last executing test programs: 1.836758101s ago: executing program 0 (id=2055): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, 0xffffffffffffffff, r1}, 0x90) 1.738510193s ago: executing program 0 (id=2058): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xd000000}]}]}, {0x0, [0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x32}, 0x20) 1.737534063s ago: executing program 3 (id=2059): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010"], 0x3c}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@empty=0xe8000000, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, 0xe8) 1.658017629s ago: executing program 0 (id=2062): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'veth0_to_team\x00', &(0x7f0000000600)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1}}) socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000001c0)=']', 0x1) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(0xffffffffffffffff) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x70}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000010230b78df5b478cf71df64887d71d083010100000000000000000a0000004400018006000340000000002c00018014000300ff0200000000000000000000000000011400041f000000000000000000000000000000010c000780050001006f0cdb7ae82300000000874ad8c9271aaa2c854c705cd1ce"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x20000000000001ad, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000ffff2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 1.624846428s ago: executing program 3 (id=2064): syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @random="5e486552b9aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @empty, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}}}}}, 0x0) 1.417338704s ago: executing program 3 (id=2066): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100007000a000200053582c137153e3704000180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.301496927s ago: executing program 3 (id=2067): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002400030000000000000000000000000000000000000000000000000000000000000000000800050000000000060006000000000008000100", @ANYRES32=r3, @ANYBLOB="f4000880f0"], 0x144}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="660a000000fe0a006111b8cad13d31f1d4b023af47f92cd82f9071de7d25037bf15109a14ecf00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002400030000000000000000000000000000000000000000000000000000000000000000000800050000000000060006000000000008000100", @ANYRES32=r3, @ANYBLOB="f4000880f0"], 0x144}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="660a000000fe0a006111b8cad13d31f1d4b023af47f92cd82f9071de7d25037bf15109a14ecf00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) 1.165226092s ago: executing program 4 (id=2068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x30, r1, 0x5, 0x0, 0x30, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 1.128815478s ago: executing program 0 (id=2069): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000c9fcab0ac672d49fdb71d1b5c86495550a2f1e1be9555978167b173df5ec2f1b9f619c51fa1c9feffac8bba5d5a5a495b5465e695f76232d1b168a10dfa935b222b223b0bd34"], &(0x7f0000000000)='GPL\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x23) 1.036683111s ago: executing program 3 (id=2071): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x79, &(0x7f0000000000)="030200000c8002ff", 0x8) 1.035634867s ago: executing program 4 (id=2072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000d10000d0400"/20, @ANYRES32=r2, @ANYBLOB="0000004000000000180012800e0001006970366772657461701f0000040002800c001a"], 0x44}}, 0x0) 1.010797266s ago: executing program 0 (id=2073): write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000000004500002800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54000000907810009a642f2f5896b874e468ed6988ea938407d234a483e047376624d8b16a36a1e7d79b4e24c04258a008ac7057455597b076fd32"], 0x32) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="000000faffffff0000000000000000000300", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="22003300d0000000fffffcffffffff011100000050505050505000000404000000000000ebfd03602aeda7a162e3defaf8c921a84af71b79150b1ad014b11018ce8d47b6c189513c0f372f38694e14b84c4a500bcec153f984b998e6319cfc7fabbeef8b40cce8b47cf9d56c3efd2ca767ea3f74fe45869616345a5544dc7ebde5bd022cc772f1685fae980d8f54b5ba86993f4c86a567c5b6d3746a19fea6417d551a7c567582c4ae7fdaeffc4f1ac7886ac7621d2a0fcb307068b7f098bc8604b8883cfda5acff02e75d571fb1ccb16e3039c5e97a39aac69e16cc56837c8d1499cbc71b14b733ddd824cf2157600082ab60"], 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000000010108000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000185100900000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xec, &(0x7f00000004c0)=""/236, 0x40f00, 0x69}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 887.444854ms ago: executing program 3 (id=2075): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0x4e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x3, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000000)='*', 0x1}], 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1, 0x8}, 0x7, 0x0, 0x0, 0x2, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x5865, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r6, &(0x7f0000000340)={&(0x7f0000000780), 0x10, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0x17) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000500)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) 816.734181ms ago: executing program 0 (id=2078): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000004c0)=""/20, 0x14}], 0x2}, 0xd0000000}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000003c0)="4ccb06fd68dde6f0ca7ad843ac53da1e7e3413741a3cbaaaebcd03b2a055ede68bb552a695681a1342fdf5da1c66b5eff5e6291c3f36d5891c5d679d293a714353be4c22a960fd993dcd5b92ed18bd2a7930504fda53e10d7d58d082c5e4c7ba12b372270f18691ef66e66fcb8a8be2d29447bd8badfddac2fc704489622c2e8525473d7ab6cb0a4aad4708efa797c44ab747f79ca4323f7e1b07613dad54268c96eeec7b860456b4a0ae97be4fd339031af19e2902c7d2843665b62fdc3ef90be551d7bdf3049309727914d1a3f85ab", 0xd0}], 0x1}}], 0x1, 0x0) 816.468284ms ago: executing program 4 (id=2079): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000010000071117600000000008510000002000000850000000000000095000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0xfff0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0103000000000000000001"], 0x34}}, 0x0) 719.408749ms ago: executing program 1 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffd6a, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x4, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8}]}}]}]}, 0x13}}, 0x36d4f616b9f14622) r3 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000040)='bridge_slave_0\x00', 0xf) 714.941615ms ago: executing program 4 (id=2082): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}}}, 0x84) r1 = socket$pptp(0x18, 0x1, 0x2) sendmmsg$sock(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="cd05ddaf50e3d3e194ee86ea1b437dae50e10680a1e952e76e6f7d1c8f09f17f3257a0d47c2b84c87bbe6faaef060837", 0x30}, {&(0x7f0000000140)="7d03e177c9", 0x5}, {&(0x7f0000000180)="4a17c3fcd796422381ed0e8e2234d0ccbcdfc1c6dae7d5fbb6ff3e04b3846be98a96325bdbbe2bcc0424c6396834565c5a704867b7db726f9085271be88cbd457bccf23413fccdd7d72726db669358344b5ee4148a669637419aa9f59266031bedfdeb4da3612821e196fb9c8c20802060ad28de6640dae5c1ac47e15f404d98f1b59ea9019d0cfff03efe39a199b381308530c4ee0beae5e8b8540f02adfe67ccb08f8676a5fadd693ff208d20d2171625bd0130ebd7630ff9817706d16a78cb749dd24df7e714957f25727e77b74ef7af1", 0xd2}, {&(0x7f0000000280)="f15c46bd24abfdb7019f65e930355f58494456d071bda72d03193a85f1132d3a4985b58c05303b015b6e6ae5c4026b62f691de7fbbdc24ee85bb5743cdcf2a442a3ce73c62adcaac698733397a88e2aa13ca7aa22fd2fcb717d3559762b7d4da5989c7f1698418b8499c61872e1b31e5c007fd4857ed78045549677d485f03aff8af019a09ae3009e954be2c2585c61a906b70ddb73b11f24b6c99547503800abc77d19814af4617fafd24a9a6ff59edefe3c413852f8b5e5f45459776b8a665", 0xc0}, {&(0x7f0000000340)="69ca8c7bd12718299b5436a3bc4e51ed2cd1d5cd8b356160e10db91776ef9438a2ccd4a87816a29a9311292c6bac8ead363f5b9b1d8ed3e0b0ebab03e15e950c9515551b2179ae36f69204c3c735fb4feb36d052c6ecf0ab92a0c4678e", 0x5d}, {&(0x7f00000003c0)="8dcef09ab2d68e88a964f3534295ab0dc651f4088441440bc25e97f95c01c36a0b01916d62e5e8d033e69dfff74a07eb381f368e5e9af0724f7df737328c194b1c8b81b96b2795f0e4a053370731fa5d431ded4c9377b846518d3652a424c584002acfb6fa8d28937f4044379af11b30efa997d165d9b5119dedec60aef08b22701cbcee955e34f62f87d0de3e36897cf65f4d187b6d565894f10db7355f5e74493ba017171ba4c01289aacca232d04c8490a6f30f2a5b64878069c10a52859287d6c668338e504f5dcc5b5c789e1176ce9e6860c9f9360247bbef906d45924f5a7d21bbdc6a27c4964e94ada0ee5d864b934ff6b4d5fade", 0xf8}, {&(0x7f00000004c0)="f3cfb11ae3083f46d300c454bd5b21273b0c888aed377fd6c3a7d348f1e479780210b8c6aaa5ddc2621e2bcdfc549f837677ce4b1a5c632879e9d6d462c2275d5df15490c510e31ded90fe00d9a284dc508076e2eabcd9", 0x57}, {&(0x7f0000000540)="85611ae1f8ce8e808ce786637359efa801e19d0b53f999493502443fdd4ebe3bb6e46b604e6b8962d6d958939c73433bed0def8c25cf9674796b2e514218740669b3cb59e75caa38c8fd7be67a77066117cfdd86b023f3773c5da7cc36b3a46d60832208728d5ac452336b5533c0afdd64e887890d46845275c3634ac2e7b9b3a027a4c4614d6519f070a98a7de47f5ac71ddfa94614dd805109a5d489097f1a21b0be3b4ef5f9a7144bc750d80f201dcdff9533f2ca1441209e47b5dd", 0xbd}], 0x8, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x244507fd}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="0ddae02fb27e4af2980dcbf5c6eb2492eca37bfbe036e3d980a9927a67eb6bfc036f6fb9ad74e4854b0d0b7ed54b11232b99add7577cdd30ed0da3fba24c569a0c9f0e46d14bb1a324861751fd4d63d36ac21177c92bd2de2b5f5c6d835c02238dc587b9d3fb849b9c59986cad1e63dc33264098d3c60a7e195d206bbd02c8173cc15ed19becae3195f402634da9274be0822314ec05258893758575756ef574dd98337f07b17d17e896572c95408c9ba36d6608d89560edb11fb2d1b6fd493ddfc653e075a0209bbfe2c248e61b982c7860cf57f6", 0xd5}, {&(0x7f0000000840)="793187159cb4d467c7b3261d7b46405f59b083022672b13b3c178fca216df1490f4db496f29e142940efc07a0cbb554a17b7a2cc7cae4353329425737ea83320ed76c8f24db9bad6add0", 0x4a}, {&(0x7f00000008c0)="b336a82e3d05b3a1a2f7f487f1a7ef8f701cb8cd3df184f7d75cc9e9d63f8b9aba9a08feea62437f19c424e527fc716f4b34877887483fae5a3eb7632fd2f595b7", 0x41}, {&(0x7f0000000940)="0502e149d3dd7906788161ec82b909fdb63b913b3b9ef0c4ba89b4f2c36f0c5fb6697465574bfe1a81003b2059286416005450ced60bfe243816c088304012968201ab450ce26ee00cea75987cb8e7cab4f03e88407854981e54e080dff778bd8fa662f5a974869a86928994190d811ee1eb34d540e0ea60e3b50317a5a8823201bb945c20064a2a2afee90534f9e187fe74e44f8b8ca1abe6a20dafa1c8b867eff6faabcf1e6533e6c449838bd677fad6f2f1c17656579ffae5fd839fc6001f82a9babd62fbda74f48589c812bc97ce63091aec3fcd98b5b4aab418df49", 0xde}, {&(0x7f0000000a40)="40ff2bda86fc30e6c0400579ab8c147cd263e6e4eed2fec557aef0b93dcd94437d0f2ad3ed2a5bdf2ab32b78913c7a717f69ccb5d0e1e876312ed5d1080417083510dd4c5fc9897292e031cff35c1902b20bc1bbf1589e29c7d286d1fd4deb2e52529d32a975c136b0dfeb5b0f6b72f3f08508472f703367c5bd711c17544063209d5deb1cac7ad9b728a78b5d10d6defa6465bec1b147f8572d76424ba275204538ddfd8bc06c83", 0xa8}], 0x6, &(0x7f0000000b80)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="59bc1ed80c5aa3ceb86e51dcc9a2e94032a698466f91c9c28e9b1201cf0972164851652f8d9d7b09b0457fcb21092959b3da3f329e3f03c7ebf061ccfc5ac3c343b6494f11293821662439d65724da2b435d36cbc8e4a99afb079b6c676221bf7a8024210cc4a958d29065c19ff289d642098d2ce83916489fc9fd2c9acbd8f1477b46312485dfd77f9a9b361dbb5975d4346d01addb", 0x96}, {&(0x7f0000000d00)="942c4597a72ced7174d53959e5c036e9b5c9b2402a25150b7cf45cd8fbdbe166038ea9eb1797bdc63f5260bbb0bcdc33483477879ea761a3c971130ee9fcb0f8834381d34850c5bef963bc3de5c075f0cdd34182536a1795681eb2499d30bf4d63f26f5b9a884b087f7db7566d7ba784be105b53f725457845f1f418ec4403b16e72698171241b42ed3bf46675dcf4ec8c841836c9eafa14bc36b4ba193e27f052522e6de9", 0xa5}], 0x2}}, {{&(0x7f0000000e00)=@hci={0x1f, 0x1, 0x5}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e80)="4b21bd751e24faaded18f32dc4bf1e8f8191637f24faef22839b11", 0x1b}, {&(0x7f0000000ec0)="5e0c7c447ea1e858af7e8209b9066f36462f600902a54558ed6e19de2c161358de9cd7488cf05b88eeb9524397d49b0645edd04857bd29e3a75ef0dea1ef2ac6a9ac1be49f83482f3d1e408cd1a937c56553f8e4bf79de74b0c0794a14", 0x5d}, {&(0x7f0000000f40)="5a05fa1abb4885eb", 0x8}, {&(0x7f0000000f80)="1c0e45b85fbee7a8622fdce2b4c3b9ae7e6c046d56f4ddb68a445d9aa8ab7ab6057b9e6649aa98048b9afab9ab5e2a03e4e275181ec2a0dbec869e9e9a9a65bd7ecff2a4acb186aa117aa7b0ad1cd3b91e3f46fc59bf529692209b82ab62d93fc65a90e1484e39dfcef63ffc639baa0a56cddf0ebbd1bd75e9238a7f692c7ab80eb465693639466d27eb5f5e5e57a146338785f7864db9a182616df13a424188b228aedbe30da38c486588ca410c89beb5a7f90a362237912d065d69089ca4b768f0564e34be02d6ad9fb0cb86cc4bef1d0c7c7d35024d883cafb9dfe85d278311ea669882983a12dd83910d1e7146ac6c750bc080", 0xf5}], 0x4, &(0x7f00000010c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xcb}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}}], 0x4, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001280)={0x9, 0xa9, 0x0, 0xafc, 0x1}, 0x14) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001300)={'filter\x00', 0x7, 0x4, 0x510, 0x240, 0x0, 0x240, 0x428, 0x428, 0x428, 0x4, &(0x7f00000012c0), {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x9cb1, 0x0, 0x1cbd, 0x1, 0x0, "9941caf7f210f8c0a196b12c4e2991c7486c1b27c1ad3a5ab54090cdd03c1bafc4e1716cac27a1a96ce7a7b8d7a95c837aa144dd3b9afc61ec72d93ebab82b58"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x2, 0x1}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 0x0, 0xe, {@mac=@random="9471c4c3f68f", {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0xd, 0x9a3a, 0x1, 0x3, 0xb, 0x1, 'netpci0\x00', 'batadv0\x00', {}, {0xff}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:kvm_device_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x560) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000001880)={0x1, 0x0, 0xc0, 0x0, 0x9}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000002a80), &(0x7f0000002ac0)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002b40)={&(0x7f00000018c0), &(0x7f0000001900)=""/4096, &(0x7f0000002900)="5e553ad6bac58fc5d2cd4f8a3b3bb32eecfab1b3e605950d2c88c52171ff59bc940105425ca25ae10029978e116bbe320ff2811c2c677aecea674357885566054159ad0ff6109393eb434ca8d09a1b5de41849aef6465ba9f75f7e1b643e41f23fb133ce80e3f63dfb890fb8", &(0x7f0000002980)="0cdcdeed1bcbdba3301811489af3c33c114a258a0c18d7b22701966f84b1a8613712d7f93210077b60294b7d95a00febcc12717925e16e3d96592b7ad124809b7d5d063ef4d19f8d2a4ad0460c1dff503b91d110969df3bd036cf53f6dbaa4f669e2d9b95ed0d9820baeea0abef21a6049b378da58aec4eed39f9d68b9aa272a6ef079b3dbf4af016f7cf48e21f38fbebe9df677d076b685d0be408809a0ac64e080d25cd41785bd81d6ca8ef020ed6701577dc2f91f012d57ba66e27a6101cd29f8b0b1ca23ce0e0708a2d20476b92495dc6c76fbbe7044b687e7c82fca629420be6cb2995ef588d0002e304f7b3191d6133463a439ad", 0x8, r3, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002bc0)={&(0x7f0000002b80)='finish_task_reaping\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x11, 0x13, &(0x7f0000002c00)=@raw=[@ldst={0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x96}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}], &(0x7f0000002cc0)='syzkaller\x00', 0x0, 0x53, &(0x7f0000002d00)=""/83, 0x41000, 0x2, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000002d80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002dc0)={0x5, 0x7, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000002e00)=[r3, r3, r3], 0x0, 0x10, 0x800}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002f00)={r4, r3}, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x48, 0x4, 0x6, 0x801, 0x300, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000824}, 0x4) 629.063512ms ago: executing program 4 (id=2083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x10d, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "af5a48", 0xd7, 0x6, 0xff, @private1, @local, {[@dstopts={0x2e, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @fragment={0x84, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x66}, @routing={0x2f, 0x4, 0x0, 0x34, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x0, 0xc, 0x2, 0x7, 0x0, [@private0, @local, @remote, @empty, @private0, @mcast2]}], @payload_direct={{{{0x27, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x2, 0x70, 0x0, 0x1, 0x0, 0x6, 0x3, 0x7, 0x1, 0x1, 0x4e24, 0x4e20}, 0x4, 0x8}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 621.794273ms ago: executing program 4 (id=2085): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x4000000}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 574.119497ms ago: executing program 1 (id=2086): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000002000000610028000000000095000000000000000e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) unshare(0x40680) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000000000000003b0000000c009900c2cd00003e0000003e003300d0800000080211ebff0008029a7f52ca0441989b1100000050505050505010000400cf000c05b7076512ae3aa7b92ea0080211000001080211000001"], 0x60}}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x4}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="021800000a00000000000000000000002dc5ae3a9f2b58560a00000000000000fc0100000040b31ce40f9f4e480eb70000000000000000000001000000000a00000000000000fe8000000000000000000000000000bb00000000"], 0x50}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_emit_ethernet(0x8e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 482.794452ms ago: executing program 1 (id=2087): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x14, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x6000}}, 0x14}}, 0x0) 402.618045ms ago: executing program 1 (id=2090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x2510a71c, 0x4) 373.322064ms ago: executing program 2 (id=2091): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000f700000000000000181100000000000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008212ea234c29ead90a1eea9819846dfe5e117939febdeedb0314416e98920d067bf4ca631a478c957611a5ff5baa0a20970befa1b6af712f0786ede172cbe53f9d452404c1d955e4b70f2cf0ed347c03600c6278569d0a28fb15f1a51ffd395d15b8669e8e1aacf804ca6dfb5ca632c9d91d6ab14af07e1f949c2b0a4039ed1ceb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'vlan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x10, 0xb12, 0x2918, r4, 0x3, '\x00', 0x0, r4, 0x5, 0x4, 0x8, 0xb}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f0000000200)="37ee487b07a09f19f210305a6a06", 0x9}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x114f}, 0xff03}], 0x4000070, 0x8080) sendto$packet(r2, &(0x7f00000002c0)="02030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r12}, 0x10) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 281.504447ms ago: executing program 1 (id=2092): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) 280.96793ms ago: executing program 1 (id=2093): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@broadcast, @random="1779de00", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_addr={0x44, 0x34, 0xa9, 0x1, 0x2, [{@private}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@multicast2, 0x3}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@local}]}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) close(r0) socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x1000000080000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x18}, 0x8055) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1a}]}}}]}]}], {0x14}}, 0x70}}, 0x0) socket$packet(0x11, 0x2, 0x300) 213.804644ms ago: executing program 2 (id=2094): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340011001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) 180.455636ms ago: executing program 2 (id=2095): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0xe, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x84, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xff00}, [@call={0x27}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x11, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001480)={0x0, 0xfe69, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0) 101.318349ms ago: executing program 2 (id=2096): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x600, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}]}, 0x3c}}, 0x0) 100.911578ms ago: executing program 2 (id=2097): socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fcfde118c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 2 (id=2098): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000008020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x13, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x40}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000000a0000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000640)="f72e0947452d30bf709e2e40605cf47e783364c432ef28ce54cd04a811b611fadbbbfa51b36e7b3b053b9122bdab0193233728e63ebc0a12a0a6b30fc38a22c7efdf32e56d45f6278854fb7dfe05668e4eb87c02f10dd55204c480a8337d0e71b93385207eec11611784ced5ccef993e3aa5b41ca5eba9162ad175df7b07210642d4d75f8b1524036ac8a86aa9c9173646a9c41ec1f46511f8ea0c2fcaba6d925e65e3a7169c778eb500ba8201cf49d7e59e535b7360354de58ad34b723d321cf56d29e34824fa4cb8b25047aba417e589497c3aeddbc2ce7d1fdd8a898add8da785d3b077df01d2057155159fc1c314c819aafc6d6052a604db455ed3c1a2a3") bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a00007ccab6ec2f1c7ba8899aac6f000600000000000084f395c1f8c50c81bc45d3b8a0c17b3babe4"], 0x0) syz_emit_ethernet(0x57, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x21, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}, {':'}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000005000000001902"], 0x18}}], 0x2, 0x4404c000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x9, 0x10201, 0x9, 0x1}, 0x48) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400012918000e358400ad000114000000110600ac141414e0000003808a8972aa0b72e410820c520f061f8781d537465ca1dd6c5ee9e4fdfe4b889430ebb52905e36e03c1ebf4047738f3f9b49b1c598825f814fa"], 0xdd12}, {&(0x7f0000000740)={0xac, 0x24, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x14, 0xcb, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x4, 0x1e}, @typed={0x8, 0x38, 0x0, 0x0, @uid}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x5}, @typed={0x67, 0x19, 0x0, 0x0, @binary="da42fe0c9fa9dd7236c95060cadd9e85fd685093869eb3b1ebce83efdd052fc926458c547490bcfd1bc38ddbf100d3ba16325e82aea5b3fb57c857853ed39a17048209ab8b74b1ddd8057b81d86d3755e1162f8dfa4180ff85e3efde17feb145a39ada"}, @typed={0x8, 0x83, 0x0, 0x0, @fd=r10}]}, 0xac}, {&(0x7f0000001280)={0x1074, 0x42, 0x2, 0x70bd27, 0x25dfdbfb, "", [@nested={0x58, 0x33, 0x0, 0x1, [@generic="312acdc6af8b86a5e4356c1083cadee1d4e2d055a57b621bcc91ffb8bdddb1447cc70a3b0eaaae9ddcd825a355e8913e19d12ca5f6490290355c9d35a0cee212f481a6cfcd48d9287516b18cb54f9d10b5306ae1"]}, @nested={0x100c, 0x117, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @fd=r2}, @generic="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"]}]}, 0x1074}, {&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0500740000000000a2c5366e161085c050de4afc99c12fa913c2f2c383bdbb0e84e0a56461c39f6c03de3580d68162df9f8807b201f0f702e9624a8531fe0eef95c8ba0541fe5f968b7e19ad64c699e55e3fb62f8df06444a446783a90491394d28400b8de42f2afbf722de41ea77f0e6b5314dea049a7efae8b3bd21385c0702e95280659c8045ee1ca56bb74c1e3d5d4567fabf380289b8a538ca4643d21516e68335a8311dcbc05c5b8697ae165e807cdb326ad4891e4e4e1b2ac412cd314714eb63a0cda4dc268f8ea9da17fffe8ad40b1b9ddc0bd0c488e0bf89164090024003a252d3a00000000000000"], 0x420}, {&(0x7f0000002b00)={0x11f8, 0x27, 0x2, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x40, 0x0, 0x0, @pid}, @nested={0x113, 0x2d, 0x0, 0x1, [@generic="456b9c3dffb493c27849c483a3c8f5e80e9ed77827d14eb00ef39477dee41be72e3276c705dded80ecdde2492bf4f372c146245993f9402c1f62e7922c6a9893c2c826d27b3c5b54a5903dd3fc0653227ec7fe39722d41", @generic="13d6a68102a06d0506a5af382bd784fbff7882fc651d850b8008fe24cc7975d38ae5cc52ed965fe0e8d5887f2d0833e3a8f65a5b21ad85f5fc087ad968945c62e0654772935d9c830cc04678856732f0ef4011ee864af62d5efc9720beb157fb0501cb5bfc48e2debfa479ba8a68853b60d0f6aa579f9a0d4562e32e80323a5b740a3231bb4fc1376e8f1cf8254d79cc45aa5a46", @typed={0x14, 0xa7, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x62, 0x0, 0x0, @pid}, @typed={0x8, 0x126, 0x0, 0x0, @fd=r1}]}, @nested={0x1077, 0x5a, 0x0, 0x1, [@typed={0xc, 0xb5, 0x0, 0x0, @u64=0xfffffffffffffffc}, @generic="68e1fbc9a52c041b4bde4f0be7fd483d31fb3fa8afa9c64056525e77d2c7741d1920483840085b8e5c5b6ed1894aec74ffe27980c07cbb4625e3bbf79c6ef09c05ea65778e5bae90e3705c63811c8ab66a73a68fbae079c468cfe5f4ad96fb4a6a159454ed2ba9", @generic="b137e68f8d1775471384b82eee98763b0a1a598b026cd015936d246b57e4a4dc71efd03f946fe527b1a99aeee7d79a95244fa535c0dd94f195547592c229b11de10aa2887f92ff305685119679382a40308ebc13d5a0f0d3713f5ba2df721a30534711e5a08fa1e044c24e0359bd764d746a67a0cdfb591e7c4a9a773a1cee96e1d7846a53f729e3440bb01f4872fa4a1920c4ecfef0f0e298a073026ab2cb3352efd3293452671c74be42eef088bf14d3371986d5c0640249efb7a23e3e1e3b6e45a5043e3b22f70ec9251eeaa4b9504ee192cf6e4508f922a69f22634d73907b4eb96494c3184145b91c1e99818deac47ee1481bc42998b5407b4ff44f6ae9d28662b29ca0faa2416cd8e92b2142b785cfbdf10f961599148df98cb9d364c828a0793973d7f550439ca007134e3e00fd1e75c63b9ceabf904506fccf4c1f0d2982eb284280240d76fd866682033aa0a32b01d0e77c2a20ef08dd0d9c7a04863d79709ad27919aa5edac59703af69c487f3e11e2a0273d06176fdaa7764f0a708c42c9f0e5c185243c9c466bce57735741c19abaeab75a05258f2adbf4a061cdddbc95085e18a8b022e530fe183a386521dba737bae6086de235b45ffdb10ac73b4d57cd1214c9bbb07b8ca7c48465584bcea95a4300b3525d3e4945cb29541363638f567086cf0c5fb4f1236fe320b1d3ae7ceccfca5140beae6213ae560dcf5ac7c2a864dc0684164ea418f4ba2c861a44dd6cfb6c143db81743377877db1880f19a9660f788f19d409b4d2deb720bfc50f6ad679c15bc7d1f84e97f6be9b637e3b007ca510914f4a257fc1371c0401d618e673ac95b861642830263d23ecd889bb8fe75cc33ea4a737cba512b50ea096047207a38fad1782461d7ba78cdab45832768e102a247afb65e48112fa15f6aef9ec7da34daea7b95c878f6e02583f16a5993eaedbcc2564ef6be5ea8b36aa99ef9ff176b4fccb5dd03282fcb4f7cd63035b021d8ea4482d26b50275288517db54a2782a40c8e6557ef2e76adf282d08273d8dce134f41d5f22c0656fdae61fa2336e557eb059038feb9c4023184fbf0641b21341819d24ed8d7a9f9f934140e3351eaeb4f0a58f807297fae86110e07a88c12f2adcf0c009f5fd831d7cb921bdf88ef6e099b35b9f76d02466e336f7829a32eeeba0614e3f092d024e1831945c757c4a63ec5d2ca9919cf2b21ee8b6388b4876d4ed7243a4d535169f4a9bb957bcb25fdf6d7cc9e33f09f0adadeaf1ad0784afdf3d24ab88a596bbaa78af9291f6d1279d0bb6980f83431a11f2397e2d63b6ca1b1c4ab2e20df8aca0ea58341e68c1569cecad402718be5e970c8af1a34c1190a2112d790f4d3e2ebc13ceaaf822e5d75edf01b45d79e19f21d3149437a63fe907d8492aabc3bd75ea0534446b4d6e9026e66a83383b2770d72da8a2b4aa91770e3ed33e348df3d688883a2b564dfca81baf73d2e93d7b2baa66de8e98a047337860a1110c38372c6040acef89d4dbc1e27d3a3f194fb126d720d02cb1146905c5fcf9684cc2d6c34518c6d5647f69fd303c6f0fa052b783001d62f966f4ea4840e7f2abd0b296572f48392d83a576a48b12958996ec4dace1b7db8d43fe1da9e8c10acd55206cf562b9aa4be85a7f10c58baa4420621502a550b09342a9c13220a1f058f00b96b4ea521f9afc949e8025a1328d35e471caeb6e72f3fd0cee9d9a772710bce179d9bf8115fb48d3c65a9b839951ead6f7b6fc575951c25113f889a67eb802a59b0130714df432ff7064b3e243eee314ca9dab7df6aeae0f284c4ce93ca989f689d03431c7479cb3b1fcc6dae4a0416cadcf25f56e7a51167fc5925022464e3964dda40bd483c8b032eb3006c608f03abee52ee3113f6362b1bd06e69a9961e9b510f1cd4082501f79e7b62f007943e902f9db94c7dd272682ab8edd514c9d1af25716516e462e85a39f48f677831e68bd8eb83028b3b654d491818bd2af7f846f5b29aad98975c2e50e43ac1c9a343554c3d899a13cd61b395ab126c9e95d5d74631ad6f50d08cee4251e8dde99fa9cfe48d3c3184816350b736d97e4d7627b0b11158717cab0af5cbe0b17310a5fc6d22787aa72b302cd83a587c02f11f77192a22f9bf9fb48a378a0f4304e8e4b45cfacf379ef7b57f9c98b810ea535ecebc16b8803b205177f65b538fa3963c2385520ecbf337a93be44640de453e3ed8f9b69d2e4a0569d46eddea494048fc02fd886b0b8a00c39f8a93ac3892171ccadb0a8ea63378c7cc1f2d8936169c2c4995a8c4eaa7ff53cf1967816896d44f747cf8b8205b02e1b13ceae4af2b04a7a1846acbde4d006f665c91bfffa0773bb55952dcf652fb2888216b71ebbbaebff20ab468c09d78a9deed8ab0b3d04695d0af8a9ec9f7f15ac4018798710367a4c04d074807dd06c01f307351d0129af5c90e42d910cf09bfd9ce9968603117bb3b027fcc8f1146bc8de59357f05d4963abcbc44d121e66b0d71de492122045f841c7437f2d02f3c9509d5a952e4993e89d20aaa0f0304ec0ff679ff3cb39beb1a6eb6bcd9fb07af01f61cf03c501af6453c1214a1f2ba7c5e5a08dff7a7363ecae53687c13c4672b7a13f7775235c17356b3119080ebce30baa6d6d2d17681496874b6c16e101e58b951e4fc1d00ae3c95e699ece15e20ca8eeee5d52fb39aea1a516f580f08001348ae9510e7d490e83def5eab88278a8c729510912c5f307be6a3ab410d09483253a3f2d9da9452cc5b441ad03cc9c37aa07c69eda0bb658426004d43ea47c963c3eeba756e86cd3953e5be6c5eec3fee1a582503b848448181a1fac5dc9c0b6e0d23e6b1268a29100231b51a7a27a9a3eaddc9ce18ba008db9f8084ee825ecc8646dc9f6ffb1b61acf87f8f0ef7ed380b892ee427317e93db882ade7d175b2b110b69e787119afe56257fcc43f1c5b84e6ea418177d6a6abd276399cf24a5bd39d20f80a016b93db05d876613bb278f16305223a7b3a1975cf5082482f77a14ecc535ee6bc24d54f067f2c36fc8f61954f15a473a0b33dd2c1e7f465e019085cafd52fc41b6ef173e4d0ee9ea21472d5822599df5130d192e5c65a6a3589ea2a1606424824447cfb57f031517486d01552812d29f077c19b62040904773c1c929308fed283740bda011fb96e9eed287ba0add369a1722d6ebdbeb19dba5e5ca64aac1824a33083f9dad37ef018d8c493907894d16dd44a1c1bb69976b7f3d18791758e7c9e5e50d13d4396d246da80b0caec063bfa67557667d7cf00cdf53ef2b02ce3be550d0cb24cfa5bbeb7db358c7faa1ffeaa89d4ebe7e1238cd586d8e8697a4232dec13a527697c44cbb59fa32f181b20b2a4764d4a24958a4642e7cc88ebd9b50840f23b6957af173787d37a0b56b462a1f7ad67b3a714dcce6768081f61f196a744f189093e232139088deeefc3dd4aa377f5b9fc64c4c01620940ede87a9ceb1412a32746f657da5504b9a5d0ecd913bea58de56f0db2a06292df8a66367e4a2a9fb35682fcf0ea629806ab8179de2d851d5f252b7177c8769f01702a36beba3e315a6b5d1c6939c545eacf3c5b3e4584d4ab6a9c85158cf9600a183783526f66bfa1a5613587d53f7a6d7203fa622e3804e377d28a878119103e449f846274c1c8a0a95c26442eed0de3594ad62f9b069a8e8e5446c0385ac24a42af665c4589d49ad71c9dfc9db47e29c3c633485aecdf4ef34a7fe6ad72a7215f9fba78b2bce061335b9b39472237ae355b7c000e686d4cdb384361c3e92b2f485754e4b843cf6038d237358ce841fb666b37a090411afbeb07cd7e255eeb5b7c0ef547d616cb5a61783dae87b4dbfba3f20ab518262d877277c83f8652f75285f82fd3963793f593649c43ae2fc4282e9f0ba91efd6772753d7661d1036af5b680b13dfa9c769043f61a0f1adde8748496c3150fea0fc44032b8879fc2b06f00d67fa3628900cf025bced78912c9755c9a64ac43e6275b04a96a39ff115b0d017b02cce5a343dfe5968bf9266f428bdef272ee03e7ee365e670dc4fe8c49b42e0563fbd3cb8a936961d236d8101f55dbbb4438c91ad4f0b58db513b3918606ba3954b0e7b93db08c36e1522c87f258eb4ba5f573191257c90a2b9b073c61295f623f3b561b752098d59401189f1eb7aff276538f4218ba481af6c30b12c12a65e1ad697f517b6d7182cb193a7e591e4dfdc001721e7a9ffcaad0e112b631a389608d5b392749e31ded693cb804899708f13f5af3110e0f2f05b2682a25af451e4db8761d6e15f70558708af159e258f1f4555b7579f8165790421c72241dd55dfe33af29218d360a378993dda37c553fedaf92620816e63f100d6f391cf254dc9218aed6e29a7ddd009a549c9818078e7b5a30510303680b560e536fc570b2b515b02c2c34425a947ad1478a437719f18944a87fa777f530ee765e30381a378d5e0db49e89bc7951ea158b522efff80ab49c83e8ec9db48216bd626c3cc536f76fad1ab63bb9bbb3f04e59891520ba743692da42f0aa0374df95cc5cdbe96167154ebcdd64dcefd6e51694788a3c84f0982908565e9f6eb7f169788be19fb8be077672be5380adfb98e41704496567ff06619cc3a773251b614e2c25e334d2ef5cd6f89dc37147e1673a3e516b2116b156ee49b7386901fed3d795e8ddb55f66e73c2c7140d3598f953ecad14d1fc0c867b34bd556a900aed37610e5d4f5014e6fc145caf6fea94bdb53bb9efd4520f3e83c36ac3d540fbb54616b58078dcf873fb854ccc894465f25662831583af449792bbf173cf9828c4d0271093ab278ef702da73180777a50ffc60071f9ae77d2f10b519bc6e5c023bc24159dae3b01740c8182272bcb834a0e0fe3d1aec8a4286a5db102a5721723c1b44de6d2ca4ec0d73165a6cd83136547156edd7b31c51cab4e18d6b154927d8cf8ca25fe90f7be454811c2930f2ca5984395ff7e3a8b0463fde98bd0aa49b82734eb546573c5c93e42b8b839c70cfab06367cc449be3c466af653ab67db962d72b4651129686f75fc06d9a33a5db84caed111441fb025c27e8ae4aebdfd0036076508102f1a92156c2ec721f3ac7ed18102e146f6bfdf38dc9b457d8052eaefd447de14e43646eac5e59a4c2355a682cde53c53b607fc3dd9b2dcdc4dfecd7a242d84d4e2e97f27c2854e1a47204ba15e0df14858ff2659e038faf4766b68a5d6eff1d634d8a0aeaa0e1333544c2c1bd11c0adb6b5c97cce3cd2862a94d7d959617fa942617ebad9968ae644000792f5083e915decbbd8047fb00d1dc2b402dca645a7f8b3be242a5feda2932ba67d93174bf824f69aac5ac931fd5f48924262fbb0d2c5b532fab27eb325458c5e3a0780bd017420e7fb5b1984a8623c3ceb907dbf42b6a602f913228cc917a6549f796ba3d08e97861f216717cc3aa15dcced4279f3b4fab909d39aa602ca99db68e7787b9ae669f0af83f28693e64456283c44351148415b5ac9856777c820e695e93c95e90264f4ba5cf516920ec3342e3fc2c7307a9ac76600090c6da11e6e81156c13266c0ff6ffa5c7fdab8ba521d73026c5b30a87dd6127e4cd85aef1b192de190cfd6384417246214c1e8845ff1623296ac83a853d093423099a1a70f4fd408292d8e436aaf7e599adc6dfc78c549466127944d5db2c05abb031849812b3c9dd173f556f85af2f7bfab387534e62a1a8b4fa34256ba62dddf05dc9e293a05246cd5e9a69de9c58638159975db01fef55678fcbc2"]}, @generic="2c76a28301fe5a3b737bc2ad472cf93e1ea923e0974391a1608555cc67322aaadb6646f6108242f72d3ffe1d07bd2677ad1451029cd3cce00dac322ff23baabf5bf33e068ba4117aad2c06c1092fc01df5"]}, 0x11f8}], 0x5}, 0x0) kernel console output (not intermixed with test programs): ioctl+0x75/0xb0 [ 94.037683][ T6563] __se_sys_ioctl+0x47/0x170 [ 94.042097][ T6571] netlink: 80 bytes leftover after parsing attributes in process `syz.2.457'. [ 94.042274][ T6563] do_syscall_64+0xf3/0x230 [ 94.053807][ T6564] netlink: 'syz.0.453': attribute type 2 has an invalid length. [ 94.055579][ T6563] ? clear_bhb_loop+0x35/0x90 [ 94.055611][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.055633][ T6563] RIP: 0033:0x7fd7f2175bd9 [ 94.055650][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.055665][ T6563] RSP: 002b:00007fd7f2e98048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.055687][ T6563] RAX: ffffffffffffffda RBX: 00007fd7f2303f60 RCX: 00007fd7f2175bd9 [ 94.055702][ T6563] RDX: 0000000020000000 RSI: 000000000000890c RDI: 0000000000000003 [ 94.055715][ T6563] RBP: 00007fd7f2e980a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.055727][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.055740][ T6563] R13: 000000000000000b R14: 00007fd7f2303f60 R15: 00007fff9bdb8f68 [ 94.055769][ T6563] [ 94.086807][ T6563] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.579133][ T6594] tipc: Failed to remove unknown binding: 66,1,1/0:4151436417/4151436419 [ 94.845309][ T6620] netlink: 'syz.1.470': attribute type 2 has an invalid length. [ 94.878322][ T6618] sch_tbf: burst 549 is lower than device veth1_to_bridge mtu (1514) ! [ 95.088059][ T6627] __nla_validate_parse: 4 callbacks suppressed [ 95.088078][ T6627] netlink: 132 bytes leftover after parsing attributes in process `syz.3.474'. [ 95.408500][ T6651] tipc: Failed to remove unknown binding: 66,1,1/0:1310065163/1310065165 [ 95.519911][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.573696][ T6651] team0: Port device bond0 added [ 95.774696][ T6676] FAULT_INJECTION: forcing a failure. [ 95.774696][ T6676] name failslab, interval 1, probability 0, space 0, times 0 [ 95.776839][ T6675] netlink: 'syz.3.487': attribute type 3 has an invalid length. [ 95.801088][ T6678] netlink: 'syz.2.486': attribute type 2 has an invalid length. [ 95.817286][ T6675] netlink: 104 bytes leftover after parsing attributes in process `syz.3.487'. [ 95.833969][ T6676] CPU: 0 PID: 6676 Comm: syz.4.489 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 95.843975][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 95.854040][ T6676] Call Trace: [ 95.857333][ T6676] [ 95.860277][ T6676] dump_stack_lvl+0x241/0x360 [ 95.864981][ T6676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.870203][ T6676] ? __pfx__printk+0x10/0x10 [ 95.874825][ T6676] should_fail_ex+0x3b0/0x4e0 [ 95.879526][ T6676] ? sctp_add_bind_addr+0x89/0x3a0 [ 95.884654][ T6676] should_failslab+0x9/0x20 [ 95.889166][ T6676] kmalloc_trace_noprof+0x6c/0x2c0 [ 95.894300][ T6676] sctp_add_bind_addr+0x89/0x3a0 [ 95.899265][ T6676] sctp_copy_local_addr_list+0x311/0x500 [ 95.904924][ T6676] ? sctp_copy_local_addr_list+0xab/0x500 [ 95.910666][ T6676] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 95.916842][ T6676] ? sctp_v6_is_any+0x60/0x70 [ 95.921547][ T6676] sctp_bind_addr_copy+0xad/0x3b0 [ 95.926593][ T6676] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 95.932939][ T6676] sctp_connect_new_asoc+0x2f3/0x6c0 [ 95.938227][ T6676] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 95.944025][ T6676] ? sctp_sendmsg+0xbb9/0x3520 [ 95.948784][ T6676] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 95.954320][ T6676] ? security_sctp_bind_connect+0x90/0xb0 [ 95.960037][ T6676] sctp_sendmsg+0x219a/0x3520 [ 95.964724][ T6676] ? __pfx_sctp_sendmsg+0x10/0x10 [ 95.969748][ T6676] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.974602][ T6676] ? inet_sendmsg+0x330/0x390 [ 95.979277][ T6676] __sock_sendmsg+0x1a6/0x270 [ 95.983950][ T6676] __sys_sendto+0x3a4/0x4f0 [ 95.988453][ T6676] ? __pfx___sys_sendto+0x10/0x10 [ 95.993490][ T6676] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.999462][ T6676] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.005782][ T6676] __x64_sys_sendto+0xde/0x100 [ 96.010543][ T6676] do_syscall_64+0xf3/0x230 [ 96.015035][ T6676] ? clear_bhb_loop+0x35/0x90 [ 96.019705][ T6676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.025593][ T6676] RIP: 0033:0x7f22fc175bd9 [ 96.030006][ T6676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.049611][ T6676] RSP: 002b:00007f22fbbff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.058027][ T6676] RAX: ffffffffffffffda RBX: 00007f22fc303f60 RCX: 00007f22fc175bd9 [ 96.065992][ T6676] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000004 [ 96.073960][ T6676] RBP: 00007f22fbbff0a0 R08: 0000000020000240 R09: 000000000000001c [ 96.081925][ T6676] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 96.089890][ T6676] R13: 000000000000000b R14: 00007f22fc303f60 R15: 00007ffd9cd52958 [ 96.097870][ T6676] [ 96.515598][ T6706] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 96.694049][ T6726] netlink: 'syz.4.499': attribute type 7 has an invalid length. [ 96.754875][ T6732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.499'. [ 96.784443][ T6728] netlink: 'syz.0.500': attribute type 2 has an invalid length. [ 96.784625][ T6732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.499'. [ 97.069068][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 97.107420][ T6754] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 97.146957][ T6749] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 97.201285][ T6754] bond0: (slave bond_slave_0): Releasing backup interface [ 97.531905][ T6777] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.515'. [ 97.594495][ T6786] xt_connbytes: Forcing CT accounting to be enabled [ 97.619842][ T6786] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.759414][ T6793] netlink: 56 bytes leftover after parsing attributes in process `syz.1.521'. [ 97.770744][ T6793] tipc: Started in network mode [ 97.778440][ T6793] tipc: Node identity 20010000000000000000000000000001, cluster identity 4711 [ 97.798467][ T6793] tipc: Enabling of bearer rejected, failed to enable media [ 97.984070][ T6807] netlink: 'syz.3.525': attribute type 7 has an invalid length. [ 98.024727][ T6805] pim6reg1: entered promiscuous mode [ 98.045689][ T6805] pim6reg1: entered allmulticast mode [ 98.064455][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.525'. [ 98.093527][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 98.104931][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.3.525'. [ 98.298081][ T6819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.430667][ T6833] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.982655][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.991981][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.005607][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.018182][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.026158][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.033656][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.107591][ T6716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.256232][ T6716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.381894][ T6716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.547878][ T6716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.629766][ T6894] netlink: 'syz.3.552': attribute type 8 has an invalid length. [ 99.737661][ T6898] syz.0.554[6898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.737905][ T6898] syz.0.554[6898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.870615][ T6906] trusted_key: syz.0.556 sent an empty control message without MSG_MORE. [ 100.065854][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 100.108589][ T6716] bridge_slave_1: left allmulticast mode [ 100.114295][ T6716] bridge_slave_1: left promiscuous mode [ 100.137832][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.162544][ T6716] bridge_slave_0: left allmulticast mode [ 100.175675][ T6716] bridge_slave_0: left promiscuous mode [ 100.188505][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.526335][ T6716] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 100.646122][ T6716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.660005][ T6716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.670979][ T6716] bond0 (unregistering): Released all slaves [ 100.957289][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.992490][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.003202][ T6858] bridge_slave_0: entered allmulticast mode [ 101.014453][ T6858] bridge_slave_0: entered promiscuous mode [ 101.066983][ T5100] Bluetooth: hci0: command tx timeout [ 101.181883][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.205152][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.234502][ T6858] bridge_slave_1: entered allmulticast mode [ 101.247236][ T6858] bridge_slave_1: entered promiscuous mode [ 101.370789][ T6964] __nla_validate_parse: 6 callbacks suppressed [ 101.370809][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 101.474196][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.589147][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.774107][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'. [ 101.852901][ T6858] team0: Port device team_slave_0 added [ 101.900068][ T6858] team0: Port device team_slave_1 added [ 101.959536][ T6716] hsr_slave_0: left promiscuous mode [ 101.969270][ T6716] hsr_slave_1: left promiscuous mode [ 101.979954][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.995774][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.016226][ T6716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.031788][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.064278][ T6716] veth1_macvtap: left promiscuous mode [ 102.074197][ T6716] veth0_macvtap: left promiscuous mode [ 102.081003][ T6716] veth1_vlan: left promiscuous mode [ 102.088576][ T6716] veth0_vlan: left promiscuous mode [ 102.098561][ T6998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.493070][ T6716] team0 (unregistering): Port device team_slave_1 removed [ 102.528104][ T6716] team0 (unregistering): Port device team_slave_0 removed [ 102.885398][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.892701][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.940357][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.960317][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.967949][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.018612][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.133794][ T7019] FAULT_INJECTION: forcing a failure. [ 103.133794][ T7019] name failslab, interval 1, probability 0, space 0, times 0 [ 103.146478][ T7019] CPU: 0 PID: 7019 Comm: syz.3.594 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 103.156473][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.166545][ T7019] Call Trace: [ 103.169840][ T7019] [ 103.172788][ T7019] dump_stack_lvl+0x241/0x360 [ 103.177494][ T7019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.182711][ T7019] ? __pfx__printk+0x10/0x10 [ 103.187320][ T7019] ? nf_ct_pernet+0x45/0x270 [ 103.191919][ T7019] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.197896][ T7019] ? __pfx_lock_release+0x10/0x10 [ 103.202918][ T7019] should_fail_ex+0x3b0/0x4e0 [ 103.207601][ T7019] ? __nf_conntrack_alloc+0x8f/0x380 [ 103.212885][ T7019] should_failslab+0x9/0x20 [ 103.217382][ T7019] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 103.222747][ T7019] __nf_conntrack_alloc+0x8f/0x380 [ 103.227857][ T7019] init_conntrack+0x3c3/0x1310 [ 103.232620][ T7019] ? __pfx_init_conntrack+0x10/0x10 [ 103.237812][ T7019] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 103.243785][ T7019] ? __local_bh_enable_ip+0x168/0x200 [ 103.249155][ T7019] nf_conntrack_in+0xd59/0x1880 [ 103.254022][ T7019] ? __pfx_nf_conntrack_in+0x10/0x10 [ 103.259325][ T7019] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 103.264773][ T7019] nf_hook_slow+0xc3/0x220 [ 103.269182][ T7019] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 103.274375][ T7019] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 103.279564][ T7019] NF_HOOK+0x29e/0x450 [ 103.283623][ T7019] ? skb_orphan+0x4b/0xd0 [ 103.287948][ T7019] ? NF_HOOK+0x9a/0x450 [ 103.292095][ T7019] ? __pfx_NF_HOOK+0x10/0x10 [ 103.296676][ T7019] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 103.301873][ T7019] ? __pfx_ipv6_rcv+0x10/0x10 [ 103.306545][ T7019] __netif_receive_skb+0x1ea/0x650 [ 103.311653][ T7019] ? __pfx_lock_acquire+0x10/0x10 [ 103.316668][ T7019] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 103.322907][ T7019] ? __pfx___netif_receive_skb+0x10/0x10 [ 103.328530][ T7019] ? __kasan_slab_alloc+0x66/0x80 [ 103.333570][ T7019] ? read_tsc+0x9/0x20 [ 103.337639][ T7019] ? timekeeping_get_ns+0x2c0/0x420 [ 103.342854][ T7019] ? netif_receive_skb+0x131/0x890 [ 103.347961][ T7019] ? netif_receive_skb+0x131/0x890 [ 103.353062][ T7019] netif_receive_skb+0x1e8/0x890 [ 103.357993][ T7019] ? tun_rx_batched+0x160/0x8f0 [ 103.362838][ T7019] ? __pfx_netif_receive_skb+0x10/0x10 [ 103.368297][ T7019] ? tun_rx_batched+0x160/0x8f0 [ 103.373149][ T7019] tun_rx_batched+0x1b7/0x8f0 [ 103.377826][ T7019] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.384153][ T7019] ? __pfx_lock_acquire+0x10/0x10 [ 103.389173][ T7019] ? __pfx_tun_rx_batched+0x10/0x10 [ 103.394384][ T7019] tun_get_user+0x2f84/0x4720 [ 103.399062][ T7019] ? tun_get_user+0x2a78/0x4720 [ 103.403924][ T7019] ? __lock_acquire+0x1346/0x1fd0 [ 103.408958][ T7019] ? __pfx_tun_get_user+0x10/0x10 [ 103.413996][ T7019] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 103.419450][ T7019] ? tun_get+0x1e/0x2f0 [ 103.423610][ T7019] ? __pfx_lock_release+0x10/0x10 [ 103.428639][ T7019] ? tun_get+0x1e/0x2f0 [ 103.432790][ T7019] ? tun_get+0x27d/0x2f0 [ 103.437031][ T7019] tun_chr_write_iter+0x113/0x1f0 [ 103.442053][ T7019] vfs_write+0xa72/0xc90 [ 103.446294][ T7019] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 103.451835][ T7019] ? __pfx_vfs_write+0x10/0x10 [ 103.456608][ T7019] ksys_write+0x1a0/0x2c0 [ 103.460934][ T7019] ? __pfx_ksys_write+0x10/0x10 [ 103.465777][ T7019] ? do_syscall_64+0x100/0x230 [ 103.470536][ T7019] ? do_syscall_64+0xb6/0x230 [ 103.475204][ T7019] do_syscall_64+0xf3/0x230 [ 103.479697][ T7019] ? clear_bhb_loop+0x35/0x90 [ 103.484368][ T7019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.490253][ T7019] RIP: 0033:0x7f3bd117475f [ 103.494658][ T7019] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 103.514256][ T7019] RSP: 002b:00007f3bd1f5f010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.522664][ T7019] RAX: ffffffffffffffda RBX: 00007f3bd1303f60 RCX: 00007f3bd117475f [ 103.530629][ T7019] RDX: 000000000000005a RSI: 00000000200000c0 RDI: 00000000000000c8 [ 103.538588][ T7019] RBP: 00007f3bd1f5f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.546552][ T7019] R10: 000000000000005a R11: 0000000000000293 R12: 0000000000000001 [ 103.554511][ T7019] R13: 000000000000000b R14: 00007f3bd1303f60 R15: 00007fff056095d8 [ 103.562486][ T7019] [ 103.575576][ T5100] Bluetooth: hci0: command tx timeout [ 103.607061][ T6858] hsr_slave_0: entered promiscuous mode [ 103.671994][ T6858] hsr_slave_1: entered promiscuous mode [ 103.699761][ T6858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.710034][ T6858] Cannot create hsr debugfs directory [ 103.723026][ T7027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.595'. [ 104.575089][ T7072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.610'. [ 104.714596][ T6858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.738189][ T6858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.766262][ T6858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.803220][ T6858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.024296][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.061417][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.076962][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.084128][ T5114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.103704][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.110803][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.294322][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.328404][ T7106] FAULT_INJECTION: forcing a failure. [ 105.328404][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 105.349826][ T7106] CPU: 0 PID: 7106 Comm: syz.3.619 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 105.359836][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.369901][ T7106] Call Trace: [ 105.373192][ T7106] [ 105.376136][ T7106] dump_stack_lvl+0x241/0x360 [ 105.380840][ T7106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.386235][ T7106] ? __pfx__printk+0x10/0x10 [ 105.390847][ T7106] ? __pfx___might_resched+0x10/0x10 [ 105.396162][ T7106] should_fail_ex+0x3b0/0x4e0 [ 105.400868][ T7106] ? bpf_test_init+0xe1/0x180 [ 105.405561][ T7106] should_failslab+0x9/0x20 [ 105.410081][ T7106] __kmalloc_noprof+0xd8/0x400 [ 105.414867][ T7106] bpf_test_init+0xe1/0x180 [ 105.419395][ T7106] bpf_prog_test_run_skb+0x2bb/0x1820 [ 105.424787][ T7106] ? __pfx_lock_release+0x10/0x10 [ 105.429845][ T7106] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 105.435674][ T7106] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 105.441761][ T7106] bpf_prog_test_run+0x33a/0x3b0 [ 105.446723][ T7106] __sys_bpf+0x48d/0x810 [ 105.450991][ T7106] ? __pfx___sys_bpf+0x10/0x10 [ 105.455789][ T7106] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.461787][ T7106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.468134][ T7106] ? do_syscall_64+0x100/0x230 [ 105.472922][ T7106] __x64_sys_bpf+0x7c/0x90 [ 105.477366][ T7106] do_syscall_64+0xf3/0x230 [ 105.481887][ T7106] ? clear_bhb_loop+0x35/0x90 [ 105.486578][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.492466][ T7106] RIP: 0033:0x7f3bd1175bd9 [ 105.496871][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.516468][ T7106] RSP: 002b:00007f3bd1f5f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.524876][ T7106] RAX: ffffffffffffffda RBX: 00007f3bd1303f60 RCX: 00007f3bd1175bd9 [ 105.532839][ T7106] RDX: 0000000000000050 RSI: 00000000200004c0 RDI: 000000000000000a [ 105.540799][ T7106] RBP: 00007f3bd1f5f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.548759][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.556721][ T7106] R13: 000000000000000b R14: 00007f3bd1303f60 R15: 00007fff056095d8 [ 105.564696][ T7106] [ 105.622222][ T6858] veth0_vlan: entered promiscuous mode [ 105.628611][ T5100] Bluetooth: hci0: command tx timeout [ 105.649899][ T6858] veth1_vlan: entered promiscuous mode [ 105.744060][ T6858] veth0_macvtap: entered promiscuous mode [ 105.770627][ T6858] veth1_macvtap: entered promiscuous mode [ 105.814355][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.849073][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.878930][ T7121] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.623'. [ 105.894992][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.919535][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.946700][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.974562][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.994431][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.025028][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.044522][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.059013][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.086075][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.101238][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.123417][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.134781][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.149643][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.173129][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.203709][ T6858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.212567][ T6858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.224588][ T6858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.241922][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.629'. [ 106.244330][ T6858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.517777][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.534736][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.589146][ T6720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.612531][ T6720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.596231][ T7210] netlink: 'syz.3.652': attribute type 10 has an invalid length. [ 107.640251][ T7210] netlink: 132 bytes leftover after parsing attributes in process `syz.3.652'. [ 107.706238][ T5100] Bluetooth: hci0: command tx timeout [ 107.815742][ T783] IPVS: starting estimator thread 0... [ 107.917037][ T7222] IPVS: using max 20 ests per chain, 48000 per kthread [ 108.197704][ T7249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.665'. [ 108.319520][ T7256] --map-set only usable from mangle table [ 108.416168][ T7256] netlink: 'syz.3.673': attribute type 1 has an invalid length. [ 108.481070][ T7266] xt_SECMARK: invalid mode: 0 [ 108.641486][ T7272] FAULT_INJECTION: forcing a failure. [ 108.641486][ T7272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.671233][ T7273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.677'. [ 108.685123][ T7272] CPU: 0 PID: 7272 Comm: syz.1.678 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 108.695138][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 108.705206][ T7272] Call Trace: [ 108.708499][ T7272] [ 108.711442][ T7272] dump_stack_lvl+0x241/0x360 [ 108.716150][ T7272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.721373][ T7272] ? __pfx__printk+0x10/0x10 [ 108.725991][ T7272] ? snprintf+0xda/0x120 [ 108.730255][ T7272] should_fail_ex+0x3b0/0x4e0 [ 108.734958][ T7272] _copy_to_user+0x2f/0xb0 [ 108.739395][ T7272] simple_read_from_buffer+0xca/0x150 [ 108.744792][ T7272] proc_fail_nth_read+0x1e9/0x250 [ 108.749845][ T7272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.755413][ T7272] ? rw_verify_area+0x520/0x6b0 [ 108.760281][ T7272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.765852][ T7272] vfs_read+0x204/0xbc0 [ 108.770037][ T7272] ? do_sock_setsockopt+0x3e2/0x720 [ 108.775260][ T7272] ? __pfx_vfs_read+0x10/0x10 [ 108.779953][ T7272] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 108.785504][ T7272] ? __pfx_packet_setsockopt+0x10/0x10 [ 108.790966][ T7272] ? do_sock_setsockopt+0x3e2/0x720 [ 108.796163][ T7272] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 108.801707][ T7272] ksys_read+0x1a0/0x2c0 [ 108.805952][ T7272] ? __pfx_ksys_read+0x10/0x10 [ 108.810706][ T7272] ? do_syscall_64+0x100/0x230 [ 108.815463][ T7272] ? do_syscall_64+0xb6/0x230 [ 108.820131][ T7272] do_syscall_64+0xf3/0x230 [ 108.824628][ T7272] ? clear_bhb_loop+0x35/0x90 [ 108.829303][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.835189][ T7272] RIP: 0033:0x7fd7f21746bc [ 108.839599][ T7272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 108.859198][ T7272] RSP: 002b:00007fd7f2e98040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.867607][ T7272] RAX: ffffffffffffffda RBX: 00007fd7f2303f60 RCX: 00007fd7f21746bc [ 108.875572][ T7272] RDX: 000000000000000f RSI: 00007fd7f2e980b0 RDI: 0000000000000005 [ 108.883538][ T7272] RBP: 00007fd7f2e980a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.891498][ T7272] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.899491][ T7272] R13: 000000000000000b R14: 00007fd7f2303f60 R15: 00007fff9bdb8f68 [ 108.907466][ T7272] [ 109.405786][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 109.567523][ T7306] netlink: 'syz.4.689': attribute type 1 has an invalid length. [ 109.592954][ T7306] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.689'. [ 109.639409][ T7296] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.649172][ T7296] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.658893][ T7296] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.668403][ T7296] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.686471][ T7312] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.689'. [ 109.694309][ T7296] vxlan0: entered promiscuous mode [ 109.748280][ T7296] vxlan0: entered allmulticast mode [ 109.783257][ T7296] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.793149][ T7296] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.802577][ T7296] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.811690][ T7296] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.998152][ T7333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.696'. [ 110.339817][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.702'. [ 110.645219][ T7379] Bluetooth: MGMT ver 1.22 [ 110.687984][ T7381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.739226][ T7385] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 110.784370][ T7387] netlink: 104 bytes leftover after parsing attributes in process `syz.4.713'. [ 111.188976][ T7404] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.719'. [ 111.882228][ T7443] x_tables: duplicate underflow at hook 1 [ 112.651322][ T7486] __nla_validate_parse: 3 callbacks suppressed [ 112.651340][ T7486] netlink: 104 bytes leftover after parsing attributes in process `syz.3.747'. [ 112.785294][ T7498] netlink: 'syz.3.753': attribute type 9 has an invalid length. [ 112.817541][ T7498] netlink: 'syz.3.753': attribute type 6 has an invalid length. [ 112.952216][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.988144][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.312916][ T7529] netlink: 104 bytes leftover after parsing attributes in process `syz.2.763'. [ 113.471422][ T7538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.766'. [ 113.490060][ T7539] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 113.513283][ T7539] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 113.755335][ T7553] bridge_slave_1: left allmulticast mode [ 113.783449][ T7553] bridge_slave_1: left promiscuous mode [ 113.810463][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.867835][ T7557] netlink: 104 bytes leftover after parsing attributes in process `syz.4.775'. [ 113.976096][ T7562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.776'. [ 114.081098][ T7567] netlink: 104 bytes leftover after parsing attributes in process `syz.1.782'. [ 114.355114][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.786'. [ 114.378526][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.786'. [ 114.474413][ T7583] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 114.497051][ T7589] netlink: 104 bytes leftover after parsing attributes in process `syz.1.788'. [ 114.533774][ T7583] syz_tun: entered promiscuous mode [ 114.818005][ T7607] xt_connbytes: Forcing CT accounting to be enabled [ 114.906932][ T7612] netlink: 176 bytes leftover after parsing attributes in process `syz.1.796'. [ 116.032552][ T7666] netlink: 'syz.3.819': attribute type 63 has an invalid length. [ 116.060940][ T7666] netlink: 'syz.3.819': attribute type 63 has an invalid length. [ 116.867015][ T7716] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 117.384510][ T7734] batadv0: entered promiscuous mode [ 117.403249][ T7734] veth0: entered promiscuous mode [ 117.567446][ T7745] sctp: [Deprecated]: syz.3.847 (pid 7745) Use of int in maxseg socket option. [ 117.567446][ T7745] Use struct sctp_assoc_value instead [ 117.690877][ T7752] __nla_validate_parse: 19 callbacks suppressed [ 117.690896][ T7752] netlink: 104 bytes leftover after parsing attributes in process `syz.2.850'. [ 117.778734][ T7756] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 117.814904][ T7756] netlink: 224 bytes leftover after parsing attributes in process `syz.3.851'. [ 117.927467][ T7767] netlink: 124 bytes leftover after parsing attributes in process `syz.4.853'. [ 118.271999][ T7788] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 118.344591][ T7786] sctp: [Deprecated]: syz.2.861 (pid 7786) Use of int in maxseg socket option. [ 118.344591][ T7786] Use struct sctp_assoc_value instead [ 118.352101][ T7790] netlink: 104 bytes leftover after parsing attributes in process `syz.4.864'. [ 118.603391][ T7805] netlink: 32 bytes leftover after parsing attributes in process `syz.4.869'. [ 118.629058][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 118.656053][ T7805] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 118.688609][ T7809] netlink: 124 bytes leftover after parsing attributes in process `syz.0.868'. [ 118.734852][ T7812] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 118.955857][ T7826] netlink: 104 bytes leftover after parsing attributes in process `syz.1.875'. [ 118.997311][ T7828] sctp: [Deprecated]: syz.0.876 (pid 7828) Use of int in maxseg socket option. [ 118.997311][ T7828] Use struct sctp_assoc_value instead [ 119.166555][ T7834] IPv6: NLM_F_REPLACE set, but no existing node found! [ 119.246522][ T7837] syzkaller1: entered promiscuous mode [ 119.263286][ T7837] syzkaller1: entered allmulticast mode [ 119.287026][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.883'. [ 119.304908][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 119.325373][ T7843] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 119.479123][ T7853] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 119.905878][ T7885] netlink: 'syz.1.894': attribute type 10 has an invalid length. [ 119.945409][ T7885] team0: Device veth1_macvtap failed to register rx_handler [ 120.064639][ T7890] netlink: 'syz.3.898': attribute type 7 has an invalid length. [ 120.075495][ T7892] netlink: 'syz.2.899': attribute type 4 has an invalid length. [ 120.091331][ T7893] netlink: 'syz.0.900': attribute type 8 has an invalid length. [ 120.094528][ T7890] netlink: 'syz.3.898': attribute type 8 has an invalid length. [ 120.138720][ T7897] netlink: 'syz.1.902': attribute type 1 has an invalid length. [ 120.647775][ T7918] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 121.053728][ T7937] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 121.542433][ T7955] xt_TCPMSS: Only works on TCP SYN packets [ 121.589178][ T7955] bond0: entered promiscuous mode [ 121.615768][ T7955] bond_slave_0: entered promiscuous mode [ 122.400417][ T8002] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 122.794861][ T8007] team0 (unregistering): Port device team_slave_0 removed [ 122.824186][ T8007] team0 (unregistering): Port device team_slave_1 removed [ 123.050850][ T8036] vlan2: entered promiscuous mode [ 123.057237][ T8036] vlan2: entered allmulticast mode [ 123.105377][ T8047] __nla_validate_parse: 15 callbacks suppressed [ 123.105395][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'. [ 123.274013][ T8058] Cannot find del_set index 2048 as target [ 123.658392][ T8075] netlink: 'syz.2.964': attribute type 10 has an invalid length. [ 123.725453][ T8075] team0: Failed to send options change via netlink (err -105) [ 123.737790][ T8075] team0: Port device netdevsim0 added [ 123.749666][ T8075] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 123.771274][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.968'. [ 123.780342][ T8075] netlink: 616 bytes leftover after parsing attributes in process `syz.2.964'. [ 123.813876][ T8075] netlink: 'syz.2.964': attribute type 10 has an invalid length. [ 123.827595][ T8075] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 123.865269][ T8075] team0: Failed to send options change via netlink (err -105) [ 123.882490][ T8075] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 123.898229][ T8089] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 123.901720][ T8075] team0: Port device netdevsim0 removed [ 123.926290][ T8075] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.423022][ T8106] : entered promiscuous mode [ 124.954876][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 125.004871][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 125.040100][ T8123] nbd: must specify at least one socket [ 125.504058][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 125.572291][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 125.782165][ T8180] validate_nla: 1 callbacks suppressed [ 125.782183][ T8180] netlink: 'syz.2.998': attribute type 2 has an invalid length. [ 125.820729][ T8180] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.998'. [ 125.924117][ T8189] syzkaller1: entered promiscuous mode [ 125.930029][ T8189] syzkaller1: entered allmulticast mode [ 126.153644][ T8198] tunl0: entered promiscuous mode [ 126.198591][ T8198] netlink: 'syz.3.1013': attribute type 4 has an invalid length. [ 126.217961][ T8198] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1013'. [ 126.581989][ T8226] openvswitch: netlink: Flow actions attr not present in new flow. [ 126.801912][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 126.813686][ T8239] netlink: 'syz.3.1027': attribute type 4 has an invalid length. [ 127.194659][ T8251] geneve2: entered promiscuous mode [ 127.298005][ T8246] netlink: 'syz.1.1030': attribute type 2 has an invalid length. [ 127.629811][ T8268] netlink: 'syz.0.1038': attribute type 72 has an invalid length. [ 128.045839][ T8290] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 128.059947][ T8290] netlink: 'syz.3.1047': attribute type 2 has an invalid length. [ 129.611051][ T8322] __nla_validate_parse: 10 callbacks suppressed [ 129.611070][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1054'. [ 129.832482][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 129.904082][ T8337] nbd: must specify at least one socket [ 130.069177][ T8343] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 131.488781][ T8388] xt_HMARK: spi-set and port-set can't be combined [ 131.561935][ T8392] FAULT_INJECTION: forcing a failure. [ 131.561935][ T8392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.612622][ T8392] CPU: 1 PID: 8392 Comm: syz.4.1078 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 131.622729][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 131.632776][ T8392] Call Trace: [ 131.636047][ T8392] [ 131.638971][ T8392] dump_stack_lvl+0x241/0x360 [ 131.643645][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.648835][ T8392] ? __pfx__printk+0x10/0x10 [ 131.653420][ T8392] ? snprintf+0xda/0x120 [ 131.657657][ T8392] should_fail_ex+0x3b0/0x4e0 [ 131.662333][ T8392] _copy_to_user+0x2f/0xb0 [ 131.666742][ T8392] simple_read_from_buffer+0xca/0x150 [ 131.672114][ T8392] proc_fail_nth_read+0x1e9/0x250 [ 131.677139][ T8392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.682679][ T8392] ? rw_verify_area+0x520/0x6b0 [ 131.687522][ T8392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.693056][ T8392] vfs_read+0x204/0xbc0 [ 131.697203][ T8392] ? __pfx_lock_release+0x10/0x10 [ 131.702231][ T8392] ? __pfx_vfs_read+0x10/0x10 [ 131.706900][ T8392] ? __fget_files+0x29/0x470 [ 131.711484][ T8392] ? __fget_files+0x3f6/0x470 [ 131.716162][ T8392] ksys_read+0x1a0/0x2c0 [ 131.720399][ T8392] ? __pfx_ksys_read+0x10/0x10 [ 131.725151][ T8392] ? do_syscall_64+0x100/0x230 [ 131.729909][ T8392] ? do_syscall_64+0xb6/0x230 [ 131.734578][ T8392] do_syscall_64+0xf3/0x230 [ 131.739071][ T8392] ? clear_bhb_loop+0x35/0x90 [ 131.743742][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.749624][ T8392] RIP: 0033:0x7f5f64b746bc [ 131.754028][ T8392] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 131.773633][ T8392] RSP: 002b:00007f5f65a12040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.782046][ T8392] RAX: ffffffffffffffda RBX: 00007f5f64d04038 RCX: 00007f5f64b746bc [ 131.790010][ T8392] RDX: 000000000000000f RSI: 00007f5f65a120b0 RDI: 0000000000000006 [ 131.797974][ T8392] RBP: 00007f5f65a120a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.805935][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.813891][ T8392] R13: 000000000000006e R14: 00007f5f64d04038 R15: 00007ffeb38c9ae8 [ 131.821862][ T8392] [ 131.862787][ T8397] netlink: 'syz.3.1081': attribute type 10 has an invalid length. [ 131.919332][ T8397] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.039704][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 132.117701][ T8417] netlink: 'syz.3.1085': attribute type 2 has an invalid length. [ 132.148946][ T8417] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1085'. [ 132.501909][ T8437] dccp_invalid_packet: P.Data Offset(0) too small [ 132.592542][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 133.068901][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.242807][ T8474] tipc: Started in network mode [ 133.248216][ T8474] tipc: Node identity 2d14142a, cluster identity 4711 [ 133.255205][ T8474] tipc: Enabling of bearer rejected, failed to enable media [ 133.367124][ T8483] netlink: 'syz.3.1112': attribute type 29 has an invalid length. [ 133.404853][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 133.513005][ T8489] netlink: 'syz.3.1115': attribute type 29 has an invalid length. [ 133.537368][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 134.115737][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 134.140213][ T8526] veth0_macvtap: left promiscuous mode [ 134.511511][ T8540] netlink: 'syz.2.1134': attribute type 3 has an invalid length. [ 134.698889][ T8540] netlink: 'syz.2.1134': attribute type 3 has an invalid length. [ 135.009497][ T8560] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614) [ 135.052592][ T8560] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 135.224186][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1149'. [ 135.252043][ T8574] netlink: 'syz.3.1148': attribute type 21 has an invalid length. [ 135.299962][ T8574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1148'. [ 135.335380][ T8574] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 135.349024][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1148'. [ 135.379913][ T8580] FAULT_INJECTION: forcing a failure. [ 135.379913][ T8580] name failslab, interval 1, probability 0, space 0, times 0 [ 135.412237][ T8580] CPU: 0 PID: 8580 Comm: syz.4.1151 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 135.422352][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 135.432433][ T8580] Call Trace: [ 135.435725][ T8580] [ 135.438669][ T8580] dump_stack_lvl+0x241/0x360 [ 135.443372][ T8580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.448600][ T8580] ? __pfx__printk+0x10/0x10 [ 135.453220][ T8580] ? netlink_sendmsg+0x8e4/0xcb0 [ 135.458180][ T8580] ? do_syscall_64+0xf3/0x230 [ 135.462887][ T8580] should_fail_ex+0x3b0/0x4e0 [ 135.467585][ T8580] ? rtnl_newlink+0xf2/0x20a0 [ 135.472256][ T8580] should_failslab+0x9/0x20 [ 135.476751][ T8580] kmalloc_trace_noprof+0x6c/0x2c0 [ 135.481861][ T8580] rtnl_newlink+0xf2/0x20a0 [ 135.486371][ T8580] ? __mutex_trylock_common+0x183/0x2e0 [ 135.491911][ T8580] ? __pfx___might_resched+0x10/0x10 [ 135.497191][ T8580] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.502206][ T8580] ? __pfx___mutex_trylock_common+0x10/0x10 [ 135.508092][ T8580] ? rcu_is_watching+0x15/0xb0 [ 135.512847][ T8580] ? trace_contention_end+0x3c/0x120 [ 135.518123][ T8580] ? __mutex_lock+0x2ef/0xd70 [ 135.522794][ T8580] ? rcu_read_unlock+0x87/0xa0 [ 135.527548][ T8580] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 135.532650][ T8580] ? __pfx_lock_release+0x10/0x10 [ 135.537663][ T8580] ? __pfx___mutex_lock+0x10/0x10 [ 135.542683][ T8580] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.547694][ T8580] rtnetlink_rcv_msg+0x73f/0xcf0 [ 135.552623][ T8580] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 135.557727][ T8580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.563194][ T8580] ? ref_tracker_free+0x643/0x7e0 [ 135.568230][ T8580] netlink_rcv_skb+0x1e3/0x430 [ 135.572987][ T8580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.578441][ T8580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.583736][ T8580] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.588930][ T8580] netlink_unicast+0x7f0/0x990 [ 135.593690][ T8580] ? __pfx_netlink_unicast+0x10/0x10 [ 135.598965][ T8580] ? __virt_addr_valid+0x183/0x530 [ 135.604069][ T8580] ? __check_object_size+0x49c/0x900 [ 135.609342][ T8580] ? bpf_lsm_netlink_send+0x9/0x10 [ 135.614448][ T8580] netlink_sendmsg+0x8e4/0xcb0 [ 135.619212][ T8580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.624491][ T8580] ? __import_iovec+0x536/0x820 [ 135.629330][ T8580] ? aa_sock_msg_perm+0x91/0x160 [ 135.634258][ T8580] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 135.639529][ T8580] ? security_socket_sendmsg+0x87/0xb0 [ 135.644979][ T8580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.650253][ T8580] __sock_sendmsg+0x221/0x270 [ 135.654923][ T8580] ____sys_sendmsg+0x525/0x7d0 [ 135.659681][ T8580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.664967][ T8580] __sys_sendmsg+0x2b0/0x3a0 [ 135.669550][ T8580] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.674647][ T8580] ? vfs_write+0x7c4/0xc90 [ 135.679094][ T8580] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.685418][ T8580] ? do_syscall_64+0x100/0x230 [ 135.690184][ T8580] ? do_syscall_64+0xb6/0x230 [ 135.694856][ T8580] do_syscall_64+0xf3/0x230 [ 135.699351][ T8580] ? clear_bhb_loop+0x35/0x90 [ 135.704021][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.709905][ T8580] RIP: 0033:0x7f5f64b75bd9 [ 135.714311][ T8580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.733905][ T8580] RSP: 002b:00007f5f65a33048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.742311][ T8580] RAX: ffffffffffffffda RBX: 00007f5f64d03f60 RCX: 00007f5f64b75bd9 [ 135.750270][ T8580] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000e [ 135.758230][ T8580] RBP: 00007f5f65a330a0 R08: 0000000000000000 R09: 0000000000000000 [ 135.766192][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.774153][ T8580] R13: 000000000000000b R14: 00007f5f64d03f60 R15: 00007ffeb38c9ae8 [ 135.782134][ T8580] [ 136.448663][ T8629] bridge0: port 3(batadv0) entered disabled state [ 136.482725][ T8629] batadv0: left allmulticast mode [ 136.489378][ T8629] batadv0: left promiscuous mode [ 136.502260][ T8629] bridge0: port 3(batadv0) entered disabled state [ 136.534031][ T8629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.552544][ T8629] team0: Port device batadv0 added [ 136.569311][ T8627] sch_tbf: burst 549 is lower than device veth1_to_bridge mtu (1514) ! [ 136.698367][ T8643] FAULT_INJECTION: forcing a failure. [ 136.698367][ T8643] name failslab, interval 1, probability 0, space 0, times 0 [ 136.728786][ T8643] CPU: 1 PID: 8643 Comm: syz.0.1173 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 136.738908][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 136.748972][ T8643] Call Trace: [ 136.752247][ T8643] [ 136.755168][ T8643] dump_stack_lvl+0x241/0x360 [ 136.759847][ T8643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.765036][ T8643] ? __pfx__printk+0x10/0x10 [ 136.769620][ T8643] ? __pfx___might_resched+0x10/0x10 [ 136.774898][ T8643] ? __kasan_kmalloc+0x98/0xb0 [ 136.779655][ T8643] ? __genradix_ptr_alloc+0x196/0x460 [ 136.785021][ T8643] should_fail_ex+0x3b0/0x4e0 [ 136.789697][ T8643] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 136.795594][ T8643] should_failslab+0x9/0x20 [ 136.800101][ T8643] kmalloc_trace_noprof+0x6c/0x2c0 [ 136.805210][ T8643] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 136.810931][ T8643] sctp_association_new+0x15aa/0x23f0 [ 136.816310][ T8643] sctp_connect_new_asoc+0x2d8/0x6c0 [ 136.821588][ T8643] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 136.827383][ T8643] ? sctp_sendmsg+0xbb9/0x3520 [ 136.832138][ T8643] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 136.837674][ T8643] ? security_sctp_bind_connect+0x90/0xb0 [ 136.843389][ T8643] sctp_sendmsg+0x219a/0x3520 [ 136.848069][ T8643] ? __pfx_sctp_sendmsg+0x10/0x10 [ 136.853090][ T8643] ? __pfx_aa_sk_perm+0x10/0x10 [ 136.857943][ T8643] ? inet_sendmsg+0x330/0x390 [ 136.862616][ T8643] __sock_sendmsg+0x1a6/0x270 [ 136.867289][ T8643] ____sys_sendmsg+0x525/0x7d0 [ 136.872049][ T8643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.877335][ T8643] __sys_sendmsg+0x2b0/0x3a0 [ 136.881914][ T8643] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.887012][ T8643] ? vfs_write+0x7c4/0xc90 [ 136.891455][ T8643] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.897776][ T8643] ? do_syscall_64+0x100/0x230 [ 136.902534][ T8643] ? do_syscall_64+0xb6/0x230 [ 136.907207][ T8643] do_syscall_64+0xf3/0x230 [ 136.911705][ T8643] ? clear_bhb_loop+0x35/0x90 [ 136.916375][ T8643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.922264][ T8643] RIP: 0033:0x7f0925575bd9 [ 136.926672][ T8643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.946267][ T8643] RSP: 002b:00007f0926372048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.954672][ T8643] RAX: ffffffffffffffda RBX: 00007f0925703f60 RCX: 00007f0925575bd9 [ 136.962635][ T8643] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 136.970594][ T8643] RBP: 00007f09263720a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.978552][ T8643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.986511][ T8643] R13: 000000000000000b R14: 00007f0925703f60 R15: 00007ffee4549d58 [ 136.994485][ T8643] [ 137.093158][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 137.291014][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 137.315231][ T8663] netlink: 'syz.4.1180': attribute type 25 has an invalid length. [ 137.344117][ T8663] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.353178][ T8663] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.362187][ T8663] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.371001][ T8663] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.389409][ T8659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1179'. [ 137.493847][ T8667] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1182'. [ 137.621099][ T8674] Cannot find add_set index 0 as target [ 137.677007][ T8677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1186'. [ 138.112139][ T8697] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1194'. [ 138.146437][ T8697] netlink: 'syz.3.1194': attribute type 2 has an invalid length. [ 138.510870][ T8716] bridge0: port 3(hsr0) entered blocking state [ 138.531370][ T8715] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 138.563313][ T8716] bridge0: port 3(hsr0) entered disabled state [ 138.583622][ T8716] hsr0: entered allmulticast mode [ 138.605655][ T8716] hsr_slave_0: entered allmulticast mode [ 138.628653][ T8716] hsr_slave_1: entered allmulticast mode [ 138.645236][ T8716] hsr0: entered promiscuous mode [ 138.662817][ T8716] bridge0: port 3(hsr0) entered blocking state [ 138.669183][ T8716] bridge0: port 3(hsr0) entered forwarding state [ 138.827941][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 140.257594][ T8789] __nla_validate_parse: 4 callbacks suppressed [ 140.257625][ T8789] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1233'. [ 140.332592][ T8789] caif0: entered allmulticast mode [ 140.335816][ T8797] netlink: 'syz.3.1233': attribute type 2 has an invalid length. [ 140.367635][ T8797] netlink: 'syz.3.1233': attribute type 2 has an invalid length. [ 140.998865][ T8845] vxcan1: tx address claim with different name [ 141.099567][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 141.161990][ T8854] FAULT_INJECTION: forcing a failure. [ 141.161990][ T8854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.179583][ T8854] CPU: 1 PID: 8854 Comm: syz.2.1256 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 141.189682][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.199749][ T8854] Call Trace: [ 141.203037][ T8854] [ 141.205977][ T8854] dump_stack_lvl+0x241/0x360 [ 141.210676][ T8854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.215894][ T8854] ? __pfx__printk+0x10/0x10 [ 141.220507][ T8854] ? __pfx_lock_release+0x10/0x10 [ 141.225561][ T8854] should_fail_ex+0x3b0/0x4e0 [ 141.230269][ T8854] _copy_from_iter+0x1f6/0x1960 [ 141.235141][ T8854] ? __virt_addr_valid+0x183/0x530 [ 141.240272][ T8854] ? __pfx_lock_release+0x10/0x10 [ 141.245837][ T8854] ? __alloc_skb+0x28f/0x440 [ 141.250446][ T8854] ? __pfx__copy_from_iter+0x10/0x10 [ 141.255748][ T8854] ? __virt_addr_valid+0x183/0x530 [ 141.260879][ T8854] ? __virt_addr_valid+0x183/0x530 [ 141.266009][ T8854] ? __virt_addr_valid+0x45f/0x530 [ 141.271139][ T8854] ? __check_object_size+0x49c/0x900 [ 141.276447][ T8854] netlink_sendmsg+0x73d/0xcb0 [ 141.281252][ T8854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.286558][ T8854] ? __import_iovec+0x536/0x820 [ 141.291420][ T8854] ? aa_sock_msg_perm+0x91/0x160 [ 141.296370][ T8854] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 141.301670][ T8854] ? security_socket_sendmsg+0x87/0xb0 [ 141.307149][ T8854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.312443][ T8854] __sock_sendmsg+0x221/0x270 [ 141.317123][ T8854] ____sys_sendmsg+0x525/0x7d0 [ 141.321895][ T8854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.327193][ T8854] __sys_sendmsg+0x2b0/0x3a0 [ 141.331790][ T8854] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.336894][ T8854] ? vfs_write+0x7c4/0xc90 [ 141.341336][ T8854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.347666][ T8854] ? do_syscall_64+0x100/0x230 [ 141.352437][ T8854] ? do_syscall_64+0xb6/0x230 [ 141.357121][ T8854] do_syscall_64+0xf3/0x230 [ 141.361650][ T8854] ? clear_bhb_loop+0x35/0x90 [ 141.366348][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.372249][ T8854] RIP: 0033:0x7f94d6b75bd9 [ 141.376664][ T8854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.396284][ T8854] RSP: 002b:00007f94d787e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.404729][ T8854] RAX: ffffffffffffffda RBX: 00007f94d6d03f60 RCX: 00007f94d6b75bd9 [ 141.412690][ T8854] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 141.420648][ T8854] RBP: 00007f94d787e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.428614][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.436597][ T8854] R13: 000000000000000b R14: 00007f94d6d03f60 R15: 00007ffcbf106e08 [ 141.444580][ T8854] [ 141.451319][ T8855] team_slave_1: mtu less than device minimum [ 141.537226][ T8872] FAULT_INJECTION: forcing a failure. [ 141.537226][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 141.549927][ T8872] CPU: 1 PID: 8872 Comm: syz.2.1261 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 141.559998][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.570067][ T8872] Call Trace: [ 141.573358][ T8872] [ 141.576303][ T8872] dump_stack_lvl+0x241/0x360 [ 141.581002][ T8872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.586219][ T8872] ? __pfx__printk+0x10/0x10 [ 141.590833][ T8872] ? lockdep_hardirqs_on+0x99/0x150 [ 141.596060][ T8872] should_fail_ex+0x3b0/0x4e0 [ 141.600766][ T8872] should_failslab+0x9/0x20 [ 141.605281][ T8872] __kmalloc_node_noprof+0xdf/0x440 [ 141.610496][ T8872] ? alloc_slab_obj_exts+0x3a/0xa0 [ 141.615634][ T8872] alloc_slab_obj_exts+0x3a/0xa0 [ 141.620588][ T8872] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 141.626518][ T8872] ? dst_alloc+0x12b/0x190 [ 141.630952][ T8872] kmem_cache_alloc_noprof+0x1de/0x2a0 [ 141.636431][ T8872] ? __pfx_ip6_dst_gc+0x10/0x10 [ 141.641301][ T8872] dst_alloc+0x12b/0x190 [ 141.645573][ T8872] ip6_pol_route+0xb87/0x15d0 [ 141.650277][ T8872] ? ip6_pol_route+0x198/0x15d0 [ 141.655150][ T8872] ? __pfx_ip6_pol_route+0x10/0x10 [ 141.660300][ T8872] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.666298][ T8872] fib6_rule_lookup+0x58c/0x790 [ 141.671170][ T8872] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 141.676808][ T8872] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 141.682187][ T8872] ? __inet6_lookup_established+0xd28/0xdc0 [ 141.688083][ T8872] ip6_route_input+0x859/0xd90 [ 141.692851][ T8872] ? __pfx_ip6_route_input+0x10/0x10 [ 141.698146][ T8872] ? tcp_v6_early_demux+0x519/0x8f0 [ 141.703342][ T8872] ? ip6_rcv_finish_core+0x20f/0x410 [ 141.708629][ T8872] ip6_rcv_finish+0x144/0x180 [ 141.713301][ T8872] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 141.718491][ T8872] NF_HOOK+0x3a4/0x450 [ 141.722557][ T8872] ? skb_orphan+0x4b/0xd0 [ 141.726880][ T8872] ? NF_HOOK+0x9a/0x450 [ 141.731026][ T8872] ? __pfx_NF_HOOK+0x10/0x10 [ 141.735609][ T8872] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 141.740804][ T8872] ? __pfx_ipv6_rcv+0x10/0x10 [ 141.745472][ T8872] __netif_receive_skb+0x1ea/0x650 [ 141.750576][ T8872] ? __pfx_lock_acquire+0x10/0x10 [ 141.755596][ T8872] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 141.761842][ T8872] ? __pfx___netif_receive_skb+0x10/0x10 [ 141.767463][ T8872] ? __kasan_slab_alloc+0x66/0x80 [ 141.772484][ T8872] ? read_tsc+0x9/0x20 [ 141.776547][ T8872] ? timekeeping_get_ns+0x2c0/0x420 [ 141.781746][ T8872] ? netif_receive_skb+0x131/0x890 [ 141.786847][ T8872] ? netif_receive_skb+0x131/0x890 [ 141.791949][ T8872] netif_receive_skb+0x1e8/0x890 [ 141.796878][ T8872] ? tun_rx_batched+0x160/0x8f0 [ 141.801722][ T8872] ? __pfx_netif_receive_skb+0x10/0x10 [ 141.807178][ T8872] ? tun_rx_batched+0x160/0x8f0 [ 141.812023][ T8872] tun_rx_batched+0x1b7/0x8f0 [ 141.816698][ T8872] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.823019][ T8872] ? __pfx_lock_acquire+0x10/0x10 [ 141.828032][ T8872] ? __pfx_tun_rx_batched+0x10/0x10 [ 141.833240][ T8872] tun_get_user+0x2f84/0x4720 [ 141.837912][ T8872] ? tun_get_user+0x2a78/0x4720 [ 141.842765][ T8872] ? __lock_acquire+0x1346/0x1fd0 [ 141.847784][ T8872] ? __pfx_tun_get_user+0x10/0x10 [ 141.852816][ T8872] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 141.858264][ T8872] ? tun_get+0x1e/0x2f0 [ 141.862414][ T8872] ? __pfx_lock_release+0x10/0x10 [ 141.867441][ T8872] ? tun_get+0x1e/0x2f0 [ 141.871587][ T8872] ? tun_get+0x27d/0x2f0 [ 141.875824][ T8872] tun_chr_write_iter+0x113/0x1f0 [ 141.880843][ T8872] vfs_write+0xa72/0xc90 [ 141.885082][ T8872] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 141.890624][ T8872] ? __pfx_vfs_write+0x10/0x10 [ 141.895416][ T8872] ksys_write+0x1a0/0x2c0 [ 141.899742][ T8872] ? __pfx_ksys_write+0x10/0x10 [ 141.904587][ T8872] ? do_syscall_64+0x100/0x230 [ 141.909346][ T8872] ? do_syscall_64+0xb6/0x230 [ 141.914017][ T8872] do_syscall_64+0xf3/0x230 [ 141.918519][ T8872] ? clear_bhb_loop+0x35/0x90 [ 141.923194][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.929077][ T8872] RIP: 0033:0x7f94d6b7475f [ 141.933483][ T8872] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 141.953101][ T8872] RSP: 002b:00007f94d787e010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 141.961512][ T8872] RAX: ffffffffffffffda RBX: 00007f94d6d03f60 RCX: 00007f94d6b7475f [ 141.969474][ T8872] RDX: 0000000000000062 RSI: 00000000200000c0 RDI: 00000000000000c8 [ 141.977440][ T8872] RBP: 00007f94d787e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.985423][ T8872] R10: 0000000000000062 R11: 0000000000000293 R12: 0000000000000001 [ 141.993382][ T8872] R13: 000000000000000b R14: 00007f94d6d03f60 R15: 00007ffcbf106e08 [ 142.001358][ T8872] [ 142.004651][ T8872] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 142.147414][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 142.185254][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 142.261902][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1267'. [ 142.346116][ T8887] netlink: 'syz.4.1267': attribute type 2 has an invalid length. [ 142.368585][ T8887] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1267'. [ 142.597329][ T8903] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 142.733750][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'. [ 143.196539][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1283'. [ 143.314417][ T8944] tipc: Started in network mode [ 143.341822][ T8944] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 143.353133][ T8944] tipc: Enabling of bearer rejected, failed to enable media [ 143.538448][ T8955] IPv6: Can't replace route, no match found [ 143.673037][ T8962] FAULT_INJECTION: forcing a failure. [ 143.673037][ T8962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.725909][ T8962] CPU: 0 PID: 8962 Comm: syz.1.1290 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 143.736025][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 143.746092][ T8962] Call Trace: [ 143.749379][ T8962] [ 143.752320][ T8962] dump_stack_lvl+0x241/0x360 [ 143.757021][ T8962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.762238][ T8962] ? __pfx__printk+0x10/0x10 [ 143.766857][ T8962] should_fail_ex+0x3b0/0x4e0 [ 143.771558][ T8962] _copy_from_user+0x2f/0xe0 [ 143.776170][ T8962] bpf_test_init+0x11f/0x180 [ 143.780783][ T8962] bpf_prog_test_run_skb+0x2bb/0x1820 [ 143.786175][ T8962] ? __pfx_lock_release+0x10/0x10 [ 143.791233][ T8962] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 143.797064][ T8962] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 143.802887][ T8962] bpf_prog_test_run+0x33a/0x3b0 [ 143.807846][ T8962] __sys_bpf+0x48d/0x810 [ 143.812113][ T8962] ? __pfx___sys_bpf+0x10/0x10 [ 143.816910][ T8962] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.822908][ T8962] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.829253][ T8962] ? do_syscall_64+0x100/0x230 [ 143.834039][ T8962] __x64_sys_bpf+0x7c/0x90 [ 143.838477][ T8962] do_syscall_64+0xf3/0x230 [ 143.842995][ T8962] ? clear_bhb_loop+0x35/0x90 [ 143.847693][ T8962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.853607][ T8962] RIP: 0033:0x7fd7f2175bd9 [ 143.858036][ T8962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.877652][ T8962] RSP: 002b:00007fd7f2e98048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.886083][ T8962] RAX: ffffffffffffffda RBX: 00007fd7f2303f60 RCX: 00007fd7f2175bd9 [ 143.894074][ T8962] RDX: 0000000000000050 RSI: 00000000200004c0 RDI: 000000000000000a [ 143.902063][ T8962] RBP: 00007fd7f2e980a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.910044][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.918021][ T8962] R13: 000000000000000b R14: 00007fd7f2303f60 R15: 00007fff9bdb8f68 [ 143.925999][ T8962] [ 144.206687][ T8978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1297'. [ 145.569852][ T9054] IPv6: Can't replace route, no match found [ 145.717313][ T9068] sctp: [Deprecated]: syz.2.1324 (pid 9068) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.717313][ T9068] Use struct sctp_sack_info instead [ 145.742099][ T9073] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 145.844645][ T9073] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.853747][ T9074] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 145.896981][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 145.922331][ T9077] netlink: 'syz.2.1324': attribute type 15 has an invalid length. [ 145.942724][ T9077] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.952233][ T9077] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.961651][ T9077] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.971040][ T9077] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.980385][ T9077] vxlan0: entered promiscuous mode [ 146.942685][ T9131] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 146.968805][ T9131] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 147.561824][ T9159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1353'. [ 147.760756][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 148.832206][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1378'. [ 148.851877][ T9223] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1379'. [ 148.873667][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 149.548802][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1393'. [ 149.558180][ T9265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1393'. [ 149.575486][ T9265] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 149.587634][ T9265] syz_tun: entered promiscuous mode [ 149.593343][ T9265] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 149.601897][ T9265] Cannot create hsr debugfs directory [ 149.680170][ T9272] netlink: 'syz.3.1394': attribute type 2 has an invalid length. [ 149.696629][ T9272] netlink: 'syz.3.1394': attribute type 2 has an invalid length. [ 149.741989][ T9278] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1397'. [ 149.887796][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 149.962139][ T9287] team0: Mode changed to "activebackup" [ 150.826952][ T9346] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 151.100117][ T9310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.244012][ T9367] wg1: entered promiscuous mode [ 151.582669][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.601818][ T9385] team0: Port device bond0 added [ 151.653480][ T9385] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 151.951838][ T9409] __nla_validate_parse: 2 callbacks suppressed [ 151.951856][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 152.078357][ T9417] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 152.321524][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1455'. [ 152.365276][ T9434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1456'. [ 152.378169][ T9438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.391484][ T9438] netlink: 'syz.4.1457': attribute type 3 has an invalid length. [ 152.402475][ T9438] netlink: 168364 bytes leftover after parsing attributes in process `syz.4.1457'. [ 152.444663][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 153.322683][ T9484] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 50966 - 0 [ 153.333197][ T9484] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 50966 - 0 [ 153.348045][ T9484] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 50966 - 0 [ 153.357067][ T9484] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 50966 - 0 [ 153.367217][ T9484] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 48967 - 0 [ 153.376313][ T9484] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 48967 - 0 [ 153.385178][ T9484] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 48967 - 0 [ 153.395759][ T9484] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 48967 - 0 [ 153.404846][ T9484] geneve2: entered promiscuous mode [ 153.410507][ T9484] geneve2: entered allmulticast mode [ 153.569822][ T9497] FAULT_INJECTION: forcing a failure. [ 153.569822][ T9497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.583231][ T9497] CPU: 0 PID: 9497 Comm: syz.0.1472 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 153.593319][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 153.603385][ T9497] Call Trace: [ 153.606681][ T9497] [ 153.609623][ T9497] dump_stack_lvl+0x241/0x360 [ 153.614321][ T9497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.619544][ T9497] ? __pfx__printk+0x10/0x10 [ 153.624125][ T9497] ? snprintf+0xda/0x120 [ 153.628357][ T9497] should_fail_ex+0x3b0/0x4e0 [ 153.633027][ T9497] _copy_to_user+0x2f/0xb0 [ 153.637448][ T9497] simple_read_from_buffer+0xca/0x150 [ 153.642828][ T9497] proc_fail_nth_read+0x1e9/0x250 [ 153.647846][ T9497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.653380][ T9497] ? rw_verify_area+0x520/0x6b0 [ 153.658217][ T9497] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.663759][ T9497] vfs_read+0x204/0xbc0 [ 153.667930][ T9497] ? __pfx_lock_release+0x10/0x10 [ 153.672966][ T9497] ? __pfx_vfs_read+0x10/0x10 [ 153.677655][ T9497] ? __fget_files+0x29/0x470 [ 153.682235][ T9497] ? __fget_files+0x3f6/0x470 [ 153.686927][ T9497] ksys_read+0x1a0/0x2c0 [ 153.691194][ T9497] ? __pfx_ksys_read+0x10/0x10 [ 153.695965][ T9497] ? do_syscall_64+0x100/0x230 [ 153.700717][ T9497] ? do_syscall_64+0xb6/0x230 [ 153.705383][ T9497] do_syscall_64+0xf3/0x230 [ 153.709876][ T9497] ? clear_bhb_loop+0x35/0x90 [ 153.714547][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.720430][ T9497] RIP: 0033:0x7f09255746bc [ 153.724858][ T9497] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 153.744464][ T9497] RSP: 002b:00007f0926372040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.752871][ T9497] RAX: ffffffffffffffda RBX: 00007f0925703f60 RCX: 00007f09255746bc [ 153.760829][ T9497] RDX: 000000000000000f RSI: 00007f09263720b0 RDI: 000000000000000b [ 153.768785][ T9497] RBP: 00007f09263720a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.776751][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.784725][ T9497] R13: 000000000000000b R14: 00007f0925703f60 R15: 00007ffee4549d58 [ 153.792695][ T9497] [ 153.915011][ T9505] netlink: 'syz.4.1476': attribute type 32 has an invalid length. [ 154.202372][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 154.507709][ T9536] syzkaller1: entered promiscuous mode [ 154.513233][ T9536] syzkaller1: entered allmulticast mode [ 154.925770][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 154.964194][ T9558] tipc: Cannot configure node identity twice [ 155.021339][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 155.103395][ T9572] netlink: 'syz.1.1499': attribute type 8 has an invalid length. [ 155.282141][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1501'. [ 155.339010][ T9585] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.608022][ T9602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1510'. [ 156.470736][ T9646] xt_hashlimit: max too large, truncated to 1048576 [ 156.902686][ T9677] IPv6: NLM_F_REPLACE set, but no existing node found! [ 156.981477][ T9681] __nla_validate_parse: 5 callbacks suppressed [ 156.981494][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 157.626531][ T9726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.654198][ T9727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.708037][ T9726] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 157.739794][ T9726] team0: Cannot enslave team device to itself [ 158.333050][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1575'. [ 158.358481][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 158.432458][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1578'. [ 158.632976][ T9794] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 158.656235][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.716884][ T9796] netlink: 'syz.1.1585': attribute type 10 has an invalid length. [ 158.724739][ T9796] team0: Cannot enslave team device to itself [ 158.776516][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 158.976589][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 159.193551][ T9836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1599'. [ 159.285000][ T9842] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1602'. [ 159.328189][ T9842] vxlan1: entered promiscuous mode [ 159.335706][ T9842] vxlan1: entered allmulticast mode [ 159.364552][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1600'. [ 159.622371][ T9862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 159.654470][ T9866] bridge0: entered promiscuous mode [ 159.663934][ T9866] bridge0: left promiscuous mode [ 159.961618][ T9884] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.083025][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 160.093120][ T9893] team0: Port device batadv1 added [ 160.733143][ T9914] openvswitch: netlink: Flow actions attr not present in new flow. [ 160.752195][ T9882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.985726][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.317512][ T9939] FAULT_INJECTION: forcing a failure. [ 161.317512][ T9939] name failslab, interval 1, probability 0, space 0, times 0 [ 161.336352][ T9939] CPU: 1 PID: 9939 Comm: syz.1.1638 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 161.346446][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 161.356509][ T9939] Call Trace: [ 161.359797][ T9939] [ 161.362734][ T9939] dump_stack_lvl+0x241/0x360 [ 161.367436][ T9939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.372652][ T9939] ? __pfx__printk+0x10/0x10 [ 161.377279][ T9939] should_fail_ex+0x3b0/0x4e0 [ 161.381983][ T9939] ? sctp_add_bind_addr+0x89/0x3a0 [ 161.387121][ T9939] should_failslab+0x9/0x20 [ 161.391633][ T9939] kmalloc_trace_noprof+0x6c/0x2c0 [ 161.396764][ T9939] sctp_add_bind_addr+0x89/0x3a0 [ 161.401725][ T9939] sctp_copy_local_addr_list+0x311/0x500 [ 161.407380][ T9939] ? sctp_copy_local_addr_list+0xab/0x500 [ 161.413119][ T9939] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 161.419293][ T9939] ? sctp_v6_is_any+0x60/0x70 [ 161.423998][ T9939] sctp_bind_addr_copy+0xad/0x3b0 [ 161.429043][ T9939] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 161.435400][ T9939] sctp_connect_new_asoc+0x2f3/0x6c0 [ 161.440707][ T9939] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 161.446531][ T9939] ? sctp_sendmsg+0xbb9/0x3520 [ 161.451316][ T9939] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 161.456876][ T9939] ? security_sctp_bind_connect+0x90/0xb0 [ 161.462621][ T9939] sctp_sendmsg+0x219a/0x3520 [ 161.467331][ T9939] ? __pfx_sctp_sendmsg+0x10/0x10 [ 161.472377][ T9939] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.477256][ T9939] ? inet_sendmsg+0x330/0x390 [ 161.481953][ T9939] __sock_sendmsg+0x1a6/0x270 [ 161.486650][ T9939] ____sys_sendmsg+0x525/0x7d0 [ 161.491409][ T9939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.496707][ T9939] __sys_sendmmsg+0x3b2/0x740 [ 161.501395][ T9939] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.506602][ T9939] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 161.512497][ T9939] ? ksys_write+0x23e/0x2c0 [ 161.517010][ T9939] ? __pfx_lock_release+0x10/0x10 [ 161.522027][ T9939] ? vfs_write+0x7c4/0xc90 [ 161.526436][ T9939] ? __mutex_unlock_slowpath+0x21d/0x750 [ 161.532058][ T9939] ? __pfx_vfs_write+0x10/0x10 [ 161.536832][ T9939] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 161.542811][ T9939] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.549145][ T9939] ? do_syscall_64+0x100/0x230 [ 161.553902][ T9939] __x64_sys_sendmmsg+0xa0/0xb0 [ 161.558744][ T9939] do_syscall_64+0xf3/0x230 [ 161.563240][ T9939] ? clear_bhb_loop+0x35/0x90 [ 161.567911][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.573806][ T9939] RIP: 0033:0x7fd7f2175bd9 [ 161.578226][ T9939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.597820][ T9939] RSP: 002b:00007fd7f2e98048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.606252][ T9939] RAX: ffffffffffffffda RBX: 00007fd7f2303f60 RCX: 00007fd7f2175bd9 [ 161.614227][ T9939] RDX: 0000000000000001 RSI: 0000000020003c40 RDI: 0000000000000003 [ 161.622195][ T9939] RBP: 00007fd7f2e980a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.630167][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.638126][ T9939] R13: 000000000000000b R14: 00007fd7f2303f60 R15: 00007fff9bdb8f68 [ 161.646100][ T9939] [ 161.757967][ T9990] netlink: 'syz.1.1643': attribute type 10 has an invalid length. [ 161.801700][ T9990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.840239][ T9990] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 162.587556][T10031] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 162.613766][T10029] __nla_validate_parse: 1 callbacks suppressed [ 162.613783][T10029] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1656'. [ 162.785445][T10040] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.1660'. [ 162.822405][T10001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.834315][T10040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1660'. [ 163.057145][T10052] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1664'. [ 163.543297][T10074] geneve2: entered promiscuous mode [ 163.564256][T10074] geneve2: entered allmulticast mode [ 163.618281][T10081] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1675'. [ 163.639571][T10081] FAULT_INJECTION: forcing a failure. [ 163.639571][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 163.665156][T10084] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1676'. [ 163.675028][T10081] CPU: 1 PID: 10081 Comm: syz.1.1675 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 163.685205][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 163.695270][T10081] Call Trace: [ 163.698558][T10081] [ 163.701500][T10081] dump_stack_lvl+0x241/0x360 [ 163.706195][T10081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.711412][T10081] ? __pfx__printk+0x10/0x10 [ 163.716027][T10081] ? __lock_acquire+0x1346/0x1fd0 [ 163.721065][T10081] should_fail_ex+0x3b0/0x4e0 [ 163.725759][T10081] ? __alloc_skb+0x1c3/0x440 [ 163.730365][T10081] should_failslab+0x9/0x20 [ 163.734880][T10081] kmem_cache_alloc_node_noprof+0x71/0x320 [ 163.740707][T10081] __alloc_skb+0x1c3/0x440 [ 163.745144][T10081] ? __pfx___alloc_skb+0x10/0x10 [ 163.750098][T10081] ? km_report+0x180/0x240 [ 163.754526][T10081] ? __pfx_lock_release+0x10/0x10 [ 163.759552][T10081] xfrm_alloc_compat+0x1b6/0x1680 [ 163.764576][T10081] ? xfrm_get_translator+0x19/0x240 [ 163.769770][T10081] dump_one_policy+0x9e1/0xfe0 [ 163.774531][T10081] ? __pfx_dump_one_policy+0x10/0x10 [ 163.779818][T10081] xfrm_get_policy+0x71a/0x1140 [ 163.784669][T10081] ? __pfx_xfrm_get_policy+0x10/0x10 [ 163.789964][T10081] ? __nla_parse+0x40/0x60 [ 163.794375][T10081] xfrm_user_rcv_msg+0x75d/0xa80 [ 163.799310][T10081] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 163.804785][T10081] ? __mutex_trylock_common+0x183/0x2e0 [ 163.810324][T10081] ? __pfx___might_resched+0x10/0x10 [ 163.815611][T10081] netlink_rcv_skb+0x1e3/0x430 [ 163.820366][T10081] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 163.825816][T10081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.831112][T10081] xfrm_netlink_rcv+0x79/0x90 [ 163.835779][T10081] netlink_unicast+0x7f0/0x990 [ 163.840537][T10081] ? __pfx_netlink_unicast+0x10/0x10 [ 163.845811][T10081] ? __virt_addr_valid+0x183/0x530 [ 163.850915][T10081] ? __check_object_size+0x49c/0x900 [ 163.856191][T10081] ? bpf_lsm_netlink_send+0x9/0x10 [ 163.861295][T10081] netlink_sendmsg+0x8e4/0xcb0 [ 163.866060][T10081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.871336][T10081] ? __import_iovec+0x536/0x820 [ 163.876177][T10081] ? aa_sock_msg_perm+0x91/0x160 [ 163.881104][T10081] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 163.886377][T10081] ? security_socket_sendmsg+0x87/0xb0 [ 163.891827][T10081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.897099][T10081] __sock_sendmsg+0x221/0x270 [ 163.901769][T10081] ____sys_sendmsg+0x525/0x7d0 [ 163.906529][T10081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.911813][T10081] __sys_sendmsg+0x2b0/0x3a0 [ 163.916395][T10081] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.921490][T10081] ? vfs_write+0x7c4/0xc90 [ 163.925935][T10081] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.932252][T10081] ? do_syscall_64+0x100/0x230 [ 163.937010][T10081] ? do_syscall_64+0xb6/0x230 [ 163.941680][T10081] do_syscall_64+0xf3/0x230 [ 163.946178][T10081] ? clear_bhb_loop+0x35/0x90 [ 163.950850][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.956735][T10081] RIP: 0033:0x7fd7f2175bd9 [ 163.961139][T10081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.980731][T10081] RSP: 002b:00007fd7f2e98048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.989136][T10081] RAX: ffffffffffffffda RBX: 00007fd7f2303f60 RCX: 00007fd7f2175bd9 [ 163.997098][T10081] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 164.005056][T10081] RBP: 00007fd7f2e980a0 R08: 0000000000000000 R09: 0000000000000000 [ 164.013014][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.020973][T10081] R13: 000000000000000b R14: 00007fd7f2303f60 R15: 00007fff9bdb8f68 [ 164.028943][T10081] [ 164.343178][T10101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.363355][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'. [ 164.690143][T10126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1685'. [ 165.390528][T10153] netlink: 'syz.3.1697': attribute type 29 has an invalid length. [ 165.422401][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 165.768949][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.785407][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.796153][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.807563][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.819723][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.831138][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.855252][T10171] ipt_REJECT: TCP_RESET invalid for non-tcp [ 165.869584][ T9967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.043952][ T9967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.173669][ T9967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.204779][T10192] netlink: 'syz.3.1709': attribute type 29 has an invalid length. [ 166.232222][T10192] netlink: 'syz.3.1709': attribute type 29 has an invalid length. [ 166.263575][ T9967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.287833][T10192] netlink: 'syz.3.1709': attribute type 29 has an invalid length. [ 166.304769][T10194] raw_sendmsg: syz.2.1710 forgot to set AF_INET. Fix it! [ 166.529702][T10169] chnl_net:caif_netlink_parms(): no params data found [ 166.562053][T10204] FAULT_INJECTION: forcing a failure. [ 166.562053][T10204] name failslab, interval 1, probability 0, space 0, times 0 [ 166.579119][T10204] CPU: 1 PID: 10204 Comm: syz.4.1712 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 166.589297][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 166.599360][T10204] Call Trace: [ 166.602648][T10204] [ 166.605588][T10204] dump_stack_lvl+0x241/0x360 [ 166.610289][T10204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.615504][T10204] ? __pfx__printk+0x10/0x10 [ 166.620110][T10204] ? __pfx___might_resched+0x10/0x10 [ 166.625419][T10204] should_fail_ex+0x3b0/0x4e0 [ 166.630119][T10204] ? skb_clone+0x20c/0x390 [ 166.634545][T10204] should_failslab+0x9/0x20 [ 166.639060][T10204] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 166.644451][T10204] skb_clone+0x20c/0x390 [ 166.648705][T10204] nfnetlink_rcv+0x575/0x2a90 [ 166.653404][T10204] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 166.659126][T10204] ? __dev_queue_xmit+0x1763/0x3e90 [ 166.664318][T10204] ? kasan_save_track+0x51/0x80 [ 166.669167][T10204] ? do_syscall_64+0xf3/0x230 [ 166.673834][T10204] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 166.678956][T10204] ? ref_tracker_free+0x643/0x7e0 [ 166.683979][T10204] ? __asan_memcpy+0x40/0x70 [ 166.688559][T10204] ? __pfx_ref_tracker_free+0x10/0x10 [ 166.693932][T10204] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.699125][T10204] ? skb_clone+0x240/0x390 [ 166.703530][T10204] ? __pfx_lock_release+0x10/0x10 [ 166.708543][T10204] ? __netlink_deliver_tap+0x77e/0x7c0 [ 166.713999][T10204] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.719190][T10204] netlink_unicast+0x7f0/0x990 [ 166.723950][T10204] ? __pfx_netlink_unicast+0x10/0x10 [ 166.729225][T10204] ? __virt_addr_valid+0x183/0x530 [ 166.734328][T10204] ? __check_object_size+0x49c/0x900 [ 166.739600][T10204] ? bpf_lsm_netlink_send+0x9/0x10 [ 166.744705][T10204] netlink_sendmsg+0x8e4/0xcb0 [ 166.749470][T10204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.754745][T10204] ? __import_iovec+0x536/0x820 [ 166.759582][T10204] ? aa_sock_msg_perm+0x91/0x160 [ 166.764509][T10204] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 166.769779][T10204] ? security_socket_sendmsg+0x87/0xb0 [ 166.775228][T10204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.780500][T10204] __sock_sendmsg+0x221/0x270 [ 166.785170][T10204] ____sys_sendmsg+0x525/0x7d0 [ 166.789928][T10204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.795214][T10204] __sys_sendmsg+0x2b0/0x3a0 [ 166.799795][T10204] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.804890][T10204] ? vfs_write+0x7c4/0xc90 [ 166.809328][T10204] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.815650][T10204] ? do_syscall_64+0x100/0x230 [ 166.820411][T10204] ? do_syscall_64+0xb6/0x230 [ 166.825083][T10204] do_syscall_64+0xf3/0x230 [ 166.829576][T10204] ? clear_bhb_loop+0x35/0x90 [ 166.834246][T10204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.840130][T10204] RIP: 0033:0x7f5f64b75bd9 [ 166.844533][T10204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.864125][T10204] RSP: 002b:00007f5f65a33048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.872531][T10204] RAX: ffffffffffffffda RBX: 00007f5f64d03f60 RCX: 00007f5f64b75bd9 [ 166.880490][T10204] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 166.888450][T10204] RBP: 00007f5f65a330a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.896409][T10204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.904365][T10204] R13: 000000000000000b R14: 00007f5f64d03f60 R15: 00007ffeb38c9ae8 [ 166.912338][T10204] [ 166.984131][ T9967] bridge_slave_0: left allmulticast mode [ 166.993162][ T9967] bridge_slave_0: left promiscuous mode [ 167.005012][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.063886][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 167.156498][T10223] xt_ecn: cannot match TCP bits for non-tcp packets [ 167.466780][ T9967] team0: Port device bond0 removed [ 167.479852][ T9967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.491682][ T9967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.503181][ T9967] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 167.514244][ T9967] bond0 (unregistering): Released all slaves [ 167.680350][ T9967] tipc: Left network mode [ 167.774954][T10169] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.798802][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.827948][T10169] bridge_slave_0: entered allmulticast mode [ 167.846162][T10169] bridge_slave_0: entered promiscuous mode [ 167.946567][ T5096] Bluetooth: hci2: command tx timeout [ 167.954891][T10169] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.976563][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.985341][T10169] bridge_slave_1: entered allmulticast mode [ 168.000344][T10169] bridge_slave_1: entered promiscuous mode [ 168.019496][T10254] __nla_validate_parse: 1 callbacks suppressed [ 168.019511][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 168.934496][T10169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.975393][T10286] xt_recent: Unsupported userspace flags (00000042) [ 168.976183][T10169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.141890][T10169] team0: Port device team_slave_0 added [ 169.178622][T10292] bond0: entered promiscuous mode [ 169.183707][T10292] bond_slave_1: entered promiscuous mode [ 169.192245][T10292] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 169.200815][T10292] macvlan3: entered promiscuous mode [ 169.214428][T10292] vlan1: entered promiscuous mode [ 169.222790][T10292] bond0: left promiscuous mode [ 169.235704][T10292] bond_slave_1: left promiscuous mode [ 169.244627][T10292] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 169.253320][T10292] macvlan3: left promiscuous mode [ 169.269157][T10292] vlan1: left promiscuous mode [ 169.290486][T10169] team0: Port device team_slave_1 added [ 169.304028][ T9967] hsr_slave_0: left promiscuous mode [ 169.311214][ T9967] hsr_slave_1: left promiscuous mode [ 169.318166][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.326095][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.334242][ T9967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.346402][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.399467][ T9967] veth1_vlan: left promiscuous mode [ 169.415759][ T9967] veth0_vlan: left promiscuous mode [ 169.572239][T10310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.022343][ T9967] team0 (unregistering): Port device team_slave_1 removed [ 170.035910][ T5096] Bluetooth: hci2: command tx timeout [ 170.061420][ T9967] team0 (unregistering): Port device team_slave_0 removed [ 170.295842][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1739'. [ 170.428200][T10169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.448315][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.480028][T10169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.493201][T10169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.501630][T10169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.528072][T10169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.690712][T10169] hsr_slave_0: entered promiscuous mode [ 170.711418][T10169] hsr_slave_1: entered promiscuous mode [ 170.727914][T10169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.738953][T10343] netlink: 'syz.0.1751': attribute type 3 has an invalid length. [ 170.749092][T10169] Cannot create hsr debugfs directory [ 170.754806][T10343] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1751'. [ 170.792367][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1751'. [ 170.838794][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 171.025005][ T9967] IPVS: stop unused estimator thread 0... [ 171.277168][T10366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.385039][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 171.405463][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 171.596628][T10390] netlink: 'syz.0.1771': attribute type 3 has an invalid length. [ 171.608869][T10169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.611604][T10390] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1771'. [ 171.636304][T10169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.640387][T10390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'. [ 171.658832][T10169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.668662][T10169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.779947][T10169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.803834][T10169] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.822978][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.830229][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.882380][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.889593][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.037527][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 172.107628][ T5096] Bluetooth: hci2: command tx timeout [ 172.171341][T10415] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 172.321768][T10169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.437654][T10169] veth0_vlan: entered promiscuous mode [ 172.486464][T10169] veth1_vlan: entered promiscuous mode [ 172.552162][T10169] veth0_macvtap: entered promiscuous mode [ 172.569695][T10169] veth1_macvtap: entered promiscuous mode [ 172.610064][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.627916][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.643113][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.658226][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.674919][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.692811][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.704674][T10169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.742317][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.762301][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.782124][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.804496][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.825890][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.838211][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.848349][T10169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.859172][T10169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.871501][T10169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.891653][T10169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.913572][T10169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.924210][T10169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.949152][T10169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.154206][ T9967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.185264][ T9967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.254421][T10461] "syz.2.1799" (10461) uses obsolete ecb(arc4) skcipher [ 173.278966][ T9968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.298846][T10481] __nla_validate_parse: 1 callbacks suppressed [ 173.298864][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 173.313893][ T9968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.660383][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 173.737624][T10512] Dead loop on virtual device ip6_vti0, fix it urgently! [ 173.771796][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 173.862109][T10521] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 173.980846][T10517] syzkaller0: entered promiscuous mode [ 173.995793][T10517] syzkaller0: entered allmulticast mode [ 174.191572][T10526] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1823'. [ 174.201418][ T5096] Bluetooth: hci2: command tx timeout [ 174.378751][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.394265][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.402658][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.412730][ T5100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.428460][ T5100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 174.443853][ T5100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.499803][T10537] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 176.045341][T10560] netlink: 'syz.1.1835': attribute type 11 has an invalid length. [ 176.251816][T10571] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1839'. [ 176.349934][T10529] chnl_net:caif_netlink_parms(): no params data found [ 176.507543][ T5100] Bluetooth: hci5: command tx timeout [ 176.619966][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.629367][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.637061][T10529] bridge_slave_0: entered allmulticast mode [ 176.644402][T10529] bridge_slave_0: entered promiscuous mode [ 176.656407][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.663680][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.671880][T10529] bridge_slave_1: entered allmulticast mode [ 176.679443][T10529] bridge_slave_1: entered promiscuous mode [ 176.743788][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.758210][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.821319][T10529] team0: Port device team_slave_0 added [ 176.877843][T10529] team0: Port device team_slave_1 added [ 176.973792][T10529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.982099][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.989643][T10613] netlink: 'syz.3.1847': attribute type 11 has an invalid length. [ 177.058044][T10529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.075833][T10529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.082972][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.148549][T10529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.255968][T10626] netlink: 'syz.2.1851': attribute type 9 has an invalid length. [ 177.281433][T10626] netlink: 'syz.2.1851': attribute type 7 has an invalid length. [ 177.295742][T10626] netlink: 'syz.2.1851': attribute type 8 has an invalid length. [ 177.323137][T10529] hsr_slave_0: entered promiscuous mode [ 177.343682][T10529] hsr_slave_1: entered promiscuous mode [ 177.354488][T10529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.373987][T10529] Cannot create hsr debugfs directory [ 177.380952][T10631] netlink: 'syz.4.1854': attribute type 2 has an invalid length. [ 177.428303][T10631] IPVS: set_ctl: invalid protocol: 211 224.0.0.2:0 [ 177.815111][T10529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.942124][T10529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.032428][T10529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.067666][T10663] netlink: 'syz.2.1862': attribute type 11 has an invalid length. [ 178.107400][T10529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.262567][T10529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.282871][T10529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.300687][T10529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.321026][T10529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.587250][ T5100] Bluetooth: hci5: command tx timeout [ 178.609514][T10529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.636616][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 178.661608][ T9] IPVS: starting estimator thread 0... [ 178.687936][T10529] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.750215][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.757472][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.786378][T10687] IPVS: using max 22 ests per chain, 52800 per kthread [ 178.787106][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.800494][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.300393][T10529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.310020][T10712] ipt_REJECT: TCP_RESET invalid for non-tcp [ 179.436521][T10529] veth0_vlan: entered promiscuous mode [ 179.467433][T10529] veth1_vlan: entered promiscuous mode [ 179.553593][T10529] veth0_macvtap: entered promiscuous mode [ 179.590237][T10529] veth1_macvtap: entered promiscuous mode [ 179.671138][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.704289][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.731778][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.753621][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.808680][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.828382][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.846935][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.864372][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.878115][T10529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.899223][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.911113][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.940580][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.977909][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.004181][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.039635][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.055583][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.067234][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.079507][T10529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.090197][T10529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.103482][T10529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.161244][T10529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.168436][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1884'. [ 180.180483][T10529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.198582][T10529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.207682][T10529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.321229][T10741] batman_adv: batadv0: Adding interface: ipvlan2 [ 180.333367][T10741] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.370791][T10741] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 180.562233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.583527][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.643813][ T9960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.660058][ T9960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.680476][ T5107] Bluetooth: hci5: command tx timeout [ 180.733889][T10760] netlink: 'syz.2.1894': attribute type 4 has an invalid length. [ 180.775362][T10760] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1894'. [ 180.813769][T10760] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 180.876390][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 180.969865][ T783] IPVS: starting estimator thread 0... [ 181.009907][T10769] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1898'. [ 181.075848][T10774] IPVS: using max 19 ests per chain, 45600 per kthread [ 181.226986][ T5107] Bluetooth: hci1: command 0x0406 tx timeout [ 181.233602][ T5095] Bluetooth: hci4: command 0x0406 tx timeout [ 181.270550][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 181.367948][T10798] sch_tbf: burst 0 is lower than device veth0_macvtap mtu (1514) ! [ 182.191233][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'. [ 182.477277][T10852] FAULT_INJECTION: forcing a failure. [ 182.477277][T10852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.521043][T10852] CPU: 1 PID: 10852 Comm: syz.3.1923 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 182.528779][T10856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1927'. [ 182.531220][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 182.531237][T10852] Call Trace: [ 182.531245][T10852] [ 182.531254][T10852] dump_stack_lvl+0x241/0x360 [ 182.561051][T10852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.566252][T10852] ? __pfx__printk+0x10/0x10 [ 182.570843][T10852] ? __pfx_lock_release+0x10/0x10 [ 182.575867][T10852] should_fail_ex+0x3b0/0x4e0 [ 182.580545][T10852] _copy_from_iter+0x1f6/0x1960 [ 182.585383][T10852] ? __virt_addr_valid+0x183/0x530 [ 182.590486][T10852] ? __pfx_lock_release+0x10/0x10 [ 182.595507][T10852] ? __alloc_skb+0x28f/0x440 [ 182.600101][T10852] ? __pfx__copy_from_iter+0x10/0x10 [ 182.605377][T10852] ? __virt_addr_valid+0x183/0x530 [ 182.610481][T10852] ? __virt_addr_valid+0x183/0x530 [ 182.615588][T10852] ? __virt_addr_valid+0x45f/0x530 [ 182.620697][T10852] ? __check_object_size+0x49c/0x900 [ 182.625974][T10852] netlink_sendmsg+0x73d/0xcb0 [ 182.630738][T10852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.636016][T10852] ? __import_iovec+0x536/0x820 [ 182.640857][T10852] ? aa_sock_msg_perm+0x91/0x160 [ 182.645786][T10852] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 182.651057][T10852] ? security_socket_sendmsg+0x87/0xb0 [ 182.656510][T10852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.661783][T10852] __sock_sendmsg+0x221/0x270 [ 182.666458][T10852] ____sys_sendmsg+0x525/0x7d0 [ 182.671216][T10852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.676502][T10852] __sys_sendmsg+0x2b0/0x3a0 [ 182.681083][T10852] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.686179][T10852] ? vfs_write+0x7c4/0xc90 [ 182.690618][T10852] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.696934][T10852] ? do_syscall_64+0x100/0x230 [ 182.701692][T10852] ? do_syscall_64+0xb6/0x230 [ 182.706360][T10852] do_syscall_64+0xf3/0x230 [ 182.710852][T10852] ? clear_bhb_loop+0x35/0x90 [ 182.715526][T10852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.721417][T10852] RIP: 0033:0x7f3bd1175bd9 [ 182.725821][T10852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.745418][T10852] RSP: 002b:00007f3bd1f3e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.753831][T10852] RAX: ffffffffffffffda RBX: 00007f3bd1304038 RCX: 00007f3bd1175bd9 [ 182.761795][T10852] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 182.769760][T10852] RBP: 00007f3bd1f3e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.777720][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.785678][T10852] R13: 000000000000006e R14: 00007f3bd1304038 R15: 00007fff056095d8 [ 182.793650][T10852] [ 182.810747][T10858] netlink: 'syz.1.1925': attribute type 2 has an invalid length. [ 182.822622][ T5096] Bluetooth: hci5: command tx timeout [ 182.950295][T10870] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 183.222925][T10889] ebt_limit: overflow, try lower: 0/0 [ 183.238022][T10888] netlink: 'syz.4.1936': attribute type 10 has an invalid length. [ 183.378995][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1939'. [ 183.434659][T10881] syz.3.1934 (10881) used greatest stack depth: 18256 bytes left [ 183.477480][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1943'. [ 183.574771][T10911] ipt_REJECT: TCP_RESET invalid for non-tcp [ 183.626724][T10913] netlink: 'syz.1.1946': attribute type 11 has an invalid length. [ 183.877582][T10931] netlink: 'syz.0.1953': attribute type 12 has an invalid length. [ 183.923057][T10931] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1953'. [ 183.967962][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 183.970600][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 184.042726][T10938] ip6gretap0: entered promiscuous mode [ 184.069256][T10938] macvtap1: entered promiscuous mode [ 184.089056][T10938] macvtap1: entered allmulticast mode [ 184.120975][T10938] ip6gretap0: entered allmulticast mode [ 184.146559][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 184.159988][T10942] ip6gretap0: left allmulticast mode [ 184.168241][T10942] ip6gretap0: left promiscuous mode [ 184.220073][T10942] macvtap1: left promiscuous mode [ 184.226133][T10942] macvtap1: left allmulticast mode [ 184.388322][T10950] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 184.410431][T10948] ipt_REJECT: TCP_RESET invalid for non-tcp [ 184.490903][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1959'. [ 184.615408][T10962] netlink: 'syz.3.1961': attribute type 11 has an invalid length. [ 184.853408][T10980] netlink: 'syz.1.1968': attribute type 32 has an invalid length. [ 185.060936][T10997] netlink: 'syz.2.1974': attribute type 9 has an invalid length. [ 185.077578][T10997] netlink: 'syz.2.1974': attribute type 7 has an invalid length. [ 185.088584][T10997] netlink: 'syz.2.1974': attribute type 8 has an invalid length. [ 185.243911][T11011] netlink: 'syz.3.1976': attribute type 11 has an invalid length. [ 185.261081][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1973'. [ 186.173369][T11062] netlink: 'syz.1.1996': attribute type 29 has an invalid length. [ 186.199534][T11062] netlink: 'syz.1.1996': attribute type 29 has an invalid length. [ 186.208433][T11062] netlink: 'syz.1.1996': attribute type 29 has an invalid length. [ 186.256641][T11066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1995'. [ 186.438384][T11074] netlink: 'syz.1.2000': attribute type 11 has an invalid length. [ 186.643841][T11089] ipt_REJECT: TCP_RESET invalid for non-tcp [ 187.067146][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'. [ 187.418710][T11123] ipt_REJECT: TCP_RESET invalid for non-tcp [ 187.819764][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 187.928645][T11159] ipt_REJECT: TCP_RESET invalid for non-tcp [ 187.937101][T11157] FAULT_INJECTION: forcing a failure. [ 187.937101][T11157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.972379][T11157] CPU: 0 PID: 11157 Comm: syz.1.2031 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 187.982570][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 187.992638][T11157] Call Trace: [ 187.995929][T11157] [ 187.998876][T11157] dump_stack_lvl+0x241/0x360 [ 188.003578][T11157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.008799][T11157] ? __pfx__printk+0x10/0x10 [ 188.013405][T11157] ? __pfx_lock_release+0x10/0x10 [ 188.018440][T11157] should_fail_ex+0x3b0/0x4e0 [ 188.023120][T11157] _copy_from_user+0x2f/0xe0 [ 188.027706][T11157] copy_msghdr_from_user+0xae/0x680 [ 188.032898][T11157] ? __pfx___might_resched+0x10/0x10 [ 188.038176][T11157] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.043978][T11157] ? __might_fault+0xaa/0x120 [ 188.048645][T11157] do_recvmmsg+0x40f/0xae0 [ 188.053053][T11157] ? __pfx_lock_release+0x10/0x10 [ 188.058069][T11157] ? __pfx_do_recvmmsg+0x10/0x10 [ 188.063009][T11157] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 188.068892][T11157] ? ksys_write+0x23e/0x2c0 [ 188.073387][T11157] ? __pfx_lock_release+0x10/0x10 [ 188.078405][T11157] ? vfs_write+0x7c4/0xc90 [ 188.082818][T11157] ? __mutex_unlock_slowpath+0x21d/0x750 [ 188.088448][T11157] ? __fget_files+0x3f6/0x470 [ 188.093129][T11157] __x64_sys_recvmmsg+0x199/0x250 [ 188.098147][T11157] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 188.103684][T11157] ? do_syscall_64+0x100/0x230 [ 188.108448][T11157] ? do_syscall_64+0xb6/0x230 [ 188.113119][T11157] do_syscall_64+0xf3/0x230 [ 188.117613][T11157] ? clear_bhb_loop+0x35/0x90 [ 188.122299][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.128203][T11157] RIP: 0033:0x7fedce175bd9 [ 188.132611][T11157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.152209][T11157] RSP: 002b:00007fedceeb2048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 188.160617][T11157] RAX: ffffffffffffffda RBX: 00007fedce303f60 RCX: 00007fedce175bd9 [ 188.168582][T11157] RDX: 000000000000045b RSI: 0000000020008880 RDI: 0000000000000003 [ 188.176544][T11157] RBP: 00007fedceeb20a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.184506][T11157] R10: 0000000044000102 R11: 0000000000000246 R12: 0000000000000002 [ 188.192484][T11157] R13: 000000000000000b R14: 00007fedce303f60 R15: 00007ffc52515e28 [ 188.200474][T11157] [ 188.361296][T11175] FAULT_INJECTION: forcing a failure. [ 188.361296][T11175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.403802][T11175] CPU: 1 PID: 11175 Comm: syz.2.2038 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 188.414007][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 188.424075][T11175] Call Trace: [ 188.427366][T11175] [ 188.430307][T11175] dump_stack_lvl+0x241/0x360 [ 188.430878][T11180] syzkaller0: entered promiscuous mode [ 188.434991][T11175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.435021][T11175] ? __pfx__printk+0x10/0x10 [ 188.450223][T11175] ? snprintf+0xda/0x120 [ 188.454465][T11175] should_fail_ex+0x3b0/0x4e0 [ 188.459141][T11175] _copy_to_user+0x2f/0xb0 [ 188.463552][T11175] simple_read_from_buffer+0xca/0x150 [ 188.468918][T11175] proc_fail_nth_read+0x1e9/0x250 [ 188.473935][T11175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.479473][T11175] ? rw_verify_area+0x520/0x6b0 [ 188.484313][T11175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.489849][T11175] vfs_read+0x204/0xbc0 [ 188.493995][T11175] ? __pfx_lock_release+0x10/0x10 [ 188.499016][T11175] ? __pfx_vfs_read+0x10/0x10 [ 188.503686][T11175] ? bpf_prog_test_run+0x352/0x3b0 [ 188.508801][T11175] ? __fget_files+0x29/0x470 [ 188.513385][T11175] ? __fget_files+0x3f6/0x470 [ 188.518069][T11175] ksys_read+0x1a0/0x2c0 [ 188.522307][T11175] ? __pfx_ksys_read+0x10/0x10 [ 188.527076][T11175] ? do_syscall_64+0x100/0x230 [ 188.531833][T11175] ? do_syscall_64+0xb6/0x230 [ 188.536500][T11175] do_syscall_64+0xf3/0x230 [ 188.540993][T11175] ? clear_bhb_loop+0x35/0x90 [ 188.545667][T11175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.551548][T11175] RIP: 0033:0x7f94d6b746bc [ 188.555952][T11175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 188.575551][T11175] RSP: 002b:00007f94d787e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.583961][T11175] RAX: ffffffffffffffda RBX: 00007f94d6d03f60 RCX: 00007f94d6b746bc [ 188.591922][T11175] RDX: 000000000000000f RSI: 00007f94d787e0b0 RDI: 0000000000000005 [ 188.599885][T11175] RBP: 00007f94d787e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.607845][T11175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.615810][T11175] R13: 000000000000000b R14: 00007f94d6d03f60 R15: 00007ffcbf106e08 [ 188.623784][T11175] [ 188.723778][T11180] syzkaller0 (unregistering): left promiscuous mode [ 189.361969][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 189.435129][T11232] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2066'. [ 189.445815][T11232] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 189.454192][T11232] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.503124][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 189.552126][T11233] validate_nla: 1 callbacks suppressed [ 189.552144][T11233] netlink: 'syz.2.2065': attribute type 1 has an invalid length. [ 189.579597][T11233] netlink: 'syz.2.2065': attribute type 2 has an invalid length. [ 189.614790][T11233] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2065'. [ 189.894992][T11249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2073'. [ 190.064658][T11266] nftables ruleset with unbound chain [ 190.081432][T11255] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.091613][T11266] netlink: 'syz.2.2080': attribute type 5 has an invalid length. [ 190.153774][T11255] tun0: tun_chr_ioctl cmd 2147767519 [ 190.176269][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2075'. [ 190.815183][T11312] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 190.834801][T11312] skb len=10621 headroom=232 headlen=10621 tailroom=21595 [ 190.834801][T11312] mac=(256,-24) mac_len=24 net=(232,20) trans=252 [ 190.834801][T11312] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 190.834801][T11312] csum(0x350e0100 start=256 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 190.834801][T11312] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 190.834801][T11312] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 190.834801][T11312] encapsulation=1 inner(proto=0x0008, mac=256, net=256, trans=296) [ 190.882348][T11314] sctp: [Deprecated]: syz.3.2099 (pid 11314) Use of int in max_burst socket option. [ 190.882348][T11314] Use struct sctp_assoc_value instead [ 190.884826][T11312] dev name=ip6gre0 feat=0x00000006401d7869 [ 190.905598][T11312] skb linear: 00000000: 45 02 29 7d 41 d9 00 00 0f 11 a0 69 ac 14 14 14 [ 190.914120][T11312] skb linear: 00000010: e0 00 00 03 00 00 08 00 aa 0b 29 65 10 82 0c 52 [ 190.922669][T11312] skb linear: 00000020: 0f 06 32 d7 81 d5 37 46 5c a1 dd 6c 5e e9 e4 fd [ 190.931210][T11312] skb linear: 00000030: fe 4b 88 94 30 eb b5 29 05 e3 6e 03 c1 eb f4 04 [ 190.939768][T11312] skb linear: 00000040: 77 38 f3 f9 b4 9b 1c 59 88 25 f8 14 fa 00 00 00 [ 190.948309][T11312] skb linear: 00000050: 25 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.956877][T11312] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 190.965387][T11312] skb linear: 00000070: 00 00 00 00 00 00 aa aa aa aa aa aa ff ff ff ff [ 190.968736][T11316] FAULT_INJECTION: forcing a failure. [ 190.968736][T11316] name failslab, interval 1, probability 0, space 0, times 0 [ 190.973917][T11312] skb linear: 00000080: ff ff 86 dd 60 0a 84 35 00 20 06 00 fe 80 00 00 [ 190.973936][T11312] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 bb fe 80 00 00 [ 190.973950][T11312] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 aa 00 00 4e 22 [ 190.973963][T11312] skb linear: 000000b0: 44 43 42 41 44 43 42 41 80 02 00 00 90 78 00 00 [ 190.988265][T11316] CPU: 0 PID: 11316 Comm: syz.0.2100 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 190.995044][T11312] skb linear: 000000c0: 08 0a 00 00 7c ca b6 ec 2f 1c 7b a8 89 9a ac 6f [ 191.003514][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 191.003528][T11316] Call Trace: [ 191.003537][T11316] [ 191.003545][T11316] dump_stack_lvl+0x241/0x360 [ 191.003576][T11316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.012068][T11312] skb linear: 000000d0: 00 06 00 00 00 00 00 00 84 f3 95 c1 f8 c5 0c 81 [ 191.020512][T11316] ? __pfx__printk+0x10/0x10 [ 191.020539][T11316] ? ref_tracker_alloc+0x332/0x490 [ 191.030678][T11312] skb linear: 000000e0: bc 45 d3 b8 a0 c1 7b 3b ab e4 00 00 00 00 00 00 [ 191.039128][T11316] should_fail_ex+0x3b0/0x4e0 [ 191.039160][T11316] ? skb_clone+0x20c/0x390 [ 191.049213][T11312] skb linear: 000000f0: 00 00 00 00 00 00 18 00 00 00 00 00 00 00 00 00 [ 191.052441][T11316] should_failslab+0x9/0x20 [ 191.055350][T11312] skb linear: 00000100: 00 00 00 00 00 00 18 11 00 00 09 00 00 00 00 00 [ 191.059995][T11316] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 191.060021][T11316] skb_clone+0x20c/0x390 [ 191.065192][T11312] skb linear: 00000110: 00 00 00 0a 00 00 b7 08 00 00 00 00 00 00 7b 8a [ 191.073674][T11316] __netlink_deliver_tap+0x3cc/0x7c0 [ 191.073719][T11316] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.078311][T11312] skb linear: 00000120: f8 ff 00 00 00 00 bf a2 00 00 00 00 00 00 07 02 [ 191.083365][T11316] netlink_deliver_tap+0x19d/0x1b0 [ 191.091866][T11312] ------------[ cut here ]------------ [ 191.096486][T11316] netlink_unicast+0x7be/0x990 [ 191.096518][T11316] ? __pfx_netlink_unicast+0x10/0x10 [ 191.100904][T11312] offset+2 (13608) > skb_headlen() (10621) [ 191.109367][T11316] ? __virt_addr_valid+0x183/0x530 [ 191.109397][T11316] ? __check_object_size+0x49c/0x900 [ 191.114333][T11312] WARNING: CPU: 1 PID: 11312 at net/core/dev.c:3336 skb_checksum_help+0x68f/0x730 [ 191.122333][T11316] ? bpf_lsm_netlink_send+0x9/0x10 [ 191.122364][T11316] netlink_sendmsg+0x8e4/0xcb0 [ 191.127730][T11312] Modules linked in: [ 191.131934][T11316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.140442][T11312] [ 191.145675][T11316] ? __import_iovec+0x536/0x820 [ 191.145700][T11316] ? aa_sock_msg_perm+0x91/0x160 [ 191.145721][T11316] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 191.150890][T11312] CPU: 1 PID: 11312 Comm: syz.2.2098 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 191.159357][T11316] ? security_socket_sendmsg+0x87/0xb0 [ 191.159384][T11316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.164471][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 191.169896][T11316] __sock_sendmsg+0x221/0x270 [ 191.169926][T11316] ____sys_sendmsg+0x525/0x7d0 [ 191.174654][T11312] RIP: 0010:skb_checksum_help+0x68f/0x730 [ 191.179917][T11316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.179954][T11316] __sys_sendmsg+0x2b0/0x3a0 [ 191.185732][T11312] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 89 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 c0 cc c5 8c 4c 89 f6 89 da e8 22 8c ff f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 cf fc ff ff 48 8b 0c 24 80 e1 07 80 [ 191.190794][T11316] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.196116][T11312] RSP: 0018:ffffc90003216d68 EFLAGS: 00010246 [ 191.205225][T11316] ? vfs_write+0x7c4/0xc90 [ 191.210354][T11312] [ 191.215101][T11316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.218969][T11312] RAX: a98878d0ea5fba00 RBX: 000000000000297d RCX: 0000000000040000 [ 191.224189][T11316] ? do_syscall_64+0x100/0x230 [ 191.226517][T11312] RDX: ffffc90009e73000 RSI: 000000000003ffff RDI: 0000000000040000 [ 191.231314][T11316] ? do_syscall_64+0xb6/0x230 [ 191.236248][T11312] RBP: dffffc0000000000 R08: ffffffff815857b2 R09: 1ffffffff1f5c5c5 [ 191.241477][T11316] do_syscall_64+0xf3/0x230 [ 191.251623][T11312] R10: dffffc0000000000 R11: fffffbfff1f5c5c6 R12: 1ffff1100f392776 [ 191.257022][T11316] ? clear_bhb_loop+0x35/0x90 [ 191.257051][T11316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.262296][T11312] R13: 0000000000003526 R14: 0000000000003528 R15: ffff888079c93b40 [ 191.272328][T11316] RIP: 0033:0x7ff83a775bd9 [ 191.272349][T11316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.272366][T11316] RSP: 002b:00007ff83b57e048 EFLAGS: 00000246 [ 191.277030][T11312] FS: 00007f94d787e6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 191.281737][T11316] ORIG_RAX: 000000000000002e [ 191.287449][T11312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.292676][T11316] RAX: ffffffffffffffda RBX: 00007ff83a903f60 RCX: 00007ff83a775bd9 [ 191.297284][T11312] CR2: 000000002000e000 CR3: 0000000062b00000 CR4: 00000000003506f0 [ 191.316837][T11316] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 191.316852][T11316] RBP: 00007ff83b57e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.316865][T11316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.321949][T11312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.327990][T11316] R13: 000000000000000b R14: 00007ff83a903f60 R15: 00007ffc73ac7e18 [ 191.328030][T11316] [ 191.514897][T11312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.522918][T11312] Call Trace: [ 191.526231][T11312] [ 191.529158][T11312] ? __warn+0x163/0x4e0 [ 191.533309][T11312] ? skb_checksum_help+0x68f/0x730 [ 191.538459][T11312] ? report_bug+0x2b3/0x500 [ 191.542972][T11312] ? skb_checksum_help+0x68f/0x730 [ 191.548134][T11312] ? handle_bug+0x3e/0x70 [ 191.552483][T11312] ? exc_invalid_op+0x1a/0x50 [ 191.557211][T11312] ? asm_exc_invalid_op+0x1a/0x20 [ 191.562253][T11312] ? __warn_printk+0x292/0x360 [ 191.567055][T11312] ? skb_checksum_help+0x68f/0x730 [ 191.572182][T11312] ? skb_checksum_help+0x68e/0x730 [ 191.577343][T11312] ip_do_fragment+0x20d/0x1b30 [ 191.582132][T11312] ? nf_hook+0x396/0x450 [ 191.586429][T11312] ? nf_hook+0x9e/0x450 [ 191.590600][T11312] ? __pfx_ip_finish_output2+0x10/0x10 [ 191.596105][T11312] ? __pfx_nf_hook+0x10/0x10 [ 191.600712][T11312] ? __pfx_ip_do_fragment+0x10/0x10 [ 191.605959][T11312] ? ip_fast_csum+0x1f0/0x2b0 [ 191.610646][T11312] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 191.615499][T11312] ? __ip_finish_output+0x1fd/0x400 [ 191.620751][T11312] ? ip_fragment+0x9a/0x220 [ 191.625261][T11312] iptunnel_xmit+0x540/0x9b0 [ 191.629908][T11312] ip_tunnel_xmit+0x2119/0x2950 [ 191.634783][T11312] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 191.640009][T11312] ? gre_build_header+0x341/0xb30 [ 191.645066][T11312] ? __pfx_gre_build_header+0x10/0x10 [ 191.650519][T11312] ? iptunnel_handle_offloads+0x2b2/0x650 [ 191.656300][T11312] ipgre_xmit+0x958/0xd40 [ 191.660663][T11312] ? __pfx_ipgre_xmit+0x10/0x10 [ 191.665569][T11312] ? dev_queue_xmit_nit+0x2b/0xc10 [ 191.670722][T11312] dev_hard_start_xmit+0x27a/0x7e0 [ 191.675905][T11312] __dev_queue_xmit+0x1b63/0x3e90 [ 191.680952][T11312] ? __dev_queue_xmit+0x2da/0x3e90 [ 191.686092][T11312] ? _copy_from_iter+0x575/0x1960 [ 191.691129][T11312] ? __pfx___dev_queue_xmit+0x10/0x10 [ 191.696555][T11312] ? skb_partial_csum_set+0x105/0x350 [ 191.701945][T11312] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 191.707518][T11312] ? packet_parse_headers+0x7bd/0xad0 [ 191.712913][T11312] ? packet_xmit+0x68/0x330 [ 191.717453][T11312] packet_sendmsg+0x4bc0/0x6710 [ 191.722332][T11312] ? __pfx___might_resched+0x10/0x10 [ 191.727665][T11312] ? aa_sk_perm+0x967/0xab0 [ 191.732190][T11312] ? __pfx_packet_sendmsg+0x10/0x10 [ 191.737422][T11312] ? __import_iovec+0x361/0x820 [ 191.742307][T11312] ? aa_sock_msg_perm+0x91/0x160 [ 191.747335][T11312] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 191.752654][T11312] ? security_socket_sendmsg+0x87/0xb0 [ 191.758149][T11312] ? __pfx_packet_sendmsg+0x10/0x10 [ 191.763358][T11312] __sock_sendmsg+0x221/0x270 [ 191.768069][T11312] ____sys_sendmsg+0x525/0x7d0 [ 191.772848][T11312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.778207][T11312] __sys_sendmsg+0x2b0/0x3a0 [ 191.782808][T11312] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.787952][T11312] ? anon_inode_getfd+0x1ca/0x1e0 [ 191.792992][T11312] ? security_bpf+0x87/0xb0 [ 191.797553][T11312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.803895][T11312] ? do_syscall_64+0x100/0x230 [ 191.808692][T11312] ? do_syscall_64+0xb6/0x230 [ 191.813380][T11312] do_syscall_64+0xf3/0x230 [ 191.817914][T11312] ? clear_bhb_loop+0x35/0x90 [ 191.822605][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.828528][T11312] RIP: 0033:0x7f94d6b75bd9 [ 191.832948][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.852618][T11312] RSP: 002b:00007f94d787e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.861065][T11312] RAX: ffffffffffffffda RBX: 00007f94d6d03f60 RCX: 00007f94d6b75bd9 [ 191.869064][T11312] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 191.877060][T11312] RBP: 00007f94d6be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 191.885023][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.893031][T11312] R13: 000000000000000b R14: 00007f94d6d03f60 R15: 00007ffcbf106e08 [ 191.901040][T11312] [ 191.904050][T11312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.911325][T11312] CPU: 1 PID: 11312 Comm: syz.2.2098 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 191.921453][T11312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 191.931491][T11312] Call Trace: [ 191.934754][T11312] [ 191.937671][T11312] dump_stack_lvl+0x241/0x360 [ 191.942342][T11312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.947539][T11312] ? __pfx__printk+0x10/0x10 [ 191.952138][T11312] ? vscnprintf+0x5d/0x90 [ 191.956463][T11312] panic+0x349/0x860 [ 191.960341][T11312] ? __warn+0x172/0x4e0 [ 191.964481][T11312] ? __pfx_panic+0x10/0x10 [ 191.968890][T11312] __warn+0x346/0x4e0 [ 191.972859][T11312] ? skb_checksum_help+0x68f/0x730 [ 191.977964][T11312] report_bug+0x2b3/0x500 [ 191.982278][T11312] ? skb_checksum_help+0x68f/0x730 [ 191.987384][T11312] handle_bug+0x3e/0x70 [ 191.991526][T11312] exc_invalid_op+0x1a/0x50 [ 191.996025][T11312] asm_exc_invalid_op+0x1a/0x20 [ 192.000882][T11312] RIP: 0010:skb_checksum_help+0x68f/0x730 [ 192.006591][T11312] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 89 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 c0 cc c5 8c 4c 89 f6 89 da e8 22 8c ff f7 90 <0f> 0b 90 90 bb ea ff ff ff e9 cf fc ff ff 48 8b 0c 24 80 e1 07 80 [ 192.026190][T11312] RSP: 0018:ffffc90003216d68 EFLAGS: 00010246 [ 192.032261][T11312] RAX: a98878d0ea5fba00 RBX: 000000000000297d RCX: 0000000000040000 [ 192.040216][T11312] RDX: ffffc90009e73000 RSI: 000000000003ffff RDI: 0000000000040000 [ 192.048172][T11312] RBP: dffffc0000000000 R08: ffffffff815857b2 R09: 1ffffffff1f5c5c5 [ 192.056127][T11312] R10: dffffc0000000000 R11: fffffbfff1f5c5c6 R12: 1ffff1100f392776 [ 192.064082][T11312] R13: 0000000000003526 R14: 0000000000003528 R15: ffff888079c93b40 [ 192.072042][T11312] ? __warn_printk+0x292/0x360 [ 192.076801][T11312] ? skb_checksum_help+0x68e/0x730 [ 192.081902][T11312] ip_do_fragment+0x20d/0x1b30 [ 192.086653][T11312] ? nf_hook+0x396/0x450 [ 192.090884][T11312] ? nf_hook+0x9e/0x450 [ 192.095023][T11312] ? __pfx_ip_finish_output2+0x10/0x10 [ 192.100467][T11312] ? __pfx_nf_hook+0x10/0x10 [ 192.105038][T11312] ? __pfx_ip_do_fragment+0x10/0x10 [ 192.110235][T11312] ? ip_fast_csum+0x1f0/0x2b0 [ 192.114921][T11312] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 192.119757][T11312] ? __ip_finish_output+0x1fd/0x400 [ 192.124951][T11312] ? ip_fragment+0x9a/0x220 [ 192.129453][T11312] iptunnel_xmit+0x540/0x9b0 [ 192.134038][T11312] ip_tunnel_xmit+0x2119/0x2950 [ 192.138891][T11312] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 192.144071][T11312] ? gre_build_header+0x341/0xb30 [ 192.149087][T11312] ? __pfx_gre_build_header+0x10/0x10 [ 192.154446][T11312] ? iptunnel_handle_offloads+0x2b2/0x650 [ 192.160157][T11312] ipgre_xmit+0x958/0xd40 [ 192.164481][T11312] ? __pfx_ipgre_xmit+0x10/0x10 [ 192.169315][T11312] ? dev_queue_xmit_nit+0x2b/0xc10 [ 192.174418][T11312] dev_hard_start_xmit+0x27a/0x7e0 [ 192.179524][T11312] __dev_queue_xmit+0x1b63/0x3e90 [ 192.184540][T11312] ? __dev_queue_xmit+0x2da/0x3e90 [ 192.189631][T11312] ? _copy_from_iter+0x575/0x1960 [ 192.194645][T11312] ? __pfx___dev_queue_xmit+0x10/0x10 [ 192.200004][T11312] ? skb_partial_csum_set+0x105/0x350 [ 192.205368][T11312] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 192.210894][T11312] ? packet_parse_headers+0x7bd/0xad0 [ 192.216283][T11312] ? packet_xmit+0x68/0x330 [ 192.220827][T11312] packet_sendmsg+0x4bc0/0x6710 [ 192.225691][T11312] ? __pfx___might_resched+0x10/0x10 [ 192.230975][T11312] ? aa_sk_perm+0x967/0xab0 [ 192.235471][T11312] ? __pfx_packet_sendmsg+0x10/0x10 [ 192.240661][T11312] ? __import_iovec+0x361/0x820 [ 192.245499][T11312] ? aa_sock_msg_perm+0x91/0x160 [ 192.250438][T11312] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 192.255708][T11312] ? security_socket_sendmsg+0x87/0xb0 [ 192.261155][T11312] ? __pfx_packet_sendmsg+0x10/0x10 [ 192.266337][T11312] __sock_sendmsg+0x221/0x270 [ 192.271016][T11312] ____sys_sendmsg+0x525/0x7d0 [ 192.275772][T11312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.281063][T11312] __sys_sendmsg+0x2b0/0x3a0 [ 192.285659][T11312] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.290754][T11312] ? anon_inode_getfd+0x1ca/0x1e0 [ 192.295772][T11312] ? security_bpf+0x87/0xb0 [ 192.300275][T11312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.306588][T11312] ? do_syscall_64+0x100/0x230 [ 192.311335][T11312] ? do_syscall_64+0xb6/0x230 [ 192.315997][T11312] do_syscall_64+0xf3/0x230 [ 192.320483][T11312] ? clear_bhb_loop+0x35/0x90 [ 192.325145][T11312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.331026][T11312] RIP: 0033:0x7f94d6b75bd9 [ 192.335424][T11312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.355012][T11312] RSP: 002b:00007f94d787e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.363412][T11312] RAX: ffffffffffffffda RBX: 00007f94d6d03f60 RCX: 00007f94d6b75bd9 [ 192.371373][T11312] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 192.379334][T11312] RBP: 00007f94d6be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 192.387288][T11312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.395252][T11312] R13: 000000000000000b R14: 00007f94d6d03f60 R15: 00007ffcbf106e08 [ 192.403233][T11312] [ 192.406464][T11312] Kernel Offset: disabled [ 192.410809][T11312] Rebooting in 86400 seconds..