last executing test programs: 3.069121511s ago: executing program 0 (id=1837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x5}, 0x8) syz_emit_ethernet(0x8e, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa100}, @exp_fastopen={0xfe, 0x7, 0xf989, "fdfdf7"}, @exp_fastopen={0xfe, 0xc, 0xf989, "9e989976ed956a4d"}, @exp_fastopen={0xfe, 0x4}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0x9, 0xff, 0x7}, @sack={0x5, 0x16, [0x100, 0x68, 0x80, 0x8, 0x2]}]}}}}}}}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b6967335", 0x8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018000000000000001701000003000000010000"], 0x60}], 0x1, 0x8001) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000006540)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private0, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0xffffffffffffff7b, 0x29, 0x4, {0x32}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x21}}}], 0x30}}], 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001e40)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @empty, @remote}}}}, 0x0) 2.883523348s ago: executing program 0 (id=1841): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601010000000000000000ace28f1d8b8bd2ad070000000900020073797a30000000000c00078008000840000000d00500050002000000050004000000000013000300686173683a6e7645b165742c69666163e27076cf33e02ae5afedfd4e0548831103f22a6975faab6a53fd4650ae3d03536d429646dfae8c03749ebfd1ab8b285f82aa4854d6de0d427042aa0970f73eeaeffa1727a2de276df489e079fc93dbbe88381c6ac25ae891fca650c22da8a233c7bfd4a8fe372d175e369a892faa033673e499d3ab"], 0x58}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000014000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) 2.698458265s ago: executing program 4 (id=1845): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x2000}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2.576229193s ago: executing program 0 (id=1849): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000800001103000037c6000000000000000000000200000000000000000000000300000000030000000200000000040000000061"], 0x0, 0x50, 0x3800, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.489245561s ago: executing program 4 (id=1850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=ANY=[@ANYBLOB="340400001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x20040000}, 0x4864) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x5c}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000740)=@newtaction={0x284, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x270, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x4, 0x5}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x100, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0xb2, 0x6, "6618a896291b7634abbf93322558cbf357c1a01f1c4626fe4049dd5a79219dbf77790ddb0646d525b0e5d47ae3dc75636fdd78ed77922e75bdf43bd0df6fcde50c6d3a6cd8b7d15cd6b8a5cca4be2d708ba9999e8ac83554d006ee979a463091c8b6a89dc8ec2f04fc2e5646f901d779cdda22b8d80dc465cb2d4c600150e5c521d823f01fcb606fb894ee204747bf97f75f6f6ef2f0507e9c20c8211c5de65ea9669c226d090a0b241b5c6d0366"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x128, 0x19, 0x0, 0x0, {{0x7}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0xb1, 0x6, {0x5, 'mangle\x00', 0x7, 0x2, "bcb698fa6d55fa3b47556cb44ebeaf2818ff01f7e6ef883c12ee236d6ae801861db142953de9f820d10f7ae69c06b477490900fd7e4f551f55f04ad119c56e67d39dcde6c3b2beb7ee75c2ca3ce2785a476d3abbf657ef01b9e54a91ac2d79183f4468f20e1dba1c3d0635616f1d7aea0fc02d958f4c0974a4e72d4311e66ca555f2236f00f1ba"}}]}, {0x3a, 0x6, "ff41bcb70a422e011506d325a8dbf98496d4c2c0c26c8f6a5b0810c60025196c7c43ddb29ab67ceac8df10a46e0f13492a4c029e9c73"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x284}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r6, r7, 0x4, 0x0, 0x0, @void, @value}, 0x10) r8 = socket(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f0000000100), &(0x7f00000001c0)=@udp6=r8, 0x2}, 0x20) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14461dcec753000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020601010073000000000000790000008100000000070000000900020073797a3000000000050005000a000000050004000000000013000300686173683a6e65742c69666163650000edff068008000640000800"], 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 2.419935568s ago: executing program 0 (id=1852): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x255, 0x4, 0x700}}}]}]}]}}]}, 0x50}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x18c, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe59a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc6000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ade1368}, @TIPC_NLA_PROP_PRIO={0xfffffffffffffdaf, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x0, 0x2, 0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0xd0c1) pread64(r0, &(0x7f0000000580)=""/174, 0xae, 0x8) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.373272122s ago: executing program 4 (id=1853): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "97e9cddb93ea4ed1e2ace5b0c90ad625"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x3c}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x36) connect$inet6(r4, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async, rerun: 32) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3273], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x20) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="7b22971df7d9b61802000000000000000085000000530000009500"/39], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x90) syz_emit_ethernet(0x1286, &(0x7f0000000940)={@local, @link_local, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0xb, 0x4, 0x3, 0x0, 0x1274, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xeb, [@multicast2, @multicast1, @rand_addr=0x64010101, @multicast1, @empty]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xce, 0xffff, [0xfffd, 0xd0f], "a48fa23449642bbef65bc82b560cb905f8adbee0b91f2b3116e7f3a267d0803d636769d821d2f0dff568b8b65da5920639c5b4ef5a5b15579746259dc3de73cb7479217d10efd1a32c48b9fa15786dad9c64b278ad04d1ffc8bd1d83d48a32b14b42e5e369b45693d408cbac024abac8e6f18ed1b109ea94bb28c0d3c487e541e324bad8702f4b1fe6d05bb7b9e6f9b43972abb90c796fd811fe8c5a6c6664c93f0795f256cec6cc797addea39c8c86982955d60a6f7d4e2190619388f7c3b8702c5d2f697c7b19ece617cd4c718"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7c9aee2d5353253055bc65acf8eb79c850467aebe8f70684ac0c1e220431664043c3108e248f36cb4ead2e03397b1368d622af898a4281f190da"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "ccfc1502583ebfebb884a19117f27940b270a9b441cea9f8a54988a8f9ec654a86533f7dca1b974738b07a018e046b1c24b071094d7390a639214f7941841a48684fc0ac6ecf43dfb64bbe2315e332e0ab268d642feedf5480c6b216ffa53798682f3b59cf9e742ed8fb76f052db2933bb0a220b8b878f5fb1fbe9d0d9bb5e3f2abb4407ebe1c7e23afd95d68fbd20af6038b8e199431696c358f70a72ae912b988799e3f329a8c13e072c56ca6b4c05716cdeeef22868f8522524a1e78bc0f2cf4b20f7c28381844e885f88f964dbbbae055c77bcef76bfb977574b287433ddbeada7bbb2d0bcd194f70bbfbda3847ddc4c923479dc"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x3, 0x0, 0x1, 0x2, 0x7}, 0x1, {0xc1}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x6, 0x1, 0x1, 0x0, 0x3, 0xd}, 0x2, {0xfd0000, 0x4757, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "b1c4a7ee5c8fe971db0786ecce4a7c39cdd29da23cc06b6a291fa9706af5208057131fcb46721911d96abe9dcc9ad70d5dedfcb1812432fe25a5509aac35e1682a36222e41f82656988b288cb4d9504b1a02d965e49da3841788f2d41d966e939c915e646103b01846af6d8ea868838332c66d3c916a9ddbd67dc498bee4347534ae52fac52f0e5bac7738637b39de1668925f4ba60a364cc282b61ab36c360343627ccbd28dfb89afacdc7a37f75f136164bf887d8376c7ab76a659aa41e7ed03d27f9f78bd51213d0e4a7bc99dd215412e44ad16dbb7e7dda80b65d532aa9a71275819560cf3471c66a220c217ee84f28157e6a0e6ee694bb16ed01294e714797cb6c4156915521372f4fa4faa6eb5802a062b09a4f7393188755630ae00c7f7f1e881d41d6b91f78d4f984fbf75e7326d12c402deda484c333a5c12fa72d3844e3fd8dbb5e03d203131d7290be7dc51fb0fdd8c8022e29b9f77095497144ee0f192978593fedc3cf92135ebb359c68ba6030cf68d9c37b229a396376aa68aaf8990d88996db09bac570ec00b7365999d696debab7fe5a7ca33abbe400886775f18cc32761b93ca93a3ea5917225ad5a8f8bf1feaf4ba8316b5eac37098c561f2121620dfb60c25ae0f0835900a55f659db8eaa399ed2f6b72363034afb0a80fe0db636b9b4df3230c73809654c900f81af4b4ae9f78dc1409780a490a2aa41577c55f48ffbb42611bd16c360e08debc4f456f1f8d3f3ffb33392228ff7dd9edb797ea16f36d9eec599fbc47467f95081dcdb4c1ac901ef24aa66ee08a294e452ca9ae2c18ea0eed01ae870b77f9edfb43f88cc97d5749e5a7f0360cbe3c98a0f9ea6c6d76f2feea218c4653d0d0e1207e94ce57f0fe27fbe6698c2a0c33b1d9aa724a7e0f9e75a270c76f300e770478ac3a11fdbb9501af0a5f1c22e21f6190bb04d8d6e10e97e5a430ef95354ba2694f567061cae5d1c59b0f5c3cff06c13eb9f4edf5afc792589ef90714ba8cbf1d8c5eb2cdaad6373f1e78af688e75da0eb8977e1ab2f59aa6a3d5b26a12c5193b6f2c826ea2e81076d92726eccc580d6274e5c742a9282789f083af02a81e8c09d40043e2bec666b908757cad1dfc0bb03befbe2d70af7c4d46af03c0fa14be073165aec5cddb4b47f8be75eff1e0f1bd603723c0b5f4ad84946b6885cf0e1ccf9c1249951b8135bf5bd2c11cf28c736ab1080ef5dfcf6abbdaa140e07a74bdc3a624f31065af23875f78bcf45497c7d309ff69ecc382f5b54a7eb94ca0f3661fec6e74285958eba9dccdda6aa3e2fc52b88416c7ddf9b633e1e2892809bf715da0999158f9c4a9375dad8486a9842c94fbe6dc0460a722cae7d1fb0f96c5916842c5ea7a91e779bbfb343071bb453c48ad64e749a9b391fcaf0b79669ee80fb1a4965235190c723ee15fbab2f27a3a0ac73353e328df914ab57fb8991279b29cee66e4768e515992e79dbab88eff3dae2a370d3e42802046a98bce7d527c62a8692593571b9f1aef8476e3b270a3239fe395d14912c1ff58ba7854cab8f1d90bb215e5c3389208b6fd9eb473b074239395fb5a48505ee25191c709d024d148c3b021279b351fca9ef5fdc93f5d5361755a903ae77d039c7d271cbf0274ea9fe5a1bdc1157ce275405bb85f4475ef3892c89b9b8d126745ed5764d8516391dd404b444e931e27df5d2417ef4764a15f6a470c07084bf8aecbc3a30155568ba4aa28ca3ecd0288a2083474fc0743489f3cda8c44fa190789e9826b653fe9c0bee883bf62a3deab639b5bcc2d5b850078cbb57c6d3343b0f2166ed0f4f0fe95e3896137941ec9f9a52d5a11bcb8a0d4b86c91db5b933d20aaf88cefb275454d1cca0cdd05b71579c03ebf59f35df32d8b1a3fe740454db546bec536e1f6778ade92cb650474312237d87fe1642122c6544df179588eeb601bf939aca15d913d7df893d9de190fb718eac60e7526cc308283b36e4e984ab26d104df8bdc3531c5b93da085608c3c84a943b9c0bb1e365a7001cc47e760a296609abc43e2e5291bed5a41230b70e4827a0c01881cbddd7fb8f48593a2e6388e3b9fe64f869bb2164068e3b1c6cb86f800e43809755ec1e5faeaa91b6024ff83ded87eec09dfaa9678baa4fb49d5304b066b75cd50921e512766c9986409d94de447ee5f4361af75e186547d566f8ece84fc4f3579e742a2ade703e3bf5c5ecc38dff5520527d313cfa317b56ed7ab7dca62dbc606dbb8196ca2ff326ae6ba676704a38bf924502de2fb1911d5952bff3281e7fe9d370b294a6c51f492c53c36dec57387a779bd56343b4d5efe6e045f20397f4652f5dcfeba830a01821992ffdc276958bc8a32ed8eba946c6693865a2f18731ab2e6777bb3f29ac5268cac220040c9066c4a3bc7159150188b60812df63a86037eea2762454d1ff5b8115f199b968c9e8a59c269babb070f5704d2d27d9b6c8a355bd1c96bf97c9229a6f54eca72a03830c3f8c03006b6ba733e4c53899a6e632358c333b2f2646dcc70598f107cb90ae399aff255ebbbb2da4687cf2025b6d2c59d87a61a6256c50205fa6b8acf2c648ae2a19d552a9af0b3e7d68f4f801fb5c639a1d6e168776766ff404a15f1193fc4a2e7969198991970559ce42d23c77944593bdcd94ac1fc5610a45d662f8136fe769543cf6de5a3d1325f9f1c7fe14f01a4b5341f41f0f692d078a3e7ff2496aab7d7999f78536582d9b5a6ebd1b6af27ef52e4818d3e98c131e7f246728682822b8460a87a42d20848b029aa0e571b1888af80a63d36e907317240c191049bdc92b206fb82daf186a382ddc5fc7deefb4d61fa94e19fe084023ba3e74d2738cf77219b071c8edd2e563bae8284335b56771e78d20c5e9e2b15d4acfe35de41585c74b08df4257fdeb0f2d39b1204c5b8c11958e6eb8f6e9902d4b35f06753d7e77a3d81f0e142d80890dfb4fb2d8a1b35cc89c77fe45fb15b36bb567ce6c298570d02a818653b13c973a56b58bce79c1d3041efd6b30fd1349a3813c1b731adaf3df1d632dc8186be4ef3959b5550b2e3129333ac34195003ffe986f01c1f666e4c874e726f75fce4e4e3306b3c53b7252c1344c8ebace4c3d411cab8f5dbfc3781d35efaaaf043dfd312a742e7113c99d54cecd0a6ee5a7347f9eff2d860e84d5ded3bbe39c25470b90a27a40e76791b9817c8a05945d1b29a36ef53f453a692e2ae0a5395df6741a6c5abc6a57da1f36e2d58d91d1a569da783bef5b8aaf95823e340a3214da0ebc43cae774495d3b8fbeba0d9df9dd813dca9e6a27a09f2f8b2ac413fdead6636bd5425ebb80aa9950411fc18ba03dc485c7c86dffeb0975bc2d08a32eb8b9295206e55fc6318f8258a4832cf5f4203196265ad36e86a21361d569fab92e0b439b08c3b6f2fe38a85299e97fc9e2ca2e564069f88619dfedcfce8e6dc5b3f58ce6cf3e287ec7983018bba9ed5e8e6e4f1e9854342fe389de59e962dcd5982b23e9217e3072f8a208ff54e680a1970524d24a974a05656f9a6ed1143ca2be401806d38c0ed06c97b33a09fe15bcea2f05cfaf78919ee7821f695310f4ed6b1736d0c08f30bbde6d29cc12bc7de3d21f386c0cb2cd42fcda0593978b4fd073d9ee29f4224a4666a3383512e461311b1c1b70fd156bec1025effd86aa4cd89f7071140b908ae806abec8175cfb5b3ee7ee89f1fcc9f75f45011baeb583c4068de9400245a4ca14b41708424ff04f1bcd3defe0ef52b2e1789dbf70922874265c2d13469c17cd8244f733ccacc458a17b70e285e57da2c306cb05c2aa8f783e773432c41901cd137dd3ca66c368ca3b0c9b8e89c26fc84a85d0900333d30411fcaf589654deff299a56ce278e6de0dd2bb64d77a5d99a38dd395d81cc81448c9f2ea041ba45caf0083a0c3920bd77e47be8006af329dd0c6d37c7bbef1251d0cb87d5402a62c56ca59e4d0ad9f9fafaba75487ed7c1e9e6b91e536f1f2671cf8000c799680d13e56b6675a626485beb61b1e6db8e35fc054fb791718ded80d666227ac1367565343b1df616a00afd135ba9a148300cfd0227fda17722af903aa628944f9cc26e7400387049068ea0df5c2b91c3c13a5d740e0c3bec83f3129cbbb8022c8e679748b53199aa106c0711ff6f0abc2d3e92d7753ca9df0eeba20607b22e36aad036ad6d9bd016bfc34a7c1bbf91af4af8007daad8959af0f65356cea2bcfddebed2e142aa5ad836033246151511bd438ac7694bd17324c639ffc0916566dab215087ec26362fc18c820702f8493a6e042a668efe437f41ffc19b73c4954f44c7b15578f6ec28259c4fb37b5bd705a836c61fd0a8b3de338a6537dadf9076062def173074913a2d82a3fe121ce25710d08646adf125486e9f07340ece11e1f9c7c3cc58083583053e8bc22c7c21c724a5063dd5632b22825eee1ae87c8b6aa3c3bcae4d4c3becc3e00edb12e2de85f7b70f13c155a72e8fe0495de7e3ecad4e765a1c8a7915e6a339704c35d73c8d3834d2999a6b409044fdef5fe1911b0c3c5dbbffc953d5406db692a89f491a32affa1307baf894a859984c9d8665bc2d653140db495b31be58b3f122194be83ac5091a04b7e011bed01aa298f73285cadd5110d0b607e9e20e91eda7b3074ea4c5755d80f49c7250d8c910797a56249ada8ad55233bb94bfb5cea382653cad3176414c59b271f72f6565dd5f7e70d53c4398296fc54d9b2cb5018837e34fa70ad3afd17cfac64cae0231cb6df10c10fe0b6d7f96ca4eb4b744461d4ef28ed4b12487988a9fd473e4742a5b887aa9c0247d510bc097ca33c8b2120e99c24d0468e6c252283032833def2b0d06db2f6c6516d8f565da38a01983159eff790641a5909e46af1803803eb58b36e6ae5d834fe48e88264b69dcbaa0f4cf250a8bb59e1d0c3dee6f936b576b56ba4d0b289e040ec6e1630b41fd251143a632603f81f8311b1891bc1d19f9fd89ddccdda96eb1113e7d9557c18ac2c5909bc29fe7de589ec67e882480a5eac0c8c24e22d5faa951d8e0245aa1adee5d1d70e2257361193a6a82b00fcd1543cf1b04106c80fc8b2d637f5074582f8a8f988a4ea0df9cb974f00ece2cec8fd790550d915e49bd523c3427cda320f61e2a8448de564a367f0225c40e851dce06b715d1911397de1988d5ed01818c0ca980b3ddd6d441af786b3360ec795b9877432759e97952c31a96d5e9929cc16ca0b083292f13cd867d359d1f9356ff711ea88a599dbd9af83b6d645aaeb74d86856d314d6352d024a7f4eacc6d89668c5f199f0fb7a185f65951d9aa7b2a9b803f377a31cd2fd9ae95cb1deab2b8b2607d055aa19e165cecc07e9b27930ad1f3cd336dd613941a2696e5f3d81800a861cfb0a4f08d53aaf41ab65ac637dc09c10391536161973d189aa374d0ab1cef59f78699aaf747e190d65a8b35dc1b318b6df7c03d2d5c54bbb194376827409616ffa532317171369a7a0a85c0b4d616ce8e798dfcb0a89cfe72d799b51c6a2571dee74afdc3247ad50109e78807ba29cd73c55a9836cdc0c9445ac52f9f8388bb620f6e135c47b98df30084a3362a14785d88db5f3d29206da6ba7842d458e97f7ee27be12a2b34cb81dab533e9e21ba6c554c5d94c2c825c1cc305eefa732b21fabfc8b9c80d230491f8f0bb5427cd3f4e711838c1f4b5fedd2bb3f1eabdbdc96f5a44810cfc9c3ec57eb083b4eb68cbe392a44a1aa457f28d6ec53a3f969b00b9487a548471275a0b257e1a2371ed5302b48fd"}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.291794405s ago: executing program 4 (id=1856): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x79, [@rand_addr, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d39, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x1, 0x803, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x20) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f00000009c0)=""/241, &(0x7f00000003c0)=0xf1) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC=r7, @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRESOCT=r10, @ANYRESOCT=r5, @ANYRESDEC=r7], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r11) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)={0x2c, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8094}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x210, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xfffffff7, 0x3, 0x8, 0x400, 0x4, 0x5, 0xc20]}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'nr0\x00', {0xff}, {0xff}, 0x89, 0x0, 0x0, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"0dd6", 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffff00, 0x0, 0xff], 'pim6reg0\x00', 'syzkaller0\x00', {0xff}, {}, 0x5e, 0x6, 0x1, 0x56}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x20, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r14}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.198198847s ago: executing program 0 (id=1859): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000055000000040000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.979228598s ago: executing program 4 (id=1864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000060000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.893339681s ago: executing program 0 (id=1866): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa7, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000030c0)}}], 0x1, 0x4008004) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5) readv(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x56, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r4, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r7, 0xa49a, 0x30}, 0xc) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 1.88961494s ago: executing program 4 (id=1867): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa7, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000030c0)}}], 0x1, 0x4008004) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x5) readv(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff00000000030000000000000000000000030000000000000000000000000000020000000000000000000000060200000000006d316188ceb080a8735139224b703c2a700ebb783fbc92b263c41411a3f243d52584bc473f4fcd07cdd36b419e0f741c93dd08c50a975d7d7ec244e145c0daf820786027798f20e1a97452bf76d17098e5e2a2add7d53332531ea36ff500b7b31362062448521988ab38e0c422103de18f0a25b6ba6d75f72d2126dcab1db03870a357e4ae81c8a2b4b87439cc57f8613bfb4555f9d5c77a86ec46250709328b14fdca58fac1c6aef9832d6db75a3a8f7afbc342bdd5129405c18865d0ea6bf9216e782014b6d2daaacadd"], 0x0, 0x56, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, r4, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={r7, 0xa49a, 0x30}, 0xc) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x0, 0x0) 1.705339536s ago: executing program 1 (id=1869): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601010000000000000000ace28f1d8b8bd2ad070000000900020073797a30000000000c00078008000840000000d00500050002000000050004000000000013000300686173683a6e7645b165742c69666163e27076cf33e02ae5afedfd4e0548831103f22a6975faab6a53fd4650ae3d03536d429646dfae8c03749ebfd1ab8b285f82aa4854d6de0d427042aa0970f73eeaeffa1727a2de276df489e079fc93dbbe88381c6ac25ae891fca650c22da8a233c7bfd4a8fe372d175e369a892faa033673e499d3ab"], 0x58}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000015000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) 1.381356459s ago: executing program 3 (id=1870): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x40000}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.356284487s ago: executing program 2 (id=1871): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x20000}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x93}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket(0x15, 0x5, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.277491869s ago: executing program 1 (id=1872): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010c000000000048880007000000", @ANYRES32=r1, @ANYBLOB="8000a2000a000200aaaa"], 0x30}}, 0x0) 1.189548908s ago: executing program 3 (id=1873): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000240001000000000000000000000000000600040000fee4"], 0x2c}, 0x1, 0x0, 0xfff0, 0x8041}, 0x8004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x1e, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$cgroup_devices(r2, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x5a}, 0x140008d0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffd0c, 0x0}, 0x2) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000fee000), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000001010104000000000000000002000000240001801400018008000100ac1e000108000200e000"], 0x88}}, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) 1.13319311s ago: executing program 1 (id=1874): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) 1.11312208s ago: executing program 2 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140000000000800014000000000080002"], 0x110}}, 0x0) 933.163502ms ago: executing program 1 (id=1876): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x1}]}, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x10}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)="e78b2a313a8fc9ff59084ddbdea1ad0dee4b9507c61517d8c4a3f4bdd791dfba9883719e33bb7c4f7343aab3e519daf4e554a92ffb84d5f34569c23025aded9d07d0eca0fd8437e1699a7cd846569b76e12f3776c1c127cbc22411ccd6429962584db2d8fddcf07be60303d7c1b2ec60920e91279cda0e406ceb3c0d4c2f7c96cc82358971df140448bf32531b68d1d56390784fed9737b1e98f3db3138e6c5cde819dab6aa4e4660b57576e390fed7a6dcf50bfcdd462681d26ccd5eebf40192acea818bce42394b8fcbc31d7807e9aff7b231072b5089951a9c8ef5709479d2f764bb9936c", 0xe6}, {&(0x7f00000003c0)="99080aab21ce3ba8ebf5d743908869832d6a927fa01d4d08f3b1416696dcbd6346ca9f498b09b3f4956a33b7d9c3af", 0x2f}, {&(0x7f0000000400)="9989865bdf03b7867a0a4952fbb3aecc57c48fc51ab7874a5d87301a581fe955dc60479c4de0ada32d08f6e28cdef93c33499a2fd4faff5ef8ff3693225f499342cb589edeaec2cc5889206b1b500a428784656833cec953458201f780f2ecb27ea5b2de4b2e51f53cb633ff60367f0f5e198e9e9a9070fc05c9040de55a14256e2577e7c0007fc878d1036b39d25570c1f214b2c48c0e408afb89910b68d128e8dd0374758ff676f6fae462", 0xac}, {&(0x7f00000004c0)}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="1f5f930355fc66c7d42f3e2268631f7fce3ac4ab3e6fa545a5479acb18eceb642108770a2a5742ca1a94972111c6dbab75eaaa5517b0fd59117b55f59b39d2e656e302e5445970eb71084c35e923509f561f7de8537ebff00fe29eb626354e15c538f293dcee4b427b4d36a3756a2bf42288c458", 0x74}], 0x6, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b00)="53b8e18b935e2f97fbf27ef680166024309988c835ed2bac2571e379668d2a44ca936ea0f830bf45c81a18642001b640678700fe506bc39c9f989780a7c4a0d880f1c08c2745c9f8b0350c072ca56b7d10fa8a01e57780d7ec6cc4c1eec8ef37f68939f9ce2d5de32146048c770a113ee73e67eb05780e6ca8ea9aca640783201d12d00824cedd2b4f7c81b44e30f655e905e36901af8606835a8a3a38830f4789b24276208ed4e2fbad5a8548c9e6beb3e1ae0fbe4d217203d030ff40497ac5a9782a79181a80dd5043b5db53fdb5", 0xcf}, {&(0x7f0000000d40)="c967ee28e82d3a23b568be4f1a7930ef9e5c181099d8d1f6c06ed37d8b11f286ff3fe07adc8458e2c543a6d4e0176007e812ee41575f3223f47c4d32067a10b94fbd48f7a4fa37447d87a975acca58e7734b78aea5d846aef83f586944b0bed4dcc09babde8c9d8ca9de7ed889009deeb71b577055197900df34cd8772440688e7a218053e062cfacf3bdb26a5c97610301e2444c01319b8c562a09d8bbc9080a9a5151f38a06aa6ac6dbf46d46584693f5f6bf764c1ea4e9c7915935879", 0xbe}, {&(0x7f0000000ec0)="cf685b4dec89680a204edfa0f35ab209f04f5bc3ac74a8d171fa3903d8c05bb5aeaff3e344a4eec20d49d4d82748af6b401b271f4a5ae0d3a474cf3ff1bba35d8c6a075caf30", 0x46}], 0x3, &(0x7f0000000f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x10}}], 0x88}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000001000)="00bcac54cd5dc762a316085f5513bfa9b9fff02f2068ce27009529b3ab66323b8790448e6ce346541ea236439bc2280217f9152f13f7d5d3a0604e59277475464b10f86ed70009469656c5fde7147b01489d39f9abf050523b4ad562ffd8650b4ff1e585fd312bf0cae155", 0x6b}], 0x1, &(0x7f0000001080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x8, "76863cec8568"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa0}}], 0x50}}, {{&(0x7f0000001100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000001140), 0x0, &(0x7f0000001180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3b}}], 0x18}}, {{&(0x7f00000011c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001300)="3b10a19dbc62dd05cc951a57b00022e7ba6e991171850b378a09e9b9db3f88045c80529fa28bb4d7990d45143485fab0005cba392061966fe48cce694181bbb921cce970e77e7e43989aad3fe0c005d9a1395f966c6685f6fbd8950898bcd1bc17c987d4ee5152bd0d91b75f4402e3a5fc8490307355866a78a4e997b7411572fd604cfa75bf7bdfbf65781fd8495365c099a66d720544e686cd91e13413e4777370ad2b3b3bc076503114f693ea609801361950854ee93066972229e66779e4a3adec", 0xc3}, {&(0x7f0000001400)="105816483dbcbb431061ec5bd5d6059172f69fe81139d29173e6e7595ea194f248207c8c365ab0612f59397ece08813eb6162fe6adf86a91574f1b88f3109a0112ed395e03908c3546ade45e28f23d6175db20d30eb6579e3e9a682d8843229d5759f87541019512", 0x68}], 0x2, &(0x7f0000001500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x5, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)="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", 0x1d5}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f65fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b3", 0xb2}, {&(0x7f0000000800)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76", 0x56}, {&(0x7f0000000000)="897e763ddac1b474ffa88f503b10", 0xe}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="6bd95c2d0855656d402d726be38e213a566e8ceed462f9439f83102df9c5a39c82362d1f0ff3f2ae611187a592c712156d5abf604572e23c7af3c1704bb806c3df9f185bf7904f258d6ee5dabbcce929151e36cd739ef9fcd46af42715397007dd6e86", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc", 0x2f}, {&(0x7f0000000580)="8df0b915d24279a8a885f493db2928d0d4f0a146a30cd7bb10151b1440228faa8782a6f51ebb0d223eac7e00", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000c00)="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", 0x10f}], 0x1}}], 0x4, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001480)="047b6783e59847bd4e37cf", 0xb, 0x98076b246f72a741, 0x0, 0x0) 932.755911ms ago: executing program 2 (id=1877): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2, 0x0, 0x40000, 0x0, 0x2, 0x3c43, 0xfffffffd, 0x1}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000240)={@private2, 0x4, 0x0, 0x3, 0x9, 0x25, 0x7}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_deladdr={0x20, 0x15, 0x1011, 0x70bd2b, 0x25dfdbfe, {0x2, 0x3f, 0x8, 0xc8, r8}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000005800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000060000000800000002"], 0x48) r12 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r11, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r12}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r11, &(0x7f00000000c0)="0c7288114136", 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x255, 0x4, 0x700}}}]}]}]}}]}, 0x50}}, 0x24000000) r13 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b80)=ANY=[], 0xc8}}, 0x4844) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 906.107244ms ago: executing program 3 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000050009050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001"], 0xd0}}, 0x0) 755.432213ms ago: executing program 2 (id=1879): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x255, 0x4, 0x700}}}]}]}]}}]}, 0x50}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 13) 705.503849ms ago: executing program 1 (id=1880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000060a01040000000000000000020000081a000740f7f5d0e70cbe9eea9066f7a1d8b28541ac739849569000000900010073797a300000000008000b"], 0x94}, 0x1, 0xf5ffffffffffffff}, 0x0) 697.599543ms ago: executing program 3 (id=1881): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700000001000010026bd70000000000000a10000", @ANYRES32=0x0, @ANYBLOB="4a29070000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="34001680300001802c000c801400010005000000be0800000500000009a80000140001"], 0x70}}, 0x0) 238.828251ms ago: executing program 3 (id=1882): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000054000000040000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 228.614222ms ago: executing program 2 (id=1883): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030009000900010073797a310000000014000000020a01"], 0xb0}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 165.461122ms ago: executing program 1 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100001000000000000000c0000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012800e0001006970366772657461700000001400028006000e0064"], 0x48}}, 0x0) 16.111911ms ago: executing program 3 (id=1885): unshare(0x22020600) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xc16ed17b812d05b6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000240)}, 0x20) 0s ago: executing program 2 (id=1886): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc021) kernel console output (not intermixed with test programs): 0 R15: 00007ffd416385c8 [ 71.696214][ T6020] [ 71.710120][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.776970][ T6023] Zero length message leads to an empty skb [ 71.887471][ T6028] netlink: 'syz.2.35': attribute type 22 has an invalid length. [ 71.938499][ T6030] netlink: 'syz.0.36': attribute type 8 has an invalid length. [ 72.248038][ T6030] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 53738 - 0 [ 72.274560][ T6030] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53738 - 0 [ 72.304026][ T6030] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53738 - 0 [ 72.326947][ T6030] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53738 - 0 [ 72.343249][ T6030] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 32929 - 0 [ 72.353253][ T6030] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 32929 - 0 [ 72.370017][ T6030] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 32929 - 0 [ 72.380021][ T6030] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 32929 - 0 [ 72.392703][ T6030] geneve2: entered promiscuous mode [ 72.399947][ T6030] geneve2: entered allmulticast mode [ 72.579920][ T6057] warning: `syz.3.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.690258][ T6064] netlink: 'syz.0.47': attribute type 22 has an invalid length. [ 73.025945][ T6078] __nla_validate_parse: 12 callbacks suppressed [ 73.025965][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 73.253576][ T6084] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 73.381565][ T6084] macvtap1: entered promiscuous mode [ 74.185544][ T6130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.62'. [ 74.217153][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 74.456869][ T6133] Bluetooth: MGMT ver 1.23 [ 74.517304][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 74.658860][ T6143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.66'. [ 74.769488][ T6149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.68'. [ 74.829259][ T6153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.69'. [ 75.065494][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 75.106509][ T6168] FAULT_INJECTION: forcing a failure. [ 75.106509][ T6168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.162615][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.3.73 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 75.173175][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 75.183255][ T6168] Call Trace: [ 75.186563][ T6168] [ 75.189520][ T6168] dump_stack_lvl+0x241/0x360 [ 75.194233][ T6168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.199469][ T6168] ? __pfx__printk+0x10/0x10 [ 75.204094][ T6168] ? __pfx_lock_release+0x10/0x10 [ 75.209164][ T6168] should_fail_ex+0x3b0/0x4e0 [ 75.213866][ T6168] _copy_from_user+0x2f/0xc0 [ 75.218486][ T6168] dev_ethtool+0xea/0x1bc0 [ 75.222938][ T6168] ? dev_load+0x21/0x1f0 [ 75.227290][ T6168] ? __pfx_dev_ethtool+0x10/0x10 [ 75.232259][ T6168] ? tomoyo_path_number_perm+0x679/0x860 [ 75.237931][ T6168] ? dev_load+0x21/0x1f0 [ 75.242205][ T6168] dev_ioctl+0x785/0x1340 [ 75.246565][ T6168] sock_do_ioctl+0x240/0x460 [ 75.251276][ T6168] ? __pfx_sock_do_ioctl+0x10/0x10 [ 75.256491][ T6168] sock_ioctl+0x626/0x8e0 [ 75.260854][ T6168] ? __pfx_sock_ioctl+0x10/0x10 [ 75.265732][ T6168] ? __fget_files+0x2a/0x410 [ 75.270353][ T6168] ? __fget_files+0x2a/0x410 [ 75.274967][ T6168] ? __pfx_sock_ioctl+0x10/0x10 [ 75.279842][ T6168] __se_sys_ioctl+0xf5/0x170 [ 75.284454][ T6168] do_syscall_64+0xf3/0x230 [ 75.288983][ T6168] ? clear_bhb_loop+0x35/0x90 [ 75.293682][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.299607][ T6168] RIP: 0033:0x7ff2b2785d29 [ 75.304038][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.318319][ T6175] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 75.323643][ T6168] RSP: 002b:00007ff2b3696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.323672][ T6168] RAX: ffffffffffffffda RBX: 00007ff2b2975fa0 RCX: 00007ff2b2785d29 [ 75.323686][ T6168] RDX: 0000000020000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 75.323698][ T6168] RBP: 00007ff2b3696090 R08: 0000000000000000 R09: 0000000000000000 [ 75.332825][ T6175] team0: Device bridge0 is up. Set it down before adding it as a team port [ 75.339790][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.339810][ T6168] R13: 0000000000000000 R14: 00007ff2b2975fa0 R15: 00007ffc51bbfb18 [ 75.339835][ T6168] [ 75.736867][ T6187] xt_hashlimit: max too large, truncated to 1048576 [ 75.812135][ T6184] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20002 [ 75.876071][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 75.945802][ T6201] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 76.012732][ T6201] netlink: 224 bytes leftover after parsing attributes in process `syz.0.80'. [ 77.174032][ T6255] smc: net device bond0 applied user defined pnetid SYZ2 [ 77.302502][ T6266] smc: net device bond0 erased user defined pnetid SYZ2 [ 78.101478][ T6234] delete_channel: no stack [ 78.135554][ T6276] __nla_validate_parse: 2 callbacks suppressed [ 78.135575][ T6276] netlink: 80 bytes leftover after parsing attributes in process `syz.4.90'. [ 78.200180][ T6234] delete_channel: no stack [ 78.215339][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 78.497973][ T6291] vlan2: entered promiscuous mode [ 78.713099][ T6296] Cannot find set identified by id 0 to match [ 78.836208][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.95'. [ 78.885264][ T6302] Cannot find set identified by id 0 to match [ 79.180627][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.97'. [ 79.399890][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.99'. [ 79.459635][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 80.170190][ T6335] xt_hashlimit: max too large, truncated to 1048576 [ 80.565801][ T6341] FAULT_INJECTION: forcing a failure. [ 80.565801][ T6341] name failslab, interval 1, probability 0, space 0, times 1 [ 80.609406][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.3.104 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 80.620053][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.630126][ T6341] Call Trace: [ 80.633414][ T6341] [ 80.636356][ T6341] dump_stack_lvl+0x241/0x360 [ 80.641071][ T6341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.646291][ T6341] ? __pfx__printk+0x10/0x10 [ 80.650909][ T6341] ? ref_tracker_alloc+0x332/0x490 [ 80.656048][ T6341] should_fail_ex+0x3b0/0x4e0 [ 80.660746][ T6341] should_failslab+0xac/0x100 [ 80.665444][ T6341] ? skb_clone+0x20c/0x390 [ 80.669878][ T6341] kmem_cache_alloc_noprof+0x70/0x380 [ 80.675273][ T6341] skb_clone+0x20c/0x390 [ 80.679548][ T6341] __netlink_deliver_tap+0x3cc/0x7f0 [ 80.684861][ T6341] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.690077][ T6341] netlink_deliver_tap+0x19d/0x1b0 [ 80.695208][ T6341] netlink_sendskb+0x68/0x140 [ 80.699905][ T6341] netlink_unicast+0x39d/0x990 [ 80.704690][ T6341] ? __pfx_netlink_unicast+0x10/0x10 [ 80.709999][ T6341] netlink_rcv_skb+0x262/0x430 [ 80.714777][ T6341] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 80.720255][ T6341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.725570][ T6341] ? apparmor_capable+0x13b/0x1b0 [ 80.730613][ T6341] ? bpf_lsm_capable+0x9/0x10 [ 80.735300][ T6341] ? security_capable+0x7e/0x2d0 [ 80.740253][ T6341] nfnetlink_rcv+0x297/0x2ab0 [ 80.744955][ T6341] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 80.750698][ T6341] ? __dev_queue_xmit+0x2f4/0x3f50 [ 80.755830][ T6341] ? __dev_queue_xmit+0x1775/0x3f50 [ 80.761051][ T6341] ? kasan_save_track+0x51/0x80 [ 80.765924][ T6341] ? ____sys_sendmsg+0x52a/0x7e0 [ 80.770882][ T6341] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 80.776015][ T6341] ? __dev_queue_xmit+0x2f4/0x3f50 [ 80.781148][ T6341] ? __pfx___dev_queue_xmit+0x10/0x10 [ 80.786571][ T6341] ? ref_tracker_free+0x643/0x7e0 [ 80.791622][ T6341] ? __asan_memcpy+0x40/0x70 [ 80.796260][ T6341] ? __pfx_ref_tracker_free+0x10/0x10 [ 80.801676][ T6341] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.806892][ T6341] ? skb_clone+0x240/0x390 [ 80.811336][ T6341] ? __pfx_lock_release+0x10/0x10 [ 80.816381][ T6341] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 80.821892][ T6341] ? netlink_deliver_tap+0x2e/0x1b0 [ 80.827123][ T6341] netlink_unicast+0x7f6/0x990 [ 80.831919][ T6341] ? __pfx_netlink_unicast+0x10/0x10 [ 80.837226][ T6341] ? __virt_addr_valid+0x45f/0x530 [ 80.842371][ T6341] ? __phys_addr_symbol+0x2f/0x70 [ 80.847426][ T6341] ? __check_object_size+0x47a/0x730 [ 80.852736][ T6341] netlink_sendmsg+0x8e4/0xcb0 [ 80.857531][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.862841][ T6341] ? aa_sock_msg_perm+0x91/0x160 [ 80.867807][ T6341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.873109][ T6341] __sock_sendmsg+0x221/0x270 [ 80.877810][ T6341] ____sys_sendmsg+0x52a/0x7e0 [ 80.882606][ T6341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.887905][ T6341] ? __fget_files+0x2a/0x410 [ 80.892519][ T6341] ? __fget_files+0x2a/0x410 [ 80.897137][ T6341] __sys_sendmsg+0x269/0x350 [ 80.901742][ T6341] ? __pfx_lock_release+0x10/0x10 [ 80.906786][ T6341] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.911923][ T6341] ? __pfx_vfs_write+0x10/0x10 [ 80.916724][ T6341] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.923067][ T6341] ? do_syscall_64+0x100/0x230 [ 80.927940][ T6341] ? do_syscall_64+0xb6/0x230 [ 80.932645][ T6341] do_syscall_64+0xf3/0x230 [ 80.937171][ T6341] ? clear_bhb_loop+0x35/0x90 [ 80.941864][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.947784][ T6341] RIP: 0033:0x7ff2b2785d29 [ 80.952229][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.971864][ T6341] RSP: 002b:00007ff2b3696038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.980313][ T6341] RAX: ffffffffffffffda RBX: 00007ff2b2975fa0 RCX: 00007ff2b2785d29 [ 80.988312][ T6341] RDX: 0000000020000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 80.996304][ T6341] RBP: 00007ff2b3696090 R08: 0000000000000000 R09: 0000000000000000 [ 81.004290][ T6341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.012288][ T6341] R13: 0000000000000000 R14: 00007ff2b2975fa0 R15: 00007ffc51bbfb18 [ 81.020293][ T6341] [ 81.262079][ T6349] FAULT_INJECTION: forcing a failure. [ 81.262079][ T6349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.306620][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 81.316616][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.1.106 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 81.327249][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.337328][ T6349] Call Trace: [ 81.340636][ T6349] [ 81.343584][ T6349] dump_stack_lvl+0x241/0x360 [ 81.348293][ T6349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.353511][ T6349] ? __pfx__printk+0x10/0x10 [ 81.358152][ T6349] ? rcu_is_watching+0x15/0xb0 [ 81.362954][ T6349] ? trace_contention_end+0x3c/0x120 [ 81.368293][ T6349] should_fail_ex+0x3b0/0x4e0 [ 81.373014][ T6349] _copy_to_user+0x31/0xb0 [ 81.377465][ T6349] ethtool_get_features+0x268/0x430 [ 81.382691][ T6349] ? __pfx___mutex_lock+0x10/0x10 [ 81.387745][ T6349] ? __pfx_ethtool_get_features+0x10/0x10 [ 81.393493][ T6349] ? __kasan_kmalloc+0x98/0xb0 [ 81.398316][ T6349] ? full_name_hash+0x93/0xe0 [ 81.403030][ T6349] dev_ethtool+0x150f/0x1bc0 [ 81.407662][ T6349] ? __pfx_dev_ethtool+0x10/0x10 [ 81.412644][ T6349] ? tomoyo_path_number_perm+0x679/0x860 [ 81.418325][ T6349] ? dev_load+0x21/0x1f0 [ 81.422611][ T6349] dev_ioctl+0x785/0x1340 [ 81.426981][ T6349] sock_do_ioctl+0x240/0x460 [ 81.431627][ T6349] ? __pfx_sock_do_ioctl+0x10/0x10 [ 81.436794][ T6349] sock_ioctl+0x626/0x8e0 [ 81.441157][ T6349] ? __pfx_sock_ioctl+0x10/0x10 [ 81.446047][ T6349] ? __fget_files+0x2a/0x410 [ 81.450675][ T6349] ? __fget_files+0x2a/0x410 [ 81.454811][ T6351] netlink: 'syz.0.108': attribute type 32 has an invalid length. [ 81.455291][ T6349] ? __pfx_sock_ioctl+0x10/0x10 [ 81.465251][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 81.467858][ T6349] __se_sys_ioctl+0xf5/0x170 [ 81.467888][ T6349] do_syscall_64+0xf3/0x230 [ 81.485762][ T6349] ? clear_bhb_loop+0x35/0x90 [ 81.490466][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.496384][ T6349] RIP: 0033:0x7fedca185d29 [ 81.500817][ T6349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.520454][ T6349] RSP: 002b:00007fedcb015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.525857][ T6361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.110'. [ 81.528874][ T6349] RAX: ffffffffffffffda RBX: 00007fedca375fa0 RCX: 00007fedca185d29 [ 81.528895][ T6349] RDX: 0000000020000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 81.528908][ T6349] RBP: 00007fedcb015090 R08: 0000000000000000 R09: 0000000000000000 [ 81.528921][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.569642][ T6349] R13: 0000000000000000 R14: 00007fedca375fa0 R15: 00007ffd365a6da8 [ 81.577639][ T6349] [ 81.590013][ T6351] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 81.851631][ T8] cfg80211: failed to load regulatory.db [ 82.263625][ T6391] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 82.278554][ T6388] vlan2: entered promiscuous mode [ 82.298838][ T6391] netlink: 152 bytes leftover after parsing attributes in process `syz.4.120'. [ 82.542377][ T6399] netlink: 'syz.3.123': attribute type 8 has an invalid length. [ 82.560179][ T6399] netlink: 'syz.3.123': attribute type 4 has an invalid length. [ 82.710769][ T6404] FAULT_INJECTION: forcing a failure. [ 82.710769][ T6404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.752180][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.4.126 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 82.762820][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.772912][ T6404] Call Trace: [ 82.776211][ T6404] [ 82.779164][ T6404] dump_stack_lvl+0x241/0x360 [ 82.783869][ T6404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.789109][ T6404] ? __pfx__printk+0x10/0x10 [ 82.793740][ T6404] ? snprintf+0xda/0x120 [ 82.798028][ T6404] should_fail_ex+0x3b0/0x4e0 [ 82.802733][ T6404] _copy_to_user+0x31/0xb0 [ 82.807182][ T6404] simple_read_from_buffer+0xca/0x150 [ 82.812587][ T6404] proc_fail_nth_read+0x1e9/0x250 [ 82.817638][ T6404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.823211][ T6404] ? rw_verify_area+0x55e/0x6f0 [ 82.828085][ T6404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.833669][ T6404] vfs_read+0x1fc/0xb70 [ 82.837852][ T6404] ? __pfx___mutex_lock+0x10/0x10 [ 82.842906][ T6404] ? __pfx_vfs_read+0x10/0x10 [ 82.847596][ T6404] ? __fget_files+0x2a/0x410 [ 82.852223][ T6404] ? __fget_files+0x395/0x410 [ 82.856920][ T6404] ? __fget_files+0x2a/0x410 [ 82.861530][ T6404] ksys_read+0x18f/0x2b0 [ 82.865775][ T6404] ? __pfx_ksys_read+0x10/0x10 [ 82.870535][ T6404] ? do_syscall_64+0x100/0x230 [ 82.875303][ T6404] ? do_syscall_64+0xb6/0x230 [ 82.879981][ T6404] do_syscall_64+0xf3/0x230 [ 82.884487][ T6404] ? clear_bhb_loop+0x35/0x90 [ 82.889169][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.895062][ T6404] RIP: 0033:0x7f962578473c [ 82.899475][ T6404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.919082][ T6404] RSP: 002b:00007f9626573030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.927503][ T6404] RAX: ffffffffffffffda RBX: 00007f9625975fa0 RCX: 00007f962578473c [ 82.935469][ T6404] RDX: 000000000000000f RSI: 00007f96265730a0 RDI: 0000000000000004 [ 82.943434][ T6404] RBP: 00007f9626573090 R08: 0000000000000000 R09: 0000000000000000 [ 82.951395][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.959376][ T6404] R13: 0000000000000000 R14: 00007f9625975fa0 R15: 00007ffe14a38c38 [ 82.967357][ T6404] [ 83.239921][ T6417] Cannot find set identified by id 0 to match [ 83.315600][ T6421] SET target dimension over the limit! [ 83.409448][ T6424] __nla_validate_parse: 2 callbacks suppressed [ 83.409467][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.134'. [ 83.547947][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'. [ 83.845715][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 83.881899][ T6415] syzkaller1: entered promiscuous mode [ 83.895368][ T6415] syzkaller1: entered allmulticast mode [ 84.567567][ T6452] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 84.638108][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.146'. [ 84.838667][ T6449] delete_channel: no stack [ 84.960681][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.150'. [ 85.716018][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 86.125755][ T6503] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 86.169924][ T6503] netlink: 224 bytes leftover after parsing attributes in process `syz.1.159'. [ 86.558347][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.163'. [ 86.618515][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 86.805161][ T6517] netlink: 'syz.4.165': attribute type 10 has an invalid length. [ 86.834184][ T6508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.097955][ T6517] team0: Device veth0_macvtap failed to register rx_handler [ 87.314417][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'. [ 87.445882][ T6527] netlink: 'syz.3.166': attribute type 4 has an invalid length. [ 87.453578][ T6527] netlink: 'syz.3.166': attribute type 2 has an invalid length. [ 87.567421][ T6534] FAULT_INJECTION: forcing a failure. [ 87.567421][ T6534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.606954][ T6534] CPU: 1 UID: 0 PID: 6534 Comm: syz.1.171 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 87.617599][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 87.627730][ T6534] Call Trace: [ 87.631042][ T6534] [ 87.633997][ T6534] dump_stack_lvl+0x241/0x360 [ 87.638724][ T6534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.643962][ T6534] ? __pfx__printk+0x10/0x10 [ 87.648688][ T6534] ? snprintf+0xda/0x120 [ 87.652960][ T6534] should_fail_ex+0x3b0/0x4e0 [ 87.657674][ T6534] _copy_to_user+0x31/0xb0 [ 87.662128][ T6534] simple_read_from_buffer+0xca/0x150 [ 87.667536][ T6534] proc_fail_nth_read+0x1e9/0x250 [ 87.672605][ T6534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.678186][ T6534] ? rw_verify_area+0x55e/0x6f0 [ 87.683066][ T6534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.688641][ T6534] vfs_read+0x1fc/0xb70 [ 87.690820][ T6530] vlan2: entered promiscuous mode [ 87.692813][ T6534] ? __pfx___mutex_lock+0x10/0x10 [ 87.692858][ T6534] ? __pfx_vfs_read+0x10/0x10 [ 87.707598][ T6534] ? __fget_files+0x2a/0x410 [ 87.712215][ T6534] ? __fget_files+0x395/0x410 [ 87.716933][ T6534] ? __fget_files+0x2a/0x410 [ 87.721579][ T6534] ksys_read+0x18f/0x2b0 [ 87.725827][ T6534] ? __pfx_ksys_read+0x10/0x10 [ 87.730588][ T6534] ? do_syscall_64+0x100/0x230 [ 87.735356][ T6534] ? do_syscall_64+0xb6/0x230 [ 87.740035][ T6534] do_syscall_64+0xf3/0x230 [ 87.744535][ T6534] ? clear_bhb_loop+0x35/0x90 [ 87.749206][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.755098][ T6534] RIP: 0033:0x7fedca18473c [ 87.759525][ T6534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 87.779141][ T6534] RSP: 002b:00007fedcb015030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.787555][ T6534] RAX: ffffffffffffffda RBX: 00007fedca375fa0 RCX: 00007fedca18473c [ 87.795532][ T6534] RDX: 000000000000000f RSI: 00007fedcb0150a0 RDI: 0000000000000004 [ 87.803497][ T6534] RBP: 00007fedcb015090 R08: 0000000000000000 R09: 0000000000000000 [ 87.811460][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.819596][ T6534] R13: 0000000000000000 R14: 00007fedca375fa0 R15: 00007ffd365a6da8 [ 87.827608][ T6534] [ 88.117258][ T6545] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 88.123793][ T6552] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 88.145093][ T6553] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 88.157542][ T6545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.211568][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.219251][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.252735][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.260130][ T6552] bridge0: port 2(bridge_slave_1) entered listening state [ 88.268399][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.275620][ T6552] bridge0: port 1(bridge_slave_0) entered listening state [ 88.371844][ T6552] team0: Port device bridge0 added [ 88.429082][ T6572] netlink: 'syz.3.185': attribute type 4 has an invalid length. [ 88.585146][ T6575] __nla_validate_parse: 5 callbacks suppressed [ 88.585165][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 88.672684][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.193'. [ 88.884076][ T6591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.887173][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 88.955509][ T6596] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 88.963308][ T6596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.197'. [ 89.313414][ T6613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.201'. [ 89.381928][ T6618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.202'. [ 89.599574][ T6629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.207'. [ 89.622250][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 89.777371][ T6636] xt_hashlimit: max too large, truncated to 1048576 [ 90.299068][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 90.327455][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 90.658128][ T6679] vlan2: entered promiscuous mode [ 91.046474][ T6688] netlink: 'syz.1.231': attribute type 5 has an invalid length. [ 91.055143][ T6698] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 91.096734][ T6705] xt_hashlimit: max too large, truncated to 1048576 [ 91.237272][ T6712] dccp_v4_rcv: dropped packet with invalid checksum [ 91.301773][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.012590][ T6745] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 92.060319][ T6745] batman_adv: batadv0: Adding interface: team0 [ 92.091306][ T6755] Cannot find set identified by id 0 to match [ 92.098790][ T6756] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 92.140645][ T6745] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.185420][ T6745] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 92.228398][ T6756] team0: entered promiscuous mode [ 92.258214][ T6756] team_slave_0: entered promiscuous mode [ 92.271649][ T6756] team_slave_1: entered promiscuous mode [ 92.282159][ T6756] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.335564][ T6756] batman_adv: batadv0: Interface activated: team0 [ 92.361677][ T6756] batman_adv: batadv0: Interface deactivated: team0 [ 92.395920][ T6756] batman_adv: batadv0: Removing interface: team0 [ 92.427448][ T6756] bridge0: port 3(team0) entered blocking state [ 92.451562][ T6756] bridge0: port 3(team0) entered disabled state [ 92.461904][ T6756] team0: entered allmulticast mode [ 92.467796][ T6756] team_slave_0: entered allmulticast mode [ 92.492457][ T6756] team_slave_1: entered allmulticast mode [ 92.536614][ T6756] bridge0: port 3(team0) entered blocking state [ 92.543023][ T6756] bridge0: port 3(team0) entered forwarding state [ 92.686113][ T6785] netlink: 'syz.3.261': attribute type 4 has an invalid length. [ 93.171971][ T6810] openvswitch: netlink: IPv4 tun info is not correct [ 93.459242][ T6822] xt_hashlimit: max too large, truncated to 1048576 [ 93.491427][ T6832] netlink: 'syz.4.274': attribute type 4 has an invalid length. [ 93.511056][ T6832] netlink: 'syz.4.274': attribute type 2 has an invalid length. [ 93.810499][ T6839] bond_slave_0: entered promiscuous mode [ 93.816567][ T6839] bond_slave_1: entered promiscuous mode [ 93.894906][ T6839] macsec1: entered promiscuous mode [ 93.923538][ T6839] bond0: entered promiscuous mode [ 93.974897][ T6856] Illegal XDP return value 3750793612 on prog (id 118) dev N/A, expect packet loss! [ 93.991107][ T6839] bond0: left promiscuous mode [ 94.018216][ T6839] bond_slave_0: left promiscuous mode [ 94.023753][ T6839] bond_slave_1: left promiscuous mode [ 94.126368][ T6848] vlan1: entered promiscuous mode [ 94.133882][ T6848] nlmon0: entered promiscuous mode [ 94.142320][ T6848] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 94.168066][ T6851] bond0: Unable to set down delay as MII monitoring is disabled [ 94.417593][ T6866] vlan2: entered promiscuous mode [ 94.422675][ T6866] macvtap0: entered promiscuous mode [ 94.428613][ T6868] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 94.440107][ T6870] __nla_validate_parse: 25 callbacks suppressed [ 94.440124][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.284'. [ 94.482323][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.545924][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.553309][ T6868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.604662][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 94.627494][ T6868] team0: Port device bridge0 added [ 94.915009][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 95.084959][ T6891] x_tables: duplicate underflow at hook 1 [ 95.092428][ T6896] netlink: 'syz.1.293': attribute type 4 has an invalid length. [ 95.124699][ T6896] netlink: 'syz.1.293': attribute type 2 has an invalid length. [ 95.329438][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.296'. [ 95.344894][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 95.405214][ T6905] netlink: 80 bytes leftover after parsing attributes in process `syz.1.296'. [ 95.414226][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 95.499006][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.300'. [ 95.521451][ T6907] ipvlan2: entered promiscuous mode [ 95.665779][ T6922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.302'. [ 95.791983][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.305'. [ 96.077020][ T6943] ipvlan2: entered promiscuous mode [ 96.250273][ T6954] netlink: 'syz.4.313': attribute type 4 has an invalid length. [ 96.343101][ T6950] ip6gre1: entered allmulticast mode [ 96.494113][ T6967] batadv_slave_1: entered promiscuous mode [ 96.566423][ T6964] batadv_slave_1: left promiscuous mode [ 96.699605][ T6979] Cannot find set identified by id 0 to match [ 96.973606][ T6992] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 96.983421][ T6992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.027938][ T6995] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 97.252501][ T7002] vlan2: entered promiscuous mode [ 97.262499][ T7002] nlmon0: entered promiscuous mode [ 97.282881][ T7002] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 97.437373][ T7006] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 97.507527][ T7006] macvtap1: entered promiscuous mode [ 98.021799][ T7036] Cannot find add_set index 0 as target [ 98.207714][ T7048] SET target dimension over the limit! [ 99.095982][ T7082] netlink: 'syz.0.343': attribute type 4 has an invalid length. [ 99.466052][ T7098] netlink: 'syz.1.347': attribute type 4 has an invalid length. [ 99.519541][ T7098] netlink: 'syz.1.347': attribute type 2 has an invalid length. [ 99.572969][ T7102] __nla_validate_parse: 15 callbacks suppressed [ 99.572989][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 99.845793][ T7113] netlink: 160 bytes leftover after parsing attributes in process `syz.0.351'. [ 99.872262][ T7116] Cannot find del_set index 286 as target [ 101.018486][ T7146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'. [ 102.830118][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.369'. [ 102.848556][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.368'. [ 102.896363][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 103.018410][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.372'. [ 103.139754][ T7208] netlink: 'syz.2.375': attribute type 9 has an invalid length. [ 103.160613][ T7208] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.375'. [ 103.174289][ T7208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.375'. [ 103.465350][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 103.595945][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 103.603768][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 103.841241][ T7225] team0 (unregistering): Port device team_slave_0 removed [ 103.855334][ T7225] team0 (unregistering): Port device team_slave_1 removed [ 104.622208][ T7256] __nla_validate_parse: 8 callbacks suppressed [ 104.622227][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 104.645939][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'. [ 104.816464][ T7256] netlink: 80 bytes leftover after parsing attributes in process `syz.2.393'. [ 104.846638][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 105.059075][ T7276] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 105.143408][ T7284] netlink: 68 bytes leftover after parsing attributes in process `syz.2.402'. [ 105.239908][ T7291] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 105.275484][ T7291] bridge0: port 3(team0) entered disabled state [ 105.282224][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.289542][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.324848][ T7291] team0: Device bridge0 is already an upper device of the team interface [ 105.343536][ T7294] Cannot find set identified by id 0 to match [ 105.355517][ T7295] netlink: 96 bytes leftover after parsing attributes in process `syz.4.403'. [ 105.449686][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.406'. [ 105.697816][ T7308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.410'. [ 105.825576][ T7270] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 105.932101][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 106.071948][ T7327] Cannot find set identified by id 0 to match [ 106.130647][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 106.173100][ T7336] Cannot find del_set index 286 as target [ 106.783870][ T7368] FAULT_INJECTION: forcing a failure. [ 106.783870][ T7368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.824613][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.2.431 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 106.835262][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 106.845341][ T7368] Call Trace: [ 106.848624][ T7368] [ 106.851553][ T7368] dump_stack_lvl+0x241/0x360 [ 106.856269][ T7368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.861469][ T7368] ? __pfx__printk+0x10/0x10 [ 106.866057][ T7368] ? __pfx_lock_release+0x10/0x10 [ 106.871088][ T7368] should_fail_ex+0x3b0/0x4e0 [ 106.875777][ T7368] _copy_from_user+0x2f/0xc0 [ 106.880376][ T7368] copy_msghdr_from_user+0xae/0x680 [ 106.885676][ T7368] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 106.891478][ T7368] ? __fget_files+0x2a/0x410 [ 106.896087][ T7368] ? __fget_files+0x2a/0x410 [ 106.900691][ T7368] __sys_sendmsg+0x209/0x350 [ 106.905286][ T7368] ? __pfx_lock_release+0x10/0x10 [ 106.910325][ T7368] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.915449][ T7368] ? __pfx_vfs_write+0x10/0x10 [ 106.920232][ T7368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.926573][ T7368] ? do_syscall_64+0x100/0x230 [ 106.931338][ T7368] ? do_syscall_64+0xb6/0x230 [ 106.936018][ T7368] do_syscall_64+0xf3/0x230 [ 106.940521][ T7368] ? clear_bhb_loop+0x35/0x90 [ 106.945194][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.951089][ T7368] RIP: 0033:0x7ff6f6385d29 [ 106.955503][ T7368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.975111][ T7368] RSP: 002b:00007ff6f7195038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.983522][ T7368] RAX: ffffffffffffffda RBX: 00007ff6f6575fa0 RCX: 00007ff6f6385d29 [ 106.991489][ T7368] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 106.999455][ T7368] RBP: 00007ff6f7195090 R08: 0000000000000000 R09: 0000000000000000 [ 107.007421][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.015387][ T7368] R13: 0000000000000000 R14: 00007ff6f6575fa0 R15: 00007ffd416385c8 [ 107.023364][ T7368] [ 107.125001][ T5844] Bluetooth: hci4: command tx timeout [ 107.192743][ T7378] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 107.212826][ T7378] netlink: 'syz.2.434': attribute type 2 has an invalid length. [ 107.989476][ T7425] SET target dimension over the limit! [ 107.998316][ T7427] netlink: 'syz.4.449': attribute type 4 has an invalid length. [ 108.076548][ T7429] netlink: 'syz.3.450': attribute type 3 has an invalid length. [ 108.176815][ T7434] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 108.274314][ T7438] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 108.763053][ T7459] bridge2: entered allmulticast mode [ 108.805422][ T7464] netlink: 'syz.4.460': attribute type 10 has an invalid length. [ 108.939838][ T7467] netlink: 'syz.0.461': attribute type 4 has an invalid length. [ 108.971859][ T7467] netlink: 'syz.0.461': attribute type 2 has an invalid length. [ 109.362010][ T7464] infiniband syz1: set down [ 109.379503][ T7464] infiniband syz1: added team_slave_0 [ 109.475743][ T7464] RDS/IB: syz1: added [ 109.558181][ T7464] smc: adding ib device syz1 with port count 1 [ 109.572617][ T7464] smc: ib device syz1 port 1 has pnetid [ 109.691926][ T7478] vlan3: entered promiscuous mode [ 109.980429][ T7487] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 110.682493][ T5844] Bluetooth: hci4: link tx timeout [ 110.688859][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.126336][ T7492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.197642][ T7511] Cannot find set identified by id 0 to match [ 111.222561][ T7497] __nla_validate_parse: 19 callbacks suppressed [ 111.222584][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 111.328812][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 111.419527][ T7492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.518945][ T7515] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 111.598039][ T7492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.690202][ T7492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.900023][ T7492] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.954117][ T7492] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.015792][ T7492] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.099838][ T7492] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.172099][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'. [ 112.192400][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 112.218817][ T7531] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 112.571293][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 112.835503][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 113.021707][ T7555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'. [ 113.235182][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 113.281511][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.491'. [ 113.488046][ T7575] xt_hashlimit: max too large, truncated to 1048576 [ 113.959236][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 113.986998][ T7586] netlink: 'syz.4.497': attribute type 4 has an invalid length. [ 114.028717][ T7586] netlink: 'syz.4.497': attribute type 2 has an invalid length. [ 114.317913][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'. [ 115.631632][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.042881][ T7663] netlink: 'syz.1.514': attribute type 22 has an invalid length. [ 116.346501][ T7670] SET target dimension over the limit! [ 116.450882][ T7672] __nla_validate_parse: 10 callbacks suppressed [ 116.450902][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 116.524606][ T7674] netlink: 64 bytes leftover after parsing attributes in process `syz.2.521'. [ 116.612167][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.521'. [ 116.700613][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 116.906674][ T7685] netlink: 76 bytes leftover after parsing attributes in process `syz.3.525'. [ 116.916667][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 116.929252][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.526'. [ 116.952179][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 117.221281][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 117.259760][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 117.274761][ T7708] xt_hashlimit: max too large, truncated to 1048576 [ 117.281554][ T7707] FAULT_INJECTION: forcing a failure. [ 117.281554][ T7707] name failslab, interval 1, probability 0, space 0, times 0 [ 117.322692][ T7707] CPU: 1 UID: 0 PID: 7707 Comm: syz.3.533 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 117.333332][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 117.343445][ T7707] Call Trace: [ 117.346743][ T7707] [ 117.349696][ T7707] dump_stack_lvl+0x241/0x360 [ 117.354402][ T7707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.359629][ T7707] ? __pfx__printk+0x10/0x10 [ 117.364248][ T7707] ? __kmalloc_cache_noprof+0x48/0x390 [ 117.369744][ T7707] ? __pfx___might_resched+0x10/0x10 [ 117.375051][ T7707] should_fail_ex+0x3b0/0x4e0 [ 117.379767][ T7707] should_failslab+0xac/0x100 [ 117.384469][ T7707] __kmalloc_cache_noprof+0x70/0x390 [ 117.389760][ T7707] ? nfnetlink_rcv+0x1265/0x2ab0 [ 117.394716][ T7707] nfnetlink_rcv+0x1265/0x2ab0 [ 117.399502][ T7707] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 117.404645][ T7707] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.409846][ T7707] ? skb_clone+0x240/0x390 [ 117.414258][ T7707] ? __pfx_lock_release+0x10/0x10 [ 117.419293][ T7707] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.424511][ T7707] netlink_unicast+0x7f6/0x990 [ 117.429311][ T7707] ? __pfx_netlink_unicast+0x10/0x10 [ 117.434606][ T7707] ? __virt_addr_valid+0x45f/0x530 [ 117.439721][ T7707] ? __phys_addr_symbol+0x2f/0x70 [ 117.444743][ T7707] ? __check_object_size+0x47a/0x730 [ 117.450031][ T7707] netlink_sendmsg+0x8e4/0xcb0 [ 117.454806][ T7707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.460113][ T7707] ? aa_sock_msg_perm+0x91/0x160 [ 117.465062][ T7707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.470351][ T7707] __sock_sendmsg+0x221/0x270 [ 117.475040][ T7707] ____sys_sendmsg+0x52a/0x7e0 [ 117.479834][ T7707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.485133][ T7707] ? __fget_files+0x2a/0x410 [ 117.489750][ T7707] ? __fget_files+0x2a/0x410 [ 117.494356][ T7707] __sys_sendmsg+0x269/0x350 [ 117.498956][ T7707] ? __pfx_lock_release+0x10/0x10 [ 117.503988][ T7707] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.509108][ T7707] ? __pfx_vfs_write+0x10/0x10 [ 117.513887][ T7707] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.520224][ T7707] ? do_syscall_64+0x100/0x230 [ 117.525009][ T7707] ? do_syscall_64+0xb6/0x230 [ 117.529690][ T7707] do_syscall_64+0xf3/0x230 [ 117.534205][ T7707] ? clear_bhb_loop+0x35/0x90 [ 117.538886][ T7707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.544785][ T7707] RIP: 0033:0x7ff2b2785d29 [ 117.549206][ T7707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.568827][ T7707] RSP: 002b:00007ff2b3696038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.577248][ T7707] RAX: ffffffffffffffda RBX: 00007ff2b2975fa0 RCX: 00007ff2b2785d29 [ 117.585232][ T7707] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 117.593202][ T7707] RBP: 00007ff2b3696090 R08: 0000000000000000 R09: 0000000000000000 [ 117.601170][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.609138][ T7707] R13: 0000000000000000 R14: 00007ff2b2975fa0 R15: 00007ffc51bbfb18 [ 117.617139][ T7707] [ 118.181815][ T7732] netlink: 'syz.0.540': attribute type 4 has an invalid length. [ 118.528997][ T7752] netlink: 'syz.1.545': attribute type 20 has an invalid length. [ 118.770642][ T7761] netlink: 'syz.0.549': attribute type 4 has an invalid length. [ 118.903612][ T7765] Cannot find set identified by id 0 to match [ 118.954510][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.961814][ C1] bridge0: topology change detected, propagating [ 118.968523][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.975785][ C1] bridge0: topology change detected, propagating [ 119.293491][ T7787] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 119.775414][ T7800] netlink: 'syz.1.560': attribute type 22 has an invalid length. [ 120.147648][ T7815] netlink: 'syz.3.568': attribute type 8 has an invalid length. [ 120.160257][ T7815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.412075][ T7824] FAULT_INJECTION: forcing a failure. [ 120.412075][ T7824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.431820][ T7824] CPU: 1 UID: 0 PID: 7824 Comm: syz.0.569 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 120.442453][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 120.452525][ T7824] Call Trace: [ 120.455827][ T7824] [ 120.458775][ T7824] dump_stack_lvl+0x241/0x360 [ 120.463497][ T7824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.468721][ T7824] ? __pfx__printk+0x10/0x10 [ 120.473339][ T7824] ? snprintf+0xda/0x120 [ 120.477607][ T7824] should_fail_ex+0x3b0/0x4e0 [ 120.482311][ T7824] _copy_to_user+0x31/0xb0 [ 120.486752][ T7824] simple_read_from_buffer+0xca/0x150 [ 120.492151][ T7824] proc_fail_nth_read+0x1e9/0x250 [ 120.497199][ T7824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.502770][ T7824] ? rw_verify_area+0x55e/0x6f0 [ 120.507638][ T7824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.513211][ T7824] vfs_read+0x1fc/0xb70 [ 120.517478][ T7824] ? __pfx___mutex_lock+0x10/0x10 [ 120.522536][ T7824] ? __pfx_vfs_read+0x10/0x10 [ 120.527232][ T7824] ? __fget_files+0x2a/0x410 [ 120.531845][ T7824] ? __fget_files+0x395/0x410 [ 120.536543][ T7824] ? __fget_files+0x2a/0x410 [ 120.541166][ T7824] ksys_read+0x18f/0x2b0 [ 120.545428][ T7824] ? __pfx_ksys_read+0x10/0x10 [ 120.550216][ T7824] ? do_syscall_64+0x100/0x230 [ 120.555004][ T7824] ? do_syscall_64+0xb6/0x230 [ 120.559709][ T7824] do_syscall_64+0xf3/0x230 [ 120.564233][ T7824] ? clear_bhb_loop+0x35/0x90 [ 120.568927][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.574843][ T7824] RIP: 0033:0x7f6ce798473c [ 120.579287][ T7824] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.598916][ T7824] RSP: 002b:00007f6ce87a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.607359][ T7824] RAX: ffffffffffffffda RBX: 00007f6ce7b75fa0 RCX: 00007f6ce798473c [ 120.615360][ T7824] RDX: 000000000000000f RSI: 00007f6ce87a90a0 RDI: 0000000000000004 [ 120.623356][ T7824] RBP: 00007f6ce87a9090 R08: 0000000000000000 R09: 0000000000000000 [ 120.631352][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.639348][ T7824] R13: 0000000000000000 R14: 00007f6ce7b75fa0 R15: 00007ffe2a3e7918 [ 120.647367][ T7824] [ 120.672812][ T7825] netlink: 'syz.4.571': attribute type 4 has an invalid length. [ 121.566474][ T7856] syzkaller1: entered promiscuous mode [ 121.578794][ T7856] syzkaller1: entered allmulticast mode [ 121.928148][ T7864] __nla_validate_parse: 19 callbacks suppressed [ 121.928169][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 121.978220][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.585'. [ 122.103033][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 122.215405][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 122.245084][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 124.735353][ T7890] netlink: 'syz.4.593': attribute type 10 has an invalid length. [ 124.757075][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.774901][ T7890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.593'. [ 124.790445][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.929184][ T7882] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.948356][ T7882] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.965038][ T7882] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.985121][ T7882] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.042430][ T7882] macvtap1: left promiscuous mode [ 125.407466][ T7897] netlink: 'syz.4.596': attribute type 4 has an invalid length. [ 125.451486][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 125.461036][ T7900] xt_hashlimit: max too large, truncated to 1048576 [ 125.717590][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 125.755185][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.601'. [ 125.769545][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 126.919843][ T7951] vlan2: entered promiscuous mode [ 127.518652][ T7982] __nla_validate_parse: 6 callbacks suppressed [ 127.518672][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.628'. [ 127.731504][ T7986] netlink: 'syz.2.629': attribute type 22 has an invalid length. [ 127.770679][ T7986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.629'. [ 127.791504][ T7990] netlink: 68 bytes leftover after parsing attributes in process `syz.3.630'. [ 128.130030][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 128.219920][ T8003] xt_hashlimit: max too large, truncated to 1048576 [ 128.380648][ T8009] netlink: 'syz.3.639': attribute type 9 has an invalid length. [ 128.420395][ T8011] netlink: 'syz.0.640': attribute type 21 has an invalid length. [ 128.437969][ T8009] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.639'. [ 128.446721][ T8011] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.473941][ T8011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.481540][ T8011] IPv6: NLM_F_CREATE should be set when creating new route [ 128.488952][ T8011] IPv6: NLM_F_CREATE should be set when creating new route [ 128.496247][ T8011] IPv6: NLM_F_CREATE should be set when creating new route [ 128.496980][ T8009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.639'. [ 128.536328][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.642'. [ 128.580247][ T8016] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.590165][ T8016] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.599215][ T8016] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.608697][ T8016] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.828790][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.646'. [ 128.890575][ T8032] netlink: 'syz.3.649': attribute type 11 has an invalid length. [ 128.999755][ T8038] xt_hashlimit: max too large, truncated to 1048576 [ 129.025589][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 129.044226][ T8040] netlink: 'syz.4.651': attribute type 4 has an invalid length. [ 129.366885][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.653'. [ 129.438315][ T8047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.642804][ T8057] netlink: 'syz.1.655': attribute type 4 has an invalid length. [ 129.738065][ T8055] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 130.191441][ T8081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 130.263020][ T8085] xt_hashlimit: max too large, truncated to 1048576 [ 130.413714][ T8091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.473089][ T8091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.546862][ T8096] netlink: 'syz.1.668': attribute type 9 has an invalid length. [ 130.653826][ T8100] SET target dimension over the limit! [ 131.516281][ T8142] netlink: 'syz.1.685': attribute type 4 has an invalid length. [ 131.676541][ T8148] netlink: 'syz.0.689': attribute type 32 has an invalid length. [ 131.847828][ T8154] netlink: 'syz.1.691': attribute type 4 has an invalid length. [ 131.897670][ T8157] vlan2: entered promiscuous mode [ 131.943541][ T8164] veth0: entered promiscuous mode [ 131.973331][ T8164] macvtap2: entered promiscuous mode [ 132.004884][ T8164] macvtap2: entered allmulticast mode [ 132.010321][ T8164] veth0: entered allmulticast mode [ 132.073857][ T8165] veth0: left allmulticast mode [ 132.092299][ T8165] veth0: left promiscuous mode [ 132.318944][ T8180] netlink: 'syz.2.700': attribute type 4 has an invalid length. [ 132.524015][ T8191] xt_hashlimit: max too large, truncated to 1048576 [ 132.789405][ T8209] __nla_validate_parse: 26 callbacks suppressed [ 132.789425][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.711'. [ 132.858440][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 133.048940][ T8224] Cannot find set identified by id 0 to match [ 133.701463][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.724'. [ 133.712494][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'. [ 133.817835][ T8254] netlink: 68 bytes leftover after parsing attributes in process `syz.3.726'. [ 133.818328][ T8248] netlink: 80 bytes leftover after parsing attributes in process `syz.1.725'. [ 133.866811][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 134.140620][ T8266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.731'. [ 134.161792][ T8265] Cannot find del_set index 286 as target [ 134.203765][ T8268] netlink: 'syz.4.733': attribute type 4 has an invalid length. [ 134.473169][ T8282] netlink: 'syz.2.738': attribute type 10 has an invalid length. [ 134.491693][ T8282] team0: Device bridge0 is up. Set it down before adding it as a team port [ 134.606894][ T8288] netlink: 224 bytes leftover after parsing attributes in process `syz.0.740'. [ 134.630030][ T8288] openvswitch: netlink: Flow key attr not present in new flow. [ 134.672174][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 134.703134][ T8293] vlan2: entered promiscuous mode [ 135.380294][ T8326] netlink: 'syz.2.751': attribute type 4 has an invalid length. [ 135.847027][ T8343] Cannot find del_set index 286 as target [ 136.038798][ T8353] netlink: 'syz.2.762': attribute type 4 has an invalid length. [ 136.067221][ T8353] netlink: 'syz.2.762': attribute type 2 has an invalid length. [ 136.951137][ T8401] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 137.451629][ T8421] vlan3: entered promiscuous mode [ 137.888291][ T8433] sctp: [Deprecated]: syz.0.789 (pid 8433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.888291][ T8433] Use struct sctp_sack_info instead [ 137.898316][ T8438] __nla_validate_parse: 19 callbacks suppressed [ 137.898338][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 137.963064][ T8430] netlink: 'syz.0.789': attribute type 2 has an invalid length. [ 138.091856][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 138.188185][ T8446] netlink: 'syz.4.796': attribute type 4 has an invalid length. [ 138.196270][ T8446] netlink: 152 bytes leftover after parsing attributes in process `syz.4.796'. [ 138.207596][ T8440] netlink: 240 bytes leftover after parsing attributes in process `syz.1.793'. [ 138.278299][ T8451] xt_connbytes: Forcing CT accounting to be enabled [ 138.318245][ T8451] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.348234][ T8451] xt_bpf: check failed: parse error [ 138.381527][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'. [ 138.413683][ T8451] batadv_slave_1: entered promiscuous mode [ 138.443869][ T8451] batadv_slave_1: left promiscuous mode [ 138.630401][ T8462] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 138.671045][ T8462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.800'. [ 138.799699][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 138.863114][ T8469] xt_hashlimit: max too large, truncated to 1048576 [ 138.980804][ T8477] netlink: 'syz.1.808': attribute type 2 has an invalid length. [ 139.023066][ T8477] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 139.106813][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.810'. [ 139.206112][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.813'. [ 139.342203][ T8493] netlink: 80 bytes leftover after parsing attributes in process `syz.3.813'. [ 139.529021][ T8497] raw_sendmsg: syz.1.818 forgot to set AF_INET. Fix it! [ 139.670286][ T8508] netlink: 'syz.0.822': attribute type 4 has an invalid length. [ 139.674648][ T8504] vlan2: entered promiscuous mode [ 139.768050][ T8514] netlink: 'syz.1.824': attribute type 10 has an invalid length. [ 139.834744][ T8514] team0: Device bridge0 is already an upper device of the team interface [ 140.276777][ T8539] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 140.423412][ T8544] dummy0: entered promiscuous mode [ 140.439402][ T8544] dummy0: left promiscuous mode [ 140.894165][ T8572] xt_hashlimit: max too large, truncated to 1048576 [ 141.712759][ T8624] geneve0: entered promiscuous mode [ 141.734931][ T8624] geneve0: left promiscuous mode [ 141.792204][ T8630] validate_nla: 1 callbacks suppressed [ 141.792223][ T8630] netlink: 'syz.3.865': attribute type 4 has an invalid length. [ 142.004411][ T8642] netlink: 'syz.4.867': attribute type 10 has an invalid length. [ 142.496468][ T8668] xt_hashlimit: max too large, truncated to 1048576 [ 143.040124][ T8701] __nla_validate_parse: 13 callbacks suppressed [ 143.040155][ T8701] netlink: 68 bytes leftover after parsing attributes in process `syz.3.887'. [ 143.144816][ T8707] netlink: 'syz.1.892': attribute type 4 has an invalid length. [ 143.152170][ T8705] trusted_key: syz.0.893 sent an empty control message without MSG_MORE. [ 143.173718][ T8707] netlink: 152 bytes leftover after parsing attributes in process `syz.1.892'. [ 143.245527][ T8711] netlink: 'syz.4.894': attribute type 9 has an invalid length. [ 143.262545][ T8712] netlink: 144 bytes leftover after parsing attributes in process `syz.2.895'. [ 143.264030][ T8711] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.894'. [ 143.295020][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.896'. [ 143.340946][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.894'. [ 143.415805][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 143.439112][ T8724] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 143.900158][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 143.974838][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.906'. [ 144.008742][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 144.090147][ T8759] openvswitch: netlink: Flow actions attr not present in new flow. [ 144.230483][ T8766] netlink: 'syz.4.912': attribute type 22 has an invalid length. [ 144.257213][ T8769] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 144.465620][ T8777] Cannot find set identified by id 0 to match [ 144.538466][ T8778] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 144.606032][ T8780] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.951544][ T8804] netlink: 'syz.1.926': attribute type 22 has an invalid length. [ 145.279106][ T8816] xt_l2tp: invalid flags combination: 0 [ 145.491890][ T8828] netlink: 'syz.3.936': attribute type 1 has an invalid length. [ 145.690920][ T8838] netlink: 'syz.0.940': attribute type 22 has an invalid length. [ 145.715044][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.722584][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.985641][ T8849] Cannot find del_set index 286 as target [ 146.077624][ T8855] netlink: 'syz.2.946': attribute type 10 has an invalid length. [ 146.097517][ T8855] team0: Device bridge0 is up. Set it down before adding it as a team port [ 146.141544][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.149524][ T8858] bridge_slave_0: left allmulticast mode [ 146.155751][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.192270][ T8858] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 146.956394][ T8901] Cannot find set identified by id 0 to match [ 147.006388][ T8903] xt_hashlimit: max too large, truncated to 1048576 [ 147.523130][ T8929] Cannot find add_set index 0 as target [ 147.525543][ T8926] validate_nla: 3 callbacks suppressed [ 147.525560][ T8926] netlink: 'syz.2.966': attribute type 22 has an invalid length. [ 147.563546][ T8930] sctp: [Deprecated]: syz.3.967 (pid 8930) Use of int in maxseg socket option. [ 147.563546][ T8930] Use struct sctp_assoc_value instead [ 147.584749][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.593340][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.704265][ T8937] SET target dimension over the limit! [ 147.863315][ T8944] netlink: 'syz.0.970': attribute type 1 has an invalid length. [ 148.102346][ T8957] vlan2: entered promiscuous mode [ 148.109050][ T8957] bond0: (slave vlan2): Opening slave failed [ 148.529900][ T8975] __nla_validate_parse: 29 callbacks suppressed [ 148.529919][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 148.778022][ T8985] Cannot find set identified by id 0 to match [ 148.796773][ T8989] netlink: 104 bytes leftover after parsing attributes in process `syz.1.986'. [ 148.928553][ T8993] veth4: entered allmulticast mode [ 148.952948][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 149.240624][ T9001] Cannot find add_set index 0 as target [ 149.311437][ T9003] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 149.493567][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 149.726942][ T9019] SET target dimension over the limit! [ 150.161158][ T9031] netlink: 'syz.1.1003': attribute type 16 has an invalid length. [ 150.182579][ T9033] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 150.191337][ T9033] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1002'. [ 150.199908][ T9031] netlink: 'syz.1.1003': attribute type 3 has an invalid length. [ 150.211299][ T9031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1003'. [ 150.249847][ T9031] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.259089][ T9031] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.268084][ T9031] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.276896][ T9031] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.295181][ T9031] vxlan1: entered promiscuous mode [ 150.311408][ T9031] vxlan1: entered allmulticast mode [ 150.371343][ T9031] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.380857][ T9031] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.390175][ T9031] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.399407][ T9031] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.609609][ T9047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 150.821730][ T9050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1006'. [ 150.858375][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 151.208627][ T9056] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 151.226017][ T9056] netlink: 'syz.0.1008': attribute type 29 has an invalid length. [ 151.255496][ T9057] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1008'. [ 151.298417][ T9056] netlink: 'syz.0.1008': attribute type 21 has an invalid length. [ 151.986718][ T9070] Cannot find del_set index 286 as target [ 152.133370][ T9077] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 152.210297][ T9078] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 152.409406][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 152.438555][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 152.454038][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 153.214177][ T9100] bridge0: port 3(team0) entered blocking state [ 153.220632][ T9100] bridge0: port 3(team0) entered listening state [ 153.227224][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.234360][ T9100] bridge0: port 2(bridge_slave_1) entered listening state [ 153.241736][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.248933][ T9100] bridge0: port 1(bridge_slave_0) entered listening state [ 153.297447][ T9077] infiniband syz2: set down [ 153.316055][ T9077] infiniband syz2: added ip6gre0 [ 153.322053][ T9077] syz2: rxe_create_cq: returned err = -12 [ 153.333443][ T9077] infiniband syz2: Couldn't create ib_mad CQ [ 153.341130][ T9077] infiniband syz2: Couldn't open port 1 [ 153.347030][ T5827] ip6gre0 speed is unknown, defaulting to 1000 [ 153.447788][ T9077] RDS/IB: syz2: added [ 153.474880][ T9077] smc: adding ib device syz2 with port count 1 [ 153.481097][ T9077] smc: ib device syz2 port 1 has pnetid [ 153.549003][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 153.574001][ T47] ip6gre0 speed is unknown, defaulting to 1000 [ 154.055604][ T9119] Cannot find del_set index 286 as target [ 154.237229][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 154.273616][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.463875][ T9126] __nla_validate_parse: 8 callbacks suppressed [ 154.463894][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 154.654301][ T9128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1032'. [ 154.728573][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 154.806084][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 154.815987][ T9130] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1034'. [ 154.976038][ T9141] netlink: 'syz.0.1035': attribute type 22 has an invalid length. [ 155.001904][ T9141] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1035'. [ 155.068382][ T9144] FAULT_INJECTION: forcing a failure. [ 155.068382][ T9144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.075007][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1038'. [ 155.107585][ T9144] CPU: 1 UID: 0 PID: 9144 Comm: syz.4.1037 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 155.118323][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 155.128410][ T9144] Call Trace: [ 155.131709][ T9144] [ 155.134659][ T9144] dump_stack_lvl+0x241/0x360 [ 155.139371][ T9144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.140601][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 155.144572][ T9144] ? __pfx__printk+0x10/0x10 [ 155.144599][ T9144] ? __pfx_lock_release+0x10/0x10 [ 155.144626][ T9144] should_fail_ex+0x3b0/0x4e0 [ 155.165085][ T9144] _copy_from_user+0x2f/0xc0 [ 155.169702][ T9144] copy_msghdr_from_user+0xae/0x680 [ 155.174926][ T9144] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 155.180772][ T9144] __sys_sendmmsg+0x32b/0x720 [ 155.185503][ T9144] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.190746][ T9144] ? __pfx_lock_release+0x10/0x10 [ 155.195814][ T9144] ? kstrtouint_from_user+0x128/0x190 [ 155.201231][ T9144] ? rcu_read_lock_any_held+0xb7/0x160 [ 155.206719][ T9144] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 155.212644][ T9144] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 155.218306][ T9144] ? sb_end_write+0xe9/0x1c0 [ 155.222933][ T9144] ? vfs_write+0x730/0xd30 [ 155.227378][ T9144] ? do_sys_openat2+0x17a/0x1d0 [ 155.232287][ T9144] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.238297][ T9144] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.244654][ T9144] ? do_syscall_64+0x100/0x230 [ 155.249446][ T9144] __x64_sys_sendmmsg+0xa0/0xb0 [ 155.254326][ T9144] do_syscall_64+0xf3/0x230 [ 155.258853][ T9144] ? clear_bhb_loop+0x35/0x90 [ 155.263551][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.269469][ T9144] RIP: 0033:0x7f9625785d29 [ 155.273901][ T9144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.293533][ T9144] RSP: 002b:00007f9626573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.295527][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 155.301956][ T9144] RAX: ffffffffffffffda RBX: 00007f9625975fa0 RCX: 00007f9625785d29 [ 155.301973][ T9144] RDX: 0000000000000001 RSI: 0000000020001200 RDI: 0000000000000005 [ 155.301986][ T9144] RBP: 00007f9626573090 R08: 0000000000000000 R09: 0000000000000000 [ 155.301998][ T9144] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 155.302010][ T9144] R13: 0000000000000000 R14: 00007f9625975fa0 R15: 00007ffe14a38c38 [ 155.348075][ T9144] [ 155.464419][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1040'. [ 155.511534][ T9155] netlink: 'syz.1.1041': attribute type 4 has an invalid length. [ 155.692554][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1044'. [ 155.752999][ T9077] ip6gre0 speed is unknown, defaulting to 1000 [ 155.770465][ T9165] SET target dimension over the limit! [ 155.795124][ T9167] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1044'. [ 155.828385][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'. [ 155.883717][ T9169] Cannot find del_set index 286 as target [ 156.252483][ T9180] netlink: 'syz.3.1049': attribute type 22 has an invalid length. [ 156.760665][ T9205] SET target dimension over the limit! [ 157.004005][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.011208][ T9216] bridge0: port 2(bridge_slave_1) entered listening state [ 157.018576][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.025780][ T9216] bridge0: port 1(bridge_slave_0) entered listening state [ 157.155287][ T9228] netlink: 'syz.2.1063': attribute type 22 has an invalid length. [ 157.711406][ T9247] SET target dimension over the limit! [ 157.783956][ T9250] netlink: 'syz.4.1071': attribute type 8 has an invalid length. [ 157.809775][ T9250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.031464][ T9231] ip6gre0 speed is unknown, defaulting to 1000 [ 158.245622][ T9263] xt_bpf: check failed: parse error [ 158.416688][ T9267] openvswitch: netlink: Unknown key attributes 20 [ 158.600580][ T9278] FAULT_INJECTION: forcing a failure. [ 158.600580][ T9278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.622620][ T9278] CPU: 1 UID: 0 PID: 9278 Comm: syz.2.1082 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 158.633366][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.643445][ T9278] Call Trace: [ 158.646744][ T9278] [ 158.649692][ T9278] dump_stack_lvl+0x241/0x360 [ 158.654406][ T9278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.659635][ T9278] ? __pfx__printk+0x10/0x10 [ 158.664270][ T9278] ? snprintf+0xda/0x120 [ 158.668543][ T9278] should_fail_ex+0x3b0/0x4e0 [ 158.673253][ T9278] _copy_to_user+0x31/0xb0 [ 158.677702][ T9278] simple_read_from_buffer+0xca/0x150 [ 158.683089][ T9278] proc_fail_nth_read+0x1e9/0x250 [ 158.688191][ T9278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.693743][ T9278] ? rw_verify_area+0x55e/0x6f0 [ 158.698590][ T9278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.704131][ T9278] vfs_read+0x1fc/0xb70 [ 158.708284][ T9278] ? do_sys_openat2+0x17a/0x1d0 [ 158.713134][ T9278] ? __pfx_vfs_read+0x10/0x10 [ 158.717823][ T9278] ksys_read+0x18f/0x2b0 [ 158.722068][ T9278] ? __pfx_ksys_read+0x10/0x10 [ 158.726853][ T9278] ? do_syscall_64+0x100/0x230 [ 158.731655][ T9278] ? do_syscall_64+0xb6/0x230 [ 158.736345][ T9278] do_syscall_64+0xf3/0x230 [ 158.740851][ T9278] ? clear_bhb_loop+0x35/0x90 [ 158.745530][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.751431][ T9278] RIP: 0033:0x7ff6f638473c [ 158.755844][ T9278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.775446][ T9278] RSP: 002b:00007ff6f7195030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.783857][ T9278] RAX: ffffffffffffffda RBX: 00007ff6f6575fa0 RCX: 00007ff6f638473c [ 158.791847][ T9278] RDX: 000000000000000f RSI: 00007ff6f71950a0 RDI: 0000000000000006 [ 158.799833][ T9278] RBP: 00007ff6f7195090 R08: 0000000000000000 R09: 0000000000000000 [ 158.807822][ T9278] R10: 0000000004000040 R11: 0000000000000246 R12: 0000000000000001 [ 158.815801][ T9278] R13: 0000000000000000 R14: 00007ff6f6575fa0 R15: 00007ffd416385c8 [ 158.823802][ T9278] [ 159.322968][ T9303] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 159.843224][ T9318] netlink: 'syz.0.1095': attribute type 22 has an invalid length. [ 159.883973][ T9318] __nla_validate_parse: 13 callbacks suppressed [ 159.883994][ T9318] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1095'. [ 159.904718][ T9319] netlink: 'syz.2.1094': attribute type 22 has an invalid length. [ 159.938723][ T9319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1094'. [ 159.975891][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.983155][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.225034][ T9339] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1098'. [ 160.451278][ T9346] netlink: 'syz.0.1102': attribute type 11 has an invalid length. [ 160.514113][ T12] tipc: Subscription rejected, illegal request [ 160.521122][ T9346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1102'. [ 160.544635][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1102'. [ 160.571186][ T9346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1102'. [ 160.602623][ T9346] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1102'. [ 160.631849][ T9351] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 160.659390][ T9351] hsr0: entered promiscuous mode [ 160.680349][ T9351] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 160.719964][ T9351] bond0: (slave hsr0): Error -95 calling set_mac_address [ 161.063353][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1107'. [ 161.470458][ T9370] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 161.512520][ T9370] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1113'. [ 161.850052][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 163.084666][ T9410] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 163.564835][ T9445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.594625][ T9450] netlink: 'syz.0.1137': attribute type 4 has an invalid length. [ 163.604682][ T9445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.641845][ T9453] SET target dimension over the limit! [ 163.690164][ T9456] erspan0: entered promiscuous mode [ 163.775705][ T9450] ipt_rpfilter: unknown options [ 163.830198][ T9463] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 164.089118][ T9457] ip6gre0 speed is unknown, defaulting to 1000 [ 164.267404][ T9489] Cannot find set identified by id 0 to match [ 164.836426][ T9521] SET target dimension over the limit! [ 164.924747][ T9523] __nla_validate_parse: 11 callbacks suppressed [ 164.924767][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 164.986336][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 165.029939][ T9529] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 165.051452][ T9529] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1168'. [ 165.063836][ T9523] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 165.079295][ T9523] macsec1: entered allmulticast mode [ 165.108670][ T9523] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 165.156177][ T9523] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 165.183674][ T9523] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 165.561632][ T9561] netlink: 'syz.0.1176': attribute type 22 has an invalid length. [ 165.611729][ T9561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1176'. [ 165.709610][ T9564] netlink: 'syz.4.1177': attribute type 22 has an invalid length. [ 165.741657][ T9564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1177'. [ 165.771019][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.783009][ T9571] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 165.823297][ T9571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1181'. [ 166.169487][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 166.314024][ T9600] netlink: 'syz.3.1192': attribute type 22 has an invalid length. [ 166.372930][ T9600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1192'. [ 166.546156][ T9609] netlink: 'syz.1.1195': attribute type 9 has an invalid length. [ 166.553931][ T9609] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1195'. [ 166.615186][ T9609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1195'. [ 166.625136][ T5880] IPVS: starting estimator thread 0... [ 166.649829][ T9612] wg0: Master is either lo or non-ether device [ 166.727476][ T9614] IPVS: using max 31 ests per chain, 74400 per kthread [ 166.820463][ T9625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.975920][ T9634] netlink: 'syz.2.1207': attribute type 22 has an invalid length. [ 166.995532][ T9636] netlink: 'syz.0.1205': attribute type 4 has an invalid length. [ 167.213209][ T9654] netlink: 'syz.2.1211': attribute type 4 has an invalid length. [ 168.092606][ T9706] wg1: entered promiscuous mode [ 168.125354][ T9706] vlan3: entered promiscuous mode [ 168.142320][ T9706] wg1: left promiscuous mode [ 168.234596][ C1] bridge0: port 3(team0) entered learning state [ 168.349225][ T9723] netlink: 'syz.1.1240': attribute type 4 has an invalid length. [ 168.424804][ T9723] netlink: 'syz.1.1240': attribute type 2 has an invalid length. [ 168.449536][ T9728] netlink: 'syz.4.1242': attribute type 4 has an invalid length. [ 168.576054][ T9734] vlan2: entered promiscuous mode [ 168.582585][ T9734] bond0: (slave vlan2): Opening slave failed [ 168.643938][ T9741] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.875148][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 168.882436][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 168.892431][ T9755] Cannot find del_set index 286 as target [ 169.431637][ T9783] bridge0: port 3(team0) entered disabled state [ 169.439286][ T9783] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.446523][ T9783] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.571586][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.597398][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.692992][ T9783] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 169.734349][ T9783] ip6gre1: left allmulticast mode [ 169.765352][ T9783] vlan2: left promiscuous mode [ 169.775392][ T9783] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.784758][ T9783] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.800994][ T9783] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.811259][ T9783] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.956751][ T9815] __nla_validate_parse: 29 callbacks suppressed [ 169.956771][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 170.113894][ T9824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1274'. [ 170.124732][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 170.166188][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 170.293428][ T9836] Cannot find del_set index 286 as target [ 170.358572][ T9837] vlan3: entered promiscuous mode [ 170.379818][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 170.404770][ T9840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1283'. [ 170.423892][ T9841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1281'. [ 170.542097][ T9852] xt_hashlimit: max too large, truncated to 1048576 [ 170.797419][ T9873] validate_nla: 2 callbacks suppressed [ 170.797438][ T9873] netlink: 'syz.1.1291': attribute type 4 has an invalid length. [ 170.810954][ T9873] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1291'. [ 170.980120][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'. [ 170.989585][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'. [ 171.093299][ T9889] tipc: Failed to obtain node identity [ 171.106664][ T9889] tipc: Enabling of bearer rejected, failed to enable media [ 171.272841][ T9904] netlink: 'syz.1.1301': attribute type 9 has an invalid length. [ 171.336757][ T9908] netlink: 'syz.3.1304': attribute type 5 has an invalid length. [ 171.448019][ T9912] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 171.491729][ T9912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.506227][ T9912] ip6gretap1: entered allmulticast mode [ 171.514705][ T9912] bond1: (slave ip6gretap1): making interface the new active one [ 171.523633][ T9912] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.532214][ T9912] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.540807][ T9912] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 171.569202][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.587650][ T5880] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.636199][ T9925] Cannot find del_set index 286 as target [ 171.750550][ T47] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.893905][ T9943] openvswitch: netlink: Tunnel attr 220 out of range max 16 [ 171.905588][ T9941] SET target dimension over the limit! [ 172.062364][ T9954] netlink: 'syz.1.1321': attribute type 4 has an invalid length. [ 172.395858][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.526232][ T9981] SET target dimension over the limit! [ 172.608040][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.750929][T10001] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 172.907093][ T9998] bridge_slave_0: left promiscuous mode [ 172.931647][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.946578][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.991236][ T9998] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.000599][ T9998] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.010472][ T9998] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.019976][ T9998] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.030901][ T9998] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 173.062551][ T9998] vlan1: left promiscuous mode [ 173.068454][ T9998] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 173.078885][ T9998] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 173.088022][ T9998] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 173.098233][ T9998] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 173.312651][T10022] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 173.413484][T10028] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 173.440951][T10031] Cannot find set identified by id 0 to match [ 173.445130][ T2200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.475096][ T2200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 173.490020][T10028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.651978][T10038] netlink: 'syz.0.1353': attribute type 4 has an invalid length. [ 173.736954][ T5896] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.388036][T10088] macvlan2: entered promiscuous mode [ 174.393859][T10088] bridge0: entered promiscuous mode [ 174.408704][T10088] bridge0: port 4(macvlan2) entered blocking state [ 174.418057][T10088] bridge0: port 4(macvlan2) entered disabled state [ 174.428404][T10088] macvlan2: entered allmulticast mode [ 174.434128][T10088] bridge0: entered allmulticast mode [ 174.445096][T10088] macvlan2: left allmulticast mode [ 174.450253][T10088] bridge0: left allmulticast mode [ 174.458398][T10088] bridge0: left promiscuous mode [ 174.749869][T10107] sch_fq: defrate 511 ignored. [ 175.082672][T10124] __nla_validate_parse: 35 callbacks suppressed [ 175.082692][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 175.105246][T10127] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 175.113069][T10127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.240580][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 175.303638][T10136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1386'. [ 175.491777][T10146] : renamed from ipvlan1 [ 175.607850][T10152] netlink: 'syz.2.1393': attribute type 4 has an invalid length. [ 175.634706][T10152] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1393'. [ 175.704946][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1397'. [ 175.774231][T10160] SET target dimension over the limit! [ 175.795248][T10163] Cannot find del_set index 286 as target [ 175.797525][T10164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1400'. [ 175.875689][T10158] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1397'. [ 175.899716][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'. [ 176.172830][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 176.300876][T10180] ip6gre0 speed is unknown, defaulting to 1000 [ 176.390290][T10193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1410'. [ 176.421118][T10195] SET target dimension over the limit! [ 176.751269][T10209] SET target dimension over the limit! [ 176.914800][T10218] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 176.999450][T10218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.023666][T10220] bond2: (slave gretap2): making interface the new active one [ 177.033449][T10220] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 177.114940][ T8220] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 177.114957][ T8220] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.332998][T10236] Cannot find del_set index 286 as target [ 177.342895][T10238] netlink: 'syz.2.1426': attribute type 4 has an invalid length. [ 177.834722][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.255949][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.328983][T10293] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 178.699350][T10311] Cannot find add_set index 0 as target [ 178.706899][T10312] FAULT_INJECTION: forcing a failure. [ 178.706899][T10312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.728697][T10312] CPU: 0 UID: 0 PID: 10312 Comm: syz.1.1451 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 178.739068][T10314] netlink: 'syz.2.1453': attribute type 1 has an invalid length. [ 178.739488][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.757294][T10312] Call Trace: [ 178.760595][T10312] [ 178.763552][T10312] dump_stack_lvl+0x241/0x360 [ 178.768276][T10312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.773514][T10312] ? __pfx__printk+0x10/0x10 [ 178.775189][T10314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.778114][T10312] ? __pfx_lock_release+0x10/0x10 [ 178.778152][T10312] should_fail_ex+0x3b0/0x4e0 [ 178.778177][T10312] _copy_from_user+0x2f/0xc0 [ 178.799034][T10312] copy_msghdr_from_user+0xae/0x680 [ 178.804235][T10312] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 178.810037][T10312] ? __fget_files+0x2a/0x410 [ 178.814641][T10312] ? __fget_files+0x2a/0x410 [ 178.819250][T10312] __sys_sendmmsg+0x32b/0x720 [ 178.823951][T10312] ? __pfx___sys_sendmmsg+0x10/0x10 [ 178.829177][T10312] ? __pfx_lock_release+0x10/0x10 [ 178.834222][T10312] ? kstrtouint_from_user+0x128/0x190 [ 178.839612][T10312] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 178.845525][T10312] ? ksys_write+0x22a/0x2b0 [ 178.850060][T10312] ? __pfx_lock_release+0x10/0x10 [ 178.855120][T10312] ? vfs_write+0x730/0xd30 [ 178.859646][T10312] ? __mutex_unlock_slowpath+0x21e/0x790 [ 178.865312][T10312] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.871310][T10312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.877648][T10312] ? do_syscall_64+0x100/0x230 [ 178.882426][T10312] __x64_sys_sendmmsg+0xa0/0xb0 [ 178.887297][T10312] do_syscall_64+0xf3/0x230 [ 178.891826][T10312] ? clear_bhb_loop+0x35/0x90 [ 178.896502][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.902393][T10312] RIP: 0033:0x7fedca185d29 [ 178.906815][T10312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.926450][T10312] RSP: 002b:00007fedcb015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 178.934903][T10312] RAX: ffffffffffffffda RBX: 00007fedca375fa0 RCX: 00007fedca185d29 [ 178.942908][T10312] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 178.951176][T10312] RBP: 00007fedcb015090 R08: 0000000000000000 R09: 0000000000000000 [ 178.959173][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.967168][T10312] R13: 0000000000000000 R14: 00007fedca375fa0 R15: 00007ffd365a6da8 [ 178.975184][T10312] [ 179.325589][T10330] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 179.526418][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.712084][T10353] xt_hashlimit: max too large, truncated to 1048576 [ 179.736894][T10354] sctp: [Deprecated]: syz.0.1464 (pid 10354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.736894][T10354] Use struct sctp_sack_info instead [ 179.840867][T10358] netlink: 'syz.1.1469': attribute type 4 has an invalid length. [ 179.989377][T10362] netlink: 'syz.1.1472': attribute type 1 has an invalid length. [ 180.184838][T10376] __nla_validate_parse: 23 callbacks suppressed [ 180.184860][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1475'. [ 180.243778][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1477'. [ 180.244817][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1475'. [ 180.261871][T10378] ax25_connect(): syz.3.1477 uses autobind, please contact jreuter@yaina.de [ 180.308709][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 180.415826][T10386] openvswitch: netlink: Message has 8 unknown bytes. [ 180.429851][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 180.443783][T10386] netlink: 'syz.3.1481': attribute type 12 has an invalid length. [ 180.541258][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 180.677036][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.765799][T10411] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1487'. [ 180.798639][T10410] netlink: 'syz.2.1488': attribute type 9 has an invalid length. [ 180.812564][T10410] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1488'. [ 180.833944][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 180.836305][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1488'. [ 180.991668][T10421] netlink: 'syz.0.1491': attribute type 10 has an invalid length. [ 181.106470][T10426] bridge_slave_0 (unregistering): left allmulticast mode [ 181.123689][T10426] bridge_slave_0 (unregistering): left promiscuous mode [ 181.138371][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.364765][T10441] veth1_to_bridge: entered promiscuous mode [ 181.390850][T10441] veth1_to_bridge: left promiscuous mode [ 181.454039][T10442] veth1_to_bridge: entered promiscuous mode [ 181.463648][T10442] veth1_to_bridge: left promiscuous mode [ 181.545338][T10433] ip6gre0 speed is unknown, defaulting to 1000 [ 181.856000][ T2200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.825170][T10496] validate_nla: 1 callbacks suppressed [ 182.825193][T10496] netlink: 'syz.4.1521': attribute type 2 has an invalid length. [ 183.037892][ T5896] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 183.167725][T10482] ip6gre0 speed is unknown, defaulting to 1000 [ 184.214847][ T5896] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.726466][T10582] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 184.780956][T10587] netlink: 'syz.2.1549': attribute type 1 has an invalid length. [ 185.090381][T10602] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 185.278805][T10611] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 185.294833][T10611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.347608][T10618] __nla_validate_parse: 33 callbacks suppressed [ 185.347627][T10618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1559'. [ 185.371463][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.414658][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 185.490704][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 185.578086][T10636] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.764324][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 185.914561][T10662] netlink: 'syz.3.1570': attribute type 9 has an invalid length. [ 185.922567][T10662] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1570'. [ 185.937956][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1570'. [ 185.975307][T10664] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 186.009818][T10664] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1569'. [ 186.062195][T10669] netlink: 'syz.2.1572': attribute type 10 has an invalid length. [ 186.101968][T10676] Cannot find add_set index 0 as target [ 186.129453][T10669] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.136942][T10669] bridge0: port 2(bridge_slave_1) entered listening state [ 186.145377][T10669] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.153186][T10669] bridge0: port 1(bridge_slave_0) entered listening state [ 186.199318][T10669] team0: Port device bridge0 added [ 186.273265][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1575'. [ 186.300336][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1575'. [ 186.319950][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 186.330384][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 186.337766][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 186.338406][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 186.346417][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 186.528881][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.794602][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.012952][T10720] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 187.323483][T10733] netlink: 'syz.3.1588': attribute type 10 has an invalid length. [ 187.396650][T10733] batman_adv: batadv0: Adding interface: virt_wifi0 [ 187.419324][T10733] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.464203][T10733] batman_adv: batadv0: Interface activated: virt_wifi0 [ 187.599202][T10754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.665947][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.780585][T10762] Cannot find del_set index 286 as target [ 187.963023][T10776] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 188.221656][T10795] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 188.245014][T10795] team0: Device bridge0 is already an upper device of the team interface [ 188.266145][T10797] netlink: 'syz.3.1607': attribute type 4 has an invalid length. [ 188.436166][T10808] FAULT_INJECTION: forcing a failure. [ 188.436166][T10808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.465231][T10808] CPU: 1 UID: 0 PID: 10808 Comm: syz.3.1611 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 188.476063][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 188.486147][T10808] Call Trace: [ 188.489446][T10808] [ 188.492398][T10808] dump_stack_lvl+0x241/0x360 [ 188.497105][T10808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.502339][T10808] ? __pfx__printk+0x10/0x10 [ 188.506954][T10808] ? __pfx_lock_release+0x10/0x10 [ 188.512008][T10808] should_fail_ex+0x3b0/0x4e0 [ 188.516719][T10808] _copy_from_user+0x2f/0xc0 [ 188.519970][T10810] netlink: 'syz.1.1613': attribute type 10 has an invalid length. [ 188.521320][T10808] copy_msghdr_from_user+0xae/0x680 [ 188.534328][T10808] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.540148][T10808] ? __fget_files+0x2a/0x410 [ 188.544768][T10808] ? __fget_files+0x2a/0x410 [ 188.545520][T10810] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 188.549372][T10808] __sys_sendmsg+0x209/0x350 [ 188.562467][T10808] ? __pfx_lock_release+0x10/0x10 [ 188.567532][T10808] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.572685][T10808] ? __pfx_vfs_write+0x10/0x10 [ 188.577503][T10808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.583858][T10808] ? do_syscall_64+0x100/0x230 [ 188.588650][T10808] ? do_syscall_64+0xb6/0x230 [ 188.593350][T10808] do_syscall_64+0xf3/0x230 [ 188.597883][T10808] ? clear_bhb_loop+0x35/0x90 [ 188.602581][T10808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.608500][T10808] RIP: 0033:0x7ff2b2785d29 [ 188.612943][T10808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.632585][T10808] RSP: 002b:00007ff2b3696038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.641055][T10808] RAX: ffffffffffffffda RBX: 00007ff2b2975fa0 RCX: 00007ff2b2785d29 [ 188.649055][T10808] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 188.657050][T10808] RBP: 00007ff2b3696090 R08: 0000000000000000 R09: 0000000000000000 [ 188.665032][T10808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.673001][T10808] R13: 0000000000000000 R14: 00007ff2b2975fa0 R15: 00007ffc51bbfb18 [ 188.680986][T10808] [ 188.859788][T10827] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 188.914299][T10832] netlink: 'syz.4.1621': attribute type 8 has an invalid length. [ 188.936189][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.433807][T10864] FAULT_INJECTION: forcing a failure. [ 189.433807][T10864] name failslab, interval 1, probability 0, space 0, times 0 [ 189.450952][T10866] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 189.460654][T10864] CPU: 1 UID: 0 PID: 10864 Comm: syz.0.1629 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 189.469257][T10866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.471435][T10864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 189.490354][T10864] Call Trace: [ 189.493657][T10864] [ 189.496607][T10864] dump_stack_lvl+0x241/0x360 [ 189.501315][T10864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.506545][T10864] ? __pfx__printk+0x10/0x10 [ 189.511174][T10864] should_fail_ex+0x3b0/0x4e0 [ 189.515883][T10864] should_failslab+0xac/0x100 [ 189.520594][T10864] ? skb_clone+0x20c/0x390 [ 189.525034][T10864] kmem_cache_alloc_noprof+0x70/0x380 [ 189.530443][T10864] skb_clone+0x20c/0x390 [ 189.534805][T10864] __netlink_deliver_tap+0x3cc/0x7f0 [ 189.540122][T10864] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.545338][T10864] netlink_deliver_tap+0x19d/0x1b0 [ 189.550472][T10864] netlink_unicast+0x7c4/0x990 [ 189.555267][T10864] ? __pfx_netlink_unicast+0x10/0x10 [ 189.560572][T10864] ? __virt_addr_valid+0x45f/0x530 [ 189.565705][T10864] ? __phys_addr_symbol+0x2f/0x70 [ 189.570762][T10864] ? __check_object_size+0x47a/0x730 [ 189.576090][T10864] netlink_sendmsg+0x8e4/0xcb0 [ 189.580889][T10864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.586205][T10864] ? aa_sock_msg_perm+0x91/0x160 [ 189.591176][T10864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.596498][T10864] __sock_sendmsg+0x221/0x270 [ 189.601209][T10864] ____sys_sendmsg+0x52a/0x7e0 [ 189.606012][T10864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.611326][T10864] ? __fget_files+0x2a/0x410 [ 189.615957][T10864] ? __fget_files+0x2a/0x410 [ 189.620589][T10864] __sys_sendmmsg+0x36a/0x720 [ 189.625307][T10864] ? __pfx___sys_sendmmsg+0x10/0x10 [ 189.630546][T10864] ? __pfx_lock_release+0x10/0x10 [ 189.635600][T10864] ? kstrtouint_from_user+0x128/0x190 [ 189.641024][T10864] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 189.646950][T10864] ? ksys_write+0x22a/0x2b0 [ 189.651480][T10864] ? __pfx_lock_release+0x10/0x10 [ 189.656542][T10864] ? vfs_write+0x730/0xd30 [ 189.660984][T10864] ? __mutex_unlock_slowpath+0x21e/0x790 [ 189.666670][T10864] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.672678][T10864] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.679025][T10864] ? do_syscall_64+0x100/0x230 [ 189.683815][T10864] __x64_sys_sendmmsg+0xa0/0xb0 [ 189.688688][T10864] do_syscall_64+0xf3/0x230 [ 189.693212][T10864] ? clear_bhb_loop+0x35/0x90 [ 189.697907][T10864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.703823][T10864] RIP: 0033:0x7f6ce7985d29 [ 189.708255][T10864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.727887][T10864] RSP: 002b:00007f6ce87a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.736326][T10864] RAX: ffffffffffffffda RBX: 00007f6ce7b75fa0 RCX: 00007f6ce7985d29 [ 189.744352][T10864] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 189.752341][T10864] RBP: 00007f6ce87a9090 R08: 0000000000000000 R09: 0000000000000000 [ 189.760333][T10864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.768331][T10864] R13: 0000000000000000 R14: 00007f6ce7b75fa0 R15: 00007ffe2a3e7918 [ 189.776343][T10864] [ 190.205256][T10878] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 190.264364][T10883] netlink: 'syz.4.1637': attribute type 4 has an invalid length. [ 190.335079][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.356710][T10883] netlink: 'syz.4.1637': attribute type 1 has an invalid length. [ 190.375116][T10883] __nla_validate_parse: 23 callbacks suppressed [ 190.375134][T10883] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1637'. [ 190.405226][T10889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 190.513885][T10890] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1638'. [ 190.546469][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 191.013301][T10909] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 191.022233][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1643'. [ 191.038365][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 191.412032][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1647'. [ 191.464722][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.613645][T10924] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1649'. [ 191.745304][T10932] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 191.767186][T10932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.893135][T10936] xt_l2tp: v2 doesn't support IP mode [ 192.012616][T10940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1655'. [ 192.585001][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.595769][T10964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1662'. [ 193.006140][T10965] pim6reg1: entered promiscuous mode [ 193.016041][T10965] pim6reg1: entered allmulticast mode [ 193.024959][T10961] lo speed is unknown, defaulting to 1000 [ 193.044076][T10961] lo speed is unknown, defaulting to 1000 [ 193.086452][T10961] lo speed is unknown, defaulting to 1000 [ 193.528092][T10961] infiniband syz0: set down [ 193.548414][T10961] infiniband syz0: added lo [ 193.581077][T10979] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 193.827905][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.013181][T10961] RDS/IB: syz0: added [ 194.023013][T10961] smc: adding ib device syz0 with port count 1 [ 194.030463][T10961] smc: ib device syz0 port 1 has pnetid [ 194.081406][ T5915] lo speed is unknown, defaulting to 1000 [ 194.093713][ T47] lo speed is unknown, defaulting to 1000 [ 194.103669][T10961] lo speed is unknown, defaulting to 1000 [ 194.251581][T10994] validate_nla: 3 callbacks suppressed [ 194.251600][T10994] netlink: 'syz.2.1671': attribute type 10 has an invalid length. [ 194.306962][T10961] lo speed is unknown, defaulting to 1000 [ 194.360382][T10994] team0: Device veth1_macvtap failed to register rx_handler [ 194.521800][T11001] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 194.603926][T10961] lo speed is unknown, defaulting to 1000 [ 194.802900][T10961] lo speed is unknown, defaulting to 1000 [ 194.977665][ T3421] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.994338][T10961] lo speed is unknown, defaulting to 1000 [ 195.014717][T11019] netlink: 'syz.2.1680': attribute type 1 has an invalid length. [ 195.692076][T11047] netlink: 'syz.1.1688': attribute type 21 has an invalid length. [ 195.720509][T11047] __nla_validate_parse: 4 callbacks suppressed [ 195.720528][T11047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1688'. [ 195.786271][T11048] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1689'. [ 195.795884][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'. [ 195.808046][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 196.126423][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 196.183523][T11071] netlink: 'syz.2.1697': attribute type 9 has an invalid length. [ 196.194841][T11071] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1697'. [ 196.215535][T11074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1696'. [ 196.253444][T11071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1697'. [ 196.503161][T11082] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1698'. [ 196.535461][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 196.867557][T11093] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1702'. [ 197.038408][T11104] xt_hashlimit: max too large, truncated to 1048576 [ 197.074862][T11108] smc: net device bond0 applied user defined pnetid SYZ2 [ 197.082221][T11108] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 197.097234][T11106] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20003 [ 197.161997][T11110] netlink: 'syz.4.1709': attribute type 4 has an invalid length. [ 197.278290][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.445398][T11118] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 197.915375][T11139] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 198.405838][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.577487][T11170] FAULT_INJECTION: forcing a failure. [ 198.577487][T11170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.590971][T11170] CPU: 1 UID: 0 PID: 11170 Comm: syz.0.1730 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 198.601769][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 198.611856][T11170] Call Trace: [ 198.615164][T11170] [ 198.618108][T11170] dump_stack_lvl+0x241/0x360 [ 198.622814][T11170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.628048][T11170] ? __pfx__printk+0x10/0x10 [ 198.632658][T11170] ? __pfx_lock_release+0x10/0x10 [ 198.637725][T11170] should_fail_ex+0x3b0/0x4e0 [ 198.642432][T11170] _copy_from_user+0x2f/0xc0 [ 198.647046][T11170] copy_msghdr_from_user+0xae/0x680 [ 198.652248][T11170] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 198.658134][T11170] ? __fget_files+0x2a/0x410 [ 198.662726][T11170] ? __fget_files+0x2a/0x410 [ 198.667321][T11170] __sys_sendmsg+0x209/0x350 [ 198.671930][T11170] ? __pfx_lock_release+0x10/0x10 [ 198.676966][T11170] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.682079][T11170] ? __pfx_vfs_write+0x10/0x10 [ 198.686855][T11170] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.693190][T11170] ? do_syscall_64+0x100/0x230 [ 198.697954][T11170] ? do_syscall_64+0xb6/0x230 [ 198.702634][T11170] do_syscall_64+0xf3/0x230 [ 198.707136][T11170] ? clear_bhb_loop+0x35/0x90 [ 198.711806][T11170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.717697][T11170] RIP: 0033:0x7f6ce7985d29 [ 198.722127][T11170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.741777][T11170] RSP: 002b:00007f6ce87a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.750204][T11170] RAX: ffffffffffffffda RBX: 00007f6ce7b75fa0 RCX: 00007f6ce7985d29 [ 198.758265][T11170] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000003 [ 198.766229][T11170] RBP: 00007f6ce87a9090 R08: 0000000000000000 R09: 0000000000000000 [ 198.774198][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.782163][T11170] R13: 0000000000000000 R14: 00007f6ce7b75fa0 R15: 00007ffe2a3e7918 [ 198.790163][T11170] [ 199.181770][ T29] audit: type=1107 audit(1737179253.286:2): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/' [ 199.440291][T11206] netlink: 'syz.2.1743': attribute type 1 has an invalid length. [ 199.705276][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.937680][T11221] Cannot find del_set index 2416 as target [ 200.069939][T11226] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 200.088958][T11226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.222731][T11231] x_tables: unsorted underflow at hook 1 [ 200.402968][T11236] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 200.756665][T11249] FAULT_INJECTION: forcing a failure. [ 200.756665][T11249] name failslab, interval 1, probability 0, space 0, times 0 [ 200.785902][T11250] __nla_validate_parse: 19 callbacks suppressed [ 200.785925][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 200.804818][T11249] CPU: 0 UID: 0 PID: 11249 Comm: syz.2.1759 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 200.815646][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 200.825004][ T3421] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.825703][T11249] Call Trace: [ 200.825714][T11249] [ 200.839671][T11249] dump_stack_lvl+0x241/0x360 [ 200.844398][T11249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.849626][T11249] ? __pfx__printk+0x10/0x10 [ 200.854228][T11249] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 200.860215][T11249] ? __pfx___might_resched+0x10/0x10 [ 200.865508][T11249] ? aa_label_sk_perm+0x4f3/0x6c0 [ 200.870541][T11249] should_fail_ex+0x3b0/0x4e0 [ 200.875231][T11249] should_failslab+0xac/0x100 [ 200.879910][T11249] kmem_cache_alloc_node_noprof+0x77/0x380 [ 200.885717][T11249] ? __alloc_skb+0x1c3/0x440 [ 200.890314][T11249] __alloc_skb+0x1c3/0x440 [ 200.894734][T11249] ? __pfx___alloc_skb+0x10/0x10 [ 200.899705][T11249] netlink_sendmsg+0x638/0xcb0 [ 200.904484][T11249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.909788][T11249] ? aa_sock_msg_perm+0x91/0x160 [ 200.914722][T11249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.920013][T11249] __sock_sendmsg+0x221/0x270 [ 200.924698][T11249] ____sys_sendmsg+0x52a/0x7e0 [ 200.929488][T11249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.934858][T11249] ? __fget_files+0x2a/0x410 [ 200.939450][T11249] ? __sys_sendmmsg+0x392/0x720 [ 200.944300][T11249] ? __might_fault+0xaa/0x120 [ 200.948975][T11249] __sys_sendmmsg+0x36a/0x720 [ 200.953657][T11249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 200.958867][T11249] ? __pfx_lock_release+0x10/0x10 [ 200.963895][T11249] ? kstrtouint_from_user+0x128/0x190 [ 200.969294][T11249] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 200.975196][T11249] ? ksys_write+0x22a/0x2b0 [ 200.979783][T11249] ? __pfx_lock_release+0x10/0x10 [ 200.984807][T11249] ? vfs_write+0x730/0xd30 [ 200.989243][T11249] ? __mutex_unlock_slowpath+0x21e/0x790 [ 200.994892][T11249] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.000872][T11249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.007198][T11249] ? do_syscall_64+0x100/0x230 [ 201.011979][T11249] __x64_sys_sendmmsg+0xa0/0xb0 [ 201.016835][T11249] do_syscall_64+0xf3/0x230 [ 201.021344][T11249] ? clear_bhb_loop+0x35/0x90 [ 201.026015][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.031911][T11249] RIP: 0033:0x7ff6f6385d29 [ 201.036324][T11249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.055933][T11249] RSP: 002b:00007ff6f7195038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.064352][T11249] RAX: ffffffffffffffda RBX: 00007ff6f6575fa0 RCX: 00007ff6f6385d29 [ 201.072324][T11249] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 201.080298][T11249] RBP: 00007ff6f7195090 R08: 0000000000000000 R09: 0000000000000000 [ 201.088268][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.096236][T11249] R13: 0000000000000000 R14: 00007ff6f6575fa0 R15: 00007ffd416385c8 [ 201.104223][T11249] [ 201.439101][T11264] Cannot find del_set index 286 as target [ 201.524530][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 201.531797][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 201.919068][T11276] netlink: 'syz.3.1770': attribute type 4 has an invalid length. [ 202.025124][T11279] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 202.039157][T11279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.101383][ T3421] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.347696][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 202.362537][T11292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1778'. [ 202.386150][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'. [ 202.439149][T11297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1779'. [ 202.641999][T11301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1781'. [ 202.710476][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 202.843340][T11311] Cannot find del_set index 286 as target [ 202.867954][T11317] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 202.898199][T11317] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1789'. [ 202.962217][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 203.023874][T11326] xt_hashlimit: max too large, truncated to 1048576 [ 203.097853][T11331] netlink: 'syz.2.1795': attribute type 10 has an invalid length. [ 203.215077][T11335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.239949][ T8220] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 203.256331][T11337] netlink: 'syz.0.1798': attribute type 4 has an invalid length. [ 203.359275][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 203.371923][T11349] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 203.466403][T11354] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 203.480788][T11354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.902451][T11376] netlink: 'syz.3.1815': attribute type 1 has an invalid length. [ 203.990877][T11382] set match dimension is over the limit! [ 204.345512][ T3421] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 204.719505][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.455846][ T5896] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 205.566567][T11390] vlan2: entered promiscuous mode [ 205.573780][T11390] bond0: (slave vlan2): Opening slave failed [ 205.730642][T11399] netlink: 'syz.2.1823': attribute type 10 has an invalid length. [ 205.855096][T11409] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 205.862886][T11409] __nla_validate_parse: 7 callbacks suppressed [ 205.862903][T11409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1826'. [ 205.883115][T11411] netlink: 'syz.3.1827': attribute type 21 has an invalid length. [ 205.910880][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1827'. [ 205.930313][T11417] netlink: 'syz.1.1829': attribute type 4 has an invalid length. [ 206.066056][T11425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1832'. [ 206.096720][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 206.235635][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1836'. [ 206.522178][T11454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1841'. [ 206.574844][ T8220] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.662631][T11464] xt_hashlimit: max too large, truncated to 1048576 [ 206.691897][T11467] netlink: 'syz.3.1847': attribute type 9 has an invalid length. [ 206.700359][T11467] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1847'. [ 206.713236][T11467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1847'. [ 206.797426][T11473] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1850'. [ 206.858748][T11477] vlan2: entered promiscuous mode [ 206.938073][T11486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1854'. [ 207.093785][T11494] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 207.203945][ T5828] Bluetooth: hci4: link tx timeout [ 207.209557][ T5828] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.491015][T11521] Bluetooth: MGMT ver 1.23 [ 207.717019][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 207.997303][T11538] xt_hashlimit: max too large, truncated to 1048576 [ 208.041412][T11540] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 208.588853][T11557] FAULT_INJECTION: forcing a failure. [ 208.588853][T11557] name failslab, interval 1, probability 0, space 0, times 0 [ 208.642637][T11557] CPU: 0 UID: 0 PID: 11557 Comm: syz.2.1879 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 208.653473][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 208.663553][T11557] Call Trace: [ 208.666849][T11557] [ 208.669794][T11557] dump_stack_lvl+0x241/0x360 [ 208.674511][T11557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.679753][T11557] ? __pfx__printk+0x10/0x10 [ 208.684384][T11557] should_fail_ex+0x3b0/0x4e0 [ 208.689092][T11557] should_failslab+0xac/0x100 [ 208.693793][T11557] ? skb_clone+0x20c/0x390 [ 208.698247][T11557] kmem_cache_alloc_noprof+0x70/0x380 [ 208.703663][T11557] skb_clone+0x20c/0x390 [ 208.707946][T11557] __netlink_deliver_tap+0x3cc/0x7f0 [ 208.713265][T11557] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.718482][T11557] netlink_deliver_tap+0x19d/0x1b0 [ 208.723616][T11557] netlink_unicast+0x7c4/0x990 [ 208.728411][T11557] ? __pfx_netlink_unicast+0x10/0x10 [ 208.733716][T11557] ? __virt_addr_valid+0x45f/0x530 [ 208.738851][T11557] ? __phys_addr_symbol+0x2f/0x70 [ 208.743894][T11557] ? __check_object_size+0x47a/0x730 [ 208.749213][T11557] netlink_sendmsg+0x8e4/0xcb0 [ 208.754016][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.759336][T11557] ? aa_sock_msg_perm+0x91/0x160 [ 208.764300][T11557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.769620][T11557] __sock_sendmsg+0x221/0x270 [ 208.774341][T11557] ____sys_sendmsg+0x52a/0x7e0 [ 208.779143][T11557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.784444][T11557] ? __fget_files+0x2a/0x410 [ 208.789057][T11557] ? __sys_sendmmsg+0x392/0x720 [ 208.793913][T11557] ? __might_fault+0xaa/0x120 [ 208.798593][T11557] __sys_sendmmsg+0x36a/0x720 [ 208.803280][T11557] ? __pfx___sys_sendmmsg+0x10/0x10 [ 208.808493][T11557] ? __pfx_lock_release+0x10/0x10 [ 208.813539][T11557] ? kstrtouint_from_user+0x128/0x190 [ 208.818949][T11557] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 208.824858][T11557] ? ksys_write+0x22a/0x2b0 [ 208.829365][T11557] ? __pfx_lock_release+0x10/0x10 [ 208.834390][T11557] ? vfs_write+0x730/0xd30 [ 208.838808][T11557] ? __mutex_unlock_slowpath+0x21e/0x790 [ 208.844469][T11557] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 208.850456][T11557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.856804][T11557] ? do_syscall_64+0x100/0x230 [ 208.861574][T11557] __x64_sys_sendmmsg+0xa0/0xb0 [ 208.866435][T11557] do_syscall_64+0xf3/0x230 [ 208.870939][T11557] ? clear_bhb_loop+0x35/0x90 [ 208.875618][T11557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.881517][T11557] RIP: 0033:0x7ff6f6385d29 [ 208.885933][T11557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.905546][T11557] RSP: 002b:00007ff6f7195038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.913965][T11557] RAX: ffffffffffffffda RBX: 00007ff6f6575fa0 RCX: 00007ff6f6385d29 [ 208.921956][T11557] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 208.929943][T11557] RBP: 00007ff6f7195090 R08: 0000000000000000 R09: 0000000000000000 [ 208.937928][T11557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.945899][T11557] R13: 0000000000000000 R14: 00007ff6f6575fa0 R15: 00007ffd416385c8 [ 208.953880][T11557] [ 209.065144][ T3545] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.274876][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 209.517949][ T6172] ------------[ cut here ]------------ [ 209.523452][ T6172] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 209.523536][ T6172] WARNING: CPU: 0 PID: 6172 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 209.538962][ T6172] Modules linked in: [ 209.542871][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 209.553790][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 209.563920][ T6172] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 209.569444][ T6172] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 209.589329][ T6172] RSP: 0018:ffffc9000344f920 EFLAGS: 00010246 [ 209.595573][ T6172] RAX: 4e97ef394f166d00 RBX: ffff888029b60cb0 RCX: ffff888028090000 [ 209.603575][ T6172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.611728][ T6172] RBP: ffffc9000344fab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210 [ 209.619964][ T6172] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 209.628130][ T6172] R13: 0000000000000000 R14: 1ffff92000689f38 R15: dffffc0000000000 [ 209.636293][ T6172] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 209.645451][ T6172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.652045][ T6172] CR2: 00007f0a87bf5440 CR3: 000000006158a000 CR4: 00000000003526f0 [ 209.660243][ T6172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.668428][ T6172] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.679610][ T6172] Call Trace: [ 209.682902][ T6172] [ 209.685861][ T6172] ? __warn+0x165/0x4d0 [ 209.690030][ T6172] ? __mutex_lock+0xdac/0xee0 [ 209.694749][ T6172] ? report_bug+0x2b3/0x500 [ 209.699267][ T6172] ? __mutex_lock+0xdac/0xee0 [ 209.703955][ T6172] ? handle_bug+0x60/0x90 [ 209.708353][ T6172] ? exc_invalid_op+0x1a/0x50 [ 209.713044][ T6172] ? asm_exc_invalid_op+0x1a/0x20 [ 209.718103][ T6172] ? __warn_printk+0x292/0x360 [ 209.722880][ T6172] ? __mutex_lock+0xdac/0xee0 [ 209.727594][ T6172] ? free_netdev+0x2d9/0x610 [ 209.732210][ T6172] ? __pfx___mutex_lock+0x10/0x10 [ 209.737316][ T6172] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 209.742638][ T6172] ? dev_addr_check+0x6f/0x240 [ 209.747441][ T6172] ? dev_addr_flush+0x192/0x210 [ 209.752309][ T6172] free_netdev+0x2d9/0x610 [ 209.756816][ T6172] netdev_run_todo+0xf21/0x10d0 [ 209.761684][ T6172] ? __pfx_netdev_run_todo+0x10/0x10 [ 209.767015][ T6172] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 209.773270][ T6172] ? down_write+0x18c/0x220 [ 209.777823][ T6172] ? __pfx_down_write+0x10/0x10 [ 209.782693][ T6172] bnep_session+0x2e3c/0x3030 [ 209.787427][ T6172] ? __pfx_bnep_session+0x10/0x10 [ 209.792463][ T6172] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 209.798827][ T6172] ? __pfx_woken_wake_function+0x10/0x10 [ 209.804501][ T6172] ? __kthread_parkme+0x169/0x1d0 [ 209.809539][ T6172] ? __pfx_bnep_session+0x10/0x10 [ 209.814587][ T6172] kthread+0x2f0/0x390 [ 209.818678][ T6172] ? __pfx_bnep_session+0x10/0x10 [ 209.823706][ T6172] ? __pfx_kthread+0x10/0x10 [ 209.828385][ T6172] ret_from_fork+0x4b/0x80 [ 209.832828][ T6172] ? __pfx_kthread+0x10/0x10 [ 209.838017][ T6172] ret_from_fork_asm+0x1a/0x30 [ 209.842816][ T6172] [ 209.846099][ T6172] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.853441][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 209.864298][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 209.874354][ T6172] Call Trace: [ 209.877630][ T6172] [ 209.880557][ T6172] dump_stack_lvl+0x241/0x360 [ 209.885240][ T6172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.890438][ T6172] ? __pfx__printk+0x10/0x10 [ 209.895122][ T6172] ? _printk+0xd5/0x120 [ 209.899269][ T6172] ? __init_begin+0x41000/0x41000 [ 209.904291][ T6172] ? vscnprintf+0x5d/0x90 [ 209.908641][ T6172] panic+0x349/0x880 [ 209.912555][ T6172] ? __warn+0x174/0x4d0 [ 209.916708][ T6172] ? __pfx_panic+0x10/0x10 [ 209.921128][ T6172] ? ret_from_fork_asm+0x1a/0x30 [ 209.926066][ T6172] __warn+0x344/0x4d0 [ 209.930048][ T6172] ? __mutex_lock+0xdac/0xee0 [ 209.934725][ T6172] report_bug+0x2b3/0x500 [ 209.939047][ T6172] ? __mutex_lock+0xdac/0xee0 [ 209.943719][ T6172] handle_bug+0x60/0x90 [ 209.947872][ T6172] exc_invalid_op+0x1a/0x50 [ 209.952369][ T6172] asm_exc_invalid_op+0x1a/0x20 [ 209.957221][ T6172] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 209.962505][ T6172] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 209.982103][ T6172] RSP: 0018:ffffc9000344f920 EFLAGS: 00010246 [ 209.988165][ T6172] RAX: 4e97ef394f166d00 RBX: ffff888029b60cb0 RCX: ffff888028090000 [ 209.996129][ T6172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.004100][ T6172] RBP: ffffc9000344fab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210 [ 210.012090][ T6172] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 210.020054][ T6172] R13: 0000000000000000 R14: 1ffff92000689f38 R15: dffffc0000000000 [ 210.028021][ T6172] ? __warn_printk+0x292/0x360 [ 210.032790][ T6172] ? free_netdev+0x2d9/0x610 [ 210.037377][ T6172] ? __pfx___mutex_lock+0x10/0x10 [ 210.042394][ T6172] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 210.047678][ T6172] ? dev_addr_check+0x6f/0x240 [ 210.052432][ T6172] ? dev_addr_flush+0x192/0x210 [ 210.057281][ T6172] free_netdev+0x2d9/0x610 [ 210.061693][ T6172] netdev_run_todo+0xf21/0x10d0 [ 210.066544][ T6172] ? __pfx_netdev_run_todo+0x10/0x10 [ 210.071822][ T6172] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 210.078055][ T6172] ? down_write+0x18c/0x220 [ 210.082554][ T6172] ? __pfx_down_write+0x10/0x10 [ 210.087401][ T6172] bnep_session+0x2e3c/0x3030 [ 210.092077][ T6172] ? __pfx_bnep_session+0x10/0x10 [ 210.097093][ T6172] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.103411][ T6172] ? __pfx_woken_wake_function+0x10/0x10 [ 210.109043][ T6172] ? __kthread_parkme+0x169/0x1d0 [ 210.114067][ T6172] ? __pfx_bnep_session+0x10/0x10 [ 210.119090][ T6172] kthread+0x2f0/0x390 [ 210.123153][ T6172] ? __pfx_bnep_session+0x10/0x10 [ 210.128430][ T6172] ? __pfx_kthread+0x10/0x10 [ 210.133017][ T6172] ret_from_fork+0x4b/0x80 [ 210.137427][ T6172] ? __pfx_kthread+0x10/0x10 [ 210.142015][ T6172] ret_from_fork_asm+0x1a/0x30 [ 210.146776][ T6172] [ 210.150035][ T6172] Kernel Offset: disabled [ 210.154348][ T6172] Rebooting in 86400 seconds..