_sendmsg+0x53a/0x860 [ 104.313060][ T6578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.313075][ T6578] ? __fget_files+0x2a/0x410 [ 104.313099][ T6578] ? __fget_files+0x2a/0x410 [ 104.313133][ T6578] __sys_sendmsg+0x269/0x350 [ 104.313155][ T6578] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.313183][ T6578] ? do_sys_openat2+0x17a/0x1d0 [ 104.313229][ T6578] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.313252][ T6578] ? do_syscall_64+0x100/0x230 [ 104.313273][ T6578] ? do_syscall_64+0xb6/0x230 [ 104.313294][ T6578] do_syscall_64+0xf3/0x230 [ 104.313312][ T6578] ? clear_bhb_loop+0x35/0x90 [ 104.313336][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.313355][ T6578] RIP: 0033:0x7f7a2218d169 [ 104.313370][ T6578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.313383][ T6578] RSP: 002b:00007f7a2307c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.313401][ T6578] RAX: ffffffffffffffda RBX: 00007f7a223a5fa0 RCX: 00007f7a2218d169 [ 104.313413][ T6578] RDX: 0000000004048884 RSI: 0000400000000100 RDI: 0000000000000003 [ 104.313423][ T6578] RBP: 00007f7a2307c090 R08: 0000000000000000 R09: 0000000000000000 [ 104.313433][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.313443][ T6578] R13: 0000000000000000 R14: 00007f7a223a5fa0 R15: 00007ffee9391d38 [ 104.313468][ T6578] [ 104.463169][ T6587] tipc: Enabled bearer , priority 0 [ 104.743811][ T1151] tipc: Resetting bearer [ 104.756436][ T6586] tipc: Resetting bearer [ 106.193179][ T6586] tipc: Disabling bearer [ 106.207198][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 106.379149][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'. [ 106.401812][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'. [ 106.421409][ T6612] netlink: 104 bytes leftover after parsing attributes in process `syz.1.215'. [ 106.620282][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 106.712980][ T6630] FAULT_INJECTION: forcing a failure. [ 106.712980][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 106.734384][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.0.221 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 106.734408][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.734417][ T6630] Call Trace: [ 106.734423][ T6630] [ 106.734429][ T6630] dump_stack_lvl+0x241/0x360 [ 106.734456][ T6630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.734473][ T6630] ? __pfx__printk+0x10/0x10 [ 106.734504][ T6630] should_fail_ex+0x40a/0x550 [ 106.734529][ T6630] should_failslab+0xac/0x100 [ 106.734550][ T6630] ? skb_clone+0x20c/0x390 [ 106.734566][ T6630] kmem_cache_alloc_noprof+0x70/0x380 [ 106.734592][ T6630] skb_clone+0x20c/0x390 [ 106.734613][ T6630] __netlink_deliver_tap+0x3c4/0x7f0 [ 106.734645][ T6630] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.734664][ T6630] netlink_deliver_tap+0x19d/0x1b0 [ 106.734685][ T6630] netlink_unicast+0x7c4/0x990 [ 106.734712][ T6630] ? __pfx_netlink_unicast+0x10/0x10 [ 106.734729][ T6630] ? __virt_addr_valid+0x45f/0x530 [ 106.734746][ T6630] ? __phys_addr_symbol+0x2f/0x70 [ 106.734760][ T6630] ? __check_object_size+0x47a/0x730 [ 106.734785][ T6630] netlink_sendmsg+0x8de/0xcb0 [ 106.734817][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.734842][ T6630] ? aa_sock_msg_perm+0x91/0x160 [ 106.734870][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.734901][ T6630] __sock_sendmsg+0x221/0x270 [ 106.734925][ T6630] ____sys_sendmsg+0x53a/0x860 [ 106.734951][ T6630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.734967][ T6630] ? __fget_files+0x2a/0x410 [ 106.734991][ T6630] ? __fget_files+0x2a/0x410 [ 106.735021][ T6630] __sys_sendmsg+0x269/0x350 [ 106.735043][ T6630] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.735073][ T6630] ? do_sys_openat2+0x17a/0x1d0 [ 106.735121][ T6630] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.735145][ T6630] ? do_syscall_64+0x100/0x230 [ 106.735167][ T6630] ? do_syscall_64+0xb6/0x230 [ 106.735187][ T6630] do_syscall_64+0xf3/0x230 [ 106.735205][ T6630] ? clear_bhb_loop+0x35/0x90 [ 106.735228][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.735248][ T6630] RIP: 0033:0x7fbfabf8d169 [ 106.735262][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.735275][ T6630] RSP: 002b:00007fbface7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.735293][ T6630] RAX: ffffffffffffffda RBX: 00007fbfac1a5fa0 RCX: 00007fbfabf8d169 [ 106.735304][ T6630] RDX: 0000000000000090 RSI: 0000400000000100 RDI: 0000000000000003 [ 106.735314][ T6630] RBP: 00007fbface7e090 R08: 0000000000000000 R09: 0000000000000000 [ 106.735324][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.735333][ T6630] R13: 0000000000000000 R14: 00007fbfac1a5fa0 R15: 00007ffede1eeb98 [ 106.735359][ T6630] [ 106.803415][ T6635] netlink: 'syz.2.224': attribute type 62 has an invalid length. [ 107.054938][ T6639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'. [ 107.176707][ T6649] tipc: Enabled bearer , priority 0 [ 107.251718][ T6644] tipc: Resetting bearer [ 107.297213][ T6653] netlink: 104 bytes leftover after parsing attributes in process `syz.0.228'. [ 107.572605][ T6665] FAULT_INJECTION: forcing a failure. [ 107.572605][ T6665] name failslab, interval 1, probability 0, space 0, times 0 [ 107.602193][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.2.232 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 107.602218][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.602228][ T6665] Call Trace: [ 107.602235][ T6665] [ 107.602242][ T6665] dump_stack_lvl+0x241/0x360 [ 107.602268][ T6665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.602286][ T6665] ? __pfx__printk+0x10/0x10 [ 107.602314][ T6665] should_fail_ex+0x40a/0x550 [ 107.602342][ T6665] should_failslab+0xac/0x100 [ 107.602363][ T6665] ? skb_clone+0x20c/0x390 [ 107.602379][ T6665] kmem_cache_alloc_noprof+0x70/0x380 [ 107.602403][ T6665] skb_clone+0x20c/0x390 [ 107.602421][ T6665] __netlink_deliver_tap+0x3c4/0x7f0 [ 107.602451][ T6665] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.602470][ T6665] netlink_deliver_tap+0x19d/0x1b0 [ 107.602493][ T6665] netlink_unicast+0x7c4/0x990 [ 107.602517][ T6665] ? __pfx_netlink_unicast+0x10/0x10 [ 107.602534][ T6665] ? __virt_addr_valid+0x45f/0x530 [ 107.602550][ T6665] ? __phys_addr_symbol+0x2f/0x70 [ 107.602565][ T6665] ? __check_object_size+0x47a/0x730 [ 107.602606][ T6665] netlink_sendmsg+0x8de/0xcb0 [ 107.602637][ T6665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.602661][ T6665] ? aa_sock_msg_perm+0x91/0x160 [ 107.602688][ T6665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.602707][ T6665] __sock_sendmsg+0x221/0x270 [ 107.602731][ T6665] ____sys_sendmsg+0x53a/0x860 [ 107.602769][ T6665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.602785][ T6665] ? __fget_files+0x2a/0x410 [ 107.602809][ T6665] ? __fget_files+0x2a/0x410 [ 107.602838][ T6665] __sys_sendmsg+0x269/0x350 [ 107.602861][ T6665] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.602942][ T6665] ? do_sys_openat2+0x17a/0x1d0 [ 107.602989][ T6665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.603014][ T6665] ? do_syscall_64+0x100/0x230 [ 107.603036][ T6665] ? do_syscall_64+0xb6/0x230 [ 107.603057][ T6665] do_syscall_64+0xf3/0x230 [ 107.603074][ T6665] ? clear_bhb_loop+0x35/0x90 [ 107.603098][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.603118][ T6665] RIP: 0033:0x7f7a2218d169 [ 107.603133][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.603145][ T6665] RSP: 002b:00007f7a2307c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.603163][ T6665] RAX: ffffffffffffffda RBX: 00007f7a223a5fa0 RCX: 00007f7a2218d169 [ 107.603175][ T6665] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 107.603185][ T6665] RBP: 00007f7a2307c090 R08: 0000000000000000 R09: 0000000000000000 [ 107.603195][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.603204][ T6665] R13: 0000000000000000 R14: 00007f7a223a5fa0 R15: 00007ffee9391d38 [ 107.603229][ T6665] [ 107.616216][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 107.813776][ T6673] openvswitch: netlink: Missing valid actions attribute. [ 107.902248][ T6673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.031919][ T6644] tipc: Disabling bearer [ 109.131880][ T6678] netlink: 'syz.0.236': attribute type 2 has an invalid length. [ 109.342117][ T6682] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 109.370433][ T6685] 8021q: VLANs not supported on wg1 [ 109.448904][ T6699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.240'. [ 109.725939][ T6713] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.818139][ T6715] FAULT_INJECTION: forcing a failure. [ 109.818139][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 109.830952][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.3.247 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 109.830970][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.830976][ T6715] Call Trace: [ 109.830982][ T6715] [ 109.830988][ T6715] dump_stack_lvl+0x241/0x360 [ 109.831005][ T6715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.831015][ T6715] ? __pfx__printk+0x10/0x10 [ 109.831025][ T6715] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 109.831040][ T6715] ? __pfx___might_resched+0x10/0x10 [ 109.831055][ T6715] should_fail_ex+0x40a/0x550 [ 109.831073][ T6715] should_failslab+0xac/0x100 [ 109.831086][ T6715] kmem_cache_alloc_node_noprof+0x77/0x380 [ 109.831099][ T6715] ? __alloc_skb+0x1c3/0x440 [ 109.831107][ T6715] ? stack_trace_save+0x118/0x1d0 [ 109.831122][ T6715] __alloc_skb+0x1c3/0x440 [ 109.831133][ T6715] ? __pfx___alloc_skb+0x10/0x10 [ 109.831144][ T6715] ? netlink_ack_tlv_len+0x6e/0x200 [ 109.831159][ T6715] netlink_ack+0x145/0xa60 [ 109.831171][ T6715] ? netlink_sendmsg+0x8de/0xcb0 [ 109.831182][ T6715] ? __sock_sendmsg+0x221/0x270 [ 109.831195][ T6715] ? __sys_sendmsg+0x269/0x350 [ 109.831211][ T6715] netlink_rcv_skb+0x294/0x480 [ 109.831224][ T6715] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 109.831235][ T6715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.831254][ T6715] ? apparmor_capable+0x13b/0x1b0 [ 109.831266][ T6715] ? bpf_lsm_capable+0x9/0x10 [ 109.831279][ T6715] ? security_capable+0x7e/0x2d0 [ 109.831297][ T6715] nfnetlink_rcv+0x297/0x2ab0 [ 109.831309][ T6715] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 109.831323][ T6715] ? __dev_queue_xmit+0x2f4/0x3f40 [ 109.831335][ T6715] ? __dev_queue_xmit+0x1775/0x3f40 [ 109.831345][ T6715] ? kasan_save_track+0x51/0x80 [ 109.831358][ T6715] ? ____sys_sendmsg+0x53a/0x860 [ 109.831369][ T6715] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 109.831378][ T6715] ? __dev_queue_xmit+0x2f4/0x3f40 [ 109.831393][ T6715] ? __pfx___dev_queue_xmit+0x10/0x10 [ 109.831411][ T6715] ? ref_tracker_free+0x643/0x7e0 [ 109.831420][ T6715] ? __asan_memcpy+0x40/0x70 [ 109.831429][ T6715] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.831444][ T6715] ? __skb_clone+0x5c/0x6c0 [ 109.831472][ T6715] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.831489][ T6715] ? skb_clone+0x240/0x390 [ 109.831506][ T6715] ? __pfx_lock_release+0x10/0x10 [ 109.831528][ T6715] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 109.831557][ T6715] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.831578][ T6715] netlink_unicast+0x7f6/0x990 [ 109.831613][ T6715] ? __pfx_netlink_unicast+0x10/0x10 [ 109.831629][ T6715] ? __virt_addr_valid+0x45f/0x530 [ 109.831646][ T6715] ? __phys_addr_symbol+0x2f/0x70 [ 109.831654][ T6715] ? __check_object_size+0x47a/0x730 [ 109.831669][ T6715] netlink_sendmsg+0x8de/0xcb0 [ 109.831688][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.831702][ T6715] ? aa_sock_msg_perm+0x91/0x160 [ 109.831719][ T6715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.831731][ T6715] __sock_sendmsg+0x221/0x270 [ 109.831745][ T6715] ____sys_sendmsg+0x53a/0x860 [ 109.831759][ T6715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.831768][ T6715] ? __fget_files+0x2a/0x410 [ 109.831783][ T6715] ? __fget_files+0x2a/0x410 [ 109.831800][ T6715] __sys_sendmsg+0x269/0x350 [ 109.831812][ T6715] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.831828][ T6715] ? do_sys_openat2+0x17a/0x1d0 [ 109.831854][ T6715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.831869][ T6715] ? do_syscall_64+0x100/0x230 [ 109.831882][ T6715] ? do_syscall_64+0xb6/0x230 [ 109.831894][ T6715] do_syscall_64+0xf3/0x230 [ 109.831906][ T6715] ? clear_bhb_loop+0x35/0x90 [ 109.831921][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.831933][ T6715] RIP: 0033:0x7f386d38d169 [ 109.831942][ T6715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.831950][ T6715] RSP: 002b:00007f386e194038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.831961][ T6715] RAX: ffffffffffffffda RBX: 00007f386d5a5fa0 RCX: 00007f386d38d169 [ 109.831967][ T6715] RDX: 0000000004000084 RSI: 0000400000000000 RDI: 0000000000000003 [ 109.831973][ T6715] RBP: 00007f386e194090 R08: 0000000000000000 R09: 0000000000000000 [ 109.831979][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.831984][ T6715] R13: 0000000000000000 R14: 00007f386d5a5fa0 R15: 00007ffe1a626b68 [ 109.831997][ T6715] [ 110.471772][ T6721] tipc: Enabled bearer , priority 0 [ 110.516348][ T6718] tipc: Resetting bearer [ 111.339233][ T6762] __nla_validate_parse: 2 callbacks suppressed [ 111.339250][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 112.671690][ T6718] tipc: Disabling bearer [ 112.681617][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.252'. [ 112.858191][ T6769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.897820][ T6770] netlink: 'syz.3.263': attribute type 15 has an invalid length. [ 112.910696][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.263'. [ 113.012848][ T6769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.025941][ T6776] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 113.061663][ T6776] fþ²¹¥‰: entered promiscuous mode [ 113.112048][ T6769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.151609][ T6780] netlink: 104 bytes leftover after parsing attributes in process `syz.4.267'. [ 113.203290][ T6769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.420834][ T6769] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.443950][ T6769] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.465727][ T6769] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.474382][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.271'. [ 113.491502][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.271'. [ 113.511887][ T6769] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.521079][ T6791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.272'. [ 113.736770][ T6801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.275'. [ 113.830692][ T6802] tipc: Enabled bearer , priority 0 [ 113.860010][ T6796] tipc: Resetting bearer [ 115.536574][ T6796] tipc: Disabling bearer [ 115.653463][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.675154][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.749657][ T6806] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.758872][ T6806] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.768128][ T6806] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.777250][ T6806] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.835989][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.860475][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.892266][ T6805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.933571][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'. [ 115.979265][ T6841] syz_tun: entered allmulticast mode [ 116.057825][ T6853] netlink: 'syz.4.290': attribute type 3 has an invalid length. [ 116.209199][ T6859] netlink: 104 bytes leftover after parsing attributes in process `syz.1.293'. [ 116.402856][ T6870] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 116.457524][ T6870] batman_adv: batadv0: Adding interface: team0 [ 116.463737][ T6870] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.505797][ T6881] netlink: 'syz.0.296': attribute type 10 has an invalid length. [ 116.521468][ T6870] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 116.536640][ T6884] __nla_validate_parse: 1 callbacks suppressed [ 116.536658][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 116.604563][ T6881] netlink: 2 bytes leftover after parsing attributes in process `syz.0.296'. [ 116.635871][ T6875] tipc: Enabled bearer , priority 0 [ 116.648671][ T6886] vxcan3: entered allmulticast mode [ 116.682092][ T6881] team0: entered promiscuous mode [ 116.689672][ T6881] team_slave_0: entered promiscuous mode [ 116.701425][ T6881] team_slave_1: entered promiscuous mode [ 116.710506][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.720083][ T6881] batman_adv: batadv0: Interface activated: team0 [ 116.731344][ T6881] batman_adv: batadv0: Interface deactivated: team0 [ 116.746668][ T6881] batman_adv: batadv0: Removing interface: team0 [ 116.761196][ T6881] bridge0: port 3(team0) entered blocking state [ 116.762584][ T6892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.301'. [ 116.767952][ T6881] bridge0: port 3(team0) entered disabled state [ 116.778477][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 116.788921][ T6881] team0: entered allmulticast mode [ 116.795342][ T6892] netlink: 'syz.3.301': attribute type 2 has an invalid length. [ 116.802950][ T6881] team_slave_0: entered allmulticast mode [ 116.811139][ T6881] team_slave_1: entered allmulticast mode [ 116.821381][ T6873] tipc: Resetting bearer [ 117.297116][ T6905] FAULT_INJECTION: forcing a failure. [ 117.297116][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 117.316657][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.2.305 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 117.316681][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.316690][ T6905] Call Trace: [ 117.316695][ T6905] [ 117.316702][ T6905] dump_stack_lvl+0x241/0x360 [ 117.316726][ T6905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.316742][ T6905] ? __pfx__printk+0x10/0x10 [ 117.316759][ T6905] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 117.316782][ T6905] ? __pfx___might_resched+0x10/0x10 [ 117.316806][ T6905] should_fail_ex+0x40a/0x550 [ 117.316832][ T6905] should_failslab+0xac/0x100 [ 117.316853][ T6905] ? sock_alloc_inode+0x28/0xc0 [ 117.316872][ T6905] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 117.316898][ T6905] sock_alloc_inode+0x28/0xc0 [ 117.316916][ T6905] ? __pfx_sock_alloc_inode+0x10/0x10 [ 117.316947][ T6905] alloc_inode+0x65/0x1a0 [ 117.316970][ T6905] do_accept+0x130/0x6d0 [ 117.316997][ T6905] ? __pfx_do_accept+0x10/0x10 [ 117.317039][ T6905] __sys_accept4+0x11f/0x1d0 [ 117.317063][ T6905] ? __pfx___sys_accept4+0x10/0x10 [ 117.317085][ T6905] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.317109][ T6905] ? do_syscall_64+0x100/0x230 [ 117.317131][ T6905] __x64_sys_accept4+0x9a/0xb0 [ 117.317154][ T6905] do_syscall_64+0xf3/0x230 [ 117.317171][ T6905] ? clear_bhb_loop+0x35/0x90 [ 117.317191][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.317207][ T6905] RIP: 0033:0x7f7a2218d169 [ 117.317220][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.317231][ T6905] RSP: 002b:00007f7a2307c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 117.317245][ T6905] RAX: ffffffffffffffda RBX: 00007f7a223a5fa0 RCX: 00007f7a2218d169 [ 117.317255][ T6905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 117.317262][ T6905] RBP: 00007f7a2307c090 R08: 0000000000000000 R09: 0000000000000000 [ 117.317270][ T6905] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 117.317277][ T6905] R13: 0000000000000000 R14: 00007f7a223a5fa0 R15: 00007ffee9391d38 [ 117.317298][ T6905] [ 118.586684][ T6873] tipc: Disabling bearer [ 118.831468][ T6922] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 118.876669][ T6927] xt_TCPMSS: Only works on TCP SYN packets [ 119.190697][ T6922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.232204][ T6935] bond1: (slave ip6gretap1): making interface the new active one [ 119.245488][ T6935] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 119.263054][ T6946] vlan3: entered promiscuous mode [ 119.270614][ T6946] bond1: entered promiscuous mode [ 119.275838][ T6946] ip6gretap1: entered promiscuous mode [ 119.282077][ T6946] vlan3: entered allmulticast mode [ 119.287335][ T6946] bond1: entered allmulticast mode [ 119.292679][ T6946] ip6gretap1: entered allmulticast mode [ 119.444409][ T6956] bond0: option arp_validate: invalid value (320) [ 119.791011][ T6935] syz.4.311 (6935) used greatest stack depth: 18256 bytes left [ 119.941969][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 120.020979][ T6978] netlink: 'syz.4.321': attribute type 25 has an invalid length. [ 120.029417][ T6978] netlink: 'syz.4.321': attribute type 7 has an invalid length. [ 120.040977][ T6977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'. [ 120.043077][ T6978] netlink: 164 bytes leftover after parsing attributes in process `syz.4.321'. [ 120.239879][ T6990] netlink: 104 bytes leftover after parsing attributes in process `syz.3.324'. [ 120.790067][ T7017] tipc: Can't bind to reserved service type 0 [ 120.849538][ T7017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 120.882992][ T7017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.332'. [ 120.961504][ T7025] FAULT_INJECTION: forcing a failure. [ 120.961504][ T7025] name failslab, interval 1, probability 0, space 0, times 0 [ 120.981578][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.1.336 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 120.981606][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.981616][ T7025] Call Trace: [ 120.981622][ T7025] [ 120.981629][ T7025] dump_stack_lvl+0x241/0x360 [ 120.981656][ T7025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.981674][ T7025] ? __pfx__printk+0x10/0x10 [ 120.981704][ T7025] should_fail_ex+0x40a/0x550 [ 120.981732][ T7025] should_failslab+0xac/0x100 [ 120.981753][ T7025] ? skb_clone+0x20c/0x390 [ 120.981769][ T7025] kmem_cache_alloc_noprof+0x70/0x380 [ 120.981796][ T7025] skb_clone+0x20c/0x390 [ 120.981817][ T7025] __netlink_deliver_tap+0x3c4/0x7f0 [ 120.981850][ T7025] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.981869][ T7025] netlink_deliver_tap+0x19d/0x1b0 [ 120.981891][ T7025] netlink_unicast+0x7c4/0x990 [ 120.981919][ T7025] ? __pfx_netlink_unicast+0x10/0x10 [ 120.981936][ T7025] ? __virt_addr_valid+0x45f/0x530 [ 120.981953][ T7025] ? __phys_addr_symbol+0x2f/0x70 [ 120.981967][ T7025] ? __check_object_size+0x47a/0x730 [ 120.981993][ T7025] netlink_sendmsg+0x8de/0xcb0 [ 120.982026][ T7025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.982052][ T7025] ? aa_sock_msg_perm+0x91/0x160 [ 120.982080][ T7025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.982099][ T7025] __sock_sendmsg+0x221/0x270 [ 120.982123][ T7025] ____sys_sendmsg+0x53a/0x860 [ 120.982149][ T7025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.982164][ T7025] ? __fget_files+0x2a/0x410 [ 120.982189][ T7025] ? __fget_files+0x2a/0x410 [ 120.982219][ T7025] __sys_sendmsg+0x269/0x350 [ 120.982241][ T7025] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.982271][ T7025] ? do_sys_openat2+0x17a/0x1d0 [ 120.982319][ T7025] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.982344][ T7025] ? do_syscall_64+0x100/0x230 [ 120.982365][ T7025] ? do_syscall_64+0xb6/0x230 [ 120.982386][ T7025] do_syscall_64+0xf3/0x230 [ 120.982404][ T7025] ? clear_bhb_loop+0x35/0x90 [ 120.982428][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.982448][ T7025] RIP: 0033:0x7f714778d169 [ 120.982462][ T7025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.982475][ T7025] RSP: 002b:00007f7148524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.982493][ T7025] RAX: ffffffffffffffda RBX: 00007f71479a5fa0 RCX: 00007f714778d169 [ 120.982503][ T7025] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005 [ 120.982512][ T7025] RBP: 00007f7148524090 R08: 0000000000000000 R09: 0000000000000000 [ 120.982527][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.982536][ T7025] R13: 0000000000000000 R14: 00007f71479a5fa0 R15: 00007fffee106378 [ 120.982562][ T7025] [ 120.982684][ T7025] netlink: 'syz.1.336': attribute type 39 has an invalid length. [ 121.136216][ T7031] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 121.623995][ T7060] FAULT_INJECTION: forcing a failure. [ 121.623995][ T7060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.635541][ T7062] netlink: 'syz.2.349': attribute type 4 has an invalid length. [ 121.709772][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.1.348 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 121.709800][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.709810][ T7060] Call Trace: [ 121.709816][ T7060] [ 121.709824][ T7060] dump_stack_lvl+0x241/0x360 [ 121.709850][ T7060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.709868][ T7060] ? __pfx__printk+0x10/0x10 [ 121.709886][ T7060] ? __pfx_lock_release+0x10/0x10 [ 121.709916][ T7060] should_fail_ex+0x40a/0x550 [ 121.709943][ T7060] _copy_from_user+0x2d/0xb0 [ 121.709964][ T7060] btf_new_fd+0x326/0xca0 [ 121.709979][ T7060] ? apparmor_capable+0x13b/0x1b0 [ 121.710003][ T7060] ? __pfx_btf_new_fd+0x10/0x10 [ 121.710025][ T7060] ? bpf_btf_load+0xcf/0x1a0 [ 121.710048][ T7060] __sys_bpf+0x6f2/0x820 [ 121.710071][ T7060] ? __pfx___sys_bpf+0x10/0x10 [ 121.710103][ T7060] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.710128][ T7060] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.710150][ T7060] ? do_syscall_64+0x100/0x230 [ 121.710173][ T7060] __x64_sys_bpf+0x7c/0x90 [ 121.710193][ T7060] do_syscall_64+0xf3/0x230 [ 121.710259][ T7060] ? clear_bhb_loop+0x35/0x90 [ 121.710283][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.710302][ T7060] RIP: 0033:0x7f714778d169 [ 121.710317][ T7060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.710330][ T7060] RSP: 002b:00007f7148524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.710347][ T7060] RAX: ffffffffffffffda RBX: 00007f71479a5fa0 RCX: 00007f714778d169 [ 121.710359][ T7060] RDX: 0000000000000028 RSI: 0000400000000dc0 RDI: 0000000000000012 [ 121.710369][ T7060] RBP: 00007f7148524090 R08: 0000000000000000 R09: 0000000000000000 [ 121.710379][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.710389][ T7060] R13: 0000000000000001 R14: 00007f71479a5fa0 R15: 00007fffee106378 [ 121.710414][ T7060] [ 122.002451][ T7067] netlink: 'syz.3.350': attribute type 12 has an invalid length. [ 122.065176][ T7075] __nla_validate_parse: 2 callbacks suppressed [ 122.065193][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 122.090174][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 122.198536][ T7071] syzkaller0: entered promiscuous mode [ 122.209981][ T7071] syzkaller0: entered allmulticast mode [ 122.227980][ T7081] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 122.496617][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 124.000840][ T7085] veth3: entered promiscuous mode [ 124.006269][ T7085] veth3: entered allmulticast mode [ 124.012430][ T7091] netem: incorrect ge model size [ 124.018092][ T7091] netem: change failed [ 124.027230][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.362'. [ 124.331656][ T7126] FAULT_INJECTION: forcing a failure. [ 124.331656][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.357926][ T7126] CPU: 1 UID: 0 PID: 7126 Comm: syz.3.368 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 124.357951][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.357969][ T7126] Call Trace: [ 124.357974][ T7126] [ 124.357981][ T7126] dump_stack_lvl+0x241/0x360 [ 124.358007][ T7126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.358023][ T7126] ? __pfx__printk+0x10/0x10 [ 124.358042][ T7126] ? __pfx_lock_release+0x10/0x10 [ 124.358070][ T7126] should_fail_ex+0x40a/0x550 [ 124.358095][ T7126] _copy_from_user+0x2d/0xb0 [ 124.358116][ T7126] copy_msghdr_from_user+0xae/0x680 [ 124.358142][ T7126] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.358159][ T7126] ? __fget_files+0x2a/0x410 [ 124.358182][ T7126] ? __fget_files+0x2a/0x410 [ 124.358207][ T7126] __sys_sendmsg+0x209/0x350 [ 124.358229][ T7126] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.358257][ T7126] ? do_sys_openat2+0x17a/0x1d0 [ 124.358300][ T7126] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.358323][ T7126] ? do_syscall_64+0x100/0x230 [ 124.358345][ T7126] ? do_syscall_64+0xb6/0x230 [ 124.358365][ T7126] do_syscall_64+0xf3/0x230 [ 124.358382][ T7126] ? clear_bhb_loop+0x35/0x90 [ 124.358404][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.358423][ T7126] RIP: 0033:0x7f386d38d169 [ 124.358437][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.358449][ T7126] RSP: 002b:00007f386e194038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.358465][ T7126] RAX: ffffffffffffffda RBX: 00007f386d5a5fa0 RCX: 00007f386d38d169 [ 124.358474][ T7126] RDX: 0000000000008000 RSI: 0000400000000100 RDI: 0000000000000003 [ 124.358483][ T7126] RBP: 00007f386e194090 R08: 0000000000000000 R09: 0000000000000000 [ 124.358491][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.358500][ T7126] R13: 0000000000000000 R14: 00007f386d5a5fa0 R15: 00007ffe1a626b68 [ 124.358522][ T7126] [ 124.616847][ T7134] FAULT_INJECTION: forcing a failure. [ 124.616847][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 124.650738][ T7130] syzkaller0: entered promiscuous mode [ 124.657333][ T7130] syzkaller0: entered allmulticast mode [ 124.664456][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.3.373 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 124.664479][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.664489][ T7134] Call Trace: [ 124.664495][ T7134] [ 124.664502][ T7134] dump_stack_lvl+0x241/0x360 [ 124.664527][ T7134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.664543][ T7134] ? __pfx__printk+0x10/0x10 [ 124.664559][ T7134] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 124.664580][ T7134] ? __pfx___might_resched+0x10/0x10 [ 124.664602][ T7134] should_fail_ex+0x40a/0x550 [ 124.664625][ T7134] should_failslab+0xac/0x100 [ 124.664644][ T7134] kmem_cache_alloc_node_noprof+0x77/0x380 [ 124.664661][ T7134] ? __alloc_skb+0x1c3/0x440 [ 124.664678][ T7134] __alloc_skb+0x1c3/0x440 [ 124.664700][ T7134] ? __pfx___alloc_skb+0x10/0x10 [ 124.664717][ T7134] ? netlink_autobind+0xd6/0x2f0 [ 124.664736][ T7134] ? netlink_autobind+0x2b0/0x2f0 [ 124.664760][ T7134] netlink_sendmsg+0x634/0xcb0 [ 124.664786][ T7134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.664805][ T7134] ? aa_sock_msg_perm+0x91/0x160 [ 124.664830][ T7134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.664846][ T7134] __sock_sendmsg+0x221/0x270 [ 124.664867][ T7134] ____sys_sendmsg+0x53a/0x860 [ 124.664890][ T7134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.664904][ T7134] ? __fget_files+0x2a/0x410 [ 124.664925][ T7134] ? __fget_files+0x2a/0x410 [ 124.664952][ T7134] __sys_sendmsg+0x269/0x350 [ 124.664974][ T7134] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.665023][ T7134] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.665045][ T7134] ? do_syscall_64+0x100/0x230 [ 124.665065][ T7134] ? do_syscall_64+0xb6/0x230 [ 124.665081][ T7134] do_syscall_64+0xf3/0x230 [ 124.665095][ T7134] ? clear_bhb_loop+0x35/0x90 [ 124.665117][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.665135][ T7134] RIP: 0033:0x7f386d38d169 [ 124.665150][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.665163][ T7134] RSP: 002b:00007f386e194038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.665190][ T7134] RAX: ffffffffffffffda RBX: 00007f386d5a5fa0 RCX: 00007f386d38d169 [ 124.665201][ T7134] RDX: 0000000000004000 RSI: 0000400000000580 RDI: 0000000000000003 [ 124.665210][ T7134] RBP: 00007f386e194090 R08: 0000000000000000 R09: 0000000000000000 [ 124.665219][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.665227][ T7134] R13: 0000000000000000 R14: 00007f386d5a5fa0 R15: 00007ffe1a626b68 [ 124.665249][ T7134] [ 125.040578][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 125.181934][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.375'. [ 125.220897][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.375'. [ 125.601294][ T7159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.378'. [ 125.672619][ T7161] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 125.686916][ T7161] netlink: 224 bytes leftover after parsing attributes in process `syz.0.379'. [ 125.728425][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'. [ 127.055622][ T7164] tipc: Enabling of bearer rejected, failed to enable media [ 127.135255][ T7161] bridge0: entered promiscuous mode [ 127.150760][ T7161] macvlan2: entered promiscuous mode [ 127.159464][ T7161] bridge0: port 4(macvlan2) entered blocking state [ 127.173373][ T7161] bridge0: port 4(macvlan2) entered disabled state [ 127.181846][ T7161] macvlan2: entered allmulticast mode [ 127.187497][ T7161] bridge0: entered allmulticast mode [ 127.205256][ T7161] macvlan2: left allmulticast mode [ 127.210583][ T7161] bridge0: left allmulticast mode [ 127.229621][ T7161] bridge0: left promiscuous mode [ 127.246240][ T7179] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.270542][ T7168] bridge_slave_1: left allmulticast mode [ 127.276502][ T7168] bridge_slave_1: left promiscuous mode [ 127.282542][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.294094][ T7168] bridge_slave_0: left allmulticast mode [ 127.300105][ T7168] bridge_slave_0: left promiscuous mode [ 127.324648][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.404387][ T7190] FAULT_INJECTION: forcing a failure. [ 127.404387][ T7190] name failslab, interval 1, probability 0, space 0, times 0 [ 127.413225][ T7189] Unsupported ieee802154 address type: 0 [ 127.430204][ T7190] CPU: 1 UID: 0 PID: 7190 Comm: syz.2.387 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 127.430227][ T7190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.430236][ T7190] Call Trace: [ 127.430243][ T7190] [ 127.430250][ T7190] dump_stack_lvl+0x241/0x360 [ 127.430273][ T7190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.430287][ T7190] ? __pfx__printk+0x10/0x10 [ 127.430305][ T7190] ? fs_reclaim_acquire+0x93/0x130 [ 127.430322][ T7190] ? __pfx___might_resched+0x10/0x10 [ 127.430339][ T7190] ? dynamic_dname+0x144/0x1b0 [ 127.430358][ T7190] should_fail_ex+0x40a/0x550 [ 127.430384][ T7190] should_failslab+0xac/0x100 [ 127.430404][ T7190] __kmalloc_noprof+0xdd/0x4c0 [ 127.430423][ T7190] ? tomoyo_encode+0x26f/0x540 [ 127.430442][ T7190] tomoyo_encode+0x26f/0x540 [ 127.430458][ T7190] ? __pfx_sockfs_dname+0x10/0x10 [ 127.430480][ T7190] tomoyo_realpath_from_path+0x59e/0x5e0 [ 127.430507][ T7190] tomoyo_path_number_perm+0x239/0x770 [ 127.430526][ T7190] ? __lock_acquire+0x1397/0x2100 [ 127.430551][ T7190] ? tomoyo_path_number_perm+0x209/0x770 [ 127.430572][ T7190] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.430629][ T7190] ? __fget_files+0x2a/0x410 [ 127.430653][ T7190] ? __fget_files+0x2a/0x410 [ 127.430679][ T7190] security_file_ioctl+0xc6/0x2a0 [ 127.430716][ T7190] __se_sys_ioctl+0x46/0x170 [ 127.430736][ T7190] do_syscall_64+0xf3/0x230 [ 127.430755][ T7190] ? clear_bhb_loop+0x35/0x90 [ 127.430779][ T7190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.430799][ T7190] RIP: 0033:0x7f7a2218d169 [ 127.430814][ T7190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.430827][ T7190] RSP: 002b:00007f7a2307c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.430844][ T7190] RAX: ffffffffffffffda RBX: 00007f7a223a5fa0 RCX: 00007f7a2218d169 [ 127.430855][ T7190] RDX: 0000400000000280 RSI: 00000000000089f1 RDI: 0000000000000003 [ 127.430864][ T7190] RBP: 00007f7a2307c090 R08: 0000000000000000 R09: 0000000000000000 [ 127.430873][ T7190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.430881][ T7190] R13: 0000000000000000 R14: 00007f7a223a5fa0 R15: 00007ffee9391d38 [ 127.430906][ T7190] [ 127.430923][ T7190] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.856883][ T7202] FAULT_INJECTION: forcing a failure. [ 127.856883][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 127.890132][ T7202] CPU: 1 UID: 0 PID: 7202 Comm: syz.4.392 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 127.890165][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.890176][ T7202] Call Trace: [ 127.890182][ T7202] [ 127.890190][ T7202] dump_stack_lvl+0x241/0x360 [ 127.890216][ T7202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.890234][ T7202] ? __pfx__printk+0x10/0x10 [ 127.890252][ T7202] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 127.890275][ T7202] ? __pfx___might_resched+0x10/0x10 [ 127.890300][ T7202] should_fail_ex+0x40a/0x550 [ 127.890327][ T7202] should_failslab+0xac/0x100 [ 127.890349][ T7202] kmem_cache_alloc_node_noprof+0x77/0x380 [ 127.890369][ T7202] ? __alloc_skb+0x1c3/0x440 [ 127.890383][ T7202] ? stack_trace_save+0x118/0x1d0 [ 127.890405][ T7202] __alloc_skb+0x1c3/0x440 [ 127.890426][ T7202] ? __pfx___alloc_skb+0x10/0x10 [ 127.890447][ T7202] ? netlink_ack_tlv_len+0x6e/0x200 [ 127.890471][ T7202] netlink_ack+0x145/0xa60 [ 127.890488][ T7202] ? netlink_sendmsg+0x8de/0xcb0 [ 127.890507][ T7202] ? __sock_sendmsg+0x221/0x270 [ 127.890527][ T7202] ? __sys_sendmsg+0x269/0x350 [ 127.890556][ T7202] netlink_rcv_skb+0x294/0x480 [ 127.890578][ T7202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 127.890597][ T7202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.890630][ T7202] ? apparmor_capable+0x13b/0x1b0 [ 127.890650][ T7202] ? bpf_lsm_capable+0x9/0x10 [ 127.890678][ T7202] ? security_capable+0x7e/0x2d0 [ 127.890705][ T7202] nfnetlink_rcv+0x297/0x2ab0 [ 127.890727][ T7202] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 127.890752][ T7202] ? __dev_queue_xmit+0x2f4/0x3f40 [ 127.890772][ T7202] ? __dev_queue_xmit+0x1775/0x3f40 [ 127.890789][ T7202] ? kasan_save_track+0x51/0x80 [ 127.890811][ T7202] ? ____sys_sendmsg+0x53a/0x860 [ 127.890830][ T7202] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 127.890845][ T7202] ? __dev_queue_xmit+0x2f4/0x3f40 [ 127.890867][ T7202] ? __pfx___dev_queue_xmit+0x10/0x10 [ 127.890900][ T7202] ? ref_tracker_free+0x643/0x7e0 [ 127.890916][ T7202] ? __asan_memcpy+0x40/0x70 [ 127.890930][ T7202] ? __pfx_ref_tracker_free+0x10/0x10 [ 127.890951][ T7202] ? __skb_clone+0x5c/0x6c0 [ 127.890981][ T7202] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.890999][ T7202] ? skb_clone+0x240/0x390 [ 127.891016][ T7202] ? __pfx_lock_release+0x10/0x10 [ 127.891040][ T7202] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 127.891070][ T7202] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.891092][ T7202] netlink_unicast+0x7f6/0x990 [ 127.891119][ T7202] ? __pfx_netlink_unicast+0x10/0x10 [ 127.891136][ T7202] ? __virt_addr_valid+0x45f/0x530 [ 127.891152][ T7202] ? __phys_addr_symbol+0x2f/0x70 [ 127.891166][ T7202] ? __check_object_size+0x47a/0x730 [ 127.891191][ T7202] netlink_sendmsg+0x8de/0xcb0 [ 127.891223][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.891247][ T7202] ? aa_sock_msg_perm+0x91/0x160 [ 127.891274][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.891293][ T7202] __sock_sendmsg+0x221/0x270 [ 127.891316][ T7202] ____sys_sendmsg+0x53a/0x860 [ 127.891340][ T7202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.891355][ T7202] ? __fget_files+0x2a/0x410 [ 127.891379][ T7202] ? __fget_files+0x2a/0x410 [ 127.891408][ T7202] __sys_sendmsg+0x269/0x350 [ 127.891430][ T7202] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.891459][ T7202] ? do_sys_openat2+0x17a/0x1d0 [ 127.891505][ T7202] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.891528][ T7202] ? do_syscall_64+0x100/0x230 [ 127.891550][ T7202] ? do_syscall_64+0xb6/0x230 [ 127.891570][ T7202] do_syscall_64+0xf3/0x230 [ 127.891588][ T7202] ? clear_bhb_loop+0x35/0x90 [ 127.891611][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.891630][ T7202] RIP: 0033:0x7feffbd8d169 [ 127.891645][ T7202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.891658][ T7202] RSP: 002b:00007feff9bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.891682][ T7202] RAX: ffffffffffffffda RBX: 00007feffbfa5fa0 RCX: 00007feffbd8d169 [ 127.891694][ T7202] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 127.891704][ T7202] RBP: 00007feff9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.891714][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.891723][ T7202] R13: 0000000000000000 R14: 00007feffbfa5fa0 R15: 00007ffee5d03db8 [ 127.891749][ T7202] [ 128.575212][ T7214] tipc: Enabled bearer , priority 0 [ 128.606281][ T7211] tipc: Started in network mode [ 128.611207][ T7211] tipc: Node identity 9ad6e14efac4, cluster identity 4711 [ 128.632750][ T7211] tipc: Enabled bearer , priority 0 [ 128.643766][ T7210] tipc: Resetting bearer [ 128.816771][ T7223] netlink: 'syz.2.399': attribute type 39 has an invalid length. [ 129.626164][ T46] tipc: Node number set to 1611850062 [ 130.041811][ T7210] tipc: Disabling bearer [ 130.052483][ T7205] tipc: Resetting bearer [ 131.341609][ T7205] tipc: Disabling bearer [ 131.469468][ T7232] No such timeout policy "syz0" [ 132.821969][ T7311] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 133.248251][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.256386][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.105788][ T7372] __nla_validate_parse: 1 callbacks suppressed [ 135.105809][ T7372] netlink: 104 bytes leftover after parsing attributes in process `syz.4.465'. [ 135.129135][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.464'. [ 135.569965][ T7404] netlink: 'syz.3.476': attribute type 8 has an invalid length. [ 135.610418][ T7410] netlink: 104 bytes leftover after parsing attributes in process `syz.1.479'. [ 136.113526][ T7438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.559358][ T7460] netlink: 104 bytes leftover after parsing attributes in process `syz.1.492'. [ 136.718762][ T7466] netlink: 'syz.1.497': attribute type 2 has an invalid length. [ 136.738036][ T7468] FAULT_INJECTION: forcing a failure. [ 136.738036][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 136.774724][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.4.496 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 136.774748][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.774758][ T7468] Call Trace: [ 136.774764][ T7468] [ 136.774771][ T7468] dump_stack_lvl+0x241/0x360 [ 136.774806][ T7468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.774822][ T7468] ? __pfx__printk+0x10/0x10 [ 136.774850][ T7468] should_fail_ex+0x40a/0x550 [ 136.774877][ T7468] should_failslab+0xac/0x100 [ 136.774898][ T7468] ? skb_clone+0x20c/0x390 [ 136.774914][ T7468] kmem_cache_alloc_noprof+0x70/0x380 [ 136.774938][ T7468] skb_clone+0x20c/0x390 [ 136.774959][ T7468] __netlink_deliver_tap+0x3c4/0x7f0 [ 136.774991][ T7468] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.775010][ T7468] netlink_deliver_tap+0x19d/0x1b0 [ 136.775030][ T7468] netlink_unicast+0x7c4/0x990 [ 136.775056][ T7468] ? __pfx_netlink_unicast+0x10/0x10 [ 136.775072][ T7468] ? __virt_addr_valid+0x45f/0x530 [ 136.775089][ T7468] ? __phys_addr_symbol+0x2f/0x70 [ 136.775103][ T7468] ? __check_object_size+0x47a/0x730 [ 136.775128][ T7468] netlink_sendmsg+0x8de/0xcb0 [ 136.775160][ T7468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.775185][ T7468] ? aa_sock_msg_perm+0x91/0x160 [ 136.775212][ T7468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.775230][ T7468] __sock_sendmsg+0x221/0x270 [ 136.775254][ T7468] ____sys_sendmsg+0x53a/0x860 [ 136.775279][ T7468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.775294][ T7468] ? __fget_files+0x2a/0x410 [ 136.775317][ T7468] ? __fget_files+0x2a/0x410 [ 136.775346][ T7468] __sys_sendmsg+0x269/0x350 [ 136.775368][ T7468] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.775398][ T7468] ? do_sys_openat2+0x17a/0x1d0 [ 136.775444][ T7468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.775466][ T7468] ? do_syscall_64+0x100/0x230 [ 136.775487][ T7468] ? do_syscall_64+0xb6/0x230 [ 136.775506][ T7468] do_syscall_64+0xf3/0x230 [ 136.775523][ T7468] ? clear_bhb_loop+0x35/0x90 [ 136.775544][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.775563][ T7468] RIP: 0033:0x7feffbd8d169 [ 136.775577][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.775589][ T7468] RSP: 002b:00007feff9bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.775607][ T7468] RAX: ffffffffffffffda RBX: 00007feffbfa5fa0 RCX: 00007feffbd8d169 [ 136.775618][ T7468] RDX: 0000000000000000 RSI: 000040000000c2c0 RDI: 0000000000000003 [ 136.775627][ T7468] RBP: 00007feff9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 136.775636][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.775645][ T7468] R13: 0000000000000000 R14: 00007feffbfa5fa0 R15: 00007ffee5d03db8 [ 136.775670][ T7468] [ 137.227346][ T7481] FAULT_INJECTION: forcing a failure. [ 137.227346][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 137.245308][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.3.500 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 137.245334][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.245344][ T7481] Call Trace: [ 137.245350][ T7481] [ 137.245357][ T7481] dump_stack_lvl+0x241/0x360 [ 137.245383][ T7481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.245401][ T7481] ? __pfx__printk+0x10/0x10 [ 137.245429][ T7481] should_fail_ex+0x40a/0x550 [ 137.245456][ T7481] should_failslab+0xac/0x100 [ 137.245477][ T7481] ? skb_clone+0x20c/0x390 [ 137.245493][ T7481] kmem_cache_alloc_noprof+0x70/0x380 [ 137.245519][ T7481] skb_clone+0x20c/0x390 [ 137.245539][ T7481] __netlink_deliver_tap+0x3c4/0x7f0 [ 137.245570][ T7481] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.245589][ T7481] netlink_deliver_tap+0x19d/0x1b0 [ 137.245610][ T7481] netlink_unicast+0x7c4/0x990 [ 137.245637][ T7481] ? __pfx_netlink_unicast+0x10/0x10 [ 137.245654][ T7481] ? __virt_addr_valid+0x45f/0x530 [ 137.245671][ T7481] ? __phys_addr_symbol+0x2f/0x70 [ 137.245685][ T7481] ? __check_object_size+0x47a/0x730 [ 137.245709][ T7481] netlink_sendmsg+0x8de/0xcb0 [ 137.245742][ T7481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.245766][ T7481] ? aa_sock_msg_perm+0x91/0x160 [ 137.245800][ T7481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.245818][ T7481] __sock_sendmsg+0x221/0x270 [ 137.245841][ T7481] ____sys_sendmsg+0x53a/0x860 [ 137.245866][ T7481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.245881][ T7481] ? __fget_files+0x2a/0x410 [ 137.245905][ T7481] ? __fget_files+0x2a/0x410 [ 137.245934][ T7481] __sys_sendmsg+0x269/0x350 [ 137.245956][ T7481] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.245986][ T7481] ? do_sys_openat2+0x17a/0x1d0 [ 137.246032][ T7481] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.246055][ T7481] ? do_syscall_64+0x100/0x230 [ 137.246077][ T7481] ? do_syscall_64+0xb6/0x230 [ 137.246096][ T7481] do_syscall_64+0xf3/0x230 [ 137.246114][ T7481] ? clear_bhb_loop+0x35/0x90 [ 137.246138][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.246158][ T7481] RIP: 0033:0x7f386d38d169 [ 137.246172][ T7481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.246185][ T7481] RSP: 002b:00007f386e194038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.246203][ T7481] RAX: ffffffffffffffda RBX: 00007f386d5a5fa0 RCX: 00007f386d38d169 [ 137.246214][ T7481] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 137.246224][ T7481] RBP: 00007f386e194090 R08: 0000000000000000 R09: 0000000000000000 [ 137.246234][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.246243][ T7481] R13: 0000000000000000 R14: 00007f386d5a5fa0 R15: 00007ffe1a626b68 [ 137.246270][ T7481] [ 137.602536][ T7489] netlink: 'syz.0.503': attribute type 39 has an invalid length. [ 137.644187][ T7491] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 137.664941][ T7491] hsr0: entered promiscuous mode [ 137.674006][ T7491] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 137.689237][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 137.706987][ T7491] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 137.807990][ T7491] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 138.052645][ T7503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.113977][ T7503] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.478666][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 138.706665][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.515'. [ 138.758413][ T7521] netlink: 'syz.4.515': attribute type 10 has an invalid length. [ 138.829626][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 138.839787][ T7531] FAULT_INJECTION: forcing a failure. [ 138.839787][ T7531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.850298][ T7521] bridge_slave_1: left allmulticast mode [ 138.858638][ T7521] bridge_slave_1: left promiscuous mode [ 138.874444][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.2.518 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 138.874471][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.874481][ T7531] Call Trace: [ 138.874487][ T7531] [ 138.874494][ T7531] dump_stack_lvl+0x241/0x360 [ 138.874519][ T7531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.874537][ T7531] ? __pfx__printk+0x10/0x10 [ 138.874555][ T7531] ? __pfx_lock_release+0x10/0x10 [ 138.874585][ T7531] should_fail_ex+0x40a/0x550 [ 138.874611][ T7531] _copy_from_user+0x2d/0xb0 [ 138.874640][ T7531] move_addr_to_kernel+0x82/0x150 [ 138.874662][ T7531] copy_msghdr_from_user+0x43e/0x680 [ 138.874688][ T7531] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 138.874706][ T7531] ? __fget_files+0x2a/0x410 [ 138.874736][ T7531] ? __fget_files+0x2a/0x410 [ 138.874765][ T7531] __sys_sendmsg+0x209/0x350 [ 138.874787][ T7531] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.874816][ T7531] ? do_sys_openat2+0x17a/0x1d0 [ 138.874862][ T7531] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.874885][ T7531] ? do_syscall_64+0x100/0x230 [ 138.874907][ T7531] ? do_syscall_64+0xb6/0x230 [ 138.874927][ T7531] do_syscall_64+0xf3/0x230 [ 138.874945][ T7531] ? clear_bhb_loop+0x35/0x90 [ 138.874969][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.874989][ T7531] RIP: 0033:0x7f7a2218d169 [ 138.875003][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.875016][ T7531] RSP: 002b:00007f7a2307c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.875034][ T7531] RAX: ffffffffffffffda RBX: 00007f7a223a5fa0 RCX: 00007f7a2218d169 [ 138.875046][ T7531] RDX: 000000002000c8d0 RSI: 0000400000000080 RDI: 0000000000000003 [ 138.875056][ T7531] RBP: 00007f7a2307c090 R08: 0000000000000000 R09: 0000000000000000 [ 138.875066][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.875076][ T7531] R13: 0000000000000000 R14: 00007f7a223a5fa0 R15: 00007ffee9391d38 [ 138.875102][ T7531] [ 139.107673][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.224874][ T7521] bridge_slave_0: left allmulticast mode [ 139.230670][ T7521] bridge_slave_0: left promiscuous mode [ 139.245457][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.355905][ T7521] bridge0 (unregistering): left promiscuous mode [ 139.427016][ T7544] ip6tnl1: entered promiscuous mode [ 139.432769][ T7544] ip6tnl1: entered allmulticast mode [ 139.529473][ T7551] Bluetooth: MGMT ver 1.23 [ 139.549016][ T7551] geneve2: entered promiscuous mode [ 139.559101][ T7551] geneve2: entered allmulticast mode [ 139.570462][ T7553] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 139.579872][ T7553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.529'. [ 139.616705][ T7553] batman_adv: batadv0: Adding interface: virt_wifi0 [ 139.623668][ T7553] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.651896][ T7553] batman_adv: batadv0: Interface activated: virt_wifi0 [ 139.998466][ T7575] netlink: 'syz.0.536': attribute type 9 has an invalid length. [ 140.016114][ T7576] netlink: 104 bytes leftover after parsing attributes in process `syz.4.535'. [ 140.037015][ T7575] openvswitch: netlink: Message has 6 unknown bytes. [ 140.316779][ T7584] tipc: Enabled bearer , priority 0 [ 140.376644][ T7577] tipc: Resetting bearer [ 141.978318][ T7577] tipc: Disabling bearer [ 142.191219][ T7615] __nla_validate_parse: 1 callbacks suppressed [ 142.191238][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 142.249791][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 142.360162][ T7623] syzkaller1: entered allmulticast mode [ 142.480517][ T7623] ax25_connect(): syz.0.550 uses autobind, please contact jreuter@yaina.de [ 142.565135][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.555'. [ 142.695671][ T7648] FAULT_INJECTION: forcing a failure. [ 142.695671][ T7648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.730138][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.4.560 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 142.730171][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.730181][ T7648] Call Trace: [ 142.730187][ T7648] [ 142.730194][ T7648] dump_stack_lvl+0x241/0x360 [ 142.730218][ T7648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.730235][ T7648] ? __pfx__printk+0x10/0x10 [ 142.730262][ T7648] should_fail_ex+0x40a/0x550 [ 142.730286][ T7648] _copy_to_user+0x31/0xb0 [ 142.730307][ T7648] generic_map_lookup_batch+0x92a/0xf20 [ 142.730342][ T7648] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 142.730365][ T7648] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 142.730384][ T7648] bpf_map_do_batch+0x288/0x660 [ 142.730410][ T7648] __sys_bpf+0x653/0x820 [ 142.730432][ T7648] ? __pfx___sys_bpf+0x10/0x10 [ 142.730464][ T7648] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.730488][ T7648] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.730510][ T7648] ? do_syscall_64+0x100/0x230 [ 142.730544][ T7648] __x64_sys_bpf+0x7c/0x90 [ 142.730562][ T7648] do_syscall_64+0xf3/0x230 [ 142.730579][ T7648] ? clear_bhb_loop+0x35/0x90 [ 142.730603][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.730635][ T7648] RIP: 0033:0x7feffbd8d169 [ 142.730649][ T7648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.730662][ T7648] RSP: 002b:00007feff9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.730680][ T7648] RAX: ffffffffffffffda RBX: 00007feffbfa5fa0 RCX: 00007feffbd8d169 [ 142.730692][ T7648] RDX: 0000000000000038 RSI: 00004000000003c0 RDI: 0000000000000018 [ 142.730702][ T7648] RBP: 00007feff9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.730713][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.730722][ T7648] R13: 0000000000000000 R14: 00007feffbfa5fa0 R15: 00007ffee5d03db8 [ 142.730748][ T7648] [ 142.749037][ T7632] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 142.903180][ T7654] sctp: [Deprecated]: syz.4.562 (pid 7654) Use of int in maxseg socket option. [ 142.903180][ T7654] Use struct sctp_assoc_value instead [ 142.967317][ T7632] netlink: 120 bytes leftover after parsing attributes in process `syz.1.555'. [ 143.447544][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz.3.566'. [ 143.479074][ T7666] veth0_to_bridge: entered promiscuous mode [ 143.538553][ T7664] veth0_to_bridge: left promiscuous mode [ 143.713350][ T7672] FAULT_INJECTION: forcing a failure. [ 143.713350][ T7672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.734002][ T7672] CPU: 0 UID: 0 PID: 7672 Comm: syz.3.569 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 143.734029][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.734039][ T7672] Call Trace: [ 143.734044][ T7672] [ 143.734051][ T7672] dump_stack_lvl+0x241/0x360 [ 143.734078][ T7672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.734095][ T7672] ? __pfx__printk+0x10/0x10 [ 143.734113][ T7672] ? __pfx_lock_release+0x10/0x10 [ 143.734143][ T7672] should_fail_ex+0x40a/0x550 [ 143.734169][ T7672] _copy_from_user+0x2d/0xb0 [ 143.734189][ T7672] copy_msghdr_from_user+0xae/0x680 [ 143.734216][ T7672] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 143.734245][ T7672] ? __fget_files+0x2a/0x410 [ 143.734266][ T7672] ? __fget_files+0x2a/0x410 [ 143.734292][ T7672] __sys_sendmsg+0x209/0x350 [ 143.734310][ T7672] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.734334][ T7672] ? do_sys_openat2+0x17a/0x1d0 [ 143.734373][ T7672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.734394][ T7672] ? do_syscall_64+0x100/0x230 [ 143.734413][ T7672] ? do_syscall_64+0xb6/0x230 [ 143.734430][ T7672] do_syscall_64+0xf3/0x230 [ 143.734446][ T7672] ? clear_bhb_loop+0x35/0x90 [ 143.734467][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.734484][ T7672] RIP: 0033:0x7f386d38d169 [ 143.734498][ T7672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.734510][ T7672] RSP: 002b:00007f386e194038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.734527][ T7672] RAX: ffffffffffffffda RBX: 00007f386d5a5fa0 RCX: 00007f386d38d169 [ 143.734539][ T7672] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003 [ 143.734548][ T7672] RBP: 00007f386e194090 R08: 0000000000000000 R09: 0000000000000000 [ 143.734558][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.734568][ T7672] R13: 0000000000000000 R14: 00007f386d5a5fa0 R15: 00007ffe1a626b68 [ 143.734593][ T7672] [ 144.431720][ T7692] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 144.451239][ T7692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.574'. [ 144.470388][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.576'. [ 144.485363][ T7692] batman_adv: batadv0: Adding interface: virt_wifi0 [ 144.493438][ T7692] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.520985][ T7692] batman_adv: batadv0: Interface activated: virt_wifi0 [ 144.545661][ T7697] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000197: 0000 [#1] PREEMPT SMP KASAN PTI [ 144.558292][ T7697] KASAN: null-ptr-deref in range [0x0000000000000cb8-0x0000000000000cbf] [ 144.566717][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.3.575 Not tainted 6.14.0-rc5-syzkaller-01064-g2525e16a2bae #0 [ 144.577315][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.587469][ T7697] RIP: 0010:bpf_map_offload_map_alloc+0x19a/0x910 [ 144.593903][ T7697] Code: 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 ac e6 3b 00 48 89 5c 24 18 4c 89 2b 49 8d 9d bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 df 06 00 00 0f b6 1b 31 ff 89 de e8 dd [ 144.613507][ T7697] RSP: 0018:ffffc9000408fbc0 EFLAGS: 00010203 [ 144.619574][ T7697] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: ffff888028e2bc00 [ 144.627534][ T7697] RDX: 0000000000000000 RSI: 00000000657c8967 RDI: ffff88805eaf9e40 [ 144.635496][ T7697] RBP: ffffc9000408fcd8 R08: ffffffff903d0b77 R09: 1ffffffff207a16e [ 144.643454][ T7697] R10: dffffc0000000000 R11: fffffbfff207a16f R12: dffffc0000000000 [ 144.651414][ T7697] R13: 0000000000000000 R14: ffff88805eaf9e40 R15: 1ffff92000811f80 [ 144.659383][ T7697] FS: 00007f386e1736c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 144.668298][ T7697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.674867][ T7697] CR2: 00007f386d372c20 CR3: 000000005115a000 CR4: 00000000003526f0 [ 144.682844][ T7697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.690891][ T7697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.699002][ T7697] Call Trace: [ 144.702275][ T7697] [ 144.705194][ T7697] ? __die_body+0x5f/0xb0 [ 144.709525][ T7697] ? die_addr+0xb0/0xe0 [ 144.713759][ T7697] ? exc_general_protection+0x3dd/0x5d0 [ 144.719308][ T7697] ? asm_exc_general_protection+0x26/0x30 [ 144.725027][ T7697] ? bpf_map_offload_map_alloc+0x19a/0x910 [ 144.730824][ T7697] ? __pfx_bpf_map_offload_map_alloc+0x10/0x10 [ 144.736968][ T7697] ? __pfx___might_resched+0x10/0x10 [ 144.742247][ T7697] ? __might_fault+0xaa/0x120 [ 144.746921][ T7697] ? __pfx_lock_release+0x10/0x10 [ 144.751982][ T7697] ? array_map_alloc_check+0x287/0x350 [ 144.757436][ T7697] map_create+0x946/0x11c0 [ 144.761855][ T7697] __sys_bpf+0x6d3/0x820 [ 144.766118][ T7697] ? __pfx___sys_bpf+0x10/0x10 [ 144.770881][ T7697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.776871][ T7697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.783192][ T7697] ? do_syscall_64+0x100/0x230 [ 144.787953][ T7697] __x64_sys_bpf+0x7c/0x90 [ 144.792366][ T7697] do_syscall_64+0xf3/0x230 [ 144.796871][ T7697] ? clear_bhb_loop+0x35/0x90 [ 144.801542][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.807424][ T7697] RIP: 0033:0x7f386d38d169 [ 144.811827][ T7697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.831426][ T7697] RSP: 002b:00007f386e173038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.839833][ T7697] RAX: ffffffffffffffda RBX: 00007f386d5a6080 RCX: 00007f386d38d169 [ 144.847793][ T7697] RDX: 0000000000000031 RSI: 0000400000000080 RDI: 0000000000000000 [ 144.855789][ T7697] RBP: 00007f386d40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.863743][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.871700][ T7697] R13: 0000000000000000 R14: 00007f386d5a6080 R15: 00007ffe1a626b68 [ 144.879755][ T7697] [ 144.882763][ T7697] Modules linked in: [ 144.887476][ T7697] ---[ end trace 0000000000000000 ]--- [ 144.914382][ T7697] RIP: 0010:bpf_map_offload_map_alloc+0x19a/0x910 [ 144.924562][ T7697] Code: 48 89 44 24 30 42 80 3c 20 00 74 08 48 89 df e8 ac e6 3b 00 48 89 5c 24 18 4c 89 2b 49 8d 9d bd 0c 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 df 06 00 00 0f b6 1b 31 ff 89 de e8 dd [ 144.951201][ T7697] RSP: 0018:ffffc9000408fbc0 EFLAGS: 00010203 [ 144.957820][ T7697] RAX: 0000000000000197 RBX: 0000000000000cbd RCX: ffff888028e2bc00 [ 144.966015][ T7697] RDX: 0000000000000000 RSI: 00000000657c8967 RDI: ffff88805eaf9e40 [ 144.974016][ T7697] RBP: ffffc9000408fcd8 R08: ffffffff903d0b77 R09: 1ffffffff207a16e [ 144.982960][ T7697] R10: dffffc0000000000 R11: fffffbfff207a16f R12: dffffc0000000000 [ 144.991039][ T7697] R13: 0000000000000000 R14: ffff88805eaf9e40 R15: 1ffff92000811f80 [ 144.999226][ T7697] FS: 00007f386e1736c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 145.008355][ T7697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.015077][ T7697] CR2: 00007f386e150fb8 CR3: 000000005115a000 CR4: 00000000003526f0 [ 145.023737][ T7697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.031778][ T7697] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.039844][ T7697] Kernel panic - not syncing: Fatal exception [ 145.046291][ T7697] Kernel Offset: disabled [ 145.050627][ T7697] Rebooting in 86400 seconds..