last executing test programs: 2.836620984s ago: executing program 1 (id=1058): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x7a, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "0300"}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x7a, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "0300"}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0xa4a, 0x8, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket(0x2c, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1405, 0x200, 0x70bd2c, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="050b000000060000000003"], 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) (async) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_proto_private(r9, 0x89e0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="130f00000000000000000700000010000280"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 2.730323751s ago: executing program 4 (id=1060): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, &(0x7f0000000200)) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0) close(r0) 2.581816812s ago: executing program 1 (id=1061): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0xfffffdf4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r3, 0x6}, &(0x7f0000000240)=0x8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000340)="7b060267c64999b9a676a4b291b33e153405c60b9d1ba32e89b9c8bead81c0bf1831feba025d77c00a7164954058bb887b14f42e584f668cb0f315e359e96de89beeedc92bfce809c8283caa4ff3499f7dc516e5b034b1fd9f8069bad67c6d7a71233cd4e8c629e3747b176784b2ea68e27d8667cf34abaf4df32b9045cb65b1b5043610faab53541bc36bae554519ee1ff5a9a6bacfe422607976c4641a71bce006a924c36c67", &(0x7f00000004c0)=""/169}, 0x20) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback}}}}}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000025f4d5bc2a1a80d00000700000001440c05"], 0x20}}], 0x1, 0x0) 1.806160419s ago: executing program 4 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003200)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000001}, 0xfffffffb}}}]}, 0x78}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2040094) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8d00000061000000760085ba000062fe000000f8cf62828b0000000000000040"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="9900330080000000080211000001080211000000505050505050"], 0xb8}}, 0x40) 1.671511012s ago: executing program 4 (id=1071): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) sendmmsg$inet(r0, &(0x7f0000004600)=[{{&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="fd5d3164", 0x4}, {0x0}], 0x2}}], 0x1, 0x800) 1.567981169s ago: executing program 1 (id=1072): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x200, 0x400}, 0x10) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="a9625178", 0x34000}], 0x1}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r7, 0x0, 0x0, 0x2, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004095}, 0x10) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x24, r6, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80}]}, 0x24}}, 0x40084) r10 = socket$inet(0x2, 0x3, 0x40) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0xa3e9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5f81}}, 0xd, 0xd78f, 0x96, 0xfff, 0x10, 0x8b}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000440)={r11, 0x4}, 0x8) r12 = socket$igmp6(0xa, 0x3, 0x3a) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r13, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r13, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r13, 0x6, 0x2, &(0x7f0000000080), 0x4) getsockopt$MRT6(r12, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f0000000640)) setsockopt$MRT6_FLUSH(r12, 0x29, 0xd4, &(0x7f0000000480)=0x4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.466672164s ago: executing program 3 (id=1073): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_opts(r2, 0x29, 0x10, 0x0, &(0x7f0000000140)) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x18, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) getsockopt$inet6_opts(r2, 0x29, 0x10, 0x0, &(0x7f0000000140)) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x600, 0x0, 0x18, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) 1.332135452s ago: executing program 4 (id=1075): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000d80)=[{&(0x7f0000000f40)="1a38a8eaf077e9762fb4c277f4fa0d06e08290ef74289fe21baa82f54044195e6a9283190eed2955acda0f8d861ccd6b498ef19188e42a55f109a922819634524773962589d3b0212199acfcf5fb71980b7f8a52e8b1af74e6aba507009c213e7600bd8ef02dd608af29e5ad17eb7e4d806a299333a5e66d01b16488e93527b3b6cc16e2f32843e5ca6fe7a36e6b397e0e1ded2dbf4b6616b4712c286793ef8b85e35ce3e9d9e0d2aed123b2abae9067e98cdeeababd51a617c226b4f4b83187c518e6a100000000000000006c9c1d20de4013fe61a593a308667d09f2ef42cb73337edfce569f2c918a88845d1ebd99d5118b658c01000000f3e604812a93ee23971dd5251669cfabc99f317211a53dbb4df3bd325cbc418862c60d31ef430c8ccb7144d9b41e5753bf2fea900c5736f619b1d03e8b27f642b01be9309956e04a3d46090d930d3d6225d232e4c4d3e800b461a69393996708ea0ce7b34dc1017e1de8a60dc829fb4faba98bace5b5c9ce5dd1c2af472f16008f9203f19be8c51873f8cefb9ddb5cc60de87faaa162a16e57b1bc4c0808fa7e739a4c1ac9a4199d151f65c4bb1885153dcebbc6808e48170f32fd8277ef13f7e5f3ef1fe605961b8f47450e89af645400cd8398fea83a09e04aa194720c5422852bec3cbf2b52a348a675d82d6b93530651ac", 0x1ec}, {&(0x7f0000000a00)="236dea24cec3fc57b1f11726be585323d7baca60a3cf7b8fe9ac79d05fed7ab728c81cb4c7098108888767f5966a8dca6c5eedccb20fe5d7a0bb365d34d16354975dc24611442f23aeaed25f0c7233801630b5401934cf0ca3f3d8e8a6189307c99986dbe236a7fc8b78bb542f414b734b", 0x71}, {&(0x7f0000000a80)="6ff247babf1fbda9af662bf2e20e832a367f563cfbff29d6a979ef7c4f913907a9eab671ecd2c749ea54f2e17c595cf5739bc58815ebb5d2646ae2b8a4784fe668706185c8ec0763fe3f7f3b6cf4beea5d911fa3faf3ff200ca0cd30d78c39738d4d31a5d9c8498e929662a5731d9c5506fb318489736bae438cf29b0122dfd147241e952e021470b617798b8923180a42f035818a19a9edb99bcfc7fd0ca2dc7a09aff3a16f50a393a82754e209bd021f8ef8d5c2633395344d448d410782b23603b3f28bbd09c1bd97d952fc47aec9ac47dfba8d4fe6016466f506a231d356af3852cfea8354ce4cb751e4efc1", 0xee}, {&(0x7f0000000b80)="bbbfacbd6c97a7ad252708f07481302994afddabe04a59055fbd2563fb18a2c3d53f48594abd6f8c212a7af8c78756439f06f34393fe9dbdacccab96873923f720d32c9520953f3ee462f9c1feea4b6a9b3aa8a4bf6daaf6e43ec361d51ca433e63e0f177313a984412337fbe16e4d9ab676d1952a", 0x75}, {&(0x7f0000000300)="0812653c57168c5b3efca58c856dab392eb7a0", 0x13}, {&(0x7f0000000c00)="34d13933b25919c62f0b401c6c4c7305ec0b8b96e0679d5aeb3f2c425639fbfd6a341b4cf9014d5c24d44ed61af9cf9bc66fc5a7139b780a2798b2d9c565a1ebf8807e8494", 0x45}, {&(0x7f0000000c80)="deac76cde56c6cf3555a0a4de3be98ffdb696b859bf2be64796780a53588c856d818738d55a21aab9003c101a912269fda299fba21fa69f14ba958363df695", 0x3f}], 0x7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xc87) 1.296457782s ago: executing program 0 (id=1077): r0 = socket(0x2, 0x3, 0x6) sendto$inet(r0, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000002c40)=0x212, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x11, r2, 0xa8cfb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/152, 0x98}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f0000001440)={@empty, @remote}, &(0x7f0000001480)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x5, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0xe92, '\x00', r4, r5, 0x0, 0x2, 0x5, 0xd, @void, @value, @void, @value}, 0x48) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000140)=0x7, 0x4) socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0xa, &(0x7f0000000540)={&(0x7f00000002c0)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in6=@private1}]}, 0x3c}}, 0x0) 404.724258ms ago: executing program 4 (id=1078): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/17, 0x11}, 0x8}], 0x1, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000000140), 0x0, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x22040000}, 0x20008844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0600150008"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r8) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES8=r4, @ANYBLOB='\x00'/20, @ANYRES64=r7, @ANYRESHEX=r1, @ANYBLOB='\x00'/28, @ANYRESDEC=r9, @ANYRESHEX=r5], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) close(r8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r11}, &(0x7f0000000140), &(0x7f0000000280)=r8}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[], 0x2c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r13, @ANYBLOB], 0x20}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 403.730792ms ago: executing program 2 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x65, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0xd8, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xfffffffc}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x8000}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @loopback}, &(0x7f0000000440)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f00000006c0)={'tunl0\x00', r6, 0x2f00, 0x0, 0xfffffffc, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x80, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast1, {[@lsrr={0x83, 0x7, 0xda, [@private=0xa010101]}, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x7, [{@rand_addr=0x64010102, 0xc4}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x9}, {@broadcast, 0x1}, {@multicast1, 0x1}]}, @ssrr={0x89, 0x13, 0xc2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @loopback]}]}}}}}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}]}, 0x30}}, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r0, 0x2, 0xc85, 0xfffffffffffffffe}) 402.983191ms ago: executing program 0 (id=1080): socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000004380)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x91, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2b) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, 0xffffffffffffffff, 0x2, 0x8, 0x4, @void, @value}, 0x20) pipe(&(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xec, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x70bd29, 0x0, [@sadb_address={0x3, 0x7, 0x33, 0xa0, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x28}, 0x1, 0x7}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 397.498629ms ago: executing program 3 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003200)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000001}, 0xfffffffb}}}]}, 0x78}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2040094) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8d00000061000000760085ba000062fe000000f8cf62828b0000000000000040"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="9900330080000000080211000001080211000000505050505050"], 0xb8}}, 0x40) 394.015752ms ago: executing program 3 (id=1082): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0069ae00000000fcffffff1c00fe"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 393.49282ms ago: executing program 0 (id=1083): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800048003e00180"], 0x2c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 393.152847ms ago: executing program 2 (id=1084): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 390.208005ms ago: executing program 4 (id=1085): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000040)={0x2, 0x8, 0x2}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x81}, &(0x7f00000000c0)=0x8) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000180)=0x3, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 375.878358ms ago: executing program 2 (id=1086): socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180300000214010000000000000000000800010000000000"], 0x18}}, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x14, 0x3}, 0x2) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000580)="240000001e005f03142000000000000000000000010004000400080008750840130000000ee8b980e910f1641623ba570da78a0c0eb15385977b32413c7afa564a771ba8bec2af1c20907bb7e0678ae1b2d5dd94db44b9554111e362d2773778166cdf7d12bd95136041a83e23c7b8aeb9b816730af77a937b", 0x79) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000003cc0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004a00000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000006b18004e6cf6595088f31e25837855e3ca24a22897e185d555214029bab8bc4f9041a8cd155e50405c469d47e580ac7906131f58f814955246b6a9f6d94145b015b2f4b38b59ffa9b8fb656c0e39e29608c958009f5233e33af4ee7d7f47bfbe2dd91317bf4ee70bc52b929c956425304b4abf10efd361a53ca6064056d0823a605cb4d331d4168969c76fb15d73a539d0"], 0x3c}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002b0001000000000000000000040191800c0017"], 0x114}], 0x1, 0x0, 0x0, 0x4c010}, 0x0) 373.799919ms ago: executing program 0 (id=1087): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x101}]}, 0x3c}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x24020400) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x8c, &(0x7f0000000480)}, 0x8) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000140)={0xc, 0x0, {0x5e7, @struct={0x7, 0x9}, 0x0, 0x7fffffffffffffff, 0x5, 0x1, 0xe000000000, 0x7, 0x421, @usage=0x4, 0x61, 0x200, [0x9, 0x100000000, 0x8000000000000000, 0x8, 0x18, 0xffffffffffffffff]}, {0xeb90, @usage=0x80000001, 0x0, 0x79, 0x5e31, 0x9, 0x8, 0x8, 0x404, @usage=0x200, 0x59a, 0x7, [0x1, 0x2, 0x4, 0x0, 0x617bfda7, 0x7]}, {0x1, @usage=0xfffffffffffffff7, 0x0, 0x7ff, 0x6, 0x4, 0x16655cd5, 0x6f29, 0x8, @usage=0x1, 0x6, 0x1, [0x5, 0x1, 0x35, 0x1, 0x9, 0x101]}, {0x1, 0x8, 0xa}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000540)={r2, "6b1e05f4cacb1be22637e20e69ca2f8f"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 372.508317ms ago: executing program 1 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8805}, 0x410) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3e6300bd9293070300b20546cc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x60}}, 0x0) 371.448564ms ago: executing program 2 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) clock_gettime(0x0, 0x0) syz_emit_ethernet(0x6b, &(0x7f0000000100)={@local, @dev, @void, {@generic={0x6558, "e02ca102b4d5f0e6df7fd0ff57e5f2e4b68d63bffdc72732d260f34c6a1e1a0ac79ff0bfb6a8f3f42c1664a709883c0323f8ffb85bb25688d1ff18d2f2e7ec86884391d76119243d073e346c46ff3fe10dd335b62df28f9ce3e4ac47c0"}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140100000001010400000000141a000002000000240001801400018008000100ffffffff08000200e00000010c0002800500010000000000240002801400018008000100e000000208000200ac1e00010c00028005000100000000000800074000000001b0000680080001"], 0x114}}, 0x0) 369.356659ms ago: executing program 3 (id=1090): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x1ffffffffffffeab, &(0x7f0000000240)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', r1, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x62ba, 0x5, 0x6, 0x2, 0x5, 0x3, 0x1000}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x1, 0x10012, r4, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0) 271.251703ms ago: executing program 2 (id=1091): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x80000, 0xdc29) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x6, 0xffffffffffffff68) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x40000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e02, 0x20000, @empty, 0x401}, 0x8) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f00000001c0)=0x1) close(0x3) 270.154262ms ago: executing program 3 (id=1092): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@RTM_DELMDB={0x38, 0x55, 0x211, 0x70bd2a, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0xd}, 0x18367}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000c406007b05161a93198d047f7c8663f493128a4d0f824088a4"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 244.242029ms ago: executing program 0 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003200)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000001}, 0xfffffffb}}}]}, 0x78}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x2040094) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8d00000061000000760085ba000062fe000000f8cf62828b0000000000000040"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="9900330080000000080211000001080211000000505050505050"], 0xb8}}, 0x40) 197.994539ms ago: executing program 1 (id=1094): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000740)=@req3={0x9, 0x2, 0x3, 0x1f, 0x2783, 0x36, 0x14}, 0x1c) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x3ffff, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) recvfrom(r0, &(0x7f0000001480)=""/4096, 0x1000, 0x2041, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="0000000000000000170012800e0001006970366772657461700000002c0002800800040000000000080005000000000006001000000000000500170000000000060011000000000008000500", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=0x0, @ANYRESDEC=r4], 0x7c}}, 0x48005) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f0500000000000000000000000000000000000000000000002e"], 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xffffffffffffff72) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000200)={0x19, &(0x7f0000001480)=[{@none}, {@fixed}]}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="c5c876d700000000240012657461700000140002800800010000000000000000", @ANYRES32=r8, @ANYBLOB="08000600e0000001"], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 48.236663ms ago: executing program 0 (id=1095): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket(0xa, 0x3, 0x4) getsockopt$nfc_llcp(r0, 0x29, 0x4, 0x0, 0x0) 47.686417ms ago: executing program 2 (id=1096): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x28, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r1}]}, 0x28}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) 19.637521ms ago: executing program 1 (id=1097): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) sendfile(r7, r6, &(0x7f00000002c0)=0x1, 0x5) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) readv(r8, &(0x7f00000001c0), 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) socket$inet(0x2, 0x800, 0x5) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r10], 0x48}}, 0x0) 0s ago: executing program 3 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x10c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {0xb4c}, @device_a, @device_b}, 0xf8, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x90, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x82, 0x2, "38d88acfcbb9ade8c88ee0ea559c8428591e7ae1d9f2c620515e8e47fb10f87625b3944ddba320af0c5fbf149ec24ccfc459cb38d3a9288199381c2daae3c3be2b708002b18feb0d34cfa4363b222d2499a2810c79f3d42928e39b5d3ca7c549a949259a2d45ed8dd5194f6ce2cf26197a92626218b36638929c94755dba"}]}], @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x5c, 0x3, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x81}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c1000000101010200000000000000000a000000080008400000025e0600124800030000380002802c00018014000300fe800000f100000000000000000000bb14000400fe8800000000000000000000000000010600034000000000"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): eout [ 61.684062][ T5845] Bluetooth: hci3: command tx timeout [ 61.687856][ T5838] hsr_slave_0: entered promiscuous mode [ 61.696719][ T5838] hsr_slave_1: entered promiscuous mode [ 61.702851][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.710952][ T5838] Cannot create hsr debugfs directory [ 61.719137][ T5837] hsr_slave_0: entered promiscuous mode [ 61.726439][ T5837] hsr_slave_1: entered promiscuous mode [ 61.732450][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.740266][ T5837] Cannot create hsr debugfs directory [ 61.754049][ T5842] Bluetooth: hci4: command tx timeout [ 61.759943][ T5845] Bluetooth: hci2: command tx timeout [ 61.771784][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.778896][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.804833][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.817827][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.824865][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.850877][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.919906][ T5839] hsr_slave_0: entered promiscuous mode [ 61.926518][ T5839] hsr_slave_1: entered promiscuous mode [ 61.932593][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.942037][ T5839] Cannot create hsr debugfs directory [ 62.033061][ T5854] hsr_slave_0: entered promiscuous mode [ 62.039891][ T5854] hsr_slave_1: entered promiscuous mode [ 62.047100][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.054915][ T5854] Cannot create hsr debugfs directory [ 62.278305][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.290907][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.314590][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.341178][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.391252][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.401620][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.421344][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.431455][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.504504][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.519123][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.547384][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.559119][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.605556][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.619065][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.641793][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.652047][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.672676][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.703496][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.735693][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.758527][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.765932][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.775734][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.807874][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.815437][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.841683][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.865727][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.872850][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.896129][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.923281][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.930521][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.959173][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.966362][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.037703][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.147022][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.182613][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.213360][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.220535][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.251523][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.258721][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.298104][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.321123][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.356348][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.363479][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.394350][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.401524][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.424735][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.442123][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.471157][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.478322][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.495238][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.522063][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.529287][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.594194][ T5845] Bluetooth: hci1: command tx timeout [ 63.647278][ T5837] veth0_vlan: entered promiscuous mode [ 63.710735][ T5837] veth1_vlan: entered promiscuous mode [ 63.744650][ T5836] veth0_vlan: entered promiscuous mode [ 63.756917][ T5845] Bluetooth: hci3: command tx timeout [ 63.762425][ T5845] Bluetooth: hci0: command tx timeout [ 63.779148][ T5836] veth1_vlan: entered promiscuous mode [ 63.835319][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.843435][ T5842] Bluetooth: hci2: command tx timeout [ 63.852232][ T5845] Bluetooth: hci4: command tx timeout [ 63.903738][ T5836] veth0_macvtap: entered promiscuous mode [ 63.927442][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.937222][ T5836] veth1_macvtap: entered promiscuous mode [ 63.965411][ T5837] veth0_macvtap: entered promiscuous mode [ 63.992751][ T5838] veth0_vlan: entered promiscuous mode [ 64.014438][ T5837] veth1_macvtap: entered promiscuous mode [ 64.060375][ T5838] veth1_vlan: entered promiscuous mode [ 64.081407][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.118966][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.130190][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.142168][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.156420][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.181501][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.193626][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.207168][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.218531][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.233017][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.243046][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.252083][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.262582][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.277661][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.287182][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.296617][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.305441][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.357688][ T5838] veth0_macvtap: entered promiscuous mode [ 64.388922][ T5838] veth1_macvtap: entered promiscuous mode [ 64.411617][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.426410][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.436615][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.447422][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.460032][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.520982][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.532199][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.542520][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.553126][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.565654][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.597791][ T5839] veth0_vlan: entered promiscuous mode [ 64.608388][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.615039][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.623946][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.638179][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.647258][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.656255][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.670738][ T5854] veth0_vlan: entered promiscuous mode [ 64.688168][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.700103][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.727176][ T5839] veth1_vlan: entered promiscuous mode [ 64.733716][ T5854] veth1_vlan: entered promiscuous mode [ 64.781970][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.793546][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.823846][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.858418][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.865628][ T5854] veth0_macvtap: entered promiscuous mode [ 64.882840][ T5854] veth1_macvtap: entered promiscuous mode [ 64.911187][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.951753][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.963700][ T5839] veth0_macvtap: entered promiscuous mode [ 64.979927][ T5839] veth1_macvtap: entered promiscuous mode [ 64.991167][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.040027][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.070964][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.103735][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.125639][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.145723][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.160153][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.172748][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.190057][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.216785][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.228634][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.241486][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.253459][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.266490][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.277896][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.297721][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.330515][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.340884][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.366705][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.386422][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.403462][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.414957][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.430754][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.446097][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.467538][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.476770][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.485710][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.494526][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.515204][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.516664][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.533722][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.543741][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.554291][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.554302][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.554314][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.581957][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.592163][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.603302][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.616246][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.633302][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.642352][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.651183][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.660013][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.677981][ T5845] Bluetooth: hci1: command tx timeout [ 65.783265][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.820581][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.834541][ T5845] Bluetooth: hci0: command tx timeout [ 65.840009][ T5845] Bluetooth: hci3: command tx timeout [ 65.893057][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 65.914267][ T5842] Bluetooth: hci2: command tx timeout [ 65.920070][ T5845] Bluetooth: hci4: command tx timeout [ 65.941834][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.974969][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.993194][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.106444][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.120906][ T5942] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.229604][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.259472][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.373474][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.379228][ T5952] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 66.416772][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.433174][ T5953] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 66.535438][ T5952] team0: Failed to send options change via netlink (err -105) [ 66.556667][ T5952] team0: Port device netdevsim0 added [ 66.577641][ T11] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 66.635665][ T5953] team0: Failed to send options change via netlink (err -105) [ 66.656281][ T5953] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 66.697401][ T5953] team0: Port device netdevsim0 removed [ 66.748606][ T5953] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.599925][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 67.755635][ T5845] Bluetooth: hci1: command tx timeout [ 67.916424][ T5845] Bluetooth: hci3: command tx timeout [ 67.922324][ T5842] Bluetooth: hci0: command tx timeout [ 67.996553][ T5842] Bluetooth: hci4: command tx timeout [ 68.002116][ T5845] Bluetooth: hci2: command tx timeout [ 68.605285][ T6000] IPv4: Oversized IP packet from 172.20.20.24 [ 68.613646][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 68.621101][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 69.451121][ T6026] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 69.694767][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 69.745448][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 69.953669][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 70.015698][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 70.029721][ T6038] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.28'. [ 70.068899][ T6038] vlan2: entered promiscuous mode [ 70.091349][ T6038] team0: entered promiscuous mode [ 70.100314][ T6038] team_slave_0: entered promiscuous mode [ 70.122232][ T6038] team_slave_1: entered promiscuous mode [ 70.183600][ T6038] team0: Device vlan2 is already an upper device of the team interface [ 70.227071][ T6038] team0: left promiscuous mode [ 70.243155][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 70.262292][ T6038] team_slave_0: left promiscuous mode [ 70.288982][ T6038] team_slave_1: left promiscuous mode [ 70.375219][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.427413][ T6047] geneve2: entered promiscuous mode [ 70.448224][ T6047] geneve2: entered allmulticast mode [ 70.965293][ T6067] Zero length message leads to an empty skb [ 71.364730][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 71.371267][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 71.534691][ T6094] bond0: (slave bond_slave_0): Releasing backup interface [ 71.643264][ T6098] batadv0: entered promiscuous mode [ 71.655979][ T6098] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.685844][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.692708][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.715619][ T6098] batadv0: left promiscuous mode [ 72.047773][ T6114] netlink: 'syz.0.50': attribute type 2 has an invalid length. [ 72.056800][ T6114] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 72.065292][ T6113] lo: entered allmulticast mode [ 72.081273][ T6112] warning: `syz.3.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.094067][ T6114] netlink: 'syz.0.50': attribute type 21 has an invalid length. [ 72.105903][ T6114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.50'. [ 72.124285][ T6108] lo: left allmulticast mode [ 72.271385][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 72.301451][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 72.348978][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 72.585551][ T6128] wg2: entered promiscuous mode [ 72.592953][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 72.614238][ T6128] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 72.752739][ T6136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.914977][ T6134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.967282][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 73.065338][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.62'. [ 73.121445][ T6155] nbd: must specify an index to disconnect [ 73.209590][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 73.437649][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.63'. [ 73.458774][ T6159] nbd: must specify an index to disconnect [ 73.573003][ T6163] tipc: Started in network mode [ 73.578942][ T6163] tipc: Node identity e0000001, cluster identity 4711 [ 73.615661][ T6163] tipc: Enabling of bearer rejected, failed to enable media [ 74.111082][ T6193] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 74.161044][ T6193] netlink: 'syz.0.71': attribute type 2 has an invalid length. [ 74.192161][ T6193] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 74.591121][ T6221] FAULT_INJECTION: forcing a failure. [ 74.591121][ T6221] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.676686][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.1.80 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 74.687255][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 74.697353][ T6221] Call Trace: [ 74.700664][ T6221] [ 74.703622][ T6221] dump_stack_lvl+0x241/0x360 [ 74.708358][ T6221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.713597][ T6221] ? __pfx__printk+0x10/0x10 [ 74.719016][ T6221] ? __pfx_lock_release+0x10/0x10 [ 74.724091][ T6221] should_fail_ex+0x3b0/0x4e0 [ 74.728904][ T6221] _copy_from_user+0x2f/0xc0 [ 74.733543][ T6221] copy_msghdr_from_user+0xae/0x680 [ 74.738792][ T6221] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 74.744657][ T6221] __sys_sendmmsg+0x36d/0x730 [ 74.749377][ T6221] ? __pfx___sys_sendmmsg+0x10/0x10 [ 74.754626][ T6221] ? __pfx_lock_release+0x10/0x10 [ 74.759689][ T6221] ? kstrtouint_from_user+0x128/0x190 [ 74.765126][ T6221] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 74.771074][ T6221] ? ksys_write+0x229/0x2b0 [ 74.775617][ T6221] ? __pfx_lock_release+0x10/0x10 [ 74.780683][ T6221] ? vfs_write+0x730/0xd30 [ 74.785122][ T6221] ? __mutex_unlock_slowpath+0x21d/0x750 [ 74.790775][ T6221] ? __fget_files+0x3f3/0x470 [ 74.795526][ T6221] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.801514][ T6221] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.807851][ T6221] ? do_syscall_64+0x100/0x230 [ 74.812652][ T6221] __x64_sys_sendmmsg+0xa0/0xb0 [ 74.817508][ T6221] do_syscall_64+0xf3/0x230 [ 74.822187][ T6221] ? clear_bhb_loop+0x35/0x90 [ 74.826900][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.832808][ T6221] RIP: 0033:0x7f857597e719 [ 74.837242][ T6221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.856864][ T6221] RSP: 002b:00007f8576700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 74.865288][ T6221] RAX: ffffffffffffffda RBX: 00007f8575b35f80 RCX: 00007f857597e719 [ 74.873260][ T6221] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 74.881252][ T6221] RBP: 00007f8576700090 R08: 0000000000000000 R09: 0000000000000000 [ 74.889263][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.897268][ T6221] R13: 0000000000000000 R14: 00007f8575b35f80 R15: 00007ffdf54f4b28 [ 74.905279][ T6221] [ 75.200437][ T6232] delete_channel: no stack [ 75.245856][ T6232] delete_channel: no stack [ 75.310872][ T6243] xt_l2tp: v2 tid > 0xffff: 150994944 [ 75.490403][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.499183][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.748326][ T6242] x_tables: duplicate underflow at hook 1 [ 76.119282][ T6270] syz_tun: entered promiscuous mode [ 76.164302][ T6270] macsec1: entered promiscuous mode [ 76.172031][ T6270] batman_adv: batadv0: Adding interface: macsec1 [ 76.178570][ T6270] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.269651][ T6270] batman_adv: batadv0: Interface activated: macsec1 [ 76.312665][ T6276] FAULT_INJECTION: forcing a failure. [ 76.312665][ T6276] name failslab, interval 1, probability 0, space 0, times 1 [ 76.353642][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.2.93 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 76.364213][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 76.374300][ T6276] Call Trace: [ 76.377609][ T6276] [ 76.380552][ T6276] dump_stack_lvl+0x241/0x360 [ 76.385360][ T6276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.390589][ T6276] ? __pfx__printk+0x10/0x10 [ 76.395212][ T6276] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 76.401313][ T6276] ? __pfx___might_resched+0x10/0x10 [ 76.406640][ T6276] should_fail_ex+0x3b0/0x4e0 [ 76.411358][ T6276] should_failslab+0xac/0x100 [ 76.416071][ T6276] ? __alloc_skb+0x1c3/0x440 [ 76.420777][ T6276] kmem_cache_alloc_node_noprof+0x71/0x320 [ 76.426623][ T6276] __alloc_skb+0x1c3/0x440 [ 76.431083][ T6276] ? __pfx___alloc_skb+0x10/0x10 [ 76.436054][ T6276] ? netlink_autobind+0xd6/0x2f0 [ 76.441021][ T6276] ? netlink_autobind+0x2b0/0x2f0 [ 76.446083][ T6276] netlink_sendmsg+0x638/0xcb0 [ 76.450907][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.456230][ T6276] ? aa_sock_msg_perm+0x91/0x160 [ 76.461204][ T6276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.466523][ T6276] __sock_sendmsg+0x221/0x270 [ 76.471502][ T6276] ____sys_sendmsg+0x52a/0x7e0 [ 76.476317][ T6276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.481658][ T6276] __sys_sendmmsg+0x3ab/0x730 [ 76.486393][ T6276] ? __pfx___sys_sendmmsg+0x10/0x10 [ 76.491635][ T6276] ? __pfx_lock_release+0x10/0x10 [ 76.496686][ T6276] ? kstrtouint_from_user+0x128/0x190 [ 76.502109][ T6276] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 76.508033][ T6276] ? ksys_write+0x229/0x2b0 [ 76.512564][ T6276] ? __pfx_lock_release+0x10/0x10 [ 76.517629][ T6276] ? vfs_write+0x730/0xd30 [ 76.522077][ T6276] ? __mutex_unlock_slowpath+0x21d/0x750 [ 76.527752][ T6276] ? __fget_files+0x3f3/0x470 [ 76.532479][ T6276] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.538499][ T6276] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.544867][ T6276] ? do_syscall_64+0x100/0x230 [ 76.549676][ T6276] __x64_sys_sendmmsg+0xa0/0xb0 [ 76.554569][ T6276] do_syscall_64+0xf3/0x230 [ 76.559103][ T6276] ? clear_bhb_loop+0x35/0x90 [ 76.563813][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.569737][ T6276] RIP: 0033:0x7f363777e719 [ 76.574185][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.593907][ T6276] RSP: 002b:00007f36384c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.602360][ T6276] RAX: ffffffffffffffda RBX: 00007f3637936058 RCX: 00007f363777e719 [ 76.610364][ T6276] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 76.618373][ T6276] RBP: 00007f36384c0090 R08: 0000000000000000 R09: 0000000000000000 [ 76.626381][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.634382][ T6276] R13: 0000000000000000 R14: 00007f3637936058 R15: 00007ffcf75043f8 [ 76.642398][ T6276] [ 76.808196][ T972] cfg80211: failed to load regulatory.db [ 77.207175][ T6295] hsr0: entered promiscuous mode [ 77.223400][ T6295] vlan2: entered promiscuous mode [ 77.292936][ T6300] __nla_validate_parse: 4 callbacks suppressed [ 77.292956][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 77.356986][ T6306] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:64 [ 77.369739][ T6309] netlink: zone id is out of range [ 77.376040][ T6309] netlink: zone id is out of range [ 77.381354][ T6309] netlink: zone id is out of range [ 77.414298][ T6309] netlink: zone id is out of range [ 77.447534][ T6309] netlink: del zone limit has 4 unknown bytes [ 77.555559][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 77.851825][ T6325] xt_nfacct: accounting object `syz1' does not exists [ 78.215206][ T6343] netlink: 'syz.4.111': attribute type 4 has an invalid length. [ 79.246799][ T6387] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 79.388020][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 79.688937][ T6404] syzkaller1: entered promiscuous mode [ 79.704257][ T6404] syzkaller1: entered allmulticast mode [ 79.726072][ T6404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.925470][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 79.936027][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 79.964850][ T6410] tc_dump_action: action bad kind [ 80.240477][ T6420] FAULT_INJECTION: forcing a failure. [ 80.240477][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 80.258895][ T6421] syz.4.134[6421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.258991][ T6421] syz.4.134[6421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.291804][ T6421] syz.4.134[6421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.301120][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.0.133 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 80.324831][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 80.325660][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 80.334885][ T6420] Call Trace: [ 80.334898][ T6420] [ 80.334906][ T6420] dump_stack_lvl+0x241/0x360 [ 80.334942][ T6420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.334963][ T6420] ? __pfx__printk+0x10/0x10 [ 80.364445][ T6420] ? ref_tracker_alloc+0x332/0x490 [ 80.367783][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.134'. [ 80.369570][ T6420] should_fail_ex+0x3b0/0x4e0 [ 80.369599][ T6420] ? skb_clone+0x20c/0x390 [ 80.369617][ T6420] should_failslab+0xac/0x100 [ 80.392420][ T6420] ? skb_clone+0x20c/0x390 [ 80.396873][ T6420] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 80.402294][ T6420] skb_clone+0x20c/0x390 [ 80.406589][ T6420] __netlink_deliver_tap+0x3cc/0x7f0 [ 80.411921][ T6420] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.417154][ T6420] netlink_deliver_tap+0x19d/0x1b0 [ 80.422302][ T6420] netlink_unicast+0x7c4/0x990 [ 80.427101][ T6420] ? __pfx_netlink_unicast+0x10/0x10 [ 80.432413][ T6420] ? __virt_addr_valid+0x183/0x530 [ 80.437554][ T6420] ? __check_object_size+0x48e/0x900 [ 80.442870][ T6420] netlink_sendmsg+0x8e4/0xcb0 [ 80.447658][ T6420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.452961][ T6420] ? aa_sock_msg_perm+0x91/0x160 [ 80.457935][ T6420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.463683][ T6420] __sock_sendmsg+0x221/0x270 [ 80.468389][ T6420] ____sys_sendmsg+0x52a/0x7e0 [ 80.473223][ T6420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.478529][ T6420] __sys_sendmmsg+0x3ab/0x730 [ 80.483224][ T6420] ? __pfx___sys_sendmmsg+0x10/0x10 [ 80.488432][ T6420] ? __pfx_lock_release+0x10/0x10 [ 80.493540][ T6420] ? kstrtouint_from_user+0x128/0x190 [ 80.499196][ T6420] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 80.505090][ T6420] ? ksys_write+0x229/0x2b0 [ 80.509594][ T6420] ? __pfx_lock_release+0x10/0x10 [ 80.514622][ T6420] ? vfs_write+0x730/0xd30 [ 80.519037][ T6420] ? __mutex_unlock_slowpath+0x21d/0x750 [ 80.524672][ T6420] ? __fget_files+0x3f3/0x470 [ 80.529352][ T6420] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.535334][ T6420] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.541661][ T6420] ? do_syscall_64+0x100/0x230 [ 80.546427][ T6420] __x64_sys_sendmmsg+0xa0/0xb0 [ 80.551283][ T6420] do_syscall_64+0xf3/0x230 [ 80.555788][ T6420] ? clear_bhb_loop+0x35/0x90 [ 80.560470][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.566363][ T6420] RIP: 0033:0x7fec9dd7e719 [ 80.570777][ T6420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.590393][ T6420] RSP: 002b:00007fec9eb0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 80.598814][ T6420] RAX: ffffffffffffffda RBX: 00007fec9df35f80 RCX: 00007fec9dd7e719 [ 80.606794][ T6420] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 80.614783][ T6420] RBP: 00007fec9eb0b090 R08: 0000000000000000 R09: 0000000000000000 [ 80.622749][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.630714][ T6420] R13: 0000000000000000 R14: 00007fec9df35f80 R15: 00007ffdf4a1ea08 [ 80.638695][ T6420] [ 80.764355][ T6432] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 80.781269][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 80.985219][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 81.092815][ T6452] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.141357][ T6452] Cannot find set identified by id 0 to match [ 81.336085][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 81.346302][ T6459] netlink: 'syz.4.146': attribute type 1 has an invalid length. [ 82.111707][ T6474] trusted_key: syz.1.151 sent an empty control message without MSG_MORE. [ 82.123301][ T6477] FAULT_INJECTION: forcing a failure. [ 82.123301][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 82.141031][ T6477] CPU: 1 UID: 0 PID: 6477 Comm: syz.2.150 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 82.151657][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 82.161724][ T6477] Call Trace: [ 82.165003][ T6477] [ 82.167936][ T6477] dump_stack_lvl+0x241/0x360 [ 82.172615][ T6477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.177807][ T6477] ? __pfx__printk+0x10/0x10 [ 82.182394][ T6477] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 82.188378][ T6477] ? __pfx___might_resched+0x10/0x10 [ 82.193672][ T6477] should_fail_ex+0x3b0/0x4e0 [ 82.198353][ T6477] should_failslab+0xac/0x100 [ 82.203128][ T6477] ? __alloc_skb+0x1c3/0x440 [ 82.207722][ T6477] kmem_cache_alloc_node_noprof+0x71/0x320 [ 82.213534][ T6477] __alloc_skb+0x1c3/0x440 [ 82.217956][ T6477] ? __pfx___alloc_skb+0x10/0x10 [ 82.222896][ T6477] ? netlink_ack_tlv_len+0x6e/0x200 [ 82.228094][ T6477] netlink_ack+0x13f/0xa30 [ 82.232505][ T6477] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.237975][ T6477] netlink_rcv_skb+0x262/0x430 [ 82.242743][ T6477] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.248209][ T6477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.253516][ T6477] ? netlink_deliver_tap+0x2e/0x1b0 [ 82.258714][ T6477] netlink_unicast+0x7f6/0x990 [ 82.263480][ T6477] ? __pfx_netlink_unicast+0x10/0x10 [ 82.268766][ T6477] ? __virt_addr_valid+0x183/0x530 [ 82.273875][ T6477] ? __check_object_size+0x48e/0x900 [ 82.279165][ T6477] netlink_sendmsg+0x8e4/0xcb0 [ 82.283943][ T6477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.289320][ T6477] ? aa_sock_msg_perm+0x91/0x160 [ 82.294256][ T6477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.299538][ T6477] __sock_sendmsg+0x221/0x270 [ 82.304226][ T6477] ____sys_sendmsg+0x52a/0x7e0 [ 82.309016][ T6477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.314312][ T6477] __sys_sendmmsg+0x3ab/0x730 [ 82.318995][ T6477] ? __pfx___sys_sendmmsg+0x10/0x10 [ 82.324211][ T6477] ? __pfx_lock_release+0x10/0x10 [ 82.329240][ T6477] ? kstrtouint_from_user+0x128/0x190 [ 82.334626][ T6477] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 82.340522][ T6477] ? ksys_write+0x229/0x2b0 [ 82.345022][ T6477] ? __pfx_lock_release+0x10/0x10 [ 82.350049][ T6477] ? vfs_write+0x730/0xd30 [ 82.354463][ T6477] ? __mutex_unlock_slowpath+0x21d/0x750 [ 82.360096][ T6477] ? __fget_files+0x3f3/0x470 [ 82.364803][ T6477] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.370785][ T6477] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.377109][ T6477] ? do_syscall_64+0x100/0x230 [ 82.381873][ T6477] __x64_sys_sendmmsg+0xa0/0xb0 [ 82.386723][ T6477] do_syscall_64+0xf3/0x230 [ 82.391221][ T6477] ? clear_bhb_loop+0x35/0x90 [ 82.395897][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.401784][ T6477] RIP: 0033:0x7f363777e719 [ 82.406234][ T6477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.425849][ T6477] RSP: 002b:00007f36384c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.434285][ T6477] RAX: ffffffffffffffda RBX: 00007f3637936058 RCX: 00007f363777e719 [ 82.442264][ T6477] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 82.450262][ T6477] RBP: 00007f36384c0090 R08: 0000000000000000 R09: 0000000000000000 [ 82.458242][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.466220][ T6477] R13: 0000000000000000 R14: 00007f3637936058 R15: 00007ffcf75043f8 [ 82.474207][ T6477] [ 82.532468][ T6480] netlink: 'syz.3.152': attribute type 11 has an invalid length. [ 83.014290][ T6500] bridge0: entered allmulticast mode [ 83.031334][ T6500] pim6reg: entered allmulticast mode [ 83.191206][ T6502] __nla_validate_parse: 1 callbacks suppressed [ 83.191226][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 84.069187][ T6512] lo speed is unknown, defaulting to 1000 [ 84.145513][ T6512] lo speed is unknown, defaulting to 1000 [ 84.187342][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'. [ 84.209901][ T6540] nbd: must specify an index to disconnect [ 84.234441][ T6512] lo speed is unknown, defaulting to 1000 [ 84.246191][ T6512] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.263096][ T6512] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.444169][ T25] IPVS: starting estimator thread 0... [ 84.470183][ T6512] lo speed is unknown, defaulting to 1000 [ 84.544678][ T6552] IPVS: using max 20 ests per chain, 48000 per kthread [ 84.613838][ T6518] syz.2.163 (6518) used obsolete PPPIOCDETACH ioctl [ 84.647187][ T6512] lo speed is unknown, defaulting to 1000 [ 84.695405][ T6560] FAULT_INJECTION: forcing a failure. [ 84.695405][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 84.720181][ T6512] lo speed is unknown, defaulting to 1000 [ 84.744177][ T6560] CPU: 1 UID: 0 PID: 6560 Comm: syz.1.177 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 84.754825][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 84.764888][ T6560] Call Trace: [ 84.768166][ T6560] [ 84.771096][ T6560] dump_stack_lvl+0x241/0x360 [ 84.775778][ T6560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.780976][ T6560] ? __pfx__printk+0x10/0x10 [ 84.785572][ T6560] ? ref_tracker_alloc+0x332/0x490 [ 84.790687][ T6560] should_fail_ex+0x3b0/0x4e0 [ 84.795367][ T6560] ? skb_clone+0x20c/0x390 [ 84.799779][ T6560] should_failslab+0xac/0x100 [ 84.804461][ T6560] ? skb_clone+0x20c/0x390 [ 84.808904][ T6560] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 84.814284][ T6560] skb_clone+0x20c/0x390 [ 84.818524][ T6560] __netlink_deliver_tap+0x3cc/0x7f0 [ 84.823824][ T6560] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.829020][ T6560] netlink_deliver_tap+0x19d/0x1b0 [ 84.834215][ T6560] netlink_sendskb+0x68/0x140 [ 84.838914][ T6560] netlink_unicast+0x39d/0x990 [ 84.843674][ T6560] ? __asan_memcpy+0x40/0x70 [ 84.848286][ T6560] ? __pfx_netlink_unicast+0x10/0x10 [ 84.853577][ T6560] netlink_rcv_skb+0x262/0x430 [ 84.858339][ T6560] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.863829][ T6560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.869137][ T6560] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.874342][ T6560] netlink_unicast+0x7f6/0x990 [ 84.879109][ T6560] ? __pfx_netlink_unicast+0x10/0x10 [ 84.884388][ T6560] ? __virt_addr_valid+0x183/0x530 [ 84.889498][ T6560] ? __check_object_size+0x48e/0x900 [ 84.894824][ T6560] netlink_sendmsg+0x8e4/0xcb0 [ 84.899600][ T6560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.904885][ T6560] ? aa_sock_msg_perm+0x91/0x160 [ 84.909830][ T6560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.915113][ T6560] __sock_sendmsg+0x221/0x270 [ 84.919789][ T6560] ____sys_sendmsg+0x52a/0x7e0 [ 84.924564][ T6560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.929966][ T6560] __sys_sendmmsg+0x3ab/0x730 [ 84.934670][ T6560] ? __pfx___sys_sendmmsg+0x10/0x10 [ 84.939921][ T6560] ? __pfx_lock_release+0x10/0x10 [ 84.944961][ T6560] ? kstrtouint_from_user+0x128/0x190 [ 84.950355][ T6560] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 84.956252][ T6560] ? ksys_write+0x229/0x2b0 [ 84.960781][ T6560] ? __pfx_lock_release+0x10/0x10 [ 84.965833][ T6560] ? vfs_write+0x730/0xd30 [ 84.970256][ T6560] ? __mutex_unlock_slowpath+0x21d/0x750 [ 84.975898][ T6560] ? __fget_files+0x3f3/0x470 [ 84.980600][ T6560] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.986591][ T6560] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.992922][ T6560] ? do_syscall_64+0x100/0x230 [ 84.997776][ T6560] __x64_sys_sendmmsg+0xa0/0xb0 [ 85.002650][ T6560] do_syscall_64+0xf3/0x230 [ 85.007153][ T6560] ? clear_bhb_loop+0x35/0x90 [ 85.011833][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.017724][ T6560] RIP: 0033:0x7f857597e719 [ 85.022137][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.041738][ T6560] RSP: 002b:00007f8576700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 85.050152][ T6560] RAX: ffffffffffffffda RBX: 00007f8575b35f80 RCX: 00007f857597e719 [ 85.058379][ T6560] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 85.066355][ T6560] RBP: 00007f8576700090 R08: 0000000000000000 R09: 0000000000000000 [ 85.074326][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.082296][ T6560] R13: 0000000000000000 R14: 00007f8575b35f80 R15: 00007ffdf54f4b28 [ 85.090276][ T6560] [ 85.284900][ T6512] lo speed is unknown, defaulting to 1000 [ 85.291691][ T6512] lo speed is unknown, defaulting to 1000 [ 85.298729][ T6512] lo speed is unknown, defaulting to 1000 [ 85.769192][ T6582] tipc: Started in network mode [ 85.781903][ T6582] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 85.832798][ T6582] tipc: Enabling of bearer rejected, failed to enable media [ 85.866311][ T6582] netlink: 248 bytes leftover after parsing attributes in process `syz.2.183'. [ 85.884231][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 85.916269][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 85.965478][ T6588] nbd: must specify an index to disconnect [ 86.070885][ T6590] IPv6: addrconf: prefix option has invalid lifetime [ 86.108118][ T6594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.189'. [ 86.130695][ T6594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.738957][ T6624] bridge_slave_0: left allmulticast mode [ 86.759132][ T6624] bridge_slave_0: left promiscuous mode [ 86.764707][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'. [ 86.786889][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.833265][ T6632] nbd: must specify an index to disconnect [ 86.850853][ T6624] bridge_slave_1: left allmulticast mode [ 86.860084][ T6624] bridge_slave_1: left promiscuous mode [ 86.863489][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.198'. [ 86.867261][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.889805][ T6624] bond0: (slave bond_slave_0): Releasing backup interface [ 86.906448][ T6624] bond0: (slave bond_slave_1): Releasing backup interface [ 86.952830][ T6624] team0: Port device team_slave_0 removed [ 86.972653][ T6624] team0: Port device team_slave_1 removed [ 86.980466][ T6624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.005002][ T6624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.025042][ T6624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.032498][ T6624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.190511][ T6630] team0: Port device wg2 added [ 87.416110][ T6636] lo speed is unknown, defaulting to 1000 [ 87.441450][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 87.459753][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.203'. [ 87.556263][ T6650] Bluetooth: MGMT ver 1.23 [ 87.604161][ T6649] syz.1.205 uses obsolete (PF_INET,SOCK_PACKET) [ 87.925611][ T6665] netlink: 'syz.4.206': attribute type 10 has an invalid length. [ 87.972328][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.997378][ T6665] team0: Port device batadv0 added [ 88.197679][ T6676] netlink: 'syz.1.209': attribute type 3 has an invalid length. [ 88.235355][ T6675] lo speed is unknown, defaulting to 1000 [ 88.242381][ T6676] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.209'. [ 88.531309][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 88.656195][ T6696] ip6t_REJECT: ECHOREPLY is not supported [ 88.836383][ T6702] netlink: 'syz.1.216': attribute type 1 has an invalid length. [ 88.909511][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 88.935918][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 88.946968][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 88.980337][ T6702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.073663][ T6713] bond3: (slave bridge1): making interface the new active one [ 89.098428][ T6713] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 89.127628][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 89.478648][ T6732] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 89.486879][ T6732] netlink: 'syz.2.226': attribute type 2 has an invalid length. [ 89.494727][ T6730] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 89.503866][ T6730] netlink: 'syz.2.226': attribute type 2 has an invalid length. [ 89.548621][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 89.654587][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 90.218565][ T6777] netlink: 112 bytes leftover after parsing attributes in process `syz.1.239'. [ 90.739954][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 92.190071][ T6798] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 92.548466][ T6820] sctp: [Deprecated]: syz.1.252 (pid 6820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.548466][ T6820] Use struct sctp_sack_info instead [ 92.549835][ T6823] vlan2: entered promiscuous mode [ 92.570777][ T6823] ip6gretap0: entered promiscuous mode [ 92.644444][ T6823] ip6gretap0: left promiscuous mode [ 93.254228][ T6850] lo speed is unknown, defaulting to 1000 [ 93.312876][ T6843] __nla_validate_parse: 3 callbacks suppressed [ 93.312888][ T6843] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.259'. [ 93.848611][ T6864] netlink: 'syz.1.265': attribute type 4 has an invalid length. [ 94.164776][ T6880] sctp: [Deprecated]: syz.4.270 (pid 6880) Use of int in maxseg socket option. [ 94.164776][ T6880] Use struct sctp_assoc_value instead [ 94.580163][ T6886] lo speed is unknown, defaulting to 1000 [ 94.610741][ T6900] lo speed is unknown, defaulting to 1000 [ 94.617771][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 94.688561][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 94.728828][ T6904] netlink: 'syz.4.275': attribute type 3 has an invalid length. [ 95.206098][ T6886] tipc: Failed to obtain node identity [ 95.211789][ T6886] tipc: Enabling of bearer rejected, failed to enable media [ 95.830705][ T6941] Bluetooth: MGMT ver 1.23 [ 96.113685][ T6953] tipc: Started in network mode [ 96.130809][ T6953] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 96.182688][ T6953] tipc: Enabled bearer , priority 10 [ 96.296770][ T6949] lo speed is unknown, defaulting to 1000 [ 96.354391][ T6969] netlink: 'syz.1.298': attribute type 1 has an invalid length. [ 96.407257][ T6969] netlink: 56 bytes leftover after parsing attributes in process `syz.1.298'. [ 96.520221][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 96.553855][ T6978] netlink: 616 bytes leftover after parsing attributes in process `syz.0.300'. [ 96.584960][ T6977] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 96.775654][ T6984] FAULT_INJECTION: forcing a failure. [ 96.775654][ T6984] name failslab, interval 1, probability 0, space 0, times 0 [ 96.817169][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.0.304 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 96.827824][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 96.837908][ T6984] Call Trace: [ 96.841216][ T6984] [ 96.844171][ T6984] dump_stack_lvl+0x241/0x360 [ 96.848884][ T6984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.854112][ T6984] ? __pfx__printk+0x10/0x10 [ 96.858727][ T6984] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 96.864737][ T6984] ? __pfx___might_resched+0x10/0x10 [ 96.870057][ T6984] should_fail_ex+0x3b0/0x4e0 [ 96.874764][ T6984] should_failslab+0xac/0x100 [ 96.879475][ T6984] ? __alloc_skb+0x1c3/0x440 [ 96.884084][ T6984] kmem_cache_alloc_node_noprof+0x71/0x320 [ 96.889915][ T6984] __alloc_skb+0x1c3/0x440 [ 96.894375][ T6984] ? __pfx___alloc_skb+0x10/0x10 [ 96.899363][ T6984] ? netlink_autobind+0xd6/0x2f0 [ 96.904334][ T6984] ? netlink_autobind+0x2b0/0x2f0 [ 96.909412][ T6984] netlink_sendmsg+0x638/0xcb0 [ 96.914226][ T6984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.919560][ T6984] ? aa_sock_msg_perm+0x91/0x160 [ 96.924542][ T6984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.929870][ T6984] __sock_sendmsg+0x221/0x270 [ 96.934586][ T6984] ____sys_sendmsg+0x52a/0x7e0 [ 96.939390][ T6984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.944722][ T6984] __sys_sendmsg+0x292/0x380 [ 96.949523][ T6984] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.954684][ T6984] ? __pfx_vfs_write+0x10/0x10 [ 96.959509][ T6984] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.965881][ T6984] ? do_syscall_64+0x100/0x230 [ 96.970766][ T6984] ? do_syscall_64+0xb6/0x230 [ 96.974359][ T6992] lo speed is unknown, defaulting to 1000 [ 96.975454][ T6984] do_syscall_64+0xf3/0x230 [ 96.985698][ T6984] ? clear_bhb_loop+0x35/0x90 [ 96.990412][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.996353][ T6984] RIP: 0033:0x7fec9dd7e719 [ 97.000797][ T6984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.020429][ T6984] RSP: 002b:00007fec9eb0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.028881][ T6984] RAX: ffffffffffffffda RBX: 00007fec9df35f80 RCX: 00007fec9dd7e719 [ 97.036884][ T6984] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 97.044880][ T6984] RBP: 00007fec9eb0b090 R08: 0000000000000000 R09: 0000000000000000 [ 97.052876][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.060873][ T6984] R13: 0000000000000000 R14: 00007fec9df35f80 R15: 00007ffdf4a1ea08 [ 97.068889][ T6984] [ 97.204765][ T9] tipc: Node number set to 15444650 [ 97.647629][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'. [ 97.952795][ T7023] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 97.985573][ T7026] netlink: 5 bytes leftover after parsing attributes in process `syz.2.314'. [ 98.218086][ T7044] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 98.512053][ T7053] lo speed is unknown, defaulting to 1000 [ 98.802196][ T7070] tipc: Started in network mode [ 98.814457][ T7070] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 98.844556][ T7070] tipc: Enabling of bearer rejected, failed to enable media [ 99.029847][ T7075] vlan1: entered promiscuous mode [ 99.156750][ T7074] vlan1: left promiscuous mode [ 99.326795][ T7095] Driver unsupported XDP return value 0 on prog (id 286) dev N/A, expect packet loss! [ 99.678728][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 99.722179][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 99.975484][ T7130] netlink: 'syz.4.346': attribute type 12 has an invalid length. [ 100.002501][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 100.011569][ T7130] netlink: 36 bytes leftover after parsing attributes in process `syz.4.346'. [ 100.050809][ T7130] vlan2: entered allmulticast mode [ 100.060451][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'. [ 100.117819][ T7134] nbd: must specify an index to disconnect [ 100.642402][ T7155] lo speed is unknown, defaulting to 1000 [ 100.864465][ T7173] netlink: 'syz.2.359': attribute type 11 has an invalid length. [ 101.134508][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.362'. [ 101.152282][ T7180] nbd: must specify an index to disconnect [ 101.407974][ T7187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.365'. [ 101.670605][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.371'. [ 101.702612][ T7203] FAULT_INJECTION: forcing a failure. [ 101.702612][ T7203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.729285][ T7203] CPU: 1 UID: 0 PID: 7203 Comm: syz.3.372 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 101.739937][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 101.750018][ T7203] Call Trace: [ 101.753317][ T7203] [ 101.756272][ T7203] dump_stack_lvl+0x241/0x360 [ 101.760982][ T7203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.766311][ T7203] ? __pfx__printk+0x10/0x10 [ 101.770930][ T7203] ? __pfx_lock_release+0x10/0x10 [ 101.775996][ T7203] should_fail_ex+0x3b0/0x4e0 [ 101.780702][ T7203] _copy_from_iter+0x21f/0x1e70 [ 101.785587][ T7203] ? __virt_addr_valid+0x183/0x530 [ 101.790728][ T7203] ? __pfx_lock_release+0x10/0x10 [ 101.795790][ T7203] ? __alloc_skb+0x28f/0x440 [ 101.800413][ T7203] ? __pfx__copy_from_iter+0x10/0x10 [ 101.805727][ T7203] ? __virt_addr_valid+0x183/0x530 [ 101.810841][ T7203] ? __virt_addr_valid+0x183/0x530 [ 101.815950][ T7203] ? __virt_addr_valid+0x45f/0x530 [ 101.821069][ T7203] ? __check_object_size+0x48e/0x900 [ 101.826360][ T7203] netlink_sendmsg+0x73d/0xcb0 [ 101.831138][ T7203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.836425][ T7203] ? aa_sock_msg_perm+0x91/0x160 [ 101.841365][ T7203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.846652][ T7203] __sock_sendmsg+0x221/0x270 [ 101.851360][ T7203] ____sys_sendmsg+0x52a/0x7e0 [ 101.856130][ T7203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.861429][ T7203] __sys_sendmsg+0x292/0x380 [ 101.866027][ T7203] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.871152][ T7203] ? __pfx_vfs_write+0x10/0x10 [ 101.875927][ T7203] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.882257][ T7203] ? do_syscall_64+0x100/0x230 [ 101.887022][ T7203] ? do_syscall_64+0xb6/0x230 [ 101.891733][ T7203] do_syscall_64+0xf3/0x230 [ 101.896234][ T7203] ? clear_bhb_loop+0x35/0x90 [ 101.900912][ T7203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.906802][ T7203] RIP: 0033:0x7f32fe37e719 [ 101.911216][ T7203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.930822][ T7203] RSP: 002b:00007f32ff091038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.939235][ T7203] RAX: ffffffffffffffda RBX: 00007f32fe535f80 RCX: 00007f32fe37e719 [ 101.947204][ T7203] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 101.955174][ T7203] RBP: 00007f32ff091090 R08: 0000000000000000 R09: 0000000000000000 [ 101.963141][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.971113][ T7203] R13: 0000000000000000 R14: 00007f32fe535f80 R15: 00007ffc9e28f238 [ 101.979100][ T7203] [ 102.078777][ T7211] netlink: 'syz.4.377': attribute type 10 has an invalid length. [ 102.106915][ T7211] bond0: (slave bond_slave_0): Releasing backup interface [ 102.137176][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.374'. [ 102.188802][ T7207] nbd: must specify an index to disconnect [ 102.242721][ T7214] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.252384][ T7214] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.261347][ T7214] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.270513][ T7214] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.316739][ T7214] vxlan0: entered promiscuous mode [ 102.322122][ T7214] vxlan0: entered allmulticast mode [ 102.348801][ T7214] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.358052][ T7214] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.367080][ T7214] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.376609][ T7214] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.510896][ T7222] lo speed is unknown, defaulting to 1000 [ 102.734722][ T7234] team0: Master is either lo or non-ether device [ 102.821433][ T7239] FAULT_INJECTION: forcing a failure. [ 102.821433][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 102.903693][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.1.386 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 102.914359][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 102.924445][ T7239] Call Trace: [ 102.927743][ T7239] [ 102.930692][ T7239] dump_stack_lvl+0x241/0x360 [ 102.935399][ T7239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.940621][ T7239] ? __pfx__printk+0x10/0x10 [ 102.945240][ T7239] ? ref_tracker_alloc+0x332/0x490 [ 102.950378][ T7239] should_fail_ex+0x3b0/0x4e0 [ 102.955088][ T7239] ? skb_clone+0x20c/0x390 [ 102.959531][ T7239] should_failslab+0xac/0x100 [ 102.964244][ T7239] ? skb_clone+0x20c/0x390 [ 102.968679][ T7239] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 102.974089][ T7239] skb_clone+0x20c/0x390 [ 102.978373][ T7239] __netlink_deliver_tap+0x3cc/0x7f0 [ 102.983713][ T7239] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.989015][ T7239] netlink_deliver_tap+0x19d/0x1b0 [ 102.994180][ T7239] netlink_unicast+0x7c4/0x990 [ 102.999000][ T7239] ? __pfx_netlink_unicast+0x10/0x10 [ 103.004333][ T7239] ? __virt_addr_valid+0x183/0x530 [ 103.009474][ T7239] ? __check_object_size+0x48e/0x900 [ 103.014798][ T7239] netlink_sendmsg+0x8e4/0xcb0 [ 103.019698][ T7239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.025030][ T7239] ? aa_sock_msg_perm+0x91/0x160 [ 103.030095][ T7239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.035414][ T7239] __sock_sendmsg+0x221/0x270 [ 103.040124][ T7239] ____sys_sendmsg+0x52a/0x7e0 [ 103.044941][ T7239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.050280][ T7239] __sys_sendmsg+0x292/0x380 [ 103.054940][ T7239] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.060101][ T7239] ? __pfx_vfs_write+0x10/0x10 [ 103.064929][ T7239] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.071300][ T7239] ? do_syscall_64+0x100/0x230 [ 103.076102][ T7239] ? do_syscall_64+0xb6/0x230 [ 103.080790][ T7239] do_syscall_64+0xf3/0x230 [ 103.085301][ T7239] ? clear_bhb_loop+0x35/0x90 [ 103.089987][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.095899][ T7239] RIP: 0033:0x7f857597e719 [ 103.100322][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.119943][ T7239] RSP: 002b:00007f8576700038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.128360][ T7239] RAX: ffffffffffffffda RBX: 00007f8575b35f80 RCX: 00007f857597e719 [ 103.136334][ T7239] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 103.144302][ T7239] RBP: 00007f8576700090 R08: 0000000000000000 R09: 0000000000000000 [ 103.152269][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.160239][ T7239] R13: 0000000000000000 R14: 00007f8575b35f80 R15: 00007ffdf54f4b28 [ 103.168230][ T7239] [ 103.282241][ T7248] pim6reg1: entered promiscuous mode [ 103.339982][ T7248] pim6reg1: entered allmulticast mode [ 103.377560][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.391'. [ 103.473218][ T7255] nbd: must specify an index to disconnect [ 103.713793][ T7268] netlink: 'syz.4.395': attribute type 32 has an invalid length. [ 103.742952][ T7268] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 103.903111][ T7276] netlink: 'syz.4.400': attribute type 6 has an invalid length. [ 103.970532][ T7280] FAULT_INJECTION: forcing a failure. [ 103.970532][ T7280] name failslab, interval 1, probability 0, space 0, times 0 [ 104.043860][ T7280] CPU: 1 UID: 0 PID: 7280 Comm: syz.2.402 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 104.054522][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 104.064614][ T7280] Call Trace: [ 104.068043][ T7280] [ 104.071007][ T7280] dump_stack_lvl+0x241/0x360 [ 104.075732][ T7280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.080960][ T7280] ? __pfx__printk+0x10/0x10 [ 104.085582][ T7280] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 104.091595][ T7280] ? __pfx___might_resched+0x10/0x10 [ 104.096921][ T7280] should_fail_ex+0x3b0/0x4e0 [ 104.101642][ T7280] should_failslab+0xac/0x100 [ 104.106359][ T7280] ? __alloc_skb+0x1c3/0x440 [ 104.110985][ T7280] kmem_cache_alloc_node_noprof+0x71/0x320 [ 104.116847][ T7280] __alloc_skb+0x1c3/0x440 [ 104.121312][ T7280] ? __pfx___alloc_skb+0x10/0x10 [ 104.126287][ T7280] ? __mutex_trylock_common+0x183/0x2e0 [ 104.131880][ T7280] ? __pfx___might_resched+0x10/0x10 [ 104.137216][ T7280] tipc_nl_compat_dumpit+0x10a/0x740 [ 104.142734][ T7280] tipc_nl_compat_recv+0xdaa/0x14c0 [ 104.147982][ T7280] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 104.153657][ T7280] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 104.159153][ T7280] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 104.165257][ T7280] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.171277][ T7280] ? genl_rcv_msg+0x121/0xec0 [ 104.175989][ T7280] ? __pfx___mutex_lock+0x10/0x10 [ 104.181490][ T7280] ? genl_get_cmd+0x71c/0xbe0 [ 104.186217][ T7280] genl_rcv_msg+0xb14/0xec0 [ 104.190759][ T7280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.195871][ T7280] ? __pfx_lock_acquire+0x10/0x10 [ 104.200937][ T7280] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 104.206611][ T7280] ? __pfx___might_resched+0x10/0x10 [ 104.211941][ T7280] netlink_rcv_skb+0x1e3/0x430 [ 104.216740][ T7280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.221774][ T7280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.227102][ T7280] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 104.232577][ T7280] genl_rcv+0x28/0x40 [ 104.236559][ T7280] netlink_unicast+0x7f6/0x990 [ 104.241332][ T7280] ? __pfx_netlink_unicast+0x10/0x10 [ 104.246620][ T7280] ? __virt_addr_valid+0x183/0x530 [ 104.251737][ T7280] ? __check_object_size+0x48e/0x900 [ 104.257114][ T7280] netlink_sendmsg+0x8e4/0xcb0 [ 104.261918][ T7280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.267408][ T7280] ? aa_sock_msg_perm+0x91/0x160 [ 104.272368][ T7280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.277662][ T7280] __sock_sendmsg+0x221/0x270 [ 104.282346][ T7280] ____sys_sendmsg+0x52a/0x7e0 [ 104.287131][ T7280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.292428][ T7280] __sys_sendmsg+0x292/0x380 [ 104.297022][ T7280] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.302141][ T7280] ? __pfx_vfs_write+0x10/0x10 [ 104.306923][ T7280] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.313254][ T7280] ? do_syscall_64+0x100/0x230 [ 104.318030][ T7280] ? do_syscall_64+0xb6/0x230 [ 104.322824][ T7280] do_syscall_64+0xf3/0x230 [ 104.327420][ T7280] ? clear_bhb_loop+0x35/0x90 [ 104.332101][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.337991][ T7280] RIP: 0033:0x7f363777e719 [ 104.342403][ T7280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.362009][ T7280] RSP: 002b:00007f36384e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.370423][ T7280] RAX: ffffffffffffffda RBX: 00007f3637935f80 RCX: 00007f363777e719 [ 104.378389][ T7280] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 104.386357][ T7280] RBP: 00007f36384e1090 R08: 0000000000000000 R09: 0000000000000000 [ 104.394323][ T7280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.402288][ T7280] R13: 0000000000000000 R14: 00007f3637935f80 R15: 00007ffcf75043f8 [ 104.410270][ T7280] [ 104.545953][ T7294] syzkaller1: entered promiscuous mode [ 104.551490][ T7294] syzkaller1: entered allmulticast mode [ 104.766371][ T7305] __nla_validate_parse: 3 callbacks suppressed [ 104.766390][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.409'. [ 104.980474][ T7318] netlink: 'syz.0.414': attribute type 20 has an invalid length. [ 104.988536][ T7320] netlink: 'syz.0.414': attribute type 20 has an invalid length. [ 105.414161][ T7341] syz.0.420 (7341) used greatest stack depth: 18200 bytes left [ 105.554170][ T7363] netlink: 148 bytes leftover after parsing attributes in process `syz.2.425'. [ 105.690216][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.426'. [ 105.797306][ T7376] FAULT_INJECTION: forcing a failure. [ 105.797306][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 105.825209][ T7376] CPU: 0 UID: 0 PID: 7376 Comm: syz.2.430 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 105.835858][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 105.845945][ T7376] Call Trace: [ 105.849241][ T7376] [ 105.852187][ T7376] dump_stack_lvl+0x241/0x360 [ 105.856899][ T7376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.862130][ T7376] ? __pfx__printk+0x10/0x10 [ 105.866793][ T7376] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 105.872815][ T7376] ? __pfx___might_resched+0x10/0x10 [ 105.878139][ T7376] should_fail_ex+0x3b0/0x4e0 [ 105.882853][ T7376] should_failslab+0xac/0x100 [ 105.887564][ T7376] ? __alloc_skb+0x1c3/0x440 [ 105.892183][ T7376] kmem_cache_alloc_node_noprof+0x71/0x320 [ 105.898026][ T7376] __alloc_skb+0x1c3/0x440 [ 105.902468][ T7376] ? __pfx___alloc_skb+0x10/0x10 [ 105.907405][ T7376] ? __mutex_trylock_common+0x183/0x2e0 [ 105.912945][ T7376] ? __pfx___might_resched+0x10/0x10 [ 105.918233][ T7376] tipc_nl_compat_dumpit+0x311/0x740 [ 105.923551][ T7376] tipc_nl_compat_recv+0xdaa/0x14c0 [ 105.928757][ T7376] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 105.934405][ T7376] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 105.939887][ T7376] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 105.945978][ T7376] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.951985][ T7376] ? genl_rcv_msg+0x121/0xec0 [ 105.956680][ T7376] ? __pfx___mutex_lock+0x10/0x10 [ 105.961704][ T7376] ? genl_get_cmd+0x71c/0xbe0 [ 105.966401][ T7376] genl_rcv_msg+0xb14/0xec0 [ 105.971014][ T7376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.976069][ T7376] ? __pfx_lock_acquire+0x10/0x10 [ 105.981115][ T7376] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 105.986771][ T7376] ? __pfx___might_resched+0x10/0x10 [ 105.992087][ T7376] netlink_rcv_skb+0x1e3/0x430 [ 105.996858][ T7376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.001890][ T7376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.007184][ T7376] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 106.012651][ T7376] genl_rcv+0x28/0x40 [ 106.016631][ T7376] netlink_unicast+0x7f6/0x990 [ 106.021401][ T7376] ? __pfx_netlink_unicast+0x10/0x10 [ 106.026695][ T7376] ? __virt_addr_valid+0x183/0x530 [ 106.031822][ T7376] ? __check_object_size+0x48e/0x900 [ 106.037134][ T7376] netlink_sendmsg+0x8e4/0xcb0 [ 106.041942][ T7376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.047242][ T7376] ? aa_sock_msg_perm+0x91/0x160 [ 106.052190][ T7376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.057493][ T7376] __sock_sendmsg+0x221/0x270 [ 106.062207][ T7376] ____sys_sendmsg+0x52a/0x7e0 [ 106.067005][ T7376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.072311][ T7376] __sys_sendmsg+0x292/0x380 [ 106.077035][ T7376] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.082182][ T7376] ? __pfx_vfs_write+0x10/0x10 [ 106.086984][ T7376] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.093371][ T7376] ? do_syscall_64+0x100/0x230 [ 106.098140][ T7376] ? do_syscall_64+0xb6/0x230 [ 106.102817][ T7376] do_syscall_64+0xf3/0x230 [ 106.107320][ T7376] ? clear_bhb_loop+0x35/0x90 [ 106.111996][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.117888][ T7376] RIP: 0033:0x7f363777e719 [ 106.122302][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.141911][ T7376] RSP: 002b:00007f36384e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.150336][ T7376] RAX: ffffffffffffffda RBX: 00007f3637935f80 RCX: 00007f363777e719 [ 106.158341][ T7376] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 106.166322][ T7376] RBP: 00007f36384e1090 R08: 0000000000000000 R09: 0000000000000000 [ 106.174295][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.182273][ T7376] R13: 0000000000000000 R14: 00007f3637935f80 R15: 00007ffcf75043f8 [ 106.190264][ T7376] [ 106.371056][ T7390] vlan2: entered promiscuous mode [ 106.381940][ T7390] team0: Device vlan2 is of different type [ 106.654451][ T7405] xt_TCPMSS: Only works on TCP SYN packets [ 106.726565][ T7412] netlink: 134612 bytes leftover after parsing attributes in process `syz.1.443'. [ 106.762085][ T7412] openvswitch: netlink: ufid size 107 bytes exceeds the range (1, 16) [ 106.784422][ T7412] openvswitch: netlink: Message has 76 unknown bytes. [ 107.029699][ T7426] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 107.564842][ T7464] FAULT_INJECTION: forcing a failure. [ 107.564842][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 107.608791][ T7464] CPU: 1 UID: 0 PID: 7464 Comm: syz.3.461 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 107.619446][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 107.629537][ T7464] Call Trace: [ 107.632844][ T7464] [ 107.635804][ T7464] dump_stack_lvl+0x241/0x360 [ 107.640516][ T7464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.645749][ T7464] ? __pfx__printk+0x10/0x10 [ 107.650376][ T7464] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 107.656397][ T7464] ? __pfx___might_resched+0x10/0x10 [ 107.661717][ T7464] should_fail_ex+0x3b0/0x4e0 [ 107.666425][ T7464] should_failslab+0xac/0x100 [ 107.671129][ T7464] ? __alloc_skb+0x1c3/0x440 [ 107.675749][ T7464] kmem_cache_alloc_node_noprof+0x71/0x320 [ 107.681584][ T7464] ? __kasan_slab_alloc+0x66/0x80 [ 107.686646][ T7464] __alloc_skb+0x1c3/0x440 [ 107.691093][ T7464] ? netlink_unicast+0x7f6/0x990 [ 107.696057][ T7464] ? netlink_sendmsg+0x8e4/0xcb0 [ 107.701014][ T7464] ? __sock_sendmsg+0x221/0x270 [ 107.705868][ T7464] ? ____sys_sendmsg+0x52a/0x7e0 [ 107.710811][ T7464] ? __pfx___alloc_skb+0x10/0x10 [ 107.715778][ T7464] __tipc_nl_compat_dumpit+0x1a3/0xbf0 [ 107.721264][ T7464] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 107.727266][ T7464] ? __build_skb_around+0x245/0x3d0 [ 107.732488][ T7464] ? __asan_memset+0x23/0x50 [ 107.737275][ T7464] ? __nlmsg_put+0xf7/0x190 [ 107.741797][ T7464] tipc_nl_compat_dumpit+0x4fc/0x740 [ 107.747101][ T7464] tipc_nl_compat_recv+0xdaa/0x14c0 [ 107.752308][ T7464] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 107.757980][ T7464] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 107.763440][ T7464] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 107.769505][ T7464] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.775505][ T7464] ? genl_rcv_msg+0x121/0xec0 [ 107.780228][ T7464] ? __pfx___mutex_lock+0x10/0x10 [ 107.785282][ T7464] ? genl_get_cmd+0x71c/0xbe0 [ 107.789974][ T7464] genl_rcv_msg+0xb14/0xec0 [ 107.794493][ T7464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.799542][ T7464] ? __pfx_lock_acquire+0x10/0x10 [ 107.804575][ T7464] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 107.810213][ T7464] ? __pfx___might_resched+0x10/0x10 [ 107.815511][ T7464] netlink_rcv_skb+0x1e3/0x430 [ 107.820282][ T7464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.825307][ T7464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.830621][ T7464] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 107.836104][ T7464] genl_rcv+0x28/0x40 [ 107.840084][ T7464] netlink_unicast+0x7f6/0x990 [ 107.844858][ T7464] ? __pfx_netlink_unicast+0x10/0x10 [ 107.850143][ T7464] ? __virt_addr_valid+0x183/0x530 [ 107.855266][ T7464] ? __check_object_size+0x48e/0x900 [ 107.860728][ T7464] netlink_sendmsg+0x8e4/0xcb0 [ 107.865509][ T7464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.870802][ T7464] ? aa_sock_msg_perm+0x91/0x160 [ 107.875760][ T7464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.881057][ T7464] __sock_sendmsg+0x221/0x270 [ 107.885751][ T7464] ____sys_sendmsg+0x52a/0x7e0 [ 107.890534][ T7464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.895837][ T7464] __sys_sendmsg+0x292/0x380 [ 107.900519][ T7464] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.905652][ T7464] ? __pfx_vfs_write+0x10/0x10 [ 107.910432][ T7464] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.916762][ T7464] ? do_syscall_64+0x100/0x230 [ 107.921526][ T7464] ? do_syscall_64+0xb6/0x230 [ 107.926210][ T7464] do_syscall_64+0xf3/0x230 [ 107.930711][ T7464] ? clear_bhb_loop+0x35/0x90 [ 107.935736][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.941648][ T7464] RIP: 0033:0x7f32fe37e719 [ 107.946061][ T7464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.965662][ T7464] RSP: 002b:00007f32ff091038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.974092][ T7464] RAX: ffffffffffffffda RBX: 00007f32fe535f80 RCX: 00007f32fe37e719 [ 107.982148][ T7464] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 107.990113][ T7464] RBP: 00007f32ff091090 R08: 0000000000000000 R09: 0000000000000000 [ 107.998105][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.006082][ T7464] R13: 0000000000000000 R14: 00007f32fe535f80 R15: 00007ffc9e28f238 [ 108.014064][ T7464] [ 108.035499][ T7470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.465'. [ 108.053068][ T7480] Cannot find set identified by id 0 to match [ 108.233729][ T7492] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 108.467665][ T7502] syz.4.472[7502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.467762][ T7502] syz.4.472[7502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.492884][ T7504] lo speed is unknown, defaulting to 1000 [ 108.517861][ T7502] syz.4.472[7502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.692607][ T7514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.478'. [ 108.761357][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 108.798899][ T7514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.837486][ T7514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.860624][ T7514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.872039][ T7514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.868168][ T7562] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 110.086146][ T7572] netlink: 'syz.3.490': attribute type 3 has an invalid length. [ 110.107206][ T7574] FAULT_INJECTION: forcing a failure. [ 110.107206][ T7574] name failslab, interval 1, probability 0, space 0, times 0 [ 110.117586][ T7571] netlink: 'syz.3.490': attribute type 3 has an invalid length. [ 110.144263][ T7574] CPU: 1 UID: 0 PID: 7574 Comm: syz.4.491 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 110.154909][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 110.164987][ T7574] Call Trace: [ 110.168296][ T7574] [ 110.171251][ T7574] dump_stack_lvl+0x241/0x360 [ 110.175970][ T7574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.181198][ T7574] ? __pfx__printk+0x10/0x10 [ 110.185820][ T7574] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 110.191310][ T7574] ? __pfx___might_resched+0x10/0x10 [ 110.196625][ T7574] should_fail_ex+0x3b0/0x4e0 [ 110.201330][ T7574] should_failslab+0xac/0x100 [ 110.206016][ T7574] ? __tipc_dump_start+0xb3/0x130 [ 110.211044][ T7574] __kmalloc_cache_noprof+0x6c/0x2c0 [ 110.216330][ T7574] ? net_generic+0x1f/0x240 [ 110.220836][ T7574] __tipc_dump_start+0xb3/0x130 [ 110.225689][ T7574] __tipc_nl_compat_dumpit+0x237/0xbf0 [ 110.231150][ T7574] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 110.237225][ T7574] ? __build_skb_around+0x245/0x3d0 [ 110.242434][ T7574] ? __asan_memset+0x23/0x50 [ 110.247023][ T7574] ? __nlmsg_put+0xf7/0x190 [ 110.251526][ T7574] tipc_nl_compat_dumpit+0x4fc/0x740 [ 110.256816][ T7574] tipc_nl_compat_recv+0xdaa/0x14c0 [ 110.262022][ T7574] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 110.267658][ T7574] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 110.273120][ T7574] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 110.279184][ T7574] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.285166][ T7574] ? genl_rcv_msg+0x121/0xec0 [ 110.289847][ T7574] ? __pfx___mutex_lock+0x10/0x10 [ 110.294878][ T7574] ? genl_get_cmd+0x71c/0xbe0 [ 110.299555][ T7574] genl_rcv_msg+0xb14/0xec0 [ 110.304059][ T7574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.309099][ T7574] ? __pfx_lock_acquire+0x10/0x10 [ 110.314122][ T7574] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 110.319758][ T7574] ? __pfx___might_resched+0x10/0x10 [ 110.325071][ T7574] netlink_rcv_skb+0x1e3/0x430 [ 110.329842][ T7574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.334864][ T7574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.340156][ T7574] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 110.345621][ T7574] genl_rcv+0x28/0x40 [ 110.349601][ T7574] netlink_unicast+0x7f6/0x990 [ 110.354368][ T7574] ? __pfx_netlink_unicast+0x10/0x10 [ 110.359649][ T7574] ? __virt_addr_valid+0x183/0x530 [ 110.364764][ T7574] ? __check_object_size+0x48e/0x900 [ 110.370075][ T7574] netlink_sendmsg+0x8e4/0xcb0 [ 110.374863][ T7574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.380150][ T7574] ? aa_sock_msg_perm+0x91/0x160 [ 110.385090][ T7574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.390371][ T7574] __sock_sendmsg+0x221/0x270 [ 110.395050][ T7574] ____sys_sendmsg+0x52a/0x7e0 [ 110.399819][ T7574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.405220][ T7574] __sys_sendmsg+0x292/0x380 [ 110.409823][ T7574] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.415031][ T7574] ? __pfx_vfs_write+0x10/0x10 [ 110.419813][ T7574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.426138][ T7574] ? do_syscall_64+0x100/0x230 [ 110.430899][ T7574] ? do_syscall_64+0xb6/0x230 [ 110.435574][ T7574] do_syscall_64+0xf3/0x230 [ 110.440075][ T7574] ? clear_bhb_loop+0x35/0x90 [ 110.444749][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.450640][ T7574] RIP: 0033:0x7fb47497e719 [ 110.455051][ T7574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.474657][ T7574] RSP: 002b:00007fb4757d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.483073][ T7574] RAX: ffffffffffffffda RBX: 00007fb474b35f80 RCX: 00007fb47497e719 [ 110.491041][ T7574] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 110.499027][ T7574] RBP: 00007fb4757d7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.506994][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.515393][ T7574] R13: 0000000000000000 R14: 00007fb474b35f80 R15: 00007ffc21f99388 [ 110.523369][ T7574] [ 111.325661][ T7632] netlink: 'syz.0.505': attribute type 4 has an invalid length. [ 112.428565][ T7711] veth0_vlan: left promiscuous mode [ 112.597351][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 112.615708][ T7722] netlink: 'syz.4.527': attribute type 7 has an invalid length. [ 112.629127][ T7722] netlink: 15 bytes leftover after parsing attributes in process `syz.4.527'. [ 112.660334][ T7722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.527'. [ 112.684873][ T7722] netlink: 872 bytes leftover after parsing attributes in process `syz.4.527'. [ 112.702007][ T7722] netlink: 'syz.4.527': attribute type 7 has an invalid length. [ 112.710914][ T7722] netlink: 15 bytes leftover after parsing attributes in process `syz.4.527'. [ 112.742171][ T7728] xfrm1: entered allmulticast mode [ 113.375110][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.536'. [ 113.396755][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.535'. [ 113.567993][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.813169][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.855869][ T7795] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:21 [ 113.873276][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 113.883358][ T7796] netlink: 72 bytes leftover after parsing attributes in process `syz.3.544'. [ 113.895739][ T7792] syz.0.543 (7792) used greatest stack depth: 17872 bytes left [ 113.903113][ T7796] netlink: 72 bytes leftover after parsing attributes in process `syz.3.544'. [ 113.917385][ T7800] netlink: 'syz.3.544': attribute type 10 has an invalid length. [ 113.976989][ T7800] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 113.993862][ T7800] team0: Failed to send options change via netlink (err -105) [ 114.022219][ T7800] team0: Port device netdevsim0 added [ 114.053136][ T7809] x_tables: duplicate underflow at hook 3 [ 114.070038][ T7795] lo speed is unknown, defaulting to 1000 [ 114.246573][ T7818] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.574201][ T7830] batman_adv: batadv0: Adding interface: dummy0 [ 114.595969][ T7830] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.680257][ T7830] batman_adv: batadv0: Interface activated: dummy0 [ 114.730666][ T7838] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 115.649765][ T7876] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 116.136416][ T7905] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 116.209203][ T7907] FAULT_INJECTION: forcing a failure. [ 116.209203][ T7907] name failslab, interval 1, probability 0, space 0, times 0 [ 116.273954][ T7907] CPU: 1 UID: 0 PID: 7907 Comm: syz.4.579 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 116.284615][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 116.294704][ T7907] Call Trace: [ 116.297998][ T7907] [ 116.300949][ T7907] dump_stack_lvl+0x241/0x360 [ 116.305664][ T7907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.310895][ T7907] ? __pfx__printk+0x10/0x10 [ 116.315518][ T7907] ? ref_tracker_alloc+0x332/0x490 [ 116.320661][ T7907] should_fail_ex+0x3b0/0x4e0 [ 116.325370][ T7907] ? skb_clone+0x20c/0x390 [ 116.329814][ T7907] should_failslab+0xac/0x100 [ 116.334520][ T7907] ? skb_clone+0x20c/0x390 [ 116.338952][ T7907] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 116.344334][ T7907] skb_clone+0x20c/0x390 [ 116.348586][ T7907] __netlink_deliver_tap+0x3cc/0x7f0 [ 116.353902][ T7907] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.359115][ T7907] netlink_deliver_tap+0x19d/0x1b0 [ 116.364229][ T7907] netlink_sendskb+0x68/0x140 [ 116.368911][ T7907] netlink_unicast+0x39d/0x990 [ 116.373684][ T7907] ? __pfx_netlink_unicast+0x10/0x10 [ 116.378966][ T7907] ? tipc_nl_compat_dumpit+0x56d/0x740 [ 116.384427][ T7907] ? tipc_nl_compat_recv+0xf71/0x14c0 [ 116.389803][ T7907] tipc_nl_compat_recv+0x1037/0x14c0 [ 116.395093][ T7907] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 116.400728][ T7907] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 116.406185][ T7907] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 116.412244][ T7907] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 116.418321][ T7907] ? genl_rcv_msg+0x121/0xec0 [ 116.422995][ T7907] ? __pfx___mutex_lock+0x10/0x10 [ 116.428020][ T7907] ? genl_get_cmd+0x71c/0xbe0 [ 116.432701][ T7907] genl_rcv_msg+0xb14/0xec0 [ 116.437205][ T7907] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.442243][ T7907] ? __pfx_lock_acquire+0x10/0x10 [ 116.447265][ T7907] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 116.452990][ T7907] ? __pfx___might_resched+0x10/0x10 [ 116.458284][ T7907] netlink_rcv_skb+0x1e3/0x430 [ 116.463049][ T7907] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.468070][ T7907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.473391][ T7907] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 116.478877][ T7907] genl_rcv+0x28/0x40 [ 116.482858][ T7907] netlink_unicast+0x7f6/0x990 [ 116.487634][ T7907] ? __pfx_netlink_unicast+0x10/0x10 [ 116.492920][ T7907] ? __virt_addr_valid+0x183/0x530 [ 116.498029][ T7907] ? __check_object_size+0x48e/0x900 [ 116.503316][ T7907] netlink_sendmsg+0x8e4/0xcb0 [ 116.508089][ T7907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.513375][ T7907] ? aa_sock_msg_perm+0x91/0x160 [ 116.518325][ T7907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.523611][ T7907] __sock_sendmsg+0x221/0x270 [ 116.528292][ T7907] ____sys_sendmsg+0x52a/0x7e0 [ 116.533068][ T7907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.538384][ T7907] __sys_sendmsg+0x292/0x380 [ 116.542978][ T7907] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.548097][ T7907] ? __pfx_vfs_write+0x10/0x10 [ 116.552874][ T7907] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.559210][ T7907] ? do_syscall_64+0x100/0x230 [ 116.563975][ T7907] ? do_syscall_64+0xb6/0x230 [ 116.568647][ T7907] do_syscall_64+0xf3/0x230 [ 116.573144][ T7907] ? clear_bhb_loop+0x35/0x90 [ 116.577818][ T7907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.583707][ T7907] RIP: 0033:0x7fb47497e719 [ 116.588125][ T7907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.607725][ T7907] RSP: 002b:00007fb4757d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.616135][ T7907] RAX: ffffffffffffffda RBX: 00007fb474b35f80 RCX: 00007fb47497e719 [ 116.624130][ T7907] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 116.632112][ T7907] RBP: 00007fb4757d7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.640083][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.648052][ T7907] R13: 0000000000000000 R14: 00007fb474b35f80 R15: 00007ffc21f99388 [ 116.656033][ T7907] [ 116.705815][ T7912] xt_ecn: cannot match TCP bits for non-tcp packets [ 118.292799][ T8044] __nla_validate_parse: 16 callbacks suppressed [ 118.292819][ T8044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.611'. [ 118.318876][ T8051] ip6gretap0: entered promiscuous mode [ 118.327535][ T8051] batadv_slave_0: entered promiscuous mode [ 118.360680][ T8051] Cannot find set identified by id 0 to match [ 118.487283][ T8058] lo speed is unknown, defaulting to 1000 [ 118.578180][ T8065] netlink: 'syz.4.618': attribute type 11 has an invalid length. [ 118.645567][ T8066] netlink: 'syz.4.618': attribute type 11 has an invalid length. [ 118.715488][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 118.740487][ T8076] lo speed is unknown, defaulting to 1000 [ 118.757698][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 118.951429][ T8080] lo speed is unknown, defaulting to 1000 [ 119.035937][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.626'. [ 119.066727][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 119.082984][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.628'. [ 119.107239][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 119.114829][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.626'. [ 119.116399][ T8097] netlink: 'syz.4.629': attribute type 1 has an invalid length. [ 119.138647][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.626'. [ 119.198404][ T8091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.626'. [ 119.343757][ T8103] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 119.463681][ T8103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.526933][ T8110] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 119.566874][ T8110] bond1: (slave batadv1): making interface the new active one [ 119.661938][ T8110] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 119.903503][ T8118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.962320][ T8131] can: request_module (can-proto-0) failed. [ 119.984732][ T8134] GUP no longer grows the stack in syz.0.637 (8134): 20006000-2000a000 (20005000) [ 120.002721][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.0.637 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 120.013470][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 120.023558][ T8134] Call Trace: [ 120.026853][ T8134] [ 120.029931][ T8134] dump_stack_lvl+0x241/0x360 [ 120.034652][ T8134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.039901][ T8134] ? __pfx__printk+0x10/0x10 [ 120.044543][ T8134] ? find_vma+0xf9/0x170 [ 120.048809][ T8134] ? vma_is_secretmem+0xd/0x50 [ 120.053579][ T8134] ? check_vma_flags+0x52b/0x5a0 [ 120.058533][ T8134] __get_user_pages+0x4385/0x49e0 [ 120.063578][ T8134] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.069694][ T8134] ? __pfx___get_user_pages+0x10/0x10 [ 120.075104][ T8134] __gup_longterm_locked+0x49a/0x17f0 [ 120.080484][ T8134] ? __pfx___might_resched+0x10/0x10 [ 120.085829][ T8134] ? __pfx___gup_longterm_locked+0x10/0x10 [ 120.091661][ T8134] ? down_read+0x82b/0xa40 [ 120.096105][ T8134] ? is_valid_gup_args+0x124/0x200 [ 120.101231][ T8134] pin_user_pages+0x137/0x1f0 [ 120.105913][ T8134] ? __pfx_pin_user_pages+0x10/0x10 [ 120.111112][ T8134] ? __kmalloc_node_noprof+0x247/0x440 [ 120.116588][ T8134] xdp_umem_create+0x978/0xf30 [ 120.121365][ T8134] xsk_setsockopt+0x732/0x950 [ 120.126095][ T8134] ? __pfx_xsk_setsockopt+0x10/0x10 [ 120.131313][ T8134] ? __pfx_lock_acquire+0x10/0x10 [ 120.136373][ T8134] ? __fget_files+0x29/0x470 [ 120.140966][ T8134] ? aa_sock_opt_perm+0x79/0x120 [ 120.145920][ T8134] ? __pfx_xsk_setsockopt+0x10/0x10 [ 120.151163][ T8134] do_sock_setsockopt+0x3af/0x720 [ 120.156220][ T8134] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 120.161774][ T8134] ? __fget_files+0x29/0x470 [ 120.166366][ T8134] ? __fget_files+0x3f3/0x470 [ 120.171039][ T8134] ? __fget_files+0x29/0x470 [ 120.175634][ T8134] __sys_setsockopt+0x1a2/0x250 [ 120.180496][ T8134] __x64_sys_setsockopt+0xb5/0xd0 [ 120.185529][ T8134] do_syscall_64+0xf3/0x230 [ 120.190034][ T8134] ? clear_bhb_loop+0x35/0x90 [ 120.194718][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.200615][ T8134] RIP: 0033:0x7fec9dd7e719 [ 120.205028][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.228133][ T8134] RSP: 002b:00007fec9eb0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.236573][ T8134] RAX: ffffffffffffffda RBX: 00007fec9df35f80 RCX: 00007fec9dd7e719 [ 120.244552][ T8134] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 120.252539][ T8134] RBP: 00007fec9ddf175e R08: 0000000000000020 R09: 0000000000000000 [ 120.260511][ T8134] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 120.268484][ T8134] R13: 0000000000000000 R14: 00007fec9df35f80 R15: 00007ffdf4a1ea08 [ 120.276528][ T8134] [ 120.393011][ T8138] netlink: 'syz.4.639': attribute type 1 has an invalid length. [ 120.411415][ T8118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.621039][ T8118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.960951][ T8118] team0: Port device netdevsim0 removed [ 120.980950][ T8118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.041127][ T8145] lo speed is unknown, defaulting to 1000 [ 121.106450][ T8155] lo speed is unknown, defaulting to 1000 [ 121.281318][ T8118] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.326008][ T8160] tipc: Started in network mode [ 121.331894][ T8160] tipc: Node identity ac14140f, cluster identity 4711 [ 121.340601][ T8160] tipc: New replicast peer: 255.255.255.255 [ 121.348444][ T8160] tipc: Enabled bearer , priority 10 [ 121.518207][ T8118] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.564591][ T8118] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.580761][ T8118] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.738532][ T8168] macvlan1: entered promiscuous mode [ 121.751756][ T8168] macvlan1: left promiscuous mode [ 122.117370][ T8174] team0 (unregistering): Port device wg2 removed [ 122.173224][ T8189] netlink: 'syz.1.651': attribute type 25 has an invalid length. [ 122.345162][ T6011] tipc: Node number set to 2886997007 [ 122.437128][ T8212] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.446427][ T8212] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.455466][ T8212] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.464285][ T8212] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.034139][ T8238] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 123.089017][ T8242] lo speed is unknown, defaulting to 1000 [ 123.454873][ T8260] sctp: [Deprecated]: syz.0.670 (pid 8260) Use of int in maxseg socket option. [ 123.454873][ T8260] Use struct sctp_assoc_value instead [ 123.515723][ T8254] ip6tnl0: entered promiscuous mode [ 124.363412][ T8300] __nla_validate_parse: 10 callbacks suppressed [ 124.363431][ T8300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.685'. [ 124.548914][ T8290] team0 (unregistering): Port device team_slave_0 removed [ 124.569980][ T8290] team0 (unregistering): Port device team_slave_1 removed [ 124.617735][ T8304] netlink: 136 bytes leftover after parsing attributes in process `syz.1.685'. [ 124.850846][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.690'. [ 124.882071][ T8318] syzkaller1: entered promiscuous mode [ 124.889700][ T8318] syzkaller1: entered allmulticast mode [ 124.915657][ T8318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.953123][ T5943] lo speed is unknown, defaulting to 1000 [ 125.082376][ T8332] netlink: 52 bytes leftover after parsing attributes in process `syz.0.694'. [ 125.180604][ T8334] netdevsim netdevsim4 netdevsim0: Device is already in use. [ 125.284095][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: macsec1 [ 125.300401][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.726416][ T8368] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 125.766498][ T8368] team0: Device ipvlan1 failed to register rx_handler [ 125.830053][ T8366] lo speed is unknown, defaulting to 1000 [ 126.050834][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 126.195786][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 126.212872][ T8390] vlan2: entered promiscuous mode [ 126.218828][ T8390] macvtap0: entered promiscuous mode [ 126.236297][ T8390] macvtap0: left promiscuous mode [ 127.168211][ T8435] FAULT_INJECTION: forcing a failure. [ 127.168211][ T8435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.221278][ T8435] CPU: 0 UID: 0 PID: 8435 Comm: syz.4.726 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 127.231939][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 127.242026][ T8435] Call Trace: [ 127.245330][ T8435] [ 127.248287][ T8435] dump_stack_lvl+0x241/0x360 [ 127.253006][ T8435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.258241][ T8435] ? __pfx__printk+0x10/0x10 [ 127.262869][ T8435] ? __pfx_lock_release+0x10/0x10 [ 127.267934][ T8435] ? __lock_acquire+0x1384/0x2050 [ 127.273000][ T8435] should_fail_ex+0x3b0/0x4e0 [ 127.277718][ T8435] _copy_from_user+0x2f/0xc0 [ 127.282340][ T8435] kstrtouint_from_user+0xc6/0x190 [ 127.287488][ T8435] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 127.293254][ T8435] ? __pfx_lock_acquire+0x10/0x10 [ 127.298336][ T8435] proc_fail_nth_write+0xaa/0x2d0 [ 127.303374][ T8435] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 127.309272][ T8435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.314909][ T8435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.320546][ T8435] vfs_write+0x2a3/0xd30 [ 127.324808][ T8435] ? fdget_pos+0x24e/0x320 [ 127.329252][ T8435] ? __pfx_vfs_write+0x10/0x10 [ 127.334034][ T8435] ? __fget_files+0x3f3/0x470 [ 127.338727][ T8435] ? fdget_pos+0x24e/0x320 [ 127.343168][ T8435] ksys_write+0x183/0x2b0 [ 127.347498][ T8435] ? __pfx_ksys_write+0x10/0x10 [ 127.352360][ T8435] ? do_syscall_64+0x100/0x230 [ 127.357154][ T8435] ? do_syscall_64+0xb6/0x230 [ 127.361860][ T8435] do_syscall_64+0xf3/0x230 [ 127.366371][ T8435] ? clear_bhb_loop+0x35/0x90 [ 127.371044][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.376950][ T8435] RIP: 0033:0x7fb47497d1ff [ 127.381387][ T8435] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 127.401026][ T8435] RSP: 002b:00007fb4757d7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 127.409487][ T8435] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb47497d1ff [ 127.417501][ T8435] RDX: 0000000000000001 RSI: 00007fb4757d70a0 RDI: 0000000000000004 [ 127.425515][ T8435] RBP: 00007fb4757d7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.433535][ T8435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 127.441548][ T8435] R13: 0000000000000000 R14: 00007fb474b35f80 R15: 00007ffc21f99388 [ 127.449582][ T8435] [ 127.981612][ T8475] pimreg: entered allmulticast mode [ 127.987477][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'. [ 128.019972][ T8480] xt_hashlimit: size too large, truncated to 1048576 [ 128.047832][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'. [ 128.075668][ T8488] pimreg: left allmulticast mode [ 128.186652][ T8494] netlink: 'syz.4.739': attribute type 2 has an invalid length. [ 128.209186][ T8494] netlink: 36 bytes leftover after parsing attributes in process `syz.4.739'. [ 128.837055][ T8524] netlink: 'syz.2.748': attribute type 10 has an invalid length. [ 128.863983][ T8524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.748'. [ 128.907835][ T8524] batman_adv: batadv0: Adding interface: vlan1 [ 128.921092][ T8524] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.985828][ T8524] batman_adv: batadv0: Interface activated: vlan1 [ 129.617054][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 129.814983][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 129.824133][ T8577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.764'. [ 129.877202][ T8577] vlan2: entered allmulticast mode [ 129.928165][ T8584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 130.058530][ T5846] IPVS: starting estimator thread 0... [ 130.154761][ T8592] IPVS: using max 22 ests per chain, 52800 per kthread [ 130.331873][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.772'. [ 130.380282][ T8605] ip6t_rpfilter: unknown options [ 130.488201][ T8611] raw_sendmsg: syz.1.774 forgot to set AF_INET. Fix it! [ 130.504121][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 130.645788][ T8623] netlink: 'syz.0.778': attribute type 2 has an invalid length. [ 130.671781][ T8627] macsec0: default FDB implementation only supports local addresses [ 130.795773][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 130.833599][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 130.868637][ T8640] team_slave_0: entered promiscuous mode [ 130.874627][ T8640] team_slave_1: entered promiscuous mode [ 130.880412][ T8640] batadv0: entered promiscuous mode [ 130.924736][ T8640] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 131.086041][ T8655] tap0: tun_chr_ioctl cmd 2148553947 [ 131.504631][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 131.521628][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.798'. [ 131.893564][ T8708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.301747][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 132.330917][ T8733] netlink: 'syz.3.809': attribute type 29 has an invalid length. [ 132.366416][ T8733] netlink: 'syz.3.809': attribute type 29 has an invalid length. [ 132.396449][ T8733] netlink: 'syz.3.809': attribute type 29 has an invalid length. [ 132.543750][ T8747] lo speed is unknown, defaulting to 1000 [ 132.615107][ T8754] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 132.755590][ T8754] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.805588][ T8754] bond3: (slave bond4): making interface the new active one [ 132.813803][ T8754] bond3: (slave bond4): Enslaving as an active interface with an up link [ 133.029890][ T8768] netlink: 'syz.2.820': attribute type 15 has an invalid length. [ 133.120472][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.314597][ T8792] bridge0: entered promiscuous mode [ 133.373658][ T8796] syzkaller1: entered promiscuous mode [ 133.391446][ T8796] syzkaller1: entered allmulticast mode [ 133.413524][ T8792] bridge0: left promiscuous mode [ 133.656940][ T8816] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 133.693466][ T8817] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 133.806933][ T8819] vlan1: entered promiscuous mode [ 133.827847][ T8823] lo speed is unknown, defaulting to 1000 [ 133.842594][ T8818] vlan1: left promiscuous mode [ 133.898375][ T8826] x_tables: duplicate underflow at hook 2 [ 133.933704][ T8833] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 134.532650][ T8866] lo speed is unknown, defaulting to 1000 [ 134.895750][ T8884] __nla_validate_parse: 7 callbacks suppressed [ 134.895777][ T8884] netlink: 468 bytes leftover after parsing attributes in process `syz.4.854'. [ 134.919097][ T8884] netlink: 104 bytes leftover after parsing attributes in process `syz.4.854'. [ 135.199227][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 135.449121][ T8918] lo speed is unknown, defaulting to 1000 [ 135.480401][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.866'. [ 135.670148][ T8936] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 135.705998][ T8936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.722792][ T8936] bond1: (slave ip6gretap1): making interface the new active one [ 135.732039][ T8936] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.741053][ T8936] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.749796][ T8936] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 135.780350][ T2884] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.832450][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.953551][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 136.104311][ T8918] netlink: 64 bytes leftover after parsing attributes in process `syz.1.864'. [ 136.262097][ T8020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 136.328796][ T8965] lo speed is unknown, defaulting to 1000 [ 136.754979][ T8990] netlink: 40 bytes leftover after parsing attributes in process `syz.0.881'. [ 136.920739][ T8025] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 137.005747][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 137.059067][ T9001] netlink: 100 bytes leftover after parsing attributes in process `syz.4.883'. [ 137.099958][ T9000] lo speed is unknown, defaulting to 1000 [ 137.140053][ T9006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.885'. [ 137.260070][ T9002] lo speed is unknown, defaulting to 1000 [ 137.266586][ T9004] vlan1: entered promiscuous mode [ 137.282736][ T8024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 137.315113][ T8024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 137.389475][ T9003] vlan1: left promiscuous mode [ 137.662601][ T9035] netlink: 52 bytes leftover after parsing attributes in process `syz.4.892'. [ 137.729422][ T9034] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 137.789182][ T9034] netlink: 'syz.1.890': attribute type 2 has an invalid length. [ 137.924328][ T9053] SET target dimension over the limit! [ 137.934591][ T972] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 138.063118][ T9048] macvlan1: entered promiscuous mode [ 138.073549][ T9048] batadv_slave_0: entered promiscuous mode [ 138.093704][ T9048] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 138.114035][ T9048] Cannot create hsr debugfs directory [ 138.306545][ T9070] vlan1: entered promiscuous mode [ 138.378791][ T9060] vlan1: left promiscuous mode [ 138.409260][ T9080] netlink: 'syz.4.903': attribute type 4 has an invalid length. [ 138.467523][ T9075] netlink: 'syz.4.903': attribute type 4 has an invalid length. [ 138.515849][ T9089] lo speed is unknown, defaulting to 1000 [ 138.624459][ T9094] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 138.633059][ T9086] lo speed is unknown, defaulting to 1000 [ 138.811142][ T9094] bond1: entered promiscuous mode [ 138.838414][ T9094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.890944][ T9101] macsec1: entered promiscuous mode [ 138.910223][ T9101] macsec1: entered allmulticast mode [ 138.924213][ T9101] bond1: entered allmulticast mode [ 138.942508][ T9101] bond1: left allmulticast mode [ 139.193737][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0xe [ 139.217328][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.244316][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.251775][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.273048][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.297177][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.314537][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.367428][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.384282][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.391749][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.441213][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.483681][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.514288][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.521753][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.575785][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.607057][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.639466][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.674130][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.691554][ T9138] lo speed is unknown, defaulting to 1000 [ 139.700328][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.726500][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.745629][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.764052][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.798959][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.820130][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.839453][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.858537][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.901700][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.913724][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.938909][ T9153] __nla_validate_parse: 3 callbacks suppressed [ 139.938926][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 139.942393][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 139.985560][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.002495][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.020307][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.028652][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.082697][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.094217][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.101666][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.111588][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.119138][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.126648][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.134187][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.141604][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.149226][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.157592][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.166312][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.173729][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.181365][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.189094][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.196613][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.204091][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.211532][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.219175][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.226732][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.234557][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.241989][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.242556][ T9160] netlink: 120 bytes leftover after parsing attributes in process `syz.1.925'. [ 140.249672][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.266360][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.273786][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.281376][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.288840][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.296386][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.303820][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.311362][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.318966][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x7 [ 140.326507][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x6 [ 140.334123][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.341528][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.348998][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.356536][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.364242][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.371661][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.373052][ T9165] xt_l2tp: v2 doesn't support IP mode [ 140.379150][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.379180][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.379203][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.379225][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.379250][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.423106][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.430690][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.438177][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.445640][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.453065][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.460577][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.468227][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.478016][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.485542][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.493062][ T8] hid-generic 0005:15E4:0040.0001: unknown main item tag 0x0 [ 140.518320][ T8] hid-generic 0005:15E4:0040.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 140.695624][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 140.736840][ T9182] xt_nat: multiple ranges no longer supported [ 140.775332][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 140.875310][ T9186] bond1: entered promiscuous mode [ 141.020201][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 141.045178][ T9210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.935'. [ 141.088102][ T9209] lo speed is unknown, defaulting to 1000 [ 141.208168][ T9201] lo speed is unknown, defaulting to 1000 [ 141.266613][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 141.589722][ T9227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.600310][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 141.600332][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.700403][ T8024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.748238][ T9215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.776732][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 141.816470][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.943'. [ 141.831428][ T9235] netlink: 'syz.4.943': attribute type 50 has an invalid length. [ 141.846532][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 142.152394][ T9247] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 142.475798][ T9264] bond5 (unregistering): Released all slaves [ 142.766844][ T9280] vlan2: entered promiscuous mode [ 142.783104][ T9280] macvtap0: entered promiscuous mode [ 142.812301][ T9280] macvtap0: left promiscuous mode [ 142.885198][ T8024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 143.103471][ T9309] netlink: 'syz.1.965': attribute type 2 has an invalid length. [ 143.260099][ T9316] vlan1: entered promiscuous mode [ 143.293447][ T9313] vlan1: left promiscuous mode [ 143.352895][ T9326] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 143.920292][ T9367] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 143.998661][ T9367] netlink: 'syz.3.987': attribute type 4 has an invalid length. [ 144.045017][ T8032] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 144.756614][ T9422] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 144.772361][ T9415] lo speed is unknown, defaulting to 1000 [ 145.175877][ T8024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.467937][ T9464] lo speed is unknown, defaulting to 1000 [ 145.594811][ T9466] lo speed is unknown, defaulting to 1000 [ 145.914364][ T5845] Bluetooth: hci0: command 0x0c20 tx timeout [ 145.925384][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 146.115676][ T9464] __nla_validate_parse: 16 callbacks suppressed [ 146.115697][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1015'. [ 146.157910][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1015'. [ 146.169758][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1021'. [ 146.179811][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1015'. [ 146.190269][ T9485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1021'. [ 146.228924][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1015'. [ 146.261469][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'. [ 146.270906][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 146.309269][ T9485] lo speed is unknown, defaulting to 1000 [ 146.316420][ T8024] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 146.507971][ T9497] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 146.552575][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1024'. [ 146.655652][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1024'. [ 146.656434][ T9495] lo speed is unknown, defaulting to 1000 [ 146.863791][ T9508] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 147.031051][ T9519] lo speed is unknown, defaulting to 1000 [ 147.049353][ T9519] lo speed is unknown, defaulting to 1000 [ 147.129711][ T9519] lo speed is unknown, defaulting to 1000 [ 147.158128][ T9519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.343537][ T9519] lo speed is unknown, defaulting to 1000 [ 147.401380][ T9519] lo speed is unknown, defaulting to 1000 [ 147.420948][ T9519] lo speed is unknown, defaulting to 1000 [ 147.447570][ T8020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.453171][ T9519] lo speed is unknown, defaulting to 1000 [ 147.463281][ T9519] lo speed is unknown, defaulting to 1000 [ 147.476284][ T9519] lo speed is unknown, defaulting to 1000 [ 147.485650][ T9519] lo speed is unknown, defaulting to 1000 [ 147.492421][ T9519] lo speed is unknown, defaulting to 1000 [ 147.701969][ T9543] lo speed is unknown, defaulting to 1000 [ 147.719599][ T9543] lo speed is unknown, defaulting to 1000 [ 147.995278][ T5848] Bluetooth: hci0: command 0x0c20 tx timeout [ 148.632331][ T8026] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.137557][ T9627] x_tables: duplicate underflow at hook 2 [ 149.254183][ T9635] netlink: 'syz.1.1058': attribute type 9 has an invalid length. [ 149.274451][ T9635] netlink: 'syz.1.1058': attribute type 7 has an invalid length. [ 149.300983][ T9635] netlink: 'syz.1.1058': attribute type 8 has an invalid length. [ 149.325055][ T9634] netlink: 'syz.1.1058': attribute type 9 has an invalid length. [ 149.357929][ T9634] netlink: 'syz.1.1058': attribute type 7 has an invalid length. [ 149.384145][ T9634] netlink: 'syz.1.1058': attribute type 8 has an invalid length. [ 149.804513][ T8032] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.287102][ T9691] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 150.363370][ T9695] pim6reg: entered allmulticast mode [ 150.394048][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.409712][ T9695] pim6reg: left allmulticast mode [ 150.566547][ T9701] bridge3: entered promiscuous mode [ 150.703757][ T9710] netlink: 'syz.3.1073': attribute type 10 has an invalid length. [ 150.934823][ T8019] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.047594][ T9725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.062269][ T9725] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 151.079595][ T9725] bond0 (unregistering): Released all slaves [ 151.231670][ T9739] netlink: 'syz.0.1083': attribute type 10 has an invalid length. [ 151.253013][ T9739] hsr0: entered promiscuous mode [ 151.269280][ T9739] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 151.281597][ T9739] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 151.301260][ T9739] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 151.387278][ T9747] __nla_validate_parse: 7 callbacks suppressed [ 151.387293][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 151.407470][ T9747] netlink: 'syz.2.1086': attribute type 23 has an invalid length. [ 151.417193][ T9747] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1086'. [ 151.671997][ T9751] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1089'. [ 151.688321][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 151.701042][ T9749] netlink: 'syz.0.1087': attribute type 31 has an invalid length. [ 151.840618][ T9760] syzkaller0: entered allmulticast mode [ 151.923114][ T9766] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 152.021496][ T9769] lo speed is unknown, defaulting to 1000 [ 152.037577][ T9769] lo speed is unknown, defaulting to 1000 [ 152.070195][ T8032] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.101446][ T9775] ------------[ cut here ]------------ [ 152.107419][ T9775] WARNING: CPU: 1 PID: 9775 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 152.116904][ T9775] Modules linked in: [ 152.120838][ T9775] CPU: 1 UID: 0 PID: 9775 Comm: syz.1.1097 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 152.131613][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 152.141750][ T9775] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 152.147586][ T9775] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 0a 3f 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 ba 3a 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 e8 3e 08 f8 85 ed 0f 8e 49 [ 152.167273][ T9775] RSP: 0000:ffffc900030cf078 EFLAGS: 00010287 [ 152.173356][ T9775] RAX: ffffffff898caf56 RBX: 00000000fffbffea RCX: 0000000000040000 [ 152.181428][ T9775] RDX: ffffc9000439a000 RSI: 000000000001a19e RDI: 000000000001a19f [ 152.189484][ T9775] RBP: dffffc0000000000 R08: ffffffff898caf46 R09: 1ffff1100b9ee0bc [ 152.197540][ T9775] R10: dffffc0000000000 R11: ffffed100b9ee0bd R12: dffffc0000000000 [ 152.205585][ T9775] R13: ffff88805cf70500 R14: 00000000ffffffea R15: 0000000000000000 [ 152.213675][ T9775] FS: 00007f85767006c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 152.222708][ T9775] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.229358][ T9775] CR2: 000000110c2f0aef CR3: 0000000057c44000 CR4: 00000000003526f0 [ 152.237428][ T9775] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.245469][ T9775] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.253474][ T9775] Call Trace: [ 152.256860][ T9775] [ 152.259856][ T9775] ? __warn+0x168/0x4e0 [ 152.264078][ T9775] ? sk_skb_reason_drop+0x87/0x380 [ 152.269234][ T9775] ? report_bug+0x2b3/0x500 [ 152.273767][ T9775] ? sk_skb_reason_drop+0x87/0x380 [ 152.279002][ T9775] ? handle_bug+0x60/0x90 [ 152.283367][ T9775] ? exc_invalid_op+0x1a/0x50 [ 152.288122][ T9775] ? asm_exc_invalid_op+0x1a/0x20 [ 152.293194][ T9775] ? sk_skb_reason_drop+0x76/0x380 [ 152.298410][ T9775] ? sk_skb_reason_drop+0x86/0x380 [ 152.303567][ T9775] ? sk_skb_reason_drop+0x87/0x380 [ 152.308800][ T9775] ? sk_skb_reason_drop+0x86/0x380 [ 152.313987][ T9775] ? ip_rcv_finish_core+0x129f/0x1b50 [ 152.319410][ T9775] ip_rcv_finish_core+0xfde/0x1b50 [ 152.324697][ T9775] ip_sublist_rcv+0x3b1/0xab0 [ 152.329420][ T9775] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 152.334715][ T9775] ? skb_orphan+0xae/0xd0 [ 152.339089][ T9775] ? __pfx_ip_rcv_finish+0x10/0x10 [ 152.344308][ T9775] ip_list_rcv+0x42b/0x480 [ 152.348778][ T9775] ? __pfx_ip_list_rcv+0x10/0x10 [ 152.353755][ T9775] ? __pfx_ip_list_rcv+0x10/0x10 [ 152.358803][ T9775] __netif_receive_skb_list_core+0x94e/0x980 [ 152.364870][ T9775] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 152.371506][ T9775] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 152.378104][ T9775] ? read_tsc+0x9/0x20 [ 152.382215][ T9775] ? timekeeping_get_ns+0x2c0/0x420 [ 152.387547][ T9775] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 152.393960][ T9775] netif_receive_skb_list_internal+0xa51/0xe30 [ 152.400159][ T9775] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 152.406589][ T9775] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 152.413307][ T9775] ? __pfx_eth_type_trans+0x10/0x10 [ 152.418605][ T9775] ? __phys_addr+0xba/0x170 [ 152.423152][ T9775] ? build_skb_around+0x111/0x260 [ 152.428279][ T9775] ? __xdp_build_skb_from_frame+0x313/0x650 [ 152.434259][ T9775] netif_receive_skb_list+0x55/0x4b0 [ 152.439593][ T9775] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 152.445150][ T9775] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 152.451101][ T9775] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 152.456757][ T9775] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 152.462605][ T9775] ? synchronize_rcu+0x11b/0x360 [ 152.467645][ T9775] ? __pfx_synchronize_rcu+0x10/0x10 [ 152.473080][ T9775] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 152.479536][ T9775] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 152.485515][ T9775] ? _copy_from_user+0x99/0xc0 [ 152.490321][ T9775] ? bpf_test_init+0x15a/0x180 [ 152.495169][ T9775] ? xdp_convert_md_to_buff+0x5b/0x330 [ 152.500696][ T9775] bpf_prog_test_run_xdp+0x805/0x11e0 [ 152.506169][ T9775] ? __pfx_lock_release+0x10/0x10 [ 152.511313][ T9775] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 152.517224][ T9775] ? __fget_files+0x29/0x470 [ 152.521867][ T9775] ? fput+0x1a8/0x230 [ 152.525950][ T9775] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 152.531801][ T9775] bpf_prog_test_run+0x2e4/0x360 [ 152.536842][ T9775] __sys_bpf+0x48d/0x810 [ 152.541137][ T9775] ? __pfx___sys_bpf+0x10/0x10 [ 152.546017][ T9775] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.552053][ T9775] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.558485][ T9775] ? do_syscall_64+0x100/0x230 [ 152.563290][ T9775] __x64_sys_bpf+0x7c/0x90 [ 152.567844][ T9775] do_syscall_64+0xf3/0x230 [ 152.572384][ T9775] ? clear_bhb_loop+0x35/0x90 [ 152.577159][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.583120][ T9775] RIP: 0033:0x7f857597e719 [ 152.587628][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.607308][ T9775] RSP: 002b:00007f8576700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.616004][ T9775] RAX: ffffffffffffffda RBX: 00007f8575b35f80 RCX: 00007f857597e719 [ 152.624054][ T9775] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 152.632067][ T9775] RBP: 00007f85759f175e R08: 0000000000000000 R09: 0000000000000000 [ 152.640324][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.648359][ T9775] R13: 0000000000000000 R14: 00007f8575b35f80 R15: 00007ffdf54f4b28 [ 152.656428][ T9775] [ 152.659487][ T9775] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.666821][ T9775] CPU: 1 UID: 0 PID: 9775 Comm: syz.1.1097 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 152.677505][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 152.687578][ T9775] Call Trace: [ 152.690872][ T9775] [ 152.693825][ T9775] dump_stack_lvl+0x241/0x360 [ 152.698536][ T9775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.703832][ T9775] ? __pfx__printk+0x10/0x10 [ 152.708451][ T9775] ? _printk+0xd5/0x120 [ 152.712624][ T9775] ? __init_begin+0x41000/0x41000 [ 152.717669][ T9775] ? vscnprintf+0x5d/0x90 [ 152.722040][ T9775] panic+0x349/0x880 [ 152.725956][ T9775] ? __warn+0x177/0x4e0 [ 152.730117][ T9775] ? __pfx_panic+0x10/0x10 [ 152.734534][ T9775] ? show_trace_log_lvl+0x3b2/0x410 [ 152.739752][ T9775] __warn+0x34b/0x4e0 [ 152.743736][ T9775] ? sk_skb_reason_drop+0x87/0x380 [ 152.748881][ T9775] report_bug+0x2b3/0x500 [ 152.753207][ T9775] ? sk_skb_reason_drop+0x87/0x380 [ 152.758325][ T9775] handle_bug+0x60/0x90 [ 152.762504][ T9775] exc_invalid_op+0x1a/0x50 [ 152.767161][ T9775] asm_exc_invalid_op+0x1a/0x20 [ 152.772037][ T9775] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 152.777786][ T9775] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 0a 3f 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 ba 3a 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 e8 3e 08 f8 85 ed 0f 8e 49 [ 152.797756][ T9775] RSP: 0000:ffffc900030cf078 EFLAGS: 00010287 [ 152.803831][ T9775] RAX: ffffffff898caf56 RBX: 00000000fffbffea RCX: 0000000000040000 [ 152.811823][ T9775] RDX: ffffc9000439a000 RSI: 000000000001a19e RDI: 000000000001a19f [ 152.819809][ T9775] RBP: dffffc0000000000 R08: ffffffff898caf46 R09: 1ffff1100b9ee0bc [ 152.827964][ T9775] R10: dffffc0000000000 R11: ffffed100b9ee0bd R12: dffffc0000000000 [ 152.835934][ T9775] R13: ffff88805cf70500 R14: 00000000ffffffea R15: 0000000000000000 [ 152.843918][ T9775] ? sk_skb_reason_drop+0x76/0x380 [ 152.849055][ T9775] ? sk_skb_reason_drop+0x86/0x380 [ 152.854188][ T9775] ? sk_skb_reason_drop+0x86/0x380 [ 152.859305][ T9775] ? ip_rcv_finish_core+0x129f/0x1b50 [ 152.864675][ T9775] ip_rcv_finish_core+0xfde/0x1b50 [ 152.869820][ T9775] ip_sublist_rcv+0x3b1/0xab0 [ 152.874518][ T9775] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 152.879723][ T9775] ? skb_orphan+0xae/0xd0 [ 152.884054][ T9775] ? __pfx_ip_rcv_finish+0x10/0x10 [ 152.889169][ T9775] ip_list_rcv+0x42b/0x480 [ 152.893586][ T9775] ? __pfx_ip_list_rcv+0x10/0x10 [ 152.898538][ T9775] ? __pfx_ip_list_rcv+0x10/0x10 [ 152.903479][ T9775] __netif_receive_skb_list_core+0x94e/0x980 [ 152.909471][ T9775] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 152.916148][ T9775] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 152.922650][ T9775] ? read_tsc+0x9/0x20 [ 152.926717][ T9775] ? timekeeping_get_ns+0x2c0/0x420 [ 152.931925][ T9775] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 152.938255][ T9775] netif_receive_skb_list_internal+0xa51/0xe30 [ 152.944410][ T9775] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 152.950733][ T9775] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 152.957415][ T9775] ? __pfx_eth_type_trans+0x10/0x10 [ 152.962636][ T9775] ? __phys_addr+0xba/0x170 [ 152.967166][ T9775] ? build_skb_around+0x111/0x260 [ 152.972218][ T9775] ? __xdp_build_skb_from_frame+0x313/0x650 [ 152.978154][ T9775] netif_receive_skb_list+0x55/0x4b0 [ 152.983446][ T9775] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 152.988916][ T9775] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 152.994835][ T9775] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 153.000394][ T9775] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 153.006237][ T9775] ? synchronize_rcu+0x11b/0x360 [ 153.011184][ T9775] ? __pfx_synchronize_rcu+0x10/0x10 [ 153.016573][ T9775] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 153.022825][ T9775] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 153.028768][ T9775] ? _copy_from_user+0x99/0xc0 [ 153.033535][ T9775] ? bpf_test_init+0x15a/0x180 [ 153.038297][ T9775] ? xdp_convert_md_to_buff+0x5b/0x330 [ 153.043962][ T9775] bpf_prog_test_run_xdp+0x805/0x11e0 [ 153.049399][ T9775] ? __pfx_lock_release+0x10/0x10 [ 153.054554][ T9775] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 153.060367][ T9775] ? __fget_files+0x29/0x470 [ 153.064972][ T9775] ? fput+0x1a8/0x230 [ 153.068955][ T9775] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 153.074854][ T9775] bpf_prog_test_run+0x2e4/0x360 [ 153.079829][ T9775] __sys_bpf+0x48d/0x810 [ 153.084081][ T9775] ? __pfx___sys_bpf+0x10/0x10 [ 153.088866][ T9775] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.094872][ T9775] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.101211][ T9775] ? do_syscall_64+0x100/0x230 [ 153.105981][ T9775] __x64_sys_bpf+0x7c/0x90 [ 153.110398][ T9775] do_syscall_64+0xf3/0x230 [ 153.114925][ T9775] ? clear_bhb_loop+0x35/0x90 [ 153.119609][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.125506][ T9775] RIP: 0033:0x7f857597e719 [ 153.129926][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.149550][ T9775] RSP: 002b:00007f8576700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.157981][ T9775] RAX: ffffffffffffffda RBX: 00007f8575b35f80 RCX: 00007f857597e719 [ 153.165997][ T9775] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 153.174062][ T9775] RBP: 00007f85759f175e R08: 0000000000000000 R09: 0000000000000000 [ 153.182046][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.190016][ T9775] R13: 0000000000000000 R14: 00007f8575b35f80 R15: 00007ffdf54f4b28 [ 153.198004][ T9775] [ 153.201160][ T9775] Kernel Offset: disabled [ 153.205476][ T9775] Rebooting in 86400 seconds..