last executing test programs: 6.320997832s ago: executing program 3 (id=2782): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x8}]}, 0x18}}, 0xc000) 6.175675418s ago: executing program 3 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 6.055868841s ago: executing program 3 (id=2790): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x16c0, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) 5.211302062s ago: executing program 3 (id=2816): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) 5.109839563s ago: executing program 3 (id=2819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) 5.013367623s ago: executing program 3 (id=2823): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0x10004, 0x808, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.436105913s ago: executing program 1 (id=2877): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="b4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="aff48ff5", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a00)}, {&(0x7f0000000a80)="87383485d44e4bff29765f688b507f7723dafb9645eaaea2916368537078c8cd9e92285b6bd69281c93b27ac8e", 0x2d}, {0x0}, {0x0}], 0x4}}], 0x3, 0x0) shutdown(r0, 0x2) 2.353121573s ago: executing program 1 (id=2879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 2.262076651s ago: executing program 1 (id=2883): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.136417224s ago: executing program 1 (id=2886): socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 2.015482919s ago: executing program 0 (id=2889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000000) 1.925935703s ago: executing program 0 (id=2890): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, 0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x126, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaa2aaaa0086dd6000000000f03a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x0) 1.703247733s ago: executing program 0 (id=2893): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffdfff3f7e, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800), 0x0, 0x400c081) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x8063) 1.703111273s ago: executing program 4 (id=2894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x75) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000640)="ca", 0x1}], 0x1}}], 0x2, 0x0) 1.584338012s ago: executing program 4 (id=2896): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="24000000010001", 0x7) 1.46323314s ago: executing program 0 (id=2898): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)="278f1ae13ad62d955fd4ef208b2c2d03f39d108985f357155fe48cac90fda33a8152b9abc146ceba69c3d37883ed53b980eb37b7c83cb7fff4599a42f866be08f308557167712e295c4a5d715d90253d24e697bf14f412773244245414b04faff2b489b62d07d7299e1522c72ac63c9b5b7717cbb0b3b8ac04c873e7d5b3aeff8457289ca3d99d46e3de69e6f310f50042f3fa798515d962993a67e02b9cba01362963f8113490b8d206e8744774e3d7e965006fc8568b1370b4305f5347c65692392e9908f9974d1487c548d3ea2d620df7689f1e0a9c95d31ec9398c4140af0ca4a05efadb402ee043dc", 0xeb}, {&(0x7f0000000640)}, {&(0x7f0000000900)="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", 0x15e}, {0x0}, {0x0}, {&(0x7f0000000880)}], 0x6, 0x0, 0x0, 0x40804}, 0x8000) 1.461376523s ago: executing program 4 (id=2899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0d2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 1.349829465s ago: executing program 4 (id=2900): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) r1 = socket(0x2c, 0x3, 0xffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x200048e5}, 0x4004080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x7f}, &(0x7f0000000140)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000050000000000006a9100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x49c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x362}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7c4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x6, 0xcbe, 0x9, 0x9de8, 0x4]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xb60}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0x6, 0x1}, @value=@ver_80211n={0x0, 0x27fd, 0x3, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x2, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd0d}, @NL80211_ATTR_FRAME={0x3eb, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @broadcast, @random="9404f8d018f2", {0x7, 0x4}}, 0xd33, @default, 0x214, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x30}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x9, 0x20}}, [{0xdd, 0xcc, "5fe95318f0d17fa10b2746747e43079d9f0f043b4ad98655cd435d4834c95f74ec4dd5fa4f506e5e7205033da634a5f01c75cced849211662dab606b2f411996997879d06dfea615261efe60519bf6c424f63602ecb34f2dd2ae82e9273ce707b0e55625edce9370f66afe061c07b0f2257909438fcf3b02532d94a61b4ebf5c60ef948603519dfb1a6601e117b85cf7f131fa34e4b3a3eb4972a029227158d9493302255315999d3d6b4d920fa44922dd69c3d23799eebbc5138af322f5e3bee464ef9ae0eca272223de2e1"}, {0xdd, 0xfc, "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"}, {0xdd, 0xb9, "d8d8d8d1b144d509477356e068f97f1945a75ce81c4a6e42959039b0730446ec21185763e084db1c435bf7b1335877b5ee06110946c96dbeb0487960dbaa7628cce8e1021fcfb3b0bcb3936a9cb5efa6d4095068bd6b62d5cb0a27264b486819390e5a206737318bc65a7f9f4d75af03f179b2d14d43a40ec5992c8ff7691c7f8c4af127b183df574b70883b97b7b21e7b38445d2c79db59f1d1c0d402a4222002ffd53509704078d472791c8f5526e3c5736aa6f039a534fa"}, {0xdd, 0xd9, "a23ffd0537478d11c15a64450828d33d01d5aaa948c47bbfcdd08715e5c0f01c1451e9e1822d8e8736ef7cb33b02f861349473030fca85952751ab8da7eb4844eefd54bee62a59735e99c61847e44f6d064fa3dec838c76d57b496720461d957c180b1dc1037d8571d01fd122ddf02d9d995759ec56a4c5988349975b980c7444342fcc0d8cc70d5db7d625b79755b0354fd9f59e6b14cd19c00bb5522dff1754bd16f96dafe3db6158f9f03b904ab27d83370b058aab73ab1d838f71cb8f5fef484c9e9120a508da689d8e0c3f5f61d4d2cc367dcfb86adb1"}, {0xdd, 0x43, "62c08bae47fabd1af9d2bc20c959df53d4a92aa11330031042be92e38a5ec2b9d2468e693b1ded2b0ed3c7cd36b982773f04709357479437c2397135148ad113f33daf"}, {0xdd, 0x6, "0e840351d904"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x49c}, 0x1, 0x0, 0x0, 0xc040}, 0x404c151) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e0ff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d40)=@ipv4_newaddr={0x3c, 0x14, 0x5647f89b1667c26d, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x10001}}, @IFA_FLAGS={0x8, 0xb}, @IFA_LOCAL={0x8, 0x2, @private}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r8}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e20, 0x401, @private2, 0xffffffc0}}, 0xffffff10, 0x8, 0xaea, 0x0, 0x80, 0x3, 0x5}, &(0x7f0000000240)=0x9c) 1.259384089s ago: executing program 1 (id=2901): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x8000001}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, 0x0, 0x0}, 0x20) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1405, 0x200, 0x70bd2c, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_proto_private(r10, 0x89e0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="130f00000000000000000700000010000280"], 0x24}}, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0xab}]}) write$ppp(r6, &(0x7f0000000300)="0132", 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 779.794272ms ago: executing program 2 (id=2907): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000040)=0x8) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) bind$vsock_stream(r5, &(0x7f0000000940)={0x28, 0x0, 0x2711}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9, @ANYBLOB="ffffff00", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) listen(r0, 0x68c) (async) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1034}}, 0x0) 706.794508ms ago: executing program 2 (id=2908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000200000180000000000000000000300000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 607.18776ms ago: executing program 2 (id=2909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000d0ff00000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 532.04875ms ago: executing program 0 (id=2910): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 423.772933ms ago: executing program 2 (id=2911): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x8000000010, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2c8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @remote}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c000000180a01810000000000000000020000020c00054000000000000000040900010073797a2000000000140001001100010000000000000000000000000a"], 0x54}}, 0x0) 413.112314ms ago: executing program 4 (id=2912): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="82da8dfd0a71d71d1cbdc8cd0ce5e78b", 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='nilfs2_collection_stage_transition\x00', r2, 0x0, 0x6f}, 0x18) listen(r0, 0x2431) shutdown(r0, 0x0) 300.098077ms ago: executing program 0 (id=2913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790020000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x810, r0, 0xfbfff000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) (async) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000540)="f72b5a4fa8265231b28a0a546d06", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020605c9000000000000000000000000000f0400000000000900020073797a310000000014000780050015000300000008001257000000000500050002000000050001000600000014000300686173683a69702c706f70742c697000"], 0x60}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000205fd086cddc3d06aae0c85916a88a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000ff010000000000000000000000000001fefffffffffffffffdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000002000000e800000000000000480003006465666c61746500"/240], 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000205fd086cddc3d06aae0c85916a88a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000ff010000000000000000000000000001fefffffffffffffffdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000002000000e800000000000000480003006465666c61746500"/240], 0x138}}, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00000005c0)={0x0, 0xea60}, 0x10) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x4004094) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000000400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r9) splice(r5, 0x0, r6, 0x0, 0x7, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010100000000000000002e0473ea08000300", @ANYRES32=r13, @ANYBLOB], 0x1c}}, 0x4000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 231.053595ms ago: executing program 4 (id=2914): unshare(0x68040200) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0x3}, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read(r1, &(0x7f0000000100)=""/41, 0x29) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) write(r0, &(0x7f0000000340)='\x00\x00\x00\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d402f100200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x8002, 0x7, 0x2, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x1, 0x3, [0xff, 0x7, 0x10]}, 0xe) 134.205701ms ago: executing program 2 (id=2915): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) close(0xffffffffffffffff) 69.540953ms ago: executing program 1 (id=2916): r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) (async) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4574, 0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00') (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000180)=0x7fff, 0x4) (async) r3 = socket$kcm(0xa, 0x6, 0x0) pipe(&(0x7f00000001c0)) (async) setsockopt$sock_attach_bpf(r3, 0x10d, 0x3, 0x0, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) (async) socket$kcm(0x2c, 0x3, 0x0) unshare(0x22020400) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000300)=0x3) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r7, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x9, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}], 0x1, 0x0) 0s ago: executing program 2 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlinkprop={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): .951812][ T7804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.617'. [ 145.306081][ T7818] netlink: 228 bytes leftover after parsing attributes in process `syz.3.616'. [ 145.624036][ T7840] netlink: 'syz.4.630': attribute type 46 has an invalid length. [ 145.634852][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 145.648427][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 145.657978][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 145.805769][ T7874] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 145.855856][ T7874] macvlan2: entered allmulticast mode [ 145.884438][ T7874] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 145.895247][ T7874] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 145.922743][ T7874] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 146.147314][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 146.164891][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 146.421583][ T7913] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 147.416235][ T7935] IPv6: NLM_F_REPLACE set, but no existing node found! [ 147.791939][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 147.802840][ T7967] netlink: 84 bytes leftover after parsing attributes in process `syz.4.658'. [ 147.806399][ T7964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.657'. [ 147.974561][ T7979] netlink: 'syz.4.662': attribute type 3 has an invalid length. [ 148.331503][ T7993] team0: entered promiscuous mode [ 148.337448][ T7993] team_slave_0: entered promiscuous mode [ 148.343856][ T7993] team_slave_1: entered promiscuous mode [ 148.354171][ T7993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.362821][ T7993] team0: Device macvlan2 is already an upper device of the team interface [ 148.375133][ T7993] team0: left promiscuous mode [ 148.383819][ T7993] team_slave_0: left promiscuous mode [ 148.390804][ T7993] team_slave_1: left promiscuous mode [ 149.928171][ T8080] netlink: 'syz.3.687': attribute type 39 has an invalid length. [ 149.974183][ T8084] __nla_validate_parse: 7 callbacks suppressed [ 149.974209][ T8084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.689'. [ 150.007563][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 150.022848][ T8082] netlink: 'syz.1.688': attribute type 15 has an invalid length. [ 150.031041][ T8082] netlink: 666 bytes leftover after parsing attributes in process `syz.1.688'. [ 150.226211][ T8100] netlink: 'syz.0.693': attribute type 2 has an invalid length. [ 150.254681][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 150.500821][ T8115] net veth1_virt_wifi +;: renamed from virt_wifi0 [ 150.641943][ T8119] netlink: 80 bytes leftover after parsing attributes in process `syz.0.700'. [ 150.787386][ T8131] netlink: 'syz.3.704': attribute type 21 has an invalid length. [ 150.796059][ T8131] netlink: 128 bytes leftover after parsing attributes in process `syz.3.704'. [ 150.810150][ T8131] netlink: 'syz.3.704': attribute type 5 has an invalid length. [ 150.842347][ T8131] netlink: 3 bytes leftover after parsing attributes in process `syz.3.704'. [ 151.263315][ T8165] netlink: 'syz.1.713': attribute type 9 has an invalid length. [ 151.280833][ T8165] netlink: 'syz.1.713': attribute type 7 has an invalid length. [ 151.290994][ T8165] netlink: 'syz.1.713': attribute type 8 has an invalid length. [ 151.313060][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 151.404839][ T8174] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 151.415871][ T8174] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 151.701974][ T8182] macvtap1: entered promiscuous mode [ 151.708393][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 151.729149][ T8182] vlan0: entered promiscuous mode [ 151.743822][ T8182] vlan0: left promiscuous mode [ 152.367781][ T8228] netlink: 156 bytes leftover after parsing attributes in process `syz.2.734'. [ 152.431387][ T8233] netlink: 'syz.0.735': attribute type 6 has an invalid length. [ 152.481292][ T8229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.498809][ T8229] bond0: (slave bond1): Enslaving as an active interface with an up link [ 152.598833][ T8246] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 152.793893][ T8263] Bluetooth: MGMT ver 1.23 [ 153.089864][ T8282] IPv6: Can't replace route, no match found [ 153.099385][ T8282] Cannot find del_set index 0 as target [ 153.366787][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 153.738047][ T8324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.770142][ T8325] syzkaller0: create flow: hash 3710906139 index 2 [ 153.862657][ T8325] syzkaller0: delete flow: hash 3710906139 index 2 [ 154.097686][ T8352] ipt_REJECT: ECHOREPLY no longer supported. [ 154.497424][ T7882] syzkaller0: tun_net_xmit 76 [ 154.503310][ T7882] syzkaller0: tun_net_xmit 48 [ 154.527447][ T8] syzkaller0: tun_net_xmit 76 [ 154.777313][ T8401] x_tables: duplicate underflow at hook 3 [ 155.451196][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 156.156057][ T8388] macvtap1: entered promiscuous mode [ 156.161638][ T8388] batadv0: entered promiscuous mode [ 156.169094][ T8388] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 156.177982][ T8388] batadv0: left promiscuous mode [ 156.220097][ T8403] bridge2: entered promiscuous mode [ 156.225366][ T8403] bridge2: entered allmulticast mode [ 156.269001][ T8403] team0: Port device bridge2 added [ 156.288007][ T8407] dvmrp8: entered allmulticast mode [ 156.317730][ T8408] dvmrp8: left allmulticast mode [ 156.330369][ T8415] validate_nla: 1 callbacks suppressed [ 156.330387][ T8415] netlink: 'syz.3.785': attribute type 9 has an invalid length. [ 156.380562][ T8415] bond0: entered promiscuous mode [ 156.385656][ T8415] bond_slave_0: entered promiscuous mode [ 156.392121][ T8415] bond_slave_1: entered promiscuous mode [ 156.408095][ T8415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.429972][ T8415] bond0: left promiscuous mode [ 156.434806][ T8415] bond_slave_0: left promiscuous mode [ 156.446346][ T8415] bond_slave_1: left promiscuous mode [ 156.581249][ T29] audit: type=1107 audit(1731654599.723:2): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='V{.zZVǐ`EM B^LX\h$1jbm^$v?o9+' [ 156.742177][ T8437] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.147281][ T8456] __nla_validate_parse: 6 callbacks suppressed [ 157.147299][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 157.265636][ T8471] netlink: 104 bytes leftover after parsing attributes in process `syz.2.805'. [ 157.528338][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 157.570854][ T8487] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 157.583527][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 158.140613][ T8513] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 158.150064][ T8511] netlink: 508 bytes leftover after parsing attributes in process `syz.4.818'. [ 158.175919][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 158.195140][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 158.195391][ T8516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.819'. [ 158.214466][ T8511] netlink: 'syz.4.818': attribute type 13 has an invalid length. [ 158.545681][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 158.661486][ T8542] nlmon0: Master is either lo or non-ether device [ 158.700986][ T8543] x_tables: duplicate underflow at hook 1 [ 159.239526][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 159.409696][ T8581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.846'. [ 159.464191][ T8587] netlink: zone id is out of range [ 159.508345][ T8587] netlink: set zone limit has 4 unknown bytes [ 159.652784][ T8602] IPv6: sit1: Disabled Multicast RS [ 159.914773][ T8611] Cannot find set identified by id 0 to match [ 160.061277][ T8617] pim6reg: entered allmulticast mode [ 160.121925][ T8617] pim6reg: left allmulticast mode [ 160.206212][ T8624] tipc: Started in network mode [ 160.212010][ T8624] tipc: Node identity ac1414aa, cluster identity 4711 [ 160.224279][ T8624] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.269022][ T8624] tipc: Enabled bearer , priority 10 [ 160.358192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.481722][ T8637] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 160.496636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.636680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.776626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.916656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.056634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.196656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.348123][ T5896] tipc: Node number set to 2886997162 [ 161.358770][ T8668] netlink: 'syz.2.868': attribute type 3 has an invalid length. [ 161.874240][ T8683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.076847][ T8683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.210395][ T8692] __nla_validate_parse: 8 callbacks suppressed [ 162.210415][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'. [ 162.319105][ T8697] netlink: 52 bytes leftover after parsing attributes in process `syz.4.876'. [ 162.657783][ T8716] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 162.668810][ T8715] No such timeout policy "syz0" [ 162.681906][ T8713] No such timeout policy "syz0" [ 162.711068][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 162.740888][ T8716] team0: Device veth1_macvtap failed to register rx_handler [ 162.823388][ T8723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'. [ 162.825719][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 162.958730][ T8729] netlink: 52 bytes leftover after parsing attributes in process `syz.4.887'. [ 164.200676][ T8791] ip6tnl1: entered promiscuous mode [ 164.226453][ T8791] ip6tnl1: entered allmulticast mode [ 164.233293][ T8793] netlink: 332 bytes leftover after parsing attributes in process `syz.4.905'. [ 164.388160][ T8801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.905'. [ 164.429093][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.4.905'. [ 164.448102][ T8801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.905'. [ 164.736803][ T8817] gtp0: entered promiscuous mode [ 164.745379][ T8817] gtp0: entered allmulticast mode [ 165.446620][ C0] net_ratelimit: 5 callbacks suppressed [ 165.446641][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.801324][ T8868] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 165.854458][ T8868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.884906][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 165.897725][ T8876] bond2: (slave batadv1): making interface the new active one [ 165.907749][ T8876] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 165.942591][ T8868] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 165.952455][ T8868] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 166.390861][ T8900] pimreg: entered allmulticast mode [ 166.486607][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 167.097953][ T8941] netlink: 'syz.1.959': attribute type 8 has an invalid length. [ 167.482189][ T8964] __nla_validate_parse: 10 callbacks suppressed [ 167.482207][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 167.526633][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.273489][ T9000] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.506363][ T9009] macsec0: entered promiscuous mode [ 168.558240][ T9009] veth1_macvtap: left promiscuous mode [ 168.566609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 168.617536][ T9009] macsec0 (unregistering): left promiscuous mode [ 168.872142][ T9035] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 168.928958][ T9035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.005961][ T9035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'. [ 169.062488][ T9044] bond2: (slave bridge1): making interface the new active one [ 169.079384][ T9044] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 169.615731][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 169.624830][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.653617][ T9060] raw_sendmsg: syz.4.999 forgot to set AF_INET. Fix it! [ 170.369288][ T9101] ipt_rpfilter: unknown options [ 170.474422][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 170.639823][ T9110] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 170.647765][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 170.666793][ T9110] netlink: 'syz.1.1014': attribute type 2 has an invalid length. [ 170.692010][ T9110] netlink: 'syz.1.1014': attribute type 2 has an invalid length. [ 170.709300][ T9110] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 170.741390][ T9110] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 170.786901][ T9110] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 170.844684][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 170.924907][ T9133] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.975441][ T9135] IPv6: sit2: Disabled Multicast RS [ 171.011288][ T9139] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1026'. [ 171.124340][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 171.227657][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 171.458896][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 171.545515][ T9162] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 44373 - 0 [ 171.559143][ T9165] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1035'. [ 171.577041][ T9162] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 44373 - 0 [ 171.586416][ T9165] openvswitch: netlink: Message has 76 unknown bytes. [ 171.596507][ T9162] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 44373 - 0 [ 171.605540][ T9162] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 44373 - 0 [ 171.627319][ T9162] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 53240 - 0 [ 171.638585][ T9162] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 53240 - 0 [ 171.661474][ T9162] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 53240 - 0 [ 171.672069][ T9162] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 53240 - 0 [ 171.686731][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.690943][ T9162] geneve2: entered promiscuous mode [ 171.756865][ T9162] geneve2: entered allmulticast mode [ 172.726720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.823473][ T5893] IPVS: starting estimator thread 0... [ 172.837131][ T9238] tipc: Started in network mode [ 172.851140][ T9238] tipc: Node identity ac1414aa, cluster identity 4711 [ 172.869847][ T9238] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 172.877720][ T9238] tipc: Enabled bearer , priority 10 [ 172.927665][ T9239] IPVS: using max 22 ests per chain, 52800 per kthread [ 173.016752][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.071592][ T9250] __nla_validate_parse: 4 callbacks suppressed [ 173.071610][ T9250] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1059'. [ 173.156633][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.249542][ T9259] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 173.296700][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.436637][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.487619][ T9269] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.576609][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 173.732960][ T9282] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.877984][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 173.937553][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 173.996734][ T5896] tipc: Node number set to 2886997162 [ 174.296619][ T9299] lo: entered allmulticast mode [ 174.318272][ T9299] tunl0: entered allmulticast mode [ 174.403023][ T9299] gre0: entered allmulticast mode [ 174.419066][ T9299] gretap0: entered allmulticast mode [ 174.468140][ T9299] erspan0: entered allmulticast mode [ 174.494576][ T9299] ip_vti0: entered allmulticast mode [ 174.504843][ T9299] ip6_vti0: entered allmulticast mode [ 174.535129][ T9299] sit0: entered allmulticast mode [ 174.575786][ T9299] ip6tnl0: entered allmulticast mode [ 174.612939][ T9299] ip6gre0: entered allmulticast mode [ 174.653033][ T9299] syz_tun: entered allmulticast mode [ 174.687284][ T9299] ip6gretap0: entered allmulticast mode [ 174.741268][ T9299] vcan0: entered allmulticast mode [ 174.766300][ T9299] bond0: entered allmulticast mode [ 174.801297][ T9299] bond_slave_0: entered allmulticast mode [ 174.818291][ T9299] bond_slave_1: entered allmulticast mode [ 174.893454][ T9299] team0: entered allmulticast mode [ 174.907412][ T9335] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1080'. [ 174.919665][ T9299] team_slave_0: entered allmulticast mode [ 174.934974][ T9299] team_slave_1: entered allmulticast mode [ 174.953468][ T9299] dummy0: entered allmulticast mode [ 174.984382][ T9299] nlmon0: entered allmulticast mode [ 175.014868][ T9299] caif0: entered allmulticast mode [ 175.041729][ T9299] batadv0: entered allmulticast mode [ 175.072600][ T9299] vxcan0: entered allmulticast mode [ 175.097451][ T9299] vxcan1: entered allmulticast mode [ 175.128754][ T9299] veth0: entered allmulticast mode [ 175.141548][ T9299] veth1: entered allmulticast mode [ 175.166351][ T9299] wg0: entered allmulticast mode [ 175.179966][ T9299] wg1: entered allmulticast mode [ 175.198449][ T9299] wg2: entered allmulticast mode [ 175.213798][ T9299] veth0_to_bridge: entered allmulticast mode [ 175.235316][ T9299] bridge_slave_0: entered allmulticast mode [ 175.255269][ T9299] veth1_to_bridge: entered allmulticast mode [ 175.297328][ T9299] bridge_slave_1: entered allmulticast mode [ 175.362120][ T9299] veth0_to_bond: entered allmulticast mode [ 175.402491][ T9299] veth1_to_bond: entered allmulticast mode [ 175.426005][ T9299] veth0_to_team: entered allmulticast mode [ 175.461878][ T9299] veth1_to_team: entered allmulticast mode [ 175.484162][ T9299] veth0_to_batadv: entered allmulticast mode [ 175.498682][ T9299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.523088][ T9299] batadv_slave_0: entered allmulticast mode [ 175.539449][ T9299] veth0_to_hsr: entered allmulticast mode [ 175.560799][ T9299] hsr_slave_0: entered allmulticast mode [ 175.588458][ T9299] veth1_to_hsr: entered allmulticast mode [ 175.606879][ T9299] hsr_slave_1: entered allmulticast mode [ 175.616343][ T9299] hsr0: entered allmulticast mode [ 175.633668][ T9299] veth1_virt_wifi: entered allmulticast mode [ 175.649774][ T9299] veth0_virt_wifi: entered allmulticast mode [ 175.670401][ T9299] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 175.689345][ T9299] veth1_vlan: entered allmulticast mode [ 175.709134][ T9299] veth0_vlan: entered allmulticast mode [ 175.730667][ T9299] vlan1: entered allmulticast mode [ 175.740463][ T9299] macvlan0: entered allmulticast mode [ 175.758655][ T9299] macvlan1: entered allmulticast mode [ 175.766010][ T9299] ipvlan0: entered allmulticast mode [ 175.780150][ T9299] ipvlan1: entered allmulticast mode [ 175.797518][ T9299] veth1_macvtap: entered allmulticast mode [ 175.806417][ T9350] x_tables: duplicate underflow at hook 2 [ 175.816997][ T9299] veth0_macvtap: entered allmulticast mode [ 175.835094][ T9299] macvtap0: entered allmulticast mode [ 175.846628][ C0] net_ratelimit: 7 callbacks suppressed [ 175.846646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.864193][ T9299] macsec0: entered allmulticast mode [ 175.881846][ T9299] geneve0: entered allmulticast mode [ 175.899527][ T9299] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.913250][ T9299] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.926806][ T9299] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.950676][ T9299] geneve1: entered allmulticast mode [ 175.979153][ T9299] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 176.000946][ T9299] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 176.016616][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 176.067221][ T9299] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 176.091139][ T9299] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 176.113253][ T9299] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 176.144257][ T9299] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 176.163921][ T9299] syztnl2: entered allmulticast mode [ 176.182465][ T9299] macsec1: entered allmulticast mode [ 176.193214][ T9299] gretap1: entered allmulticast mode [ 176.217227][ T9299] gre1: entered allmulticast mode [ 176.239774][ T9299] syzkaller1: entered allmulticast mode [ 176.247240][ T9299] veth2: entered allmulticast mode [ 176.252510][ T9299] veth3: entered allmulticast mode [ 176.267898][ T9299] sit1: entered allmulticast mode [ 176.284019][ T9299] ip6erspan0: entered allmulticast mode [ 176.300482][ T9299] sit2: entered allmulticast mode [ 176.320402][ T9306] netlink: 'syz.0.1078': attribute type 15 has an invalid length. [ 176.329219][ T9306] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1078'. [ 176.886680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 177.013963][ T9381] FAULT_INJECTION: forcing a failure. [ 177.013963][ T9381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.039778][ T9382] hsr0: entered promiscuous mode [ 177.045431][ T9377] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1095'. [ 177.054608][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 177.063502][ T9382] macvlan2: entered allmulticast mode [ 177.074965][ T9381] CPU: 1 UID: 0 PID: 9381 Comm: syz.1.1096 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 177.085690][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 177.095773][ T9381] Call Trace: [ 177.099058][ T9381] [ 177.101994][ T9381] dump_stack_lvl+0x241/0x360 [ 177.106680][ T9381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.111877][ T9381] ? __pfx__printk+0x10/0x10 [ 177.116462][ T9381] ? __pfx_lock_release+0x10/0x10 [ 177.121507][ T9381] should_fail_ex+0x3b0/0x4e0 [ 177.126193][ T9381] _copy_from_iter+0x21f/0x1e70 [ 177.131045][ T9381] ? __virt_addr_valid+0x183/0x530 [ 177.136158][ T9381] ? __pfx_lock_release+0x10/0x10 [ 177.141192][ T9381] ? __alloc_skb+0x28f/0x440 [ 177.145780][ T9381] ? __pfx__copy_from_iter+0x10/0x10 [ 177.151068][ T9381] ? __virt_addr_valid+0x183/0x530 [ 177.156232][ T9381] ? __virt_addr_valid+0x183/0x530 [ 177.161338][ T9381] ? __virt_addr_valid+0x45f/0x530 [ 177.166451][ T9381] ? __check_object_size+0x48e/0x900 [ 177.171740][ T9381] netlink_sendmsg+0x73d/0xcb0 [ 177.176519][ T9381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.181816][ T9381] ? __pfx_aa_file_perm+0x10/0x10 [ 177.186839][ T9381] ? aa_sock_msg_perm+0x91/0x160 [ 177.191805][ T9381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.197115][ T9381] __sock_sendmsg+0x221/0x270 [ 177.201792][ T9381] sock_write_iter+0x2d7/0x3f0 [ 177.206559][ T9381] ? __pfx_sock_write_iter+0x10/0x10 [ 177.211870][ T9381] ? bpf_lsm_file_permission+0x9/0x10 [ 177.217242][ T9381] ? security_file_permission+0x74/0x280 [ 177.222887][ T9381] vfs_write+0xaeb/0xd30 [ 177.227146][ T9381] ? __pfx_sock_write_iter+0x10/0x10 [ 177.232450][ T9381] ? __pfx_vfs_write+0x10/0x10 [ 177.237235][ T9381] ? fdget_pos+0x19a/0x320 [ 177.241654][ T9381] ksys_write+0x183/0x2b0 [ 177.245987][ T9381] ? __pfx_ksys_write+0x10/0x10 [ 177.250832][ T9381] ? do_syscall_64+0x100/0x230 [ 177.255594][ T9381] ? do_syscall_64+0xb6/0x230 [ 177.260275][ T9381] do_syscall_64+0xf3/0x230 [ 177.264774][ T9381] ? clear_bhb_loop+0x35/0x90 [ 177.269451][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.275339][ T9381] RIP: 0033:0x7f66e757e719 [ 177.279753][ T9381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.299374][ T9381] RSP: 002b:00007f66e829e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.307799][ T9381] RAX: ffffffffffffffda RBX: 00007f66e7736058 RCX: 00007f66e757e719 [ 177.315768][ T9381] RDX: 0000000000000024 RSI: 0000000020000800 RDI: 0000000000000008 [ 177.323740][ T9381] RBP: 00007f66e829e090 R08: 0000000000000000 R09: 0000000000000000 [ 177.331716][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.339719][ T9381] R13: 0000000000000000 R14: 00007f66e7736058 R15: 00007ffee6a52888 [ 177.347715][ T9381] [ 177.353479][ T9382] hsr0: entered allmulticast mode [ 177.358896][ T9382] hsr_slave_0: entered allmulticast mode [ 177.364655][ T9382] hsr_slave_1: entered allmulticast mode [ 177.387081][ T9382] hsr0: left allmulticast mode [ 177.392049][ T9382] hsr_slave_0: left allmulticast mode [ 177.399620][ T9382] hsr_slave_1: left allmulticast mode [ 177.458884][ T9386] netlink: 'syz.2.1098': attribute type 15 has an invalid length. [ 177.466973][ T9386] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1098'. [ 177.926668][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.086656][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 178.183264][ T9426] netlink: 'syz.3.1110': attribute type 15 has an invalid length. [ 178.191414][ T9426] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1110'. [ 178.386087][ T9437] netlink: del zone limit has 4 unknown bytes [ 178.455649][ T9437] vlan2: entered promiscuous mode [ 178.478760][ T9437] bond0: entered promiscuous mode [ 178.489606][ T9437] bond_slave_0: entered promiscuous mode [ 178.497697][ T9437] bond_slave_1: entered promiscuous mode [ 178.524653][ T9437] bond0: left promiscuous mode [ 178.535100][ T9437] bond_slave_0: left promiscuous mode [ 178.556717][ T9437] bond_slave_1: left promiscuous mode [ 178.976611][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.129842][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 179.857900][ T9490] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1129'. [ 180.006639][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.041682][ T9502] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.336077][ T9510] netlink: 'syz.1.1137': attribute type 15 has an invalid length. [ 180.369400][ T9510] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1137'. [ 180.556772][ T9320] IPVS: starting estimator thread 0... [ 180.666851][ T9522] IPVS: using max 21 ests per chain, 50400 per kthread [ 180.989404][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 181.039645][ T9536] veth1_macvtap: left promiscuous mode [ 181.045167][ T9536] macsec0: entered allmulticast mode [ 181.056742][ C0] net_ratelimit: 1 callbacks suppressed [ 181.056797][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.089886][ T9536] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 181.205241][ T9548] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.216651][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 181.225342][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 181.231560][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 181.234954][ T9547] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1148'. [ 181.238038][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 181.286022][ T9550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1150'. [ 181.344612][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 181.403182][ T9556] netlink: 'syz.4.1152': attribute type 6 has an invalid length. [ 181.489373][ T9567] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1154'. [ 181.507547][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 181.692343][ T9574] netlink: 'syz.3.1156': attribute type 13 has an invalid length. [ 181.732580][ T9579] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 181.762336][ T9580] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 181.794814][ T9579] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 181.900348][ T9595] syzkaller1: left allmulticast mode [ 182.005955][ T9597] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.086836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.146401][ T9605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1168'. [ 182.256721][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.257230][ T9611] FAULT_INJECTION: forcing a failure. [ 182.257230][ T9611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.305872][ T9611] CPU: 0 UID: 0 PID: 9611 Comm: syz.1.1167 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 182.316606][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 182.326678][ T9611] Call Trace: [ 182.329981][ T9611] [ 182.332927][ T9611] dump_stack_lvl+0x241/0x360 [ 182.337632][ T9611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.342865][ T9611] ? __pfx__printk+0x10/0x10 [ 182.347487][ T9611] ? __pfx_lock_release+0x10/0x10 [ 182.352544][ T9611] ? __lock_acquire+0x1384/0x2050 [ 182.357600][ T9611] should_fail_ex+0x3b0/0x4e0 [ 182.362307][ T9611] _copy_from_user+0x2f/0xc0 [ 182.366926][ T9611] kstrtouint_from_user+0xc6/0x190 [ 182.372060][ T9611] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 182.377821][ T9611] ? __pfx_lock_acquire+0x10/0x10 [ 182.382894][ T9611] proc_fail_nth_write+0xaa/0x2d0 [ 182.387949][ T9611] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 182.393887][ T9611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.399559][ T9611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.405235][ T9611] vfs_write+0x2a3/0xd30 [ 182.409515][ T9611] ? fdget_pos+0x24e/0x320 [ 182.413971][ T9611] ? __pfx_vfs_write+0x10/0x10 [ 182.418775][ T9611] ? __fget_files+0x3f3/0x470 [ 182.423491][ T9611] ? fdget_pos+0x24e/0x320 [ 182.427941][ T9611] ksys_write+0x183/0x2b0 [ 182.432300][ T9611] ? __pfx_ksys_write+0x10/0x10 [ 182.437244][ T9611] ? do_syscall_64+0x100/0x230 [ 182.442052][ T9611] ? do_syscall_64+0xb6/0x230 [ 182.446757][ T9611] do_syscall_64+0xf3/0x230 [ 182.451287][ T9611] ? clear_bhb_loop+0x35/0x90 [ 182.455999][ T9611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.461920][ T9611] RIP: 0033:0x7f66e757d1ff [ 182.466359][ T9611] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 182.486002][ T9611] RSP: 002b:00007f66e829e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 182.494453][ T9611] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66e757d1ff [ 182.502457][ T9611] RDX: 0000000000000001 RSI: 00007f66e829e0a0 RDI: 000000000000000c [ 182.510453][ T9611] RBP: 00007f66e829e090 R08: 0000000000000000 R09: 0000000000000000 [ 182.518454][ T9611] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 182.526455][ T9611] R13: 0000000000000000 R14: 00007f66e7736058 R15: 00007ffee6a52888 [ 182.534477][ T9611] [ 183.126602][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.233870][ T9655] netlink: 'syz.3.1182': attribute type 11 has an invalid length. [ 183.286694][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 183.693659][ T9673] ipt_rpfilter: unknown options [ 183.752954][ T9677] netlink: 'syz.1.1190': attribute type 21 has an invalid length. [ 183.772163][ T9677] __nla_validate_parse: 1 callbacks suppressed [ 183.772184][ T9677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1190'. [ 183.906166][ T9677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 183.930938][ T9686] netlink: 'syz.0.1194': attribute type 3 has an invalid length. [ 184.006398][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 184.032944][ T9682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 184.167255][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.327061][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 184.796151][ T9712] ipt_rpfilter: unknown options [ 185.153591][ T9721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1206'. [ 185.206623][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.514337][ T9717] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1202'. [ 185.544081][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 185.554922][ T9729] can: request_module (can-proto-4) failed. [ 185.695833][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'. [ 185.786027][ T9739] bridge2: port 1(bridge_slave_1) entered blocking state [ 185.818813][ T9739] bridge2: port 1(bridge_slave_1) entered disabled state [ 185.828792][ T9739] bridge_slave_1: entered allmulticast mode [ 185.835935][ T9739] bridge_slave_1: entered promiscuous mode [ 186.052630][ T9739] bridge2: port 2(macvlan0) entered blocking state [ 186.060990][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1213'. [ 186.080441][ T9739] bridge2: port 2(macvlan0) entered disabled state [ 186.107072][ T9739] macvlan0: entered allmulticast mode [ 186.116447][ T9739] macvlan0: entered promiscuous mode [ 186.139514][ T9748] bridge_slave_0: left allmulticast mode [ 186.145362][ T9748] bridge_slave_0: left promiscuous mode [ 186.151557][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.185854][ T9748] bridge_slave_1: left allmulticast mode [ 186.185994][ T9751] atomic_op ffff888033400998 conn xmit_atomic 0000000000000000 [ 186.203410][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 186.213775][ T9748] bridge_slave_1: left promiscuous mode [ 186.219850][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.233592][ T9748] bond0: (slave bond_slave_0): Releasing backup interface [ 186.246765][ C0] net_ratelimit: 1 callbacks suppressed [ 186.246783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.261151][ T9748] bond0: (slave bond_slave_1): Releasing backup interface [ 186.314744][ T9748] team0: Port device team_slave_0 removed [ 186.344611][ T9748] team0: Port device team_slave_1 removed [ 186.368211][ T9748] bond2: (slave bridge1): Releasing active interface [ 186.406618][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 186.635028][ T9752] team0: Port device wg2 added [ 187.286702][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.444265][ T9796] tipc: Started in network mode [ 187.456629][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 187.472085][ T9796] tipc: Node identity ac1414aa, cluster identity 4711 [ 187.483997][ T9796] tipc: Enabled bearer , priority 10 [ 187.815901][ T9825] ipt_rpfilter: unknown options [ 188.177904][ T9853] team0: entered promiscuous mode [ 188.190094][ T9853] team_slave_0: entered promiscuous mode [ 188.199671][ T9853] team_slave_1: entered promiscuous mode [ 188.205760][ T9853] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 188.233700][ T9846] bridge0: port 3(gretap0) entered blocking state [ 188.243807][ T9846] bridge0: port 3(gretap0) entered disabled state [ 188.250891][ T9846] gretap0: entered allmulticast mode [ 188.257687][ T9846] gretap0: entered promiscuous mode [ 188.264335][ T9846] bridge0: port 3(gretap0) entered blocking state [ 188.271154][ T9846] bridge0: port 3(gretap0) entered forwarding state [ 188.285698][ T9860] gretap0: left allmulticast mode [ 188.296695][ T9860] gretap0: left promiscuous mode [ 188.302167][ T9860] bridge0: port 3(gretap0) entered disabled state [ 188.326654][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.496659][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 188.606733][ T9324] tipc: Node number set to 2886997162 [ 189.002430][ T9853] team0: left promiscuous mode [ 189.008249][ T9853] team_slave_0: left promiscuous mode [ 189.014041][ T9853] team_slave_1: left promiscuous mode [ 189.020010][ T9853] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 189.193351][ T9906] ip6tnl0: entered promiscuous mode [ 189.207826][ T9903] ip6tnl0: left promiscuous mode [ 189.372470][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.513716][ T9929] __nla_validate_parse: 20 callbacks suppressed [ 189.513737][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1262'. [ 189.529224][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 189.847898][ T9947] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 189.967256][ T9948] vlan2: entered allmulticast mode [ 190.391502][ T9975] xt_addrtype: ipv6 does not support BROADCAST matching [ 190.406726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.430819][ T9975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1275'. [ 190.445854][ T29] audit: type=1107 audit(1731654633.583:3): pid=9976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 190.501969][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1275'. [ 191.401263][T10012] tipc: Enabling of bearer rejected, failed to enable media [ 191.413733][T10017] netlink: 'syz.2.1284': attribute type 11 has an invalid length. [ 191.423166][T10017] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1284'. [ 191.447756][ C0] net_ratelimit: 1 callbacks suppressed [ 191.447776][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 191.496647][ T25] IPVS: starting estimator thread 0... [ 191.586734][T10019] IPVS: using max 19 ests per chain, 45600 per kthread [ 191.606622][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 191.759496][T10030] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1292'. [ 191.948700][T10036] netlink: 'syz.3.1295': attribute type 30 has an invalid length. [ 192.014117][T10041] netlink: 'syz.4.1294': attribute type 1 has an invalid length. [ 192.026720][T10039] can: request_module (can-proto-0) failed. [ 192.027730][T10042] netlink: 'syz.0.1296': attribute type 30 has an invalid length. [ 192.042631][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 192.077835][T10042] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 192.096729][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 192.142970][T10047] netlink: 'syz.1.1298': attribute type 3 has an invalid length. [ 192.200486][T10047] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 192.275956][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1299'. [ 192.486673][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 192.513603][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 192.646804][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.808160][T10078] bond0: (slave wlan1): Releasing backup interface [ 192.885302][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 193.160488][T10103] can: request_module (can-proto-0) failed. [ 193.225921][T10103] can: request_module (can-proto-0) failed. [ 193.310477][T10103] can: request_module (can-proto-0) failed. [ 193.361877][T10103] can: request_module (can-proto-0) failed. [ 193.394063][T10103] can: request_module (can-proto-0) failed. [ 193.402918][T10119] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 193.436681][T10119] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1317'. [ 193.447787][T10103] can: request_module (can-proto-0) failed. [ 193.509281][T10103] can: request_module (can-proto-0) failed. [ 193.526616][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.574476][T10103] can: request_module (can-proto-0) failed. [ 193.686666][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.696874][T10103] can: request_module (can-proto-0) failed. [ 193.832533][T10142] x_tables: duplicate underflow at hook 1 [ 193.880366][T10148] Unsupported ieee802154 address type: 0 [ 193.915644][T10148] Unsupported ieee802154 address type: 0 [ 194.448654][T10194] erspan1: entered promiscuous mode [ 194.471078][T10194] erspan1: entered allmulticast mode [ 194.494395][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.567957][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.726728][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 194.870014][T10205] __nla_validate_parse: 6 callbacks suppressed [ 194.870034][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1340'. [ 194.984802][T10207] netlink: 'syz.1.1341': attribute type 4 has an invalid length. [ 195.192996][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1345'. [ 195.228028][T10228] netlink: 'syz.2.1345': attribute type 7 has an invalid length. [ 195.279319][T10228] netlink: 'syz.2.1345': attribute type 8 has an invalid length. [ 195.299838][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 195.607573][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.766687][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 195.790371][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 195.832227][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 195.862345][T10271] bridge0: entered promiscuous mode [ 195.885271][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 195.995797][T10271] team0: Port device team_slave_1 removed [ 196.052408][T10266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1359'. [ 196.101710][T10270] bridge0: left promiscuous mode [ 196.250429][T10282] Cannot find set identified by id 0 to match [ 196.617147][T10298] dvmrp5: entered allmulticast mode [ 196.622477][T10300] tc_dump_action: action bad kind [ 196.646677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.673637][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 196.717553][T10305] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.717563][T10303] x_tables: duplicate underflow at hook 2 [ 196.806845][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 197.527950][T10343] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 197.631190][T10349] netlink: 'syz.1.1387': attribute type 10 has an invalid length. [ 197.675583][T10349] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 197.686679][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 197.699554][T10349] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 197.706398][T10355] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1391'. [ 197.707491][T10349] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 197.718667][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1391'. [ 197.760410][T10357] syz.3.1390[10357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.760690][T10357] syz.3.1390[10357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.776170][T10359] syz.2.1394[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.789765][T10359] syz.2.1394[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.801986][T10359] syz.2.1394[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.817153][T10357] syz.3.1390[10357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.846667][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.244197][T10394] netlink: 'syz.3.1404': attribute type 7 has an invalid length. [ 198.736636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 198.886793][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.766608][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.926619][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.959428][T10456] __nla_validate_parse: 6 callbacks suppressed [ 199.959453][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 199.977775][T10456] x_tables: duplicate underflow at hook 2 [ 200.000854][T10479] xt_cgroup: invalid path, errno=-2 [ 200.046753][T10480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1432'. [ 200.505529][T10495] netlink: 'syz.2.1437': attribute type 29 has an invalid length. [ 200.548624][T10495] netlink: 'syz.2.1437': attribute type 29 has an invalid length. [ 200.598922][T10495] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 200.617836][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 200.816607][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.875626][T10504] tipc: New replicast peer: 255.255.255.255 [ 200.882355][T10504] tipc: Enabled bearer , priority 10 [ 200.976865][T10503] pim6reg1: entered promiscuous mode [ 200.988986][T10503] pim6reg1: entered allmulticast mode [ 201.269051][T10530] netlink: 'syz.4.1448': attribute type 9 has an invalid length. [ 201.337880][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 201.366974][T10529] netlink: 'syz.4.1448': attribute type 1 has an invalid length. [ 201.378693][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 201.425058][T10532] ipt_rpfilter: unknown options [ 201.450783][T10529] vlan2: entered promiscuous mode [ 201.614846][T10544] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1452'. [ 201.638820][T10544] IPv6: syztnl0: Disabled Multicast RS [ 201.671366][T10544] netlink: 'syz.3.1452': attribute type 11 has an invalid length. [ 201.707292][T10544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1452'. [ 201.763080][T10548] netlink: 'syz.4.1454': attribute type 4 has an invalid length. [ 201.821861][T10553] ip6t_srh: unknown srh match flags 5294 [ 201.833805][T10554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1458'. [ 201.846622][ C0] net_ratelimit: 1 callbacks suppressed [ 201.846639][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.940404][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 201.950221][T10560] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1457'. [ 202.006685][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 202.378453][T10580] vlan2: entered allmulticast mode [ 202.570520][T10586] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 202.596743][T10586] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 202.886743][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.887872][T10595] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 202.952753][T10595] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.046767][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.383727][T10614] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (141) ! [ 203.709996][T10638] syz_tun: entered promiscuous mode [ 203.743323][T10638] batadv_slave_0: entered promiscuous mode [ 203.926819][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.096626][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 204.258868][T10648] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 204.635878][T10665] syzkaller0: entered allmulticast mode [ 204.877114][T10673] xt_CT: No such helper "netbios-ns" [ 204.966605][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.009535][T10695] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 205.530901][T10710] __nla_validate_parse: 6 callbacks suppressed [ 205.530914][T10710] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1504'. [ 205.568137][T10710] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 206.165357][T10739] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 206.209078][T10739] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1511'. [ 206.567216][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 206.964224][T10769] ipt_rpfilter: unknown options [ 207.046675][ C0] net_ratelimit: 3 callbacks suppressed [ 207.046694][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.206741][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 207.608224][ T5855] Bluetooth: hci0: command tx timeout [ 208.088836][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.256678][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 209.126683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.221021][T10809] ipt_rpfilter: unknown options [ 209.286770][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 209.531324][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 209.924001][T10852] ipt_rpfilter: unknown options [ 209.933632][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 210.166828][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.326639][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 210.355263][T10875] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 210.381006][T10874] vlan0: entered promiscuous mode [ 210.397166][T10881] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 210.543073][T10884] syzkaller0: entered promiscuous mode [ 210.550361][T10884] syzkaller0: entered allmulticast mode [ 210.577004][ T7880] syzkaller0: tun_net_xmit 48 [ 210.615433][T10884] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 210.649591][T10884] syzkaller0: tun_net_xmit 1280 [ 210.667351][T10884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1558'. [ 210.780719][T10898] ipt_rpfilter: unknown options [ 211.088375][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 211.206742][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.303545][T10925] can_create: 4 callbacks suppressed [ 211.303566][T10925] can: request_module (can-proto-0) failed. [ 212.247568][ C0] net_ratelimit: 1 callbacks suppressed [ 212.247590][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.416624][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 212.777881][T10932] netlink: 'syz.0.1570': attribute type 4 has an invalid length. [ 212.807684][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 212.851225][T10936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1571'. [ 213.040177][T10953] ipt_rpfilter: unknown options [ 213.103563][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.111397][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.296609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.356966][T10937] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 213.395978][T10949] team0: Port device wg2 removed [ 213.446805][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 213.594511][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1581'. [ 213.615225][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1581'. [ 213.917468][T10985] vlan1: entered promiscuous mode [ 213.989338][T10991] ipt_rpfilter: unknown options [ 214.094254][T10985] vlan1: left promiscuous mode [ 214.217306][T10997] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1592'. [ 214.336899][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.496609][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.648993][T11020] netlink: 'syz.4.1601': attribute type 3 has an invalid length. [ 214.676449][T11020] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1601'. [ 214.887302][T11025] ipt_rpfilter: unknown options [ 215.376613][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.420391][T11047] can: request_module (can-proto-5) failed. [ 215.536736][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 215.729456][T11073] ipt_rpfilter: unknown options [ 215.854878][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 215.886392][T11083] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1621'. [ 215.915378][T11083] tipc: Invalid UDP bearer configuration [ 215.915420][T11083] tipc: Enabling of bearer rejected, failed to enable media [ 215.996776][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'. [ 216.215891][T11085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1622'. [ 216.231889][T11099] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1624'. [ 216.406834][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.506497][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 216.776340][T11119] ipt_rpfilter: unknown options [ 216.842375][T11124] netlink: 'syz.4.1633': attribute type 4 has an invalid length. [ 216.850326][T11124] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1633'. [ 216.974473][T11129] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1635'. [ 217.038504][T11135] No such timeout policy "syz0" [ 217.212419][T11141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1638'. [ 217.446717][ C0] net_ratelimit: 1 callbacks suppressed [ 217.446737][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.616804][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 217.706485][T11161] ipt_rpfilter: unknown options [ 217.965969][T11178] syz.1.1648[11178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.966035][T11178] syz.1.1648[11178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.985326][T11178] syz.1.1648[11178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.056303][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 218.154206][T11191] xt_TCPMSS: Only works on TCP SYN packets [ 218.398911][T11210] netlink: 'syz.0.1658': attribute type 4 has an invalid length. [ 218.496800][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.646609][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 218.866194][T11224] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 218.972507][T11224] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 219.526667][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.697655][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.331886][T11289] netlink: 'syz.4.1688': attribute type 96 has an invalid length. [ 220.567024][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.726701][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 221.155351][T11330] __nla_validate_parse: 7 callbacks suppressed [ 221.155370][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 221.574288][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 221.603257][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 221.616672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.766793][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.279384][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 222.316020][T11391] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 222.344503][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1713'. [ 222.380098][T11396] Unknown options in mask 1f4 [ 222.646815][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.806656][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.060592][T11417] netlink: 'syz.4.1724': attribute type 4 has an invalid length. [ 223.081159][T11417] netlink: 'syz.4.1724': attribute type 4 has an invalid length. [ 223.330723][T11421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1725'. [ 223.485884][T11430] netlink: 'syz.2.1729': attribute type 10 has an invalid length. [ 223.626169][T11430] team0: Port device netdevsim0 added [ 223.696681][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 223.846813][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.577792][T11479] netlink: 'syz.1.1743': attribute type 23 has an invalid length. [ 224.626846][T11479] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1743'. [ 224.691915][T11483] netlink: 'syz.4.1741': attribute type 4 has an invalid length. [ 224.726965][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 224.886694][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 225.183386][T11501] netlink: 'syz.1.1749': attribute type 10 has an invalid length. [ 225.226890][T11501] team0: left allmulticast mode [ 225.260043][T11501] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.280297][T11501] team0: entered allmulticast mode [ 225.298375][T11501] bond0: (slave team0): Enslaving as an active interface with an up link [ 225.409977][T11513] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 225.432197][T11513] macvlan2: entered allmulticast mode [ 225.440547][T11513] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 225.456797][T11513] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 225.530353][T11520] sctp: [Deprecated]: syz.1.1755 (pid 11520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.530353][T11520] Use struct sctp_sack_info instead [ 225.548141][T11520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1755'. [ 225.635323][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 225.645401][T11529] netlink: 'syz.1.1757': attribute type 4 has an invalid length. [ 225.653979][T11529] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1757'. [ 225.663331][T11529] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 225.766729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.926783][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 226.309508][T11550] bridge0: entered promiscuous mode [ 226.333702][T11549] bridge0: left promiscuous mode [ 226.473620][T11560] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0 [ 226.515315][T11560] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0 [ 226.519270][T11563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1769'. [ 226.543570][T11560] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0 [ 226.574040][T11560] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0 [ 226.649377][T11560] xt_l2tp: v2 sid > 0xffff: 262144 [ 226.801833][T11576] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 226.810069][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.041719][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1771'. [ 227.098422][T11571] bridge3: entered promiscuous mode [ 227.108519][T11571] bridge3: entered allmulticast mode [ 227.158231][T11571] team0: Port device bridge3 added [ 227.208276][T11576] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 227.243002][T11578] bridge0: port 1(ip6gretap0) entered blocking state [ 227.260804][T11578] bridge0: port 1(ip6gretap0) entered disabled state [ 227.273606][T11578] ip6gretap0: entered allmulticast mode [ 227.287393][T11578] ip6gretap0: entered promiscuous mode [ 227.324639][T11597] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 227.413748][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 227.536456][T11608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1781'. [ 227.647979][T11611] netlink: 'syz.0.1782': attribute type 11 has an invalid length. [ 227.846684][ C0] net_ratelimit: 1 callbacks suppressed [ 227.846704][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.006724][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 228.637660][T11631] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1790'. [ 228.734125][T11635] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 228.761164][T11635] batman_adv: batadv0: Adding interface: ip6gretap1 [ 228.808836][T11635] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.809676][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 228.886876][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.927828][T11635] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 229.009200][T11637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.024681][T11637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.056645][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.172640][T11637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.185071][T11637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.225104][T11637] batman_adv: batadv0: Removing interface: ip6gretap1 [ 229.308849][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 229.588610][T11656] pim6reg1: entered promiscuous mode [ 229.596296][T11656] pim6reg1: entered allmulticast mode [ 229.797162][T11660] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1800'. [ 229.926614][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.077822][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 230.096757][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.577169][T11686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1807'. [ 230.966818][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.126619][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.452243][T11711] netlink: 'syz.0.1806': attribute type 10 has an invalid length. [ 231.502963][T11711] bond0: (slave netdevsim0): Releasing backup interface [ 231.557079][T11711] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 231.597443][T11711] team0: Failed to send options change via netlink (err -105) [ 231.641649][T11713] netlink: 'syz.0.1806': attribute type 10 has an invalid length. [ 231.676852][T11711] team0: Port device netdevsim0 added [ 231.753231][T11713] team0: Failed to send options change via netlink (err -105) [ 231.782809][T11713] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 231.815484][T11713] team0: Port device netdevsim0 removed [ 231.853203][T11713] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 232.006622][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.166735][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 232.307592][T11724] xt_bpf: check failed: parse error [ 232.362436][T11730] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 232.483377][T11740] netlink: 'syz.3.1826': attribute type 12 has an invalid length. [ 232.501448][T11740] netlink: 'syz.3.1826': attribute type 29 has an invalid length. [ 232.511847][T11740] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1826'. [ 232.597233][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1826'. [ 232.871107][T11756] netlink: 'syz.0.1830': attribute type 29 has an invalid length. [ 232.885124][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'. [ 232.914093][T11756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1830'. [ 233.046848][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.184715][T11777] FAULT_INJECTION: forcing a failure. [ 233.184715][T11777] name failslab, interval 1, probability 0, space 0, times 0 [ 233.206617][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 233.222866][T11777] CPU: 0 UID: 0 PID: 11777 Comm: syz.3.1837 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 233.233704][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 233.243790][T11777] Call Trace: [ 233.247090][T11777] [ 233.250045][T11777] dump_stack_lvl+0x241/0x360 [ 233.254765][T11777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.259986][T11777] ? __pfx__printk+0x10/0x10 [ 233.264582][T11777] ? __kmalloc_noprof+0xb0/0x400 [ 233.269522][T11777] ? __pfx___might_resched+0x10/0x10 [ 233.274815][T11777] should_fail_ex+0x3b0/0x4e0 [ 233.279495][T11777] ? alloc_pipe_info+0x1ff/0x4d0 [ 233.284449][T11777] should_failslab+0xac/0x100 [ 233.289147][T11777] ? alloc_pipe_info+0x1ff/0x4d0 [ 233.294097][T11777] __kmalloc_noprof+0xd8/0x400 [ 233.298895][T11777] alloc_pipe_info+0x1ff/0x4d0 [ 233.303663][T11777] create_pipe_files+0x87/0x700 [ 233.308518][T11777] ? bpf_trace_run2+0x1fc/0x540 [ 233.313374][T11777] __do_pipe_flags+0x48/0x2d0 [ 233.318050][T11777] do_pipe2+0xd4/0x310 [ 233.322122][T11777] ? __pfx_do_pipe2+0x10/0x10 [ 233.326818][T11777] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.333149][T11777] ? rcu_is_watching+0x15/0xb0 [ 233.337915][T11777] __x64_sys_pipe+0x3a/0x50 [ 233.342419][T11777] do_syscall_64+0xf3/0x230 [ 233.346939][T11777] ? clear_bhb_loop+0x35/0x90 [ 233.351638][T11777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.357547][T11777] RIP: 0033:0x7f7a0a17e719 [ 233.361970][T11777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.381585][T11777] RSP: 002b:00007f7a0afc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 233.390004][T11777] RAX: ffffffffffffffda RBX: 00007f7a0a335f80 RCX: 00007f7a0a17e719 [ 233.397977][T11777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 233.405949][T11777] RBP: 00007f7a0afc0090 R08: 0000000000000000 R09: 0000000000000000 [ 233.413917][T11777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.421884][T11777] R13: 0000000000000000 R14: 00007f7a0a335f80 R15: 00007ffd19328f98 [ 233.429867][T11777] [ 233.657639][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 233.686426][T11793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.086637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.149404][T11817] FAULT_INJECTION: forcing a failure. [ 234.149404][T11817] name failslab, interval 1, probability 0, space 0, times 0 [ 234.174789][T11817] CPU: 1 UID: 0 PID: 11817 Comm: syz.2.1850 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 234.185629][T11817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 234.195712][T11817] Call Trace: [ 234.199023][T11817] [ 234.201973][T11817] dump_stack_lvl+0x241/0x360 [ 234.206683][T11817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.211900][T11817] ? __pfx__printk+0x10/0x10 [ 234.216508][T11817] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 234.222418][T11817] ? __pfx___might_resched+0x10/0x10 [ 234.227735][T11817] should_fail_ex+0x3b0/0x4e0 [ 234.232441][T11817] ? __d_alloc+0x31/0x700 [ 234.236804][T11817] should_failslab+0xac/0x100 [ 234.241509][T11817] ? __d_alloc+0x31/0x700 [ 234.245869][T11817] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 234.251633][T11817] ? __pfx_register_lock_class+0x10/0x10 [ 234.257303][T11817] __d_alloc+0x31/0x700 [ 234.261488][T11817] d_alloc_pseudo+0x1f/0xb0 [ 234.266017][T11817] alloc_file_pseudo+0x123/0x290 [ 234.266982][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.270953][T11817] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 234.283349][T11817] ? inode_set_ctime_current+0x25/0x90 [ 234.288817][T11817] create_pipe_files+0x33e/0x700 [ 234.293757][T11817] __do_pipe_flags+0x48/0x2d0 [ 234.298441][T11817] do_pipe2+0xd4/0x310 [ 234.302509][T11817] ? __pfx_do_pipe2+0x10/0x10 [ 234.307209][T11817] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.313570][T11817] ? do_syscall_64+0x100/0x230 [ 234.318359][T11817] __x64_sys_pipe+0x3a/0x50 [ 234.322873][T11817] do_syscall_64+0xf3/0x230 [ 234.327373][T11817] ? clear_bhb_loop+0x35/0x90 [ 234.332046][T11817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.337935][T11817] RIP: 0033:0x7f6d17d7e719 [ 234.342346][T11817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.361983][T11817] RSP: 002b:00007f6d18c1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 234.370435][T11817] RAX: ffffffffffffffda RBX: 00007f6d17f35f80 RCX: 00007f6d17d7e719 [ 234.378412][T11817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 234.386378][T11817] RBP: 00007f6d18c1d090 R08: 0000000000000000 R09: 0000000000000000 [ 234.394342][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.402316][T11817] R13: 0000000000000000 R14: 00007f6d17f35f80 R15: 00007fff3dfd59c8 [ 234.410304][T11817] [ 235.136789][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.286691][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.587399][T11856] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1864'. [ 236.166784][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.326780][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 236.680214][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1877'. [ 236.777567][T11781] Set syz1 is full, maxelem 65536 reached [ 236.885404][T11897] netlink: 'syz.2.1878': attribute type 2 has an invalid length. [ 236.904411][T11897] netlink: 'syz.2.1878': attribute type 9 has an invalid length. [ 236.912913][T11897] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1878'. [ 236.973849][T11902] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 237.647054][T11928] netlink: 'syz.1.1889': attribute type 4 has an invalid length. [ 237.854995][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 238.246770][ C0] net_ratelimit: 2 callbacks suppressed [ 238.246792][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 238.406860][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 238.650178][T11990] vlan2: entered promiscuous mode [ 238.655422][T11990] vlan2: entered allmulticast mode [ 238.686851][T11990] hsr_slave_1: entered allmulticast mode [ 238.726205][T11996] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 238.734976][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1910'. [ 238.746039][T11996] netlink: 'syz.0.1912': attribute type 9 has an invalid length. [ 238.842021][T11990] hsr_slave_1 (unregistering): left allmulticast mode [ 238.861670][T11990] hsr_slave_1 (unregistering): left promiscuous mode [ 239.186216][T12019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 239.199077][T12019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1918'. [ 239.227350][T12019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1918'. [ 239.286794][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 239.446642][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 239.702692][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 240.334057][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 240.491272][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.368180][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.530388][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.977944][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 241.996963][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1928'. [ 242.007751][T12047] netlink: 'syz.4.1928': attribute type 15 has an invalid length. [ 242.163518][T12064] syz.2.1934[12064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.163608][T12064] syz.2.1934[12064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.168135][T12065] syz.2.1934[12065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.213620][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1928'. [ 242.252460][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'. [ 242.261953][T12065] syz.2.1934[12065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.406605][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.566760][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 242.630338][T12086] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.655194][T12086] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 242.988484][T12091] batadv_slave_1: entered promiscuous mode [ 243.066897][T12090] batadv_slave_1: left promiscuous mode [ 243.198442][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'. [ 243.446771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 243.518316][T12116] netlink: 'syz.0.1949': attribute type 14 has an invalid length. [ 243.606626][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 243.885552][T12132] netlink: 'syz.3.1952': attribute type 1 has an invalid length. [ 243.903675][T12132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1952'. [ 244.070875][T12133] wg2: entered promiscuous mode [ 244.089259][T12133] team0: Device wg2 is of different type [ 244.114693][T12134] team0: Device wg2 is of different type [ 244.486615][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 244.502981][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 244.646790][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.210871][T12194] vlan1: entered allmulticast mode [ 245.305211][T12195] vlan1: entered allmulticast mode [ 245.340820][T12202] FAULT_INJECTION: forcing a failure. [ 245.340820][T12202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.368002][T12202] CPU: 0 UID: 0 PID: 12202 Comm: syz.4.1973 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 245.378834][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 245.388933][T12202] Call Trace: [ 245.392243][T12202] [ 245.395205][T12202] dump_stack_lvl+0x241/0x360 [ 245.399918][T12202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.405131][T12202] ? __pfx__printk+0x10/0x10 [ 245.409729][T12202] ? snprintf+0xda/0x120 [ 245.414066][T12202] should_fail_ex+0x3b0/0x4e0 [ 245.418744][T12202] _copy_to_user+0x31/0xb0 [ 245.423170][T12202] simple_read_from_buffer+0xca/0x150 [ 245.428551][T12202] proc_fail_nth_read+0x1e9/0x250 [ 245.433581][T12202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.439134][T12202] ? rw_verify_area+0x55e/0x6f0 [ 245.444016][T12202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.449589][T12202] vfs_read+0x1fc/0xb70 [ 245.453765][T12202] ? fdget_pos+0x24e/0x320 [ 245.458183][T12202] ? __pfx_vfs_read+0x10/0x10 [ 245.462871][T12202] ? __fget_files+0x3f3/0x470 [ 245.467563][T12202] ? fdget_pos+0x24e/0x320 [ 245.471991][T12202] ksys_read+0x183/0x2b0 [ 245.476302][T12202] ? __pfx_ksys_read+0x10/0x10 [ 245.481081][T12202] ? rcu_is_watching+0x15/0xb0 [ 245.485858][T12202] ? trace_sys_enter+0x1f/0xd0 [ 245.490637][T12202] do_syscall_64+0xf3/0x230 [ 245.495167][T12202] ? clear_bhb_loop+0x35/0x90 [ 245.499882][T12202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.505789][T12202] RIP: 0033:0x7f4ee157d15c [ 245.510251][T12202] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 245.530325][T12202] RSP: 002b:00007f4edf9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.538865][T12202] RAX: ffffffffffffffda RBX: 00007f4ee1735f80 RCX: 00007f4ee157d15c [ 245.546847][T12202] RDX: 000000000000000f RSI: 00007f4edf9f60a0 RDI: 0000000000000004 [ 245.554820][T12202] RBP: 00007f4edf9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.562795][T12202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.570762][T12202] R13: 0000000000000000 R14: 00007f4ee1735f80 R15: 00007ffd370e4ee8 [ 245.578772][T12202] [ 245.582298][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 245.686672][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 245.787821][T12205] team0 (unregistering): Port device team_slave_0 removed [ 245.820197][T12205] team0 (unregistering): Port device team_slave_1 removed [ 245.846217][T12205] team0 (unregistering): Port device netdevsim0 removed [ 245.875062][T12205] team0 (unregistering): Port device bridge2 removed [ 246.016703][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 246.646739][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.726812][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 246.811917][T12264] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.834530][T12264] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.021666][T12289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1997'. [ 247.088124][T12264] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.116799][T12264] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.196420][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1999'. [ 247.311255][T12264] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.336667][T12264] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.527069][T12264] bond0: (slave netdevsim0): Releasing backup interface [ 247.569200][T12264] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.580333][T12302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.599539][T12264] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.609366][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2006'. [ 247.637701][T12308] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2006'. [ 247.679827][T12314] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2007'. [ 247.686733][T12308] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2006'. [ 247.698170][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.713169][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 247.740237][T12264] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.749078][T12264] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.764966][T12308] vlan1: entered allmulticast mode [ 247.770227][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 247.781647][T12308] erspan0: entered allmulticast mode [ 247.799124][T12264] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.812840][T12264] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.824632][T12319] FAULT_INJECTION: forcing a failure. [ 247.824632][T12319] name failslab, interval 1, probability 0, space 0, times 0 [ 247.843919][T12264] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.876693][T12319] CPU: 0 UID: 0 PID: 12319 Comm: syz.2.2008 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 247.887523][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 247.897617][T12319] Call Trace: [ 247.900914][T12319] [ 247.903858][T12319] dump_stack_lvl+0x241/0x360 [ 247.908553][T12319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.913766][T12319] ? __pfx__printk+0x10/0x10 [ 247.918356][T12319] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 247.923905][T12319] ? __pfx___might_resched+0x10/0x10 [ 247.929213][T12319] should_fail_ex+0x3b0/0x4e0 [ 247.933896][T12319] ? security_file_alloc+0x32/0x310 [ 247.939091][T12319] should_failslab+0xac/0x100 [ 247.943780][T12319] ? security_file_alloc+0x32/0x310 [ 247.948980][T12319] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 247.954359][T12319] security_file_alloc+0x32/0x310 [ 247.959413][T12319] init_file+0x93/0x1e0 [ 247.963575][T12319] alloc_empty_file+0xb8/0x1d0 [ 247.968354][T12319] alloc_file_clone+0x58/0xe0 [ 247.973036][T12319] create_pipe_files+0x3e7/0x700 [ 247.978004][T12319] __do_pipe_flags+0x48/0x2d0 [ 247.982690][T12319] do_pipe2+0xd4/0x310 [ 247.986771][T12319] ? __pfx_do_pipe2+0x10/0x10 [ 247.991447][T12319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.997776][T12319] ? do_syscall_64+0x100/0x230 [ 248.002544][T12319] __x64_sys_pipe+0x3a/0x50 [ 248.007044][T12319] do_syscall_64+0xf3/0x230 [ 248.011545][T12319] ? clear_bhb_loop+0x35/0x90 [ 248.016221][T12319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.022112][T12319] RIP: 0033:0x7f6d17d7e719 [ 248.026523][T12319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.046137][T12319] RSP: 002b:00007f6d18c1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 248.054554][T12319] RAX: ffffffffffffffda RBX: 00007f6d17f35f80 RCX: 00007f6d17d7e719 [ 248.062523][T12319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 248.070492][T12319] RBP: 00007f6d18c1d090 R08: 0000000000000000 R09: 0000000000000000 [ 248.078634][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.086605][T12319] R13: 0000000000000000 R14: 00007f6d17f35f80 R15: 00007fff3dfd59c8 [ 248.094600][T12319] [ 248.098921][T12264] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.119835][T12264] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.129608][T12264] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.178038][T12329] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 0, id = 0 [ 248.269452][T12335] lo: entered promiscuous mode [ 248.380641][T12338] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 248.493035][T12335] lo: left promiscuous mode [ 248.540763][T12353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2017'. [ 248.566713][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 248.726708][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 248.747668][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 248.806787][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 249.107833][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 249.134642][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 249.306023][T12389] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2029'. [ 249.341799][T12394] ip6gretap0: entered promiscuous mode [ 249.365923][T12394] ip6gretap0: left promiscuous mode [ 249.452088][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2030'. [ 249.611241][T12415] netlink: 'syz.3.2037': attribute type 1 has an invalid length. [ 249.619529][T12415] netlink: 'syz.3.2037': attribute type 2 has an invalid length. [ 249.627593][T12415] netlink: 'syz.3.2037': attribute type 2 has an invalid length. [ 249.635697][T12415] netlink: 'syz.3.2037': attribute type 1 has an invalid length. [ 249.643698][T12415] netlink: 'syz.3.2037': attribute type 1 has an invalid length. [ 249.651561][T12415] netlink: 'syz.3.2037': attribute type 1 has an invalid length. [ 249.716408][T12422] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 249.736247][T12420] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2036'. [ 249.766905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 249.846687][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 249.892402][T12428] No such timeout policy "syz0" [ 250.271005][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 250.348392][T12452] netlink: 'syz.0.2050': attribute type 1 has an invalid length. [ 250.365606][T12452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2050'. [ 250.375448][T12453] netlink: 'syz.3.2049': attribute type 4 has an invalid length. [ 250.394785][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 250.595658][T12459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.769006][T12478] netlink: 'syz.0.2056': attribute type 11 has an invalid length. [ 250.806739][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 250.886772][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.856792][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 251.880279][T12543] netlink: 'syz.0.2079': attribute type 12 has an invalid length. [ 251.916925][T12544] netlink: 'syz.0.2079': attribute type 12 has an invalid length. [ 251.942374][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 252.418364][T12561] team0: Device hsr_slave_0 failed to register rx_handler [ 252.497959][T12574] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 252.886634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 252.966744][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 253.673393][T12647] __nla_validate_parse: 13 callbacks suppressed [ 253.673412][T12647] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2115'. [ 253.839632][T12656] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 253.927093][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 254.016705][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 254.045739][T12670] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2121'. [ 254.102114][T12673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2121'. [ 254.432497][T12699] FAULT_INJECTION: forcing a failure. [ 254.432497][T12699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.462441][T12699] CPU: 1 UID: 0 PID: 12699 Comm: syz.4.2131 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 254.473315][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 254.483405][T12699] Call Trace: [ 254.486709][T12699] [ 254.489667][T12699] dump_stack_lvl+0x241/0x360 [ 254.494400][T12699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.499634][T12699] ? __pfx__printk+0x10/0x10 [ 254.501596][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 254.504247][T12699] ? __pfx_lock_release+0x10/0x10 [ 254.504293][T12699] should_fail_ex+0x3b0/0x4e0 [ 254.522882][T12699] _copy_from_user+0x2f/0xc0 [ 254.527530][T12699] do_sock_getsockopt+0x1d1/0x7e0 [ 254.532629][T12699] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 254.538228][T12699] ? __fget_files+0x3f3/0x470 [ 254.542944][T12699] ? __fget_files+0x29/0x470 [ 254.547584][T12699] __sys_getsockopt+0x267/0x330 [ 254.552563][T12699] ? __pfx___sys_getsockopt+0x10/0x10 [ 254.557982][T12699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.564368][T12699] ? do_syscall_64+0x100/0x230 [ 254.569186][T12699] __x64_sys_getsockopt+0xb5/0xd0 [ 254.574281][T12699] do_syscall_64+0xf3/0x230 [ 254.578832][T12699] ? clear_bhb_loop+0x35/0x90 [ 254.583607][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.589538][T12699] RIP: 0033:0x7f4ee157e719 [ 254.594002][T12699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.613645][T12699] RSP: 002b:00007f4edf9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 254.622103][T12699] RAX: ffffffffffffffda RBX: 00007f4ee1735f80 RCX: 00007f4ee157e719 [ 254.630111][T12699] RDX: 0000000000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 254.638120][T12699] RBP: 00007f4edf9f6090 R08: 0000000020000080 R09: 0000000000000000 [ 254.646124][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.654133][T12699] R13: 0000000000000000 R14: 00007f4ee1735f80 R15: 00007ffd370e4ee8 [ 254.662158][T12699] [ 254.803146][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 254.901583][T12713] validate_nla: 3 callbacks suppressed [ 254.901610][T12713] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 254.966782][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 255.013029][T12720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2138'. [ 255.056806][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 255.322268][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 255.381214][T12737] tipc: Bearer : already 2 bearers with priority 10 [ 255.400024][T12737] tipc: Bearer : trying with adjusted priority [ 255.415942][T12737] tipc: Enabled bearer , priority 9 [ 255.443452][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2147'. [ 255.592945][T12747] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 255.604849][T12750] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 256.006822][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 256.086842][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 257.046780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.126848][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.086859][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 258.166705][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 259.136647][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 259.206827][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 260.167137][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.246681][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 261.206649][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 261.286772][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 262.246921][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 262.336869][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 263.286677][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 263.366867][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 264.326881][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 264.406769][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 265.376636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 265.446956][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 266.406843][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.486792][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 267.446738][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 267.526902][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 268.486905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.566745][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 269.526687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 269.606846][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 270.566913][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.646720][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 271.606664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.686827][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 272.646860][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.726736][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 272.929543][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 272.951324][T12783] syz_tun: entered promiscuous mode [ 272.959954][T12783] syz_tun: left promiscuous mode [ 273.012365][ T9324] IPVS: starting estimator thread 0... [ 273.106753][T12791] IPVS: using max 22 ests per chain, 52800 per kthread [ 273.192479][T12795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.686645][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.766782][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 273.841497][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2165'. [ 273.875132][T12811] netlink: 'syz.3.2167': attribute type 4 has an invalid length. [ 273.895172][T12811] netlink: 'syz.3.2167': attribute type 4 has an invalid length. [ 273.970792][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2168'. [ 274.135331][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2168'. [ 274.478777][T12849] netlink: 'syz.1.2178': attribute type 10 has an invalid length. [ 274.488228][T12849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2178'. [ 274.503577][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 274.552030][T12854] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 274.564268][T12854] netlink: 'syz.4.2179': attribute type 2 has an invalid length. [ 274.595713][T12859] macvlan0: entered allmulticast mode [ 274.604497][T12859] hsr0: entered allmulticast mode [ 274.633003][T12859] hsr_slave_0: entered allmulticast mode [ 274.643905][T12859] hsr_slave_1: entered allmulticast mode [ 274.652331][T12859] hsr0: left allmulticast mode [ 274.657410][T12859] hsr_slave_0: left allmulticast mode [ 274.663013][T12859] hsr_slave_1: left allmulticast mode [ 274.714883][T12870] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2183'. [ 274.724786][T12870] unsupported nla_type 65535 [ 274.729852][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 274.752012][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2185'. [ 274.806695][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 274.842062][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 274.858935][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 274.875784][T12876] netlink: 'syz.4.2187': attribute type 11 has an invalid length. [ 275.614115][T12902] xt_HMARK: spi-set and port-set can't be combined [ 275.766619][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.846740][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 276.775212][T12950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.806905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.814389][T12950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.856244][T12950] bond0 (unregistering): (slave bond1): Releasing backup interface [ 276.881727][T12950] bond0 (unregistering): Released all slaves [ 276.888019][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 277.443791][T12986] syzkaller0: create flow: hash 210079453 index 2 [ 277.652802][ T7881] syzkaller0: tun_net_xmit 76 [ 277.666282][ T7881] syzkaller0: tun_net_xmit 48 [ 277.677082][ T9319] syzkaller0: tun_net_xmit 76 [ 277.704613][T12978] syzkaller0: delete flow: hash 210079453 index 2 [ 277.811234][T13008] netlink: 'syz.1.2227': attribute type 1 has an invalid length. [ 277.849042][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.926774][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 277.941706][T13012] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 277.960310][T13012] __nla_validate_parse: 4 callbacks suppressed [ 277.960333][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 278.886886][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.966659][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 279.902417][T12995] : renamed from vlan0 (while UP) [ 279.926727][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.011974][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 280.119136][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'. [ 280.266762][T13041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2239'. [ 280.968003][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.046777][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 282.006646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.086798][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 282.930187][T13088] tap0: tun_chr_ioctl cmd 2148553947 [ 283.046805][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.126684][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 283.324368][T13102] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 283.337570][T13102] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 283.456956][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'. [ 283.478612][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2268'. [ 283.498193][T13115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2268'. [ 284.086680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.142069][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 284.151149][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'. [ 284.166721][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 284.795998][T13180] netlink: 'syz.2.2290': attribute type 11 has an invalid length. [ 284.835237][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2290'. [ 284.868919][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 284.905006][T13181] netlink: 'syz.0.2291': attribute type 10 has an invalid length. [ 284.913245][T13181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2291'. [ 284.924276][T13182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2291'. [ 284.933739][T13181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2291'. [ 285.126781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 285.206622][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 285.313326][T13215] hsr0: left promiscuous mode [ 286.166640][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.246794][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 286.409754][T13281] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 286.419166][T13281] netlink: 'syz.4.2321': attribute type 10 has an invalid length. [ 286.486322][T13286] netlink: 'syz.0.2323': attribute type 4 has an invalid length. [ 287.206862][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 287.286736][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 287.339045][T13343] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 287.365849][T13343] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 287.404850][T13345] netlink: 'syz.2.2339': attribute type 2 has an invalid length. [ 287.469461][T13353] netlink: 'syz.2.2341': attribute type 8 has an invalid length. [ 287.863425][T13386] x_tables: duplicate underflow at hook 2 [ 287.879122][T13384] x_tables: duplicate underflow at hook 2 [ 288.227010][T13409] netlink: 'syz.0.2357': attribute type 14 has an invalid length. [ 288.246625][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.326755][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 288.448111][T13421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.965715][T13441] wg2: entered promiscuous mode [ 288.971216][T13441] team0: Device wg2 is of different type [ 289.286779][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.797932][T13484] __nla_validate_parse: 12 callbacks suppressed [ 289.797952][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 290.247241][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'. [ 290.287739][T13495] bridge_slave_1: left allmulticast mode [ 290.311724][T13495] bridge_slave_1: left promiscuous mode [ 290.326618][ C0] net_ratelimit: 1 callbacks suppressed [ 290.326637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.353186][T13495] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.384257][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 290.406734][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 290.416424][T13495] bridge5: port 1(bridge_slave_1) entered blocking state [ 290.435230][T13495] bridge5: port 1(bridge_slave_1) entered disabled state [ 290.457075][T13495] bridge_slave_1: entered allmulticast mode [ 290.492864][T13495] bridge_slave_1: entered promiscuous mode [ 290.528830][T13508] bridge5: port 2(macvlan0) entered blocking state [ 290.567480][T13508] bridge5: port 2(macvlan0) entered disabled state [ 290.574263][T13508] macvlan0: entered allmulticast mode [ 290.604879][T13508] macvlan0: entered promiscuous mode [ 290.795386][T13529] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 290.872335][T13533] IPVS: Error connecting to the multicast addr [ 290.903157][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 290.926165][T13535] netlink: 'syz.3.2398': attribute type 21 has an invalid length. [ 290.967245][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'. [ 291.062643][T13542] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2402'. [ 291.203770][T13547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2398'. [ 291.366872][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.446635][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 291.700270][T13561] dvmrp5: entered allmulticast mode [ 291.719273][T13561] dvmrp5: left allmulticast mode [ 291.736285][T13561] pimreg: left allmulticast mode [ 291.750277][T13564] xt_NFQUEUE: number of total queues is 0 [ 291.828001][T13567] netlink: 'syz.0.2408': attribute type 1 has an invalid length. [ 291.897384][T13566] tipc: Started in network mode [ 291.904738][T13566] tipc: Node identity ac1414aa, cluster identity 4711 [ 291.925325][T13566] tipc: Enabled bearer , priority 10 [ 291.942493][T13564] pim6reg: entered allmulticast mode [ 291.977456][T13563] pim6reg: left allmulticast mode [ 292.123252][T13568] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.164630][T13568] bond3: (slave bond4): making interface the new active one [ 292.217457][T13568] bond3: (slave bond4): Enslaving as an active interface with an up link [ 292.338918][T13574] netlink: 'syz.3.2411': attribute type 3 has an invalid length. [ 292.406702][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.468164][T13581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2413'. [ 292.741435][T13587] netlink: 'syz.0.2416': attribute type 25 has an invalid length. [ 292.844579][T13599] netlink: 'syz.1.2419': attribute type 3 has an invalid length. [ 292.967081][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 293.056865][ T5841] tipc: Node number set to 2886997162 [ 293.217389][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 293.363005][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 293.446779][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.664989][T13633] bridge0: entered promiscuous mode [ 293.687118][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 293.752332][T13633] team0: Port device team_slave_1 removed [ 293.900400][T13632] bridge0: left promiscuous mode [ 294.486800][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.040302][T13681] IPVS: Unknown mcast interface: netpci0 [ 295.072029][T13681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.106815][T13681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.137557][T13687] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2450'. [ 295.526806][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.667745][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2456'. [ 295.724035][T13705] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2457'. [ 295.724805][T13704] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2457'. [ 295.858936][T13713] netlink: 'syz.3.2460': attribute type 7 has an invalid length. [ 296.166693][T13732] tipc: Enabling of bearer rejected, failed to enable media [ 296.188816][T13732] tipc: Enabling of bearer rejected, failed to enable media [ 296.203856][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2467'. [ 296.318851][T13740] tc_dump_action: action bad kind [ 296.329557][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2468'. [ 296.457157][T13737] sctp: [Deprecated]: syz.3.2467 (pid 13737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.457157][T13737] Use struct sctp_sack_info instead [ 296.566753][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 296.587088][T13752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2470'. [ 296.682751][T13760] macsec2: entered promiscuous mode [ 296.694863][T13760] macvlan1: entered promiscuous mode [ 296.705237][T13760] macsec2: entered allmulticast mode [ 296.714705][T13760] macvlan1: entered allmulticast mode [ 296.720480][T13760] veth1_vlan: entered allmulticast mode [ 296.729099][T13760] macvlan1: left allmulticast mode [ 296.734265][T13760] veth1_vlan: left allmulticast mode [ 296.752901][T13760] macvlan1: left promiscuous mode [ 296.945256][T13777] xt_l2tp: v2 doesn't support IP mode [ 297.135560][ T7852] tipc: Subscription rejected, illegal request [ 297.230406][T13795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2485'. [ 297.494055][ C1] Unknown status report in ack skb [ 297.606793][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.675461][T13817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2492'. [ 298.208213][T13845] netlink: 'syz.4.2499': attribute type 10 has an invalid length. [ 298.236827][T13845] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 298.328897][T13848] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2500'. [ 298.646617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.715956][T13867] wg2: entered allmulticast mode [ 298.785995][T13873] netlink: zone id is out of range [ 298.822389][T13873] netlink: zone id is out of range [ 298.850826][T13873] netlink: zone id is out of range [ 298.870874][T13873] netlink: zone id is out of range [ 298.876047][T13873] netlink: del zone limit has 4 unknown bytes [ 299.068061][T13884] netlink: 'syz.3.2507': attribute type 1 has an invalid length. [ 299.098022][T13883] bond0: (slave bond_slave_0): Releasing backup interface [ 299.181452][T13884] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 299.352282][T13880] bond0: (slave netdevsim0): Releasing backup interface [ 299.387309][T13880] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 299.403659][T13913] netlink: 'syz.3.2514': attribute type 29 has an invalid length. [ 299.686873][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.404853][T13945] __nla_validate_parse: 4 callbacks suppressed [ 300.404871][T13945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2525'. [ 300.612432][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2531'. [ 300.643199][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2531'. [ 300.677093][T13966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.716876][T13966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.726699][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.745173][T13966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.776879][T13966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.886976][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 301.766894][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.955911][T14028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2548'. [ 302.012303][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'. [ 302.027474][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'. [ 302.056894][T14030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2549'. [ 302.076866][T14033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2549'. [ 302.122310][T14033] vlan3: entered allmulticast mode [ 302.233899][T14041] netlink: 'syz.1.2551': attribute type 23 has an invalid length. [ 302.248032][T14030] vlan3: entered allmulticast mode [ 302.256725][T14041] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2551'. [ 302.298219][T14041] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2551'. [ 302.503929][T14046] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 302.515974][T14046] batman_adv: batadv0: Adding interface: ip6gretap2 [ 302.523261][T14046] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 302.546166][T14046] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 302.616980][T14050] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 302.806620][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.195279][T14075] netlink: 'syz.0.2564': attribute type 298 has an invalid length. [ 303.846783][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.886606][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.506504][T14195] ip6t_rpfilter: unknown options [ 305.898756][T14223] vlan3: entered promiscuous mode [ 305.903821][T14223] sit0: entered promiscuous mode [ 305.919945][T14223] sit0: left promiscuous mode [ 305.927482][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.994831][T14230] syz.3.2617[14230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.994925][T14230] syz.3.2617[14230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.008269][T14230] syz.3.2617[14230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.158961][T14238] __nla_validate_parse: 7 callbacks suppressed [ 306.158981][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'. [ 306.197391][T14237] netlink: 'syz.2.2621': attribute type 10 has an invalid length. [ 306.226857][T14237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2621'. [ 306.237392][T14237] bridge0: port 1(macvlan1) entered blocking state [ 306.245410][T14237] bridge0: port 1(macvlan1) entered disabled state [ 306.257477][T14237] macvlan1: entered allmulticast mode [ 306.262901][T14237] veth1_vlan: entered allmulticast mode [ 306.278415][T14237] macvlan1: entered promiscuous mode [ 306.312349][T14253] sctp: [Deprecated]: syz.3.2625 (pid 14253) Use of int in maxseg socket option. [ 306.312349][T14253] Use struct sctp_assoc_value instead [ 306.890754][T14292] syz.0.2643[14292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.890849][T14292] syz.0.2643[14292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.911582][T14292] syz.0.2643[14292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.966619][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.284537][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2655'. [ 307.403401][T14324] bridge6: entered promiscuous mode [ 307.512732][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 307.524963][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 307.714400][T14349] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2668'. [ 307.875790][T14361] netlink: 'syz.1.2674': attribute type 6 has an invalid length. [ 307.883743][T14361] netlink: 'syz.1.2674': attribute type 7 has an invalid length. [ 307.891750][T14361] netlink: 'syz.1.2674': attribute type 8 has an invalid length. [ 308.006863][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.235714][T14377] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 308.590441][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 308.607996][T14402] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.046672][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.063313][T14431] tipc: Enabled bearer , priority 0 [ 309.084176][T14431] : renamed from syzkaller0 [ 309.106043][T14431] tipc: Disabling bearer [ 309.179052][T14444] vlan1: entered promiscuous mode [ 309.184158][T14444] vlan1: entered allmulticast mode [ 309.587183][T14476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2728'. [ 309.605376][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 310.039354][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 310.086807][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.667180][T14539] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 311.126626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 311.346375][T14582] tc_dump_action: action bad kind [ 311.973755][T14628] __nla_validate_parse: 5 callbacks suppressed [ 311.973777][T14628] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2797'. [ 312.166779][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.774801][T14679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2821'. [ 313.206612][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.270329][ T5848] syz_tun (unregistering): left promiscuous mode [ 313.345210][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.375801][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.385514][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.403393][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.413400][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 313.426181][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.619184][T14704] chnl_net:caif_netlink_parms(): no params data found [ 313.822985][T14704] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.849523][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.871316][T14704] bridge_slave_0: entered allmulticast mode [ 313.892914][T14704] bridge_slave_0: entered promiscuous mode [ 313.925223][T14704] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.944385][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.969173][T14704] bridge_slave_1: entered allmulticast mode [ 313.983098][T14704] bridge_slave_1: entered promiscuous mode [ 314.000485][T14749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2848'. [ 314.074738][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.121199][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.208886][T14755] netlink: 'syz.4.2852': attribute type 1 has an invalid length. [ 314.224385][T14704] team0: Port device team_slave_0 added [ 314.264255][T14755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.288037][T14704] team0: Port device team_slave_1 added [ 314.320051][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2855'. [ 314.347650][T14755] bond0: (slave bridge5): making interface the new active one [ 314.366125][T14755] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 314.426032][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.454623][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.489785][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.510216][T14773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2860'. [ 314.524304][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.552773][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.587333][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.629192][T14777] netlink: 'syz.1.2862': attribute type 6 has an invalid length. [ 314.728225][T14704] hsr_slave_0: entered promiscuous mode [ 314.763899][T14704] hsr_slave_1: entered promiscuous mode [ 314.774632][T14704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.789366][T14704] Cannot create hsr debugfs directory [ 315.144869][T14704] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.289910][T14704] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.379550][T14704] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.458038][T14704] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.527324][ T5855] Bluetooth: hci3: command tx timeout [ 315.746170][T14704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.795368][T14704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.841662][T14704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.881422][T14704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.910032][T14846] netlink: 'syz.2.2891': attribute type 4 has an invalid length. [ 316.032825][T14853] netlink: 'syz.0.2893': attribute type 1 has an invalid length. [ 316.095691][T14853] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 316.127883][T14704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.142923][ T1154] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.158482][T14853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.182071][T14704] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.213826][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.221276][ T7846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.249052][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.256194][ T7846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.279623][ T7881] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.408518][T14871] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 316.424038][T14871] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 316.527354][T14876] netlink: 'syz.4.2900': attribute type 11 has an invalid length. [ 316.583276][T14878] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 316.706473][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.837444][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2901'. [ 316.845788][T14704] veth0_vlan: entered promiscuous mode [ 316.881156][T14704] veth1_vlan: entered promiscuous mode [ 316.933809][T14895] sctp: [Deprecated]: syz.2.2907 (pid 14895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.933809][T14895] Use struct sctp_sack_info instead [ 316.938855][T14704] veth0_macvtap: entered promiscuous mode [ 316.972233][T14704] veth1_macvtap: entered promiscuous mode [ 317.015207][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.044358][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.068574][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.113260][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.133534][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.163825][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.180269][T14704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.189414][T14704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.205790][T14704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.221719][T14704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.281530][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 317.311829][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2910'. [ 317.445434][T14911] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2913'. [ 317.465027][T14913] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2913'. [ 317.492538][T14911] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2913'. [ 317.606988][ T5855] Bluetooth: hci3: command tx timeout [ 317.617124][ T7846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.624993][ T7846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.718265][ T7881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.726151][ T7881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.760259][T14927] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] PREEMPT SMP KASAN PTI [ 317.772954][T14927] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 317.781392][T14927] CPU: 0 UID: 0 PID: 14927 Comm: syz.2.2917 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 317.792432][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 317.802505][T14927] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 317.808605][T14927] Code: 20 08 00 00 e8 0e 63 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 6e e7 6b f8 48 8b 03 48 89 5c 24 [ 317.828237][T14927] RSP: 0018:ffffc90018f36940 EFLAGS: 00010203 [ 317.834306][T14927] RAX: 000000000000004c RBX: 0000000000000265 RCX: 0000000000002000 [ 317.842277][T14927] RDX: 0000000000001000 RSI: ffffffff8c610a80 RDI: ffffffff8c610a40 [ 317.850244][T14927] RBP: ffffc90018f36a50 R08: 0000000000000920 R09: 00000000ffffffff [ 317.858208][T14927] R10: dffffc0000000000 R11: fffffbfff203acf6 R12: dffffc0000000000 [ 317.866180][T14927] R13: 1ffff920031e6d38 R14: ffff88807afc6126 R15: 1ffff920031e6d34 [ 317.874149][T14927] FS: 00007f6d18c1d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 317.883077][T14927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.889669][T14927] CR2: 00007fafd5f63f20 CR3: 000000007bf66000 CR4: 00000000003526f0 [ 317.897632][T14927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.905596][T14927] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.913571][T14927] Call Trace: [ 317.916845][T14927] [ 317.919775][T14927] ? __die_body+0x5f/0xb0 [ 317.924097][T14927] ? die_addr+0xb0/0xe0 [ 317.928244][T14927] ? exc_general_protection+0x3dd/0x5d0 [ 317.933786][T14927] ? asm_exc_general_protection+0x26/0x30 [ 317.939500][T14927] ? dev_prep_valid_name+0x3e3/0xa40 [ 317.944787][T14927] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 317.950411][T14927] register_netdevice+0x542/0x1b00 [ 317.955546][T14927] ? trace_kmalloc+0x1f/0xd0 [ 317.960128][T14927] ? __kmalloc_node_noprof+0x247/0x440 [ 317.965591][T14927] ? validate_linkmsg+0x825/0xa30 [ 317.970611][T14927] ? __pfx__get_random_bytes+0x10/0x10 [ 317.976069][T14927] ? __pfx_register_netdevice+0x10/0x10 [ 317.981634][T14927] ? dev_addr_mod+0xbd/0x330 [ 317.986236][T14927] ? __asan_memset+0x23/0x50 [ 317.990845][T14927] ? netif_inherit_tso_max+0x1f3/0x340 [ 317.996314][T14927] veth_newlink+0x455/0xc10 [ 318.000824][T14927] ? __pfx_veth_newlink+0x10/0x10 [ 318.005850][T14927] ? netlink_rcv_skb+0x1e3/0x430 [ 318.010966][T14927] ? netlink_unicast+0x7f6/0x990 [ 318.016269][T14927] ? netlink_sendmsg+0x8e4/0xcb0 [ 318.021207][T14927] ? __sock_sendmsg+0x221/0x270 [ 318.026055][T14927] ? ____sys_sendmsg+0x52a/0x7e0 [ 318.030992][T14927] ? do_syscall_64+0xf3/0x230 [ 318.035659][T14927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.041740][T14927] ? alloc_netdev_mqs+0xcd0/0x1080 [ 318.046850][T14927] ? rtnl_create_link+0x91c/0xc20 [ 318.051869][T14927] ? __pfx_veth_newlink+0x10/0x10 [ 318.056907][T14927] rtnl_newlink_create+0x2df/0xa30 [ 318.062018][T14927] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 318.067653][T14927] ? ns_capable+0x8a/0xf0 [ 318.072034][T14927] rtnl_newlink+0x17dd/0x24f0 [ 318.076712][T14927] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.081729][T14927] ? __pfx_validate_chain+0x10/0x10 [ 318.086944][T14927] ? __pfx_lock_release+0x10/0x10 [ 318.091983][T14927] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.096997][T14927] rtnetlink_rcv_msg+0x791/0xcf0 [ 318.101924][T14927] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 318.107052][T14927] ? __lock_acquire+0x1384/0x2050 [ 318.112084][T14927] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.117548][T14927] netlink_rcv_skb+0x1e3/0x430 [ 318.122310][T14927] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.127761][T14927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.133044][T14927] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.138275][T14927] netlink_unicast+0x7f6/0x990 [ 318.143035][T14927] ? __pfx_netlink_unicast+0x10/0x10 [ 318.148314][T14927] ? __virt_addr_valid+0x183/0x530 [ 318.153416][T14927] ? __check_object_size+0x48e/0x900 [ 318.158704][T14927] netlink_sendmsg+0x8e4/0xcb0 [ 318.163467][T14927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.168747][T14927] ? aa_sock_msg_perm+0x91/0x160 [ 318.173680][T14927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.178984][T14927] __sock_sendmsg+0x221/0x270 [ 318.183657][T14927] ____sys_sendmsg+0x52a/0x7e0 [ 318.188420][T14927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.193704][T14927] __sys_sendmsg+0x292/0x380 [ 318.198308][T14927] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.203444][T14927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.209780][T14927] ? do_syscall_64+0x100/0x230 [ 318.214546][T14927] ? do_syscall_64+0xb6/0x230 [ 318.219220][T14927] do_syscall_64+0xf3/0x230 [ 318.223726][T14927] ? clear_bhb_loop+0x35/0x90 [ 318.228401][T14927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.234530][T14927] RIP: 0033:0x7f6d17d7e719 [ 318.238948][T14927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.258566][T14927] RSP: 002b:00007f6d18c1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.266997][T14927] RAX: ffffffffffffffda RBX: 00007f6d17f35f80 RCX: 00007f6d17d7e719 [ 318.274987][T14927] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 318.282961][T14927] RBP: 00007f6d17df175e R08: 0000000000000000 R09: 0000000000000000 [ 318.290957][T14927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.299007][T14927] R13: 0000000000000000 R14: 00007f6d17f35f80 R15: 00007fff3dfd59c8 [ 318.307073][T14927] [ 318.310083][T14927] Modules linked in: [ 318.315681][T14927] ---[ end trace 0000000000000000 ]--- [ 318.323153][T14927] RIP: 0010:dev_prep_valid_name+0x3e3/0xa40 [ 318.330218][T14927] Code: 20 08 00 00 e8 0e 63 27 fb 48 85 c0 0f 84 8f 04 00 00 48 89 44 24 38 48 8b 5c 24 30 48 81 c3 68 02 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 6e e7 6b f8 48 8b 03 48 89 5c 24 [ 318.351913][T14927] RSP: 0018:ffffc90018f36940 EFLAGS: 00010203 [ 318.358201][T14927] RAX: 000000000000004c RBX: 0000000000000265 RCX: 0000000000002000 [ 318.366174][T14927] RDX: 0000000000001000 RSI: ffffffff8c610a80 RDI: ffffffff8c610a40 [ 318.374257][T14927] RBP: ffffc90018f36a50 R08: 0000000000000920 R09: 00000000ffffffff [ 318.382402][T14927] R10: dffffc0000000000 R11: fffffbfff203acf6 R12: dffffc0000000000 [ 318.391068][T14927] R13: 1ffff920031e6d38 R14: ffff88807afc6126 R15: 1ffff920031e6d34 [ 318.399129][T14927] FS: 00007f6d18c1d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 318.409698][T14927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.416308][T14927] CR2: 00007f4edf790f98 CR3: 000000007bf66000 CR4: 00000000003526f0 [ 318.425300][T14927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.433442][T14927] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.441679][T14927] Kernel panic - not syncing: Fatal exception [ 318.447989][T14927] Kernel Offset: disabled [ 318.452307][T14927] Rebooting in 86400 seconds..