last executing test programs: 4.490073931s ago: executing program 2 (id=3418): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x108) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x0, 0x0}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700810025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) 2.648171834s ago: executing program 3 (id=3426): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000008006700000008000300", @ANYRES32=r3], 0x30}}, 0x0) 2.549885509s ago: executing program 0 (id=3428): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x18}, 0x0) 2.436585693s ago: executing program 3 (id=3429): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f669"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) (fail_nth: 5) 2.391608505s ago: executing program 2 (id=3430): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000580)={0x7, 0x8001, 0x200, 0x400, 0x0, 0x7ff, 0x23, 0x5}, 0x20) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040006}, 0x8800) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r3, 0x8, 0x9, 0xb}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r5 = socket(0x9, 0x5, 0xdfe0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x67, 0x96, 0x5, 0x8, 0x5, 0x81}) sendmsg$can_j1939(r3, &(0x7f0000005cc0)={&(0x7f00000009c0), 0x18, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000300)={0x1d, r8, 0x0, {0x0, 0xf0}}, 0x18) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000440)={'bond_slave_0\x00', 0x4}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000002c0)="0000ffff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) 1.756565304s ago: executing program 0 (id=3432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x35}, 0x14}}, 0x0) 1.723640789s ago: executing program 0 (id=3433): r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x378}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000844}, 0x4000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000600)={&(0x7f0000000400), 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x68, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x401}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xa43}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4e}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000018}, 0x2000c0c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r3, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) 1.703094164s ago: executing program 4 (id=3434): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000100018485"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@fwd={0x7}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @var={0x4, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x2e]}}, 0x0, 0x49}, 0x20) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x3, 0x0, @empty}}}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010000400000000000000a00000000000000030000000000000000000000000000000001000000000000"], 0x30}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10012, r4, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f0000000040)) 1.582083785s ago: executing program 1 (id=3435): ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000600000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 1.504499843s ago: executing program 3 (id=3436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0xfc}, 0x1c) 1.485600618s ago: executing program 4 (id=3437): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000300)="11a9922ab2760b3c2f446dee852ee8fd905d1a3e76bf2ca252463ed5bea76da0cceac462f36da3e1af402883c2487146469032776d36150e74195ce9974d073771f3cc95287689b18ef6cbaea42127ce7a07ed847375f3d7dd64d153eb9aa30a86d2874138f7d5e28903a7967ccd8562d4c74463c5303379b0e94456fad1965d99d8d0f883d71b8ae8bef18fcbba338144adb564f468095effb0824522c122bfc31ac68fa49f9a6eef51b12b65a8bd56282645e812366a91972d175e8307ff1360a95836527d1ca6") setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) ioctl(r0, 0x5, &(0x7f0000000400)="97e9b25d21ac659a71b0d20276ca5d4d1e0b05afa0f4e0ff89b31e574edc83543a88f5d6930da6c5d8783288c257bb7388b16505e0efd1664651553c909920e1f2d970330acdae9abf1fbe416af1d8") setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000180)=0x62) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1a000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.467408128s ago: executing program 0 (id=3438): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000000c0)) socket(0x2a, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2711, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x2e0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@rand_addr, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1\x00', 'veth0_to_batadv\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @dev, @broadcast}}}, {{@arp={@broadcast, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan0\x00', 'sit0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000002600000006000000000000000700000078f08ec5e70fed7d001239a3f1a1f4b5b68b390e6710e7e5efbe44d8615b89110f91b0f6120a584b3785527ab277cc87926255eecd38143be0219da7d3f9021922e3c2808a", @ANYRES32=0x0], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80ffffff}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r4 = socket(0x23, 0x5, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62) unshare(0x400) listen(r5, 0x0) ppoll(&(0x7f00000002c0)=[{r5}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) getsockopt$nfc_llcp(r4, 0x113, 0x0, 0x0, 0x692d84746b19a7c5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x58dcb539068814c0}]}]}, 0x28}}, 0x0) 1.38045421s ago: executing program 1 (id=3439): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140600fe8000000000000000004142430000", @ANYRES32=0x41424344, @ANYBLOB], 0x0) 1.378451192s ago: executing program 3 (id=3440): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002300000038002f800c00020000000000000000002800038008000100000000001c00038006000300000000000600010000000000080002000200000008000300", @ANYRES32=r3], 0x54}}, 0x0) 1.319762072s ago: executing program 1 (id=3441): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa2"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) (fail_nth: 12) 1.279299879s ago: executing program 2 (id=3442): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001f80)={'veth1_macvtap\x00', {0x2, 0x4e22, @empty}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.224575495s ago: executing program 3 (id=3443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000006000000000000000000a20000000000a01010000000000000000052c00000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a320000000008000a4000000003280004800800024000000000080001"], 0xc0}}, 0x0) 1.2241401s ago: executing program 0 (id=3444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000009c0)={0x0, 0x1a, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r1, 0x31f, 0x26}, 0x14}}, 0x0) 880.448369ms ago: executing program 4 (id=3445): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0xa4, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xffffffffffffff38}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a"]}]}, 0xa4}], 0x1}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x68, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4b, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x68}}, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x502, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4cc, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979"}, {0x0, 0x8, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c5"}, {0x0, 0x2, "d429145c793e823829b4376332b2c9"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, 0x0, 0x0) sendfile(r11, r2, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000340)={{r1}, "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"}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) 766.3349ms ago: executing program 0 (id=3446): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'netdevsim0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000030500000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006873720024000280050006000000000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0500070001000000"], 0x50}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r9, 0x1, 0x70bd2b}, 0x1c}}, 0x20000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf669ebecab19b3fd50fec5eade4bb02aa4f152b8f66388c86b074dc9bc42751ece81bdfdf8ffffffffffffff547930a8ab50e020a1a45f8d67000000000000f669011b4511ccb706ceac9856ba"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x3f02, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x56, 0x0, &(0x7f0000000400)="41936e8fba25a96e9d97fc735e1ac1dc15932f18a13e3f26f91742116819dfa54e6b3c96baff030000b8109416401bef564ff6f15b0000000000000000022dec04024d9c6f4c9249b4031bebd8351258806090b32927", &(0x7f0000000000), 0x3, 0x0, 0x1}, 0x50) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20000000) (async) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r11) 696.225119ms ago: executing program 3 (id=3447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x74) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x43) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="3800000018000501000000003f0000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="0600150006000000ffff16800800010000000000ffd850bd9d1c1e9e0c56fcfd014242f77032dd7af31a91215ae9e44d31cdd4da6e981b26ef1952f200037c71f63d55c8e3878f6f9c38f0fab5ac21f2bd3d7a172e9df6bc"], 0x38}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="34000000130a010200000000000000000100000008000340000056f56a6f3300040900020073c98b271858ced6c3000e0073797a8e00000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @broadcast}, &(0x7f00000004c0)=0xc) sendto$packet(r1, &(0x7f0000000340)="bdc1bfd0f82f0941b5b5d48cb5555c14de9cb2eda43089a0392a6fefa804f41cdf672cc31502c73b5ee139a01d2c28665badb4e47bffd7a487523b5ed3a5640f4ad488898969c3d9aa2fa950fd19381b2933d2170a42b8e60d7d9b7bca3fa1f080f86c523bf21dbb3713c30ee4aaa9923439cbf9657e106522f5d7392b572fded69b2938a8e47a860dc93540df993d37cef26d0b94a391682407870a8b6e099816df3e8f0432e7f7ec", 0xa9, 0x20040005, &(0x7f0000000500)={0x11, 0xd, r11, 0x1, 0x67, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getqdisc={0x24, 0x26, 0x400, 0x703d28, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff2, 0xe}, {0xfffa, 0x9}, {0xffe0, 0xfff2}}}, 0x24}}, 0x2000c010) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) 696.042053ms ago: executing program 2 (id=3448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) 602.929439ms ago: executing program 2 (id=3449): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a0017000000000400140010003f0001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000b00)="1667dbca63e151d2a42d020949b4d03863a664469252181d", 0x18}], 0x1}}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 569.427496ms ago: executing program 4 (id=3450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000002060102000000000000007fffffff0014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) 368.055022ms ago: executing program 1 (id=3451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000018c0)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076257468305f746f5f627269646765000800295dfe0d0000000000039dc5b81faadaaab90c295f463e7dbee55fe0f6422268bcce68326462151143fd9810b3442bb97fa3e55e58e31c4ba39c29217ac1228f251cb43c8f7ade0301f6ed2a305265d53e93b3d2cbf76baf7daf1f07f8b77aa5ea4c7cf5cacc9e8006921e986468e55d4b0000000000"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x1f8, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5c}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x21}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "4df4023756fd4b056cfb9b982151a35c0f03d05c77e44577649d"}}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @loopback, 0xa3}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4080}, 0x4840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="08000f00fcfffffd0800290094790000140014007665746831000000009816a5886159761d0001"], 0xe4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000001880)={&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000640)="d10c7ad075d8a8cb4a202a808eb597d44a8b19c8b570a8733049872a254f749939fa37001a36344a563ad5717020c6b76f6d7ac10b77dcd678e1ddce817656aca82a7d16398527165ff3b050b9be525f452123840f611c22a8750fd5827afe978568cf38ef0dd7b8ca3c005bd0760d4147d310a2f8c4ad6ce4a04283cbc05beacd39a0143a3fae233b4d8bf723169d11767de5c1e310496906484330", 0x9c}, {&(0x7f0000000700)="51954d4bee643de837d9ac2029530ff0208b1cef6c68e4bb3c0d190bc356c8656cda8af54d66e9c9801836dfbecc15267956adea1a4e8ad2fff77443c2b731c6af750e3c1aea1d490959c079b6cb611833a29b9f5eed99e246ffa3e7ded852e0e48ed77b407d11765be3f052bad88d61b55c5551c33d96e8128cb0791a2040217a46023746eb0799f50ec7599229c4c5e73089f8600b2c9d006798782fc6bd0134be3b2161f41adcfccdb3b11b80c14b6b0ab7946b735096be4c4b8249028cda78262050b225eb", 0xc7}, {&(0x7f0000000280)="5c035c", 0x3}, {&(0x7f0000000800)="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", 0x1000}], 0x4, &(0x7f0000001840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40000000}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000018c0)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076257468305f746f5f627269646765000800295dfe0d0000000000039dc5b81faadaaab90c295f463e7dbee55fe0f6422268bcce68326462151143fd9810b3442bb97fa3e55e58e31c4ba39c29217ac1228f251cb43c8f7ade0301f6ed2a305265d53e93b3d2cbf76baf7daf1f07f8b77aa5ea4c7cf5cacc9e8006921e986468e55d4b0000000000"], 0x44}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private1}}}}]}]}, 0x60}}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x1f8, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5c}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x21}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "4df4023756fd4b056cfb9b982151a35c0f03d05c77e44577649d"}}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @loopback, 0xa3}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4080}, 0x4840) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="08000f00fcfffffd0800290094790000140014007665746831000000009816a5886159761d0001"], 0xe4}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$inet(r0, &(0x7f0000001880)={&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000640)="d10c7ad075d8a8cb4a202a808eb597d44a8b19c8b570a8733049872a254f749939fa37001a36344a563ad5717020c6b76f6d7ac10b77dcd678e1ddce817656aca82a7d16398527165ff3b050b9be525f452123840f611c22a8750fd5827afe978568cf38ef0dd7b8ca3c005bd0760d4147d310a2f8c4ad6ce4a04283cbc05beacd39a0143a3fae233b4d8bf723169d11767de5c1e310496906484330", 0x9c}, {&(0x7f0000000700)="51954d4bee643de837d9ac2029530ff0208b1cef6c68e4bb3c0d190bc356c8656cda8af54d66e9c9801836dfbecc15267956adea1a4e8ad2fff77443c2b731c6af750e3c1aea1d490959c079b6cb611833a29b9f5eed99e246ffa3e7ded852e0e48ed77b407d11765be3f052bad88d61b55c5551c33d96e8128cb0791a2040217a46023746eb0799f50ec7599229c4c5e73089f8600b2c9d006798782fc6bd0134be3b2161f41adcfccdb3b11b80c14b6b0ab7946b735096be4c4b8249028cda78262050b225eb", 0xc7}, {&(0x7f0000000280)="5c035c", 0x3}, {&(0x7f0000000800)="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", 0x1000}], 0x4, &(0x7f0000001840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40000000}}], 0x18}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) 285.06295ms ago: executing program 2 (id=3452): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000580)={0x7, 0x8001, 0x200, 0x400, 0x0, 0x7ff, 0x23, 0x5}, 0x20) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040006}, 0x8800) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r3, 0x8, 0x9, 0xb}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r5 = socket(0x9, 0x5, 0xdfe0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x67, 0x96, 0x5, 0x8, 0x5, 0x81}) sendmsg$can_j1939(r3, &(0x7f0000005cc0)={&(0x7f00000009c0), 0x18, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000300)={0x1d, r8, 0x0, {0x0, 0xf0}}, 0x18) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000440)={'bond_slave_0\x00', 0x4}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000002c0)="0000ffff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) 281.877145ms ago: executing program 4 (id=3453): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 64) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r2], 0x50}}, 0x0) (async) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x9, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000dc295c94aafcb800eee455c6368c2b0500563124e2ba577907d8cbb406a878a26a7d92043c30bddd42d86a09ec11d25a285d12ab5c918ab50189f732c14d0103d80a2bb2defc", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000bb000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 139.335555ms ago: executing program 1 (id=3454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}, 0x1, 0xa00000000000000}, 0x0) 281.057µs ago: executing program 4 (id=3455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r3, @ANYBLOB="010000000000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="e201330080000000ffffffffffff0802110000000b605fcc36fc0000000000000000000064002000000004060000000000000602000005040000006825030000002a01003c04010008012d1a0000000000000000000000000000000000000000000000000000710700000000000000dd88"], 0x200}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19}, 0x90) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x0, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x0, 0x2}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="18020000", @ANYRES16, @ANYBLOB="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"], 0xfda6}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000b80fc0809000300", 0x33fe0}], 0x1}, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r9, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=3456): r0 = socket(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="b3") r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x20000000, 0x4) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0x80fe}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x6, 0x1, 0x0, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) kernel console output (not intermixed with test programs): [ 223.064086][T12851] dump_stack_lvl+0x241/0x360 [ 223.068789][T12851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.074010][T12851] ? __pfx__printk+0x10/0x10 [ 223.078620][T12851] ? __pfx_lock_release+0x10/0x10 [ 223.083762][T12851] should_fail_ex+0x3b0/0x4e0 [ 223.088471][T12851] _copy_from_iter+0x1f6/0x1960 [ 223.093339][T12851] ? __virt_addr_valid+0x183/0x520 [ 223.098474][T12851] ? __pfx_lock_release+0x10/0x10 [ 223.103542][T12851] ? __alloc_skb+0x28f/0x440 [ 223.108155][T12851] ? __pfx__copy_from_iter+0x10/0x10 [ 223.113481][T12851] ? __virt_addr_valid+0x183/0x520 [ 223.118612][T12851] ? __virt_addr_valid+0x183/0x520 [ 223.123745][T12851] ? __virt_addr_valid+0x44e/0x520 [ 223.128880][T12851] ? __check_object_size+0x49c/0x900 [ 223.134278][T12851] netlink_sendmsg+0x73d/0xcb0 [ 223.139069][T12851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.144372][T12851] ? __import_iovec+0x536/0x820 [ 223.149238][T12851] ? aa_sock_msg_perm+0x91/0x160 [ 223.154204][T12851] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.159508][T12851] ? security_socket_sendmsg+0x87/0xb0 [ 223.164986][T12851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.170290][T12851] __sock_sendmsg+0x221/0x270 [ 223.174992][T12851] ____sys_sendmsg+0x525/0x7d0 [ 223.179791][T12851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.185116][T12851] __sys_sendmsg+0x2b0/0x3a0 [ 223.189725][T12851] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.194856][T12851] ? vfs_write+0x7c4/0xc90 [ 223.199330][T12851] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.205676][T12851] ? do_syscall_64+0x100/0x230 [ 223.210462][T12851] ? do_syscall_64+0xb6/0x230 [ 223.215159][T12851] do_syscall_64+0xf3/0x230 [ 223.219684][T12851] ? clear_bhb_loop+0x35/0x90 [ 223.224385][T12851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.230470][T12851] RIP: 0033:0x7fafbc375bd9 [ 223.234901][T12851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.254527][T12851] RSP: 002b:00007fafbd0a7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.262964][T12851] RAX: ffffffffffffffda RBX: 00007fafbc503f60 RCX: 00007fafbc375bd9 [ 223.270957][T12851] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 223.278948][T12851] RBP: 00007fafbd0a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 223.286938][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.294925][T12851] R13: 000000000000000b R14: 00007fafbc503f60 R15: 00007ffdb6107468 [ 223.302930][T12851] [ 223.514519][T12886] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.544719][T12876] FAULT_INJECTION: forcing a failure. [ 223.544719][T12876] name failslab, interval 1, probability 0, space 0, times 0 [ 223.574386][T12876] CPU: 0 PID: 12876 Comm: syz.2.2530 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 223.584591][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 223.594671][T12876] Call Trace: [ 223.597973][T12876] [ 223.600927][T12876] dump_stack_lvl+0x241/0x360 [ 223.605635][T12876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.610859][T12876] ? __pfx__printk+0x10/0x10 [ 223.615478][T12876] ? __pfx___might_resched+0x10/0x10 [ 223.620787][T12876] ? __mutex_lock+0x2ef/0xd70 [ 223.625502][T12876] should_fail_ex+0x3b0/0x4e0 [ 223.630210][T12876] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 223.636479][T12876] should_failslab+0x9/0x20 [ 223.641020][T12876] __kmalloc_noprof+0xd8/0x400 [ 223.645818][T12876] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 223.651902][T12876] genl_rcv_msg+0x802/0xec0 [ 223.656412][T12876] ? mark_lock+0x9a/0x350 [ 223.660790][T12876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.665834][T12876] ? __pfx_lock_acquire+0x10/0x10 [ 223.670849][T12876] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 223.676662][T12876] ? __pfx___might_resched+0x10/0x10 [ 223.681971][T12876] netlink_rcv_skb+0x1e3/0x430 [ 223.686739][T12876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.691762][T12876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.697050][T12876] ? __netlink_deliver_tap+0x77e/0x7c0 [ 223.702532][T12876] genl_rcv+0x28/0x40 [ 223.706520][T12876] netlink_unicast+0x7f0/0x990 [ 223.711287][T12876] ? __pfx_netlink_unicast+0x10/0x10 [ 223.716745][T12876] ? __virt_addr_valid+0x183/0x520 [ 223.721885][T12876] ? __check_object_size+0x49c/0x900 [ 223.727182][T12876] ? bpf_lsm_netlink_send+0x9/0x10 [ 223.732293][T12876] netlink_sendmsg+0x8e4/0xcb0 [ 223.737063][T12876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.742341][T12876] ? __import_iovec+0x536/0x820 [ 223.747184][T12876] ? aa_sock_msg_perm+0x91/0x160 [ 223.752120][T12876] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.757396][T12876] ? security_socket_sendmsg+0x87/0xb0 [ 223.763317][T12876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.768596][T12876] __sock_sendmsg+0x221/0x270 [ 223.773271][T12876] ____sys_sendmsg+0x525/0x7d0 [ 223.778043][T12876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.783340][T12876] __sys_sendmsg+0x2b0/0x3a0 [ 223.787933][T12876] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.793038][T12876] ? vfs_write+0x7c4/0xc90 [ 223.797481][T12876] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.803801][T12876] ? do_syscall_64+0x100/0x230 [ 223.808558][T12876] ? do_syscall_64+0xb6/0x230 [ 223.813225][T12876] do_syscall_64+0xf3/0x230 [ 223.817721][T12876] ? clear_bhb_loop+0x35/0x90 [ 223.822395][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.828281][T12876] RIP: 0033:0x7f36f0f75bd9 [ 223.832689][T12876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.852289][T12876] RSP: 002b:00007f36f1e01048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.860696][T12876] RAX: ffffffffffffffda RBX: 00007f36f1103f60 RCX: 00007f36f0f75bd9 [ 223.868659][T12876] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000a [ 223.876622][T12876] RBP: 00007f36f1e010a0 R08: 0000000000000000 R09: 0000000000000000 [ 223.884590][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.892556][T12876] R13: 000000000000000b R14: 00007f36f1103f60 R15: 00007ffff1873158 [ 223.900538][T12876] [ 224.072468][T12901] __nla_validate_parse: 10 callbacks suppressed [ 224.072488][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 224.101332][T12906] C: renamed from lo (while UP) [ 224.115969][T12906] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 224.154220][T12908] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 224.433603][T12929] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 224.448878][T12929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.512468][T12933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2551'. [ 224.581845][T12931] team0: Device macvlan1 failed to register rx_handler [ 225.248149][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2560'. [ 225.376144][T12958] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.437620][T12971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2564'. [ 225.634225][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 225.904452][T13004] FAULT_INJECTION: forcing a failure. [ 225.904452][T13004] name failslab, interval 1, probability 0, space 0, times 0 [ 225.953176][T13004] CPU: 0 PID: 13004 Comm: syz.1.2574 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 225.963474][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 225.973551][T13004] Call Trace: [ 225.976867][T13004] [ 225.979821][T13004] dump_stack_lvl+0x241/0x360 [ 225.984529][T13004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.989754][T13004] ? __pfx__printk+0x10/0x10 [ 225.994465][T13004] ? __pfx___might_resched+0x10/0x10 [ 225.999813][T13004] ? __asan_memset+0x23/0x50 [ 226.004428][T13004] ? lockdep_init_map_type+0xa1/0x910 [ 226.009830][T13004] should_fail_ex+0x3b0/0x4e0 [ 226.014538][T13004] should_failslab+0x9/0x20 [ 226.019154][T13004] __kmalloc_node_noprof+0xdf/0x440 [ 226.024376][T13004] ? kvmalloc_node_noprof+0x72/0x190 [ 226.029687][T13004] kvmalloc_node_noprof+0x72/0x190 [ 226.034830][T13004] rhashtable_init_noprof+0x534/0xa60 [ 226.040245][T13004] rhltable_init_noprof+0x1c/0x60 [ 226.045293][T13004] nf_tables_newtable+0x7ea/0x1dc0 [ 226.050427][T13004] ? nfnl_pernet+0x23/0x240 [ 226.054964][T13004] ? __pfx_nf_tables_newtable+0x10/0x10 [ 226.060533][T13004] ? __nla_parse+0x40/0x60 [ 226.064973][T13004] nfnetlink_rcv+0x1427/0x2a90 [ 226.069797][T13004] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 226.074989][T13004] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.080204][T13004] ? skb_clone+0x240/0x390 [ 226.084643][T13004] ? __pfx_lock_release+0x10/0x10 [ 226.089709][T13004] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.094928][T13004] netlink_unicast+0x7f0/0x990 [ 226.099724][T13004] ? __pfx_netlink_unicast+0x10/0x10 [ 226.105025][T13004] ? __virt_addr_valid+0x183/0x520 [ 226.110160][T13004] ? __check_object_size+0x49c/0x900 [ 226.115472][T13004] ? bpf_lsm_netlink_send+0x9/0x10 [ 226.120606][T13004] netlink_sendmsg+0x8e4/0xcb0 [ 226.125404][T13004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.130707][T13004] ? __mutex_trylock_common+0x183/0x2e0 [ 226.136279][T13004] ? aa_sock_msg_perm+0x91/0x160 [ 226.141242][T13004] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 226.146548][T13004] ? security_socket_sendmsg+0x87/0xb0 [ 226.152029][T13004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.157333][T13004] __sock_sendmsg+0x221/0x270 [ 226.162033][T13004] sock_sendmsg+0x134/0x200 [ 226.166567][T13004] ? __pfx_sock_sendmsg+0x10/0x10 [ 226.171627][T13004] ? iov_iter_bvec+0x4e/0x180 [ 226.176325][T13004] splice_to_socket+0xa13/0x10b0 [ 226.181281][T13004] ? __pfx_lock_release+0x10/0x10 [ 226.186346][T13004] ? __pfx_splice_to_socket+0x10/0x10 [ 226.191763][T13004] ? __lock_acquire+0x1346/0x1fd0 [ 226.196826][T13004] ? bpf_lsm_file_permission+0x9/0x10 [ 226.202216][T13004] ? security_file_permission+0x7f/0xa0 [ 226.207786][T13004] ? rw_verify_area+0x1d2/0x6b0 [ 226.212661][T13004] ? __pfx_splice_to_socket+0x10/0x10 [ 226.218053][T13004] do_splice+0xd77/0x1900 [ 226.222414][T13004] ? __pfx_lock_release+0x10/0x10 [ 226.227467][T13004] ? vfs_write+0x7c4/0xc90 [ 226.231921][T13004] ? __mutex_unlock_slowpath+0x21d/0x750 [ 226.237592][T13004] ? pipe_clear_nowait+0x196/0x220 [ 226.242727][T13004] ? __pfx_do_splice+0x10/0x10 [ 226.247523][T13004] __se_sys_splice+0x331/0x4a0 [ 226.252315][T13004] ? __pfx___se_sys_splice+0x10/0x10 [ 226.257709][T13004] ? do_syscall_64+0x100/0x230 [ 226.262498][T13004] ? __x64_sys_splice+0x21/0xf0 [ 226.267377][T13004] do_syscall_64+0xf3/0x230 [ 226.271901][T13004] ? clear_bhb_loop+0x35/0x90 [ 226.276608][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.282510][T13004] RIP: 0033:0x7f8261175bd9 [ 226.286928][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.306570][T13004] RSP: 002b:00007f8261e76048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 226.315006][T13004] RAX: ffffffffffffffda RBX: 00007f8261304038 RCX: 00007f8261175bd9 [ 226.322983][T13004] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 226.330946][T13004] RBP: 00007f8261e760a0 R08: 0000000000007fff R09: 0000000000000000 [ 226.338917][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.346908][T13004] R13: 000000000000006e R14: 00007f8261304038 R15: 00007fffc3c28b58 [ 226.354915][T13004] [ 226.690693][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2576'. [ 226.769097][T13021] xt_cgroup: path and classid specified [ 226.797070][T13017] team0: Port device macvlan1 added [ 226.836830][T13029] team_slave_0: entered promiscuous mode [ 226.842874][T13029] team_slave_1: entered promiscuous mode [ 226.848618][T13029] bridge2: entered promiscuous mode [ 226.854369][T13029] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 226.902588][T13029] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 226.976503][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 226.990249][T13035] validate_nla: 1 callbacks suppressed [ 226.990268][T13035] netlink: 'syz.0.2583': attribute type 2 has an invalid length. [ 227.000321][T13040] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 227.012319][T13035] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2583'. [ 227.066866][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 227.257061][T13055] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 227.259650][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 227.279108][T13051] IPVS: stopping backup sync thread 13055 ... [ 227.322905][T13054] macvlan4: entered promiscuous mode [ 227.344697][T13054] macvlan4: entered allmulticast mode [ 227.382131][T13051] netlink: 'syz.0.2589': attribute type 6 has an invalid length. [ 227.852941][T13085] netlink: 'syz.3.2597': attribute type 4 has an invalid length. [ 227.947257][T13092] tap0: tun_chr_ioctl cmd 1074812118 [ 228.104613][T13109] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 228.165767][T13116] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 228.165893][T13110] IPVS: stopping backup sync thread 13116 ... [ 228.373668][T13134] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20001 [ 228.425648][T13128] netlink: 'syz.2.2604': attribute type 6 has an invalid length. [ 228.520927][T13140] xt_bpf: check failed: parse error [ 228.578839][T13145] tipc: Enabling of bearer rejected, media not registered [ 228.594729][T13146] tipc: Enabled bearer , priority 10 [ 228.629135][T13148] FAULT_INJECTION: forcing a failure. [ 228.629135][T13148] name failslab, interval 1, probability 0, space 0, times 0 [ 228.658441][T13148] CPU: 0 PID: 13148 Comm: syz.1.2614 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 228.668639][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 228.678706][T13148] Call Trace: [ 228.681985][T13148] [ 228.684907][T13148] dump_stack_lvl+0x241/0x360 [ 228.689584][T13148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.694788][T13148] ? __pfx__printk+0x10/0x10 [ 228.699407][T13148] should_fail_ex+0x3b0/0x4e0 [ 228.704115][T13148] ? sctp_add_bind_addr+0x89/0x3a0 [ 228.709240][T13148] should_failslab+0x9/0x20 [ 228.713745][T13148] kmalloc_trace_noprof+0x6c/0x2c0 [ 228.718879][T13148] sctp_add_bind_addr+0x89/0x3a0 [ 228.723821][T13148] sctp_copy_local_addr_list+0x311/0x500 [ 228.729462][T13148] ? sctp_copy_local_addr_list+0xab/0x500 [ 228.735183][T13148] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 228.741334][T13148] ? sctp_v6_is_any+0x60/0x70 [ 228.746015][T13148] sctp_bind_addr_copy+0xad/0x3b0 [ 228.751064][T13148] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 228.757399][T13148] sctp_connect_new_asoc+0x2f3/0x6c0 [ 228.762687][T13148] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 228.768489][T13148] ? sctp_sendmsg+0xbb9/0x3520 [ 228.773259][T13148] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 228.778805][T13148] ? security_sctp_bind_connect+0x90/0xb0 [ 228.784531][T13148] sctp_sendmsg+0x219a/0x3520 [ 228.789220][T13148] ? __pfx_sctp_sendmsg+0x10/0x10 [ 228.794330][T13148] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.799189][T13148] ? inet_sendmsg+0x330/0x390 [ 228.803862][T13148] __sock_sendmsg+0x1a6/0x270 [ 228.808533][T13148] ____sys_sendmsg+0x525/0x7d0 [ 228.813300][T13148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.818592][T13148] __sys_sendmmsg+0x3b2/0x740 [ 228.823272][T13148] ? __pfx___sys_sendmmsg+0x10/0x10 [ 228.828495][T13148] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 228.834398][T13148] ? ksys_write+0x23e/0x2c0 [ 228.838907][T13148] ? __pfx_lock_release+0x10/0x10 [ 228.843937][T13148] ? vfs_write+0x7c4/0xc90 [ 228.848356][T13148] ? __mutex_unlock_slowpath+0x21d/0x750 [ 228.853994][T13148] ? __pfx_vfs_write+0x10/0x10 [ 228.858802][T13148] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 228.864788][T13148] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 228.871113][T13148] ? do_syscall_64+0x100/0x230 [ 228.875875][T13148] __x64_sys_sendmmsg+0xa0/0xb0 [ 228.880725][T13148] do_syscall_64+0xf3/0x230 [ 228.885234][T13148] ? clear_bhb_loop+0x35/0x90 [ 228.889914][T13148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.895803][T13148] RIP: 0033:0x7f8261175bd9 [ 228.900214][T13148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.919820][T13148] RSP: 002b:00007f8261e97048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 228.928237][T13148] RAX: ffffffffffffffda RBX: 00007f8261303f60 RCX: 00007f8261175bd9 [ 228.936202][T13148] RDX: 0000000000000001 RSI: 000000002000cf00 RDI: 0000000000000003 [ 228.944164][T13148] RBP: 00007f8261e970a0 R08: 0000000000000000 R09: 0000000000000000 [ 228.952130][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.960091][T13148] R13: 000000000000000b R14: 00007f8261303f60 R15: 00007fffc3c28b58 [ 228.968070][T13148] [ 229.068573][T13154] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 229.083007][T13150] macvlan4: entered promiscuous mode [ 229.096127][T13156] __nla_validate_parse: 5 callbacks suppressed [ 229.096146][T13156] netlink: 528 bytes leftover after parsing attributes in process `syz.1.2618'. [ 229.112527][T13154] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2615'. [ 229.115151][T13150] macvlan4: entered allmulticast mode [ 229.306117][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2621'. [ 229.349843][T13168] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 229.454361][T13178] netlink: 'syz.0.2626': attribute type 20 has an invalid length. [ 229.714282][ T5143] tipc: Node number set to 20905985 [ 229.858754][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 230.061320][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2637'. [ 230.321135][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2644'. [ 230.493645][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2647'. [ 230.651795][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2650'. [ 230.704399][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 231.002725][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 231.708870][T13313] openvswitch: netlink: Key type 9999 is out of range max 32 [ 231.752195][T13318] Bluetooth: MGMT ver 1.22 [ 232.063002][T13337] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 232.109047][T13337] team0: Port device batadv1 added [ 232.231513][T13346] vlan3: entered promiscuous mode [ 232.238922][T13346] bond0: entered promiscuous mode [ 232.244580][T13346] bond_slave_0: entered promiscuous mode [ 232.250743][T13346] bond_slave_1: entered promiscuous mode [ 232.257439][T13346] macvlan3: entered promiscuous mode [ 232.852390][T13346] bond0: left promiscuous mode [ 232.874722][T13346] bond_slave_0: left promiscuous mode [ 232.893026][T13346] bond_slave_1: left promiscuous mode [ 232.903135][T13346] macvlan3: left promiscuous mode [ 233.275163][T13386] block nbd4: not configured, cannot reconfigure [ 233.350033][T13393] xt_connbytes: Forcing CT accounting to be enabled [ 233.357542][T13393] xt_bpf: check failed: parse error [ 233.414499][T13395] ip6gretap0: entered promiscuous mode [ 233.453737][T13401] netlink: 'syz.1.2697': attribute type 33 has an invalid length. [ 233.470967][T13395] ip6gretap0: left promiscuous mode [ 233.629039][T13409] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 233.824742][T13428] netlink: 'syz.0.2705': attribute type 25 has an invalid length. [ 234.088316][T13445] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 234.128790][T13446] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 234.167015][T13445] __nla_validate_parse: 7 callbacks suppressed [ 234.167037][T13445] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2710'. [ 234.222188][T13447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2710'. [ 234.310325][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 234.325062][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 234.341540][T13458] FAULT_INJECTION: forcing a failure. [ 234.341540][T13458] name failslab, interval 1, probability 0, space 0, times 0 [ 234.360998][T13453] veth4: entered promiscuous mode [ 234.365624][T13458] CPU: 1 PID: 13458 Comm: syz.1.2717 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 234.376194][T13458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 234.386243][T13458] Call Trace: [ 234.389514][T13458] [ 234.392434][T13458] dump_stack_lvl+0x241/0x360 [ 234.397112][T13458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.402304][T13458] ? __pfx__printk+0x10/0x10 [ 234.406899][T13458] should_fail_ex+0x3b0/0x4e0 [ 234.411572][T13458] ? __alloc_skb+0x1c3/0x440 [ 234.416157][T13458] should_failslab+0x9/0x20 [ 234.420656][T13458] kmem_cache_alloc_node_noprof+0x71/0x320 [ 234.426461][T13458] __alloc_skb+0x1c3/0x440 [ 234.430881][T13458] ? __pfx___alloc_skb+0x10/0x10 [ 234.435817][T13458] ? __mutex_trylock_common+0x183/0x2e0 [ 234.441361][T13458] ? __pfx___might_resched+0x10/0x10 [ 234.446643][T13458] tipc_nl_compat_dumpit+0x311/0x740 [ 234.451928][T13458] tipc_nl_compat_recv+0xdaa/0x14c0 [ 234.457264][T13458] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 234.462886][T13458] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 234.468862][T13458] ? __pfx_tipc_nl_bearer_dump+0x10/0x10 [ 234.474488][T13458] ? __pfx_tipc_nl_compat_bearer_dump+0x10/0x10 [ 234.480717][T13458] ? genl_rcv_msg+0x121/0xec0 [ 234.485388][T13458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.491703][T13458] ? __pfx___mutex_lock+0x10/0x10 [ 234.496726][T13458] ? genl_get_cmd+0x71c/0xbe0 [ 234.501400][T13458] genl_rcv_msg+0xb14/0xec0 [ 234.505893][T13458] ? mark_lock+0x9a/0x350 [ 234.510217][T13458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.515270][T13458] ? __pfx_lock_acquire+0x10/0x10 [ 234.520299][T13458] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 234.525934][T13458] ? __pfx___might_resched+0x10/0x10 [ 234.531236][T13458] netlink_rcv_skb+0x1e3/0x430 [ 234.536002][T13458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.541026][T13458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.546314][T13458] ? __netlink_deliver_tap+0x77e/0x7c0 [ 234.551774][T13458] genl_rcv+0x28/0x40 [ 234.555751][T13458] netlink_unicast+0x7f0/0x990 [ 234.560512][T13458] ? __pfx_netlink_unicast+0x10/0x10 [ 234.565787][T13458] ? __virt_addr_valid+0x183/0x520 [ 234.570939][T13458] ? __check_object_size+0x49c/0x900 [ 234.576221][T13458] ? bpf_lsm_netlink_send+0x9/0x10 [ 234.581336][T13458] netlink_sendmsg+0x8e4/0xcb0 [ 234.586119][T13458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.591397][T13458] ? __import_iovec+0x536/0x820 [ 234.596238][T13458] ? aa_sock_msg_perm+0x91/0x160 [ 234.601174][T13458] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 234.606448][T13458] ? security_socket_sendmsg+0x87/0xb0 [ 234.612404][T13458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.617681][T13458] __sock_sendmsg+0x221/0x270 [ 234.622355][T13458] ____sys_sendmsg+0x525/0x7d0 [ 234.627121][T13458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.632417][T13458] __sys_sendmsg+0x2b0/0x3a0 [ 234.637007][T13458] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.642117][T13458] ? vfs_write+0x7c4/0xc90 [ 234.646562][T13458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.652888][T13458] ? do_syscall_64+0x100/0x230 [ 234.657654][T13458] ? do_syscall_64+0xb6/0x230 [ 234.662325][T13458] do_syscall_64+0xf3/0x230 [ 234.666827][T13458] ? clear_bhb_loop+0x35/0x90 [ 234.671504][T13458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.677390][T13458] RIP: 0033:0x7f8261175bd9 [ 234.681798][T13458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.701395][T13458] RSP: 002b:00007f8261e97048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.709820][T13458] RAX: ffffffffffffffda RBX: 00007f8261303f60 RCX: 00007f8261175bd9 [ 234.717797][T13458] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 234.725778][T13458] RBP: 00007f8261e970a0 R08: 0000000000000000 R09: 0000000000000000 [ 234.733761][T13458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.741736][T13458] R13: 000000000000000b R14: 00007f8261303f60 R15: 00007fffc3c28b58 [ 234.749723][T13458] [ 234.755546][T13453] veth4: entered allmulticast mode [ 234.806774][T13455] lo speed is unknown, defaulting to 1000 [ 234.886634][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 234.924250][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2719'. [ 234.964513][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 235.060358][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'. [ 235.064243][T13485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.104116][T13488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2726'. [ 235.130273][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 235.434233][T13514] vlan2: entered promiscuous mode [ 235.444590][T13514] bridge0: entered promiscuous mode [ 235.468984][T13514] team0: Port device vlan2 added [ 235.812202][T13534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.050718][T13543] vlan3: entered promiscuous mode [ 236.060664][T13543] bond0: entered promiscuous mode [ 236.077298][T13543] bond_slave_0: entered promiscuous mode [ 236.089991][T13543] bond_slave_1: entered promiscuous mode [ 236.091611][T13553] FAULT_INJECTION: forcing a failure. [ 236.091611][T13553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.115213][T13553] CPU: 0 PID: 13553 Comm: syz.1.2744 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 236.117073][T13543] bond1: entered promiscuous mode [ 236.125381][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 236.125397][T13553] Call Trace: [ 236.125405][T13553] [ 236.125413][T13553] dump_stack_lvl+0x241/0x360 [ 236.125441][T13553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.125461][T13553] ? __pfx__printk+0x10/0x10 [ 236.125482][T13553] ? __pfx_lock_release+0x10/0x10 [ 236.125510][T13553] should_fail_ex+0x3b0/0x4e0 [ 236.125539][T13553] _copy_from_user+0x2f/0xe0 [ 236.125562][T13553] copy_msghdr_from_user+0xae/0x680 [ 236.125583][T13553] ? __pfx___might_resched+0x10/0x10 [ 236.125607][T13553] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 236.125634][T13553] ? __might_fault+0xaa/0x120 [ 236.125662][T13553] do_recvmmsg+0x40f/0xae0 [ 236.125698][T13553] ? __pfx_lock_release+0x10/0x10 [ 236.125717][T13553] ? __pfx_do_recvmmsg+0x10/0x10 [ 236.125755][T13553] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 236.216568][T13553] ? ksys_write+0x23e/0x2c0 [ 236.221071][T13553] ? __pfx_lock_release+0x10/0x10 [ 236.226091][T13553] ? vfs_write+0x7c4/0xc90 [ 236.230505][T13553] ? __mutex_unlock_slowpath+0x21d/0x750 [ 236.236137][T13553] ? __fget_files+0x3f6/0x470 [ 236.240819][T13553] __x64_sys_recvmmsg+0x199/0x250 [ 236.245881][T13553] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 236.251433][T13553] ? do_syscall_64+0x100/0x230 [ 236.256197][T13553] ? do_syscall_64+0xb6/0x230 [ 236.260870][T13553] do_syscall_64+0xf3/0x230 [ 236.265372][T13553] ? clear_bhb_loop+0x35/0x90 [ 236.270041][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.275931][T13553] RIP: 0033:0x7f8261175bd9 [ 236.280370][T13553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.299970][T13553] RSP: 002b:00007f8261e97048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 236.308381][T13553] RAX: ffffffffffffffda RBX: 00007f8261303f60 RCX: 00007f8261175bd9 [ 236.316342][T13553] RDX: e9627e53d33a589f RSI: 0000000020000480 RDI: 0000000000000003 [ 236.324303][T13553] RBP: 00007f8261e970a0 R08: 0000000000000000 R09: 0000000000000000 [ 236.332262][T13553] R10: 0000000000010020 R11: 0000000000000246 R12: 0000000000000002 [ 236.340222][T13553] R13: 000000000000000b R14: 00007f8261303f60 R15: 00007fffc3c28b58 [ 236.348195][T13553] [ 236.358976][T13543] batadv_slave_0: entered promiscuous mode [ 236.374944][T13543] macvlan4: entered promiscuous mode [ 236.387829][T13548] netlink: 'syz.3.2739': attribute type 1 has an invalid length. [ 236.394518][T13543] vlan2: entered promiscuous mode [ 236.404707][T13543] team0: entered promiscuous mode [ 236.410712][T13543] macvlan1: entered promiscuous mode [ 236.433001][T13543] bond0: left promiscuous mode [ 236.438239][T13543] bond_slave_0: left promiscuous mode [ 236.443854][T13543] bond_slave_1: left promiscuous mode [ 236.449832][T13543] bond1: left promiscuous mode [ 236.454909][T13543] batadv_slave_0: left promiscuous mode [ 236.460773][T13543] macvlan4: left promiscuous mode [ 236.466182][T13543] vlan2: left promiscuous mode [ 236.471052][T13543] team0: left promiscuous mode [ 236.478006][T13543] macvlan1: left promiscuous mode [ 236.707027][T13569] netlink: 'syz.0.2748': attribute type 10 has an invalid length. [ 236.763161][T13569] team0: Port device netdevsim0 removed [ 236.803439][T13572] lo speed is unknown, defaulting to 1000 [ 236.920087][T13583] FAULT_INJECTION: forcing a failure. [ 236.920087][T13583] name failslab, interval 1, probability 0, space 0, times 0 [ 236.967775][T13583] CPU: 1 PID: 13583 Comm: syz.1.2751 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 236.977994][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 236.988087][T13583] Call Trace: [ 236.991387][T13583] [ 236.994332][T13583] dump_stack_lvl+0x241/0x360 [ 236.999008][T13583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.004199][T13583] ? __pfx__printk+0x10/0x10 [ 237.008788][T13583] ? ref_tracker_alloc+0x332/0x490 [ 237.013929][T13583] should_fail_ex+0x3b0/0x4e0 [ 237.018606][T13583] ? skb_clone+0x20c/0x390 [ 237.023031][T13583] should_failslab+0x9/0x20 [ 237.027560][T13583] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 237.032972][T13583] skb_clone+0x20c/0x390 [ 237.037248][T13583] __netlink_deliver_tap+0x3cc/0x7c0 [ 237.042570][T13583] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.047791][T13583] netlink_deliver_tap+0x19d/0x1b0 [ 237.052931][T13583] netlink_unicast+0x7be/0x990 [ 237.057725][T13583] ? __pfx_netlink_unicast+0x10/0x10 [ 237.063034][T13583] ? __virt_addr_valid+0x183/0x520 [ 237.068176][T13583] ? __check_object_size+0x49c/0x900 [ 237.073490][T13583] ? bpf_lsm_netlink_send+0x9/0x10 [ 237.078628][T13583] netlink_sendmsg+0x8e4/0xcb0 [ 237.083443][T13583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.088765][T13583] ? __import_iovec+0x536/0x820 [ 237.093631][T13583] ? aa_sock_msg_perm+0x91/0x160 [ 237.098592][T13583] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 237.103979][T13583] ? security_socket_sendmsg+0x87/0xb0 [ 237.109457][T13583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.114762][T13583] __sock_sendmsg+0x221/0x270 [ 237.119466][T13583] ____sys_sendmsg+0x525/0x7d0 [ 237.123705][T13590] netlink: 'syz.4.2753': attribute type 11 has an invalid length. [ 237.124244][T13583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.124287][T13583] __sys_sendmsg+0x2b0/0x3a0 [ 237.124314][T13583] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.124335][T13583] ? vfs_write+0x7c4/0xc90 [ 237.124400][T13583] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.124431][T13583] ? do_syscall_64+0x100/0x230 [ 237.124455][T13583] ? do_syscall_64+0xb6/0x230 [ 237.124477][T13583] do_syscall_64+0xf3/0x230 [ 237.124497][T13583] ? clear_bhb_loop+0x35/0x90 [ 237.124520][T13583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.124555][T13583] RIP: 0033:0x7f8261175bd9 [ 237.124573][T13583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.124589][T13583] RSP: 002b:00007f8261e97048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.124610][T13583] RAX: ffffffffffffffda RBX: 00007f8261303f60 RCX: 00007f8261175bd9 [ 237.124624][T13583] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 237.124637][T13583] RBP: 00007f8261e970a0 R08: 0000000000000000 R09: 0000000000000000 [ 237.124650][T13583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.124662][T13583] R13: 000000000000000b R14: 00007f8261303f60 R15: 00007fffc3c28b58 [ 237.124688][T13583] [ 237.160068][T13590] netlink: 'syz.4.2753': attribute type 11 has an invalid length. [ 237.275722][T13590] debugfs: Directory 'netdev:' with parent 'phy8' already present! [ 237.594779][T13607] FAULT_INJECTION: forcing a failure. [ 237.594779][T13607] name failslab, interval 1, probability 0, space 0, times 0 [ 237.624085][ T5093] Bluetooth: hci4: command 0x0401 tx timeout [ 237.628851][T13607] CPU: 1 PID: 13607 Comm: syz.0.2758 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 237.640222][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 237.640237][T13607] Call Trace: [ 237.640245][T13607] [ 237.640254][T13607] dump_stack_lvl+0x241/0x360 [ 237.640282][T13607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.640301][T13607] ? __pfx__printk+0x10/0x10 [ 237.640320][T13607] ? __pfx___might_resched+0x10/0x10 [ 237.640356][T13607] should_fail_ex+0x3b0/0x4e0 [ 237.640385][T13607] ? sctp_association_new+0x8a/0x23f0 [ 237.640404][T13607] should_failslab+0x9/0x20 [ 237.640426][T13607] kmalloc_trace_noprof+0x6c/0x2c0 [ 237.640451][T13607] ? __asan_memcpy+0x40/0x70 [ 237.640473][T13607] sctp_association_new+0x8a/0x23f0 [ 237.640491][T13607] ? sctp_do_bind+0x679/0x950 [ 237.640516][T13607] ? __ipv6_addr_type+0x23c/0x2f0 [ 237.640551][T13607] sctp_connect_new_asoc+0x2d8/0x6c0 [ 237.640574][T13607] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 237.640592][T13607] ? sctp_sendmsg+0xbb9/0x3520 [ 237.640623][T13607] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 237.736778][T13607] ? security_sctp_bind_connect+0x90/0xb0 [ 237.742515][T13607] sctp_sendmsg+0x219a/0x3520 [ 237.747211][T13607] ? __pfx_sctp_sendmsg+0x10/0x10 [ 237.752235][T13607] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.757260][T13607] ? inet_sendmsg+0x330/0x390 [ 237.761935][T13607] __sock_sendmsg+0x1a6/0x270 [ 237.766604][T13607] ____sys_sendmsg+0x525/0x7d0 [ 237.771366][T13607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.776653][T13607] __sys_sendmmsg+0x3b2/0x740 [ 237.781327][T13607] ? __pfx___sys_sendmmsg+0x10/0x10 [ 237.786555][T13607] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 237.792444][T13607] ? ksys_write+0x23e/0x2c0 [ 237.796943][T13607] ? __pfx_lock_release+0x10/0x10 [ 237.801961][T13607] ? vfs_write+0x7c4/0xc90 [ 237.806369][T13607] ? __mutex_unlock_slowpath+0x21d/0x750 [ 237.812171][T13607] ? __pfx_vfs_write+0x10/0x10 [ 237.816953][T13607] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.822928][T13607] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.829244][T13607] ? do_syscall_64+0x100/0x230 [ 237.833999][T13607] __x64_sys_sendmmsg+0xa0/0xb0 [ 237.838853][T13607] do_syscall_64+0xf3/0x230 [ 237.843346][T13607] ? clear_bhb_loop+0x35/0x90 [ 237.848015][T13607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.853896][T13607] RIP: 0033:0x7f1509575bd9 [ 237.858388][T13607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.877980][T13607] RSP: 002b:00007f150a426048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 237.886385][T13607] RAX: ffffffffffffffda RBX: 00007f1509703f60 RCX: 00007f1509575bd9 [ 237.894347][T13607] RDX: 0000000000000001 RSI: 000000002000cf00 RDI: 0000000000000003 [ 237.902308][T13607] RBP: 00007f150a4260a0 R08: 0000000000000000 R09: 0000000000000000 [ 237.910270][T13607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.918231][T13607] R13: 000000000000000b R14: 00007f1509703f60 R15: 00007ffc73ec3f38 [ 237.926237][T13607] [ 238.204450][T13623] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 238.229051][T13623] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.478636][T13634] netlink: 'syz.4.2767': attribute type 1 has an invalid length. [ 238.704161][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 238.813837][T13649] bridge7: entered promiscuous mode [ 238.852201][T13649] bridge7: entered allmulticast mode [ 238.864919][T13649] team0: Port device bridge7 added [ 239.080370][T13658] IPVS: length: 102 != 2509051800 [ 239.153335][T13662] netlink: 'syz.2.2780': attribute type 1 has an invalid length. [ 239.215743][T13664] __nla_validate_parse: 14 callbacks suppressed [ 239.215763][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 239.251113][T13668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 239.284327][T13668] IPv6: NLM_F_REPLACE set, but no existing node found! [ 239.313026][T13668] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 239.442583][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2783'. [ 239.482364][T13677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2783'. [ 239.526478][T13679] FAULT_INJECTION: forcing a failure. [ 239.526478][T13679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.584129][T13679] CPU: 1 PID: 13679 Comm: syz.3.2781 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 239.594336][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 239.604397][T13679] Call Trace: [ 239.607665][T13679] [ 239.610581][T13679] dump_stack_lvl+0x241/0x360 [ 239.615252][T13679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.620458][T13679] ? __pfx__printk+0x10/0x10 [ 239.625062][T13679] ? __pfx_lock_release+0x10/0x10 [ 239.630076][T13679] should_fail_ex+0x3b0/0x4e0 [ 239.634845][T13679] _copy_from_iter+0x1f6/0x1960 [ 239.639693][T13679] ? __virt_addr_valid+0x183/0x520 [ 239.644810][T13679] ? __pfx_lock_release+0x10/0x10 [ 239.649859][T13679] ? __alloc_skb+0x28f/0x440 [ 239.654470][T13679] ? __pfx__copy_from_iter+0x10/0x10 [ 239.659780][T13679] ? __virt_addr_valid+0x183/0x520 [ 239.664996][T13679] ? __virt_addr_valid+0x183/0x520 [ 239.670123][T13679] ? __virt_addr_valid+0x44e/0x520 [ 239.675251][T13679] ? __check_object_size+0x49c/0x900 [ 239.680561][T13679] netlink_sendmsg+0x73d/0xcb0 [ 239.685356][T13679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.690660][T13679] ? __import_iovec+0x536/0x820 [ 239.695526][T13679] ? aa_sock_msg_perm+0x91/0x160 [ 239.700657][T13679] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.705958][T13679] ? security_socket_sendmsg+0x87/0xb0 [ 239.711420][T13679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.716701][T13679] __sock_sendmsg+0x221/0x270 [ 239.721380][T13679] ____sys_sendmsg+0x525/0x7d0 [ 239.726148][T13679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.731444][T13679] __sys_sendmsg+0x2b0/0x3a0 [ 239.736033][T13679] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.741144][T13679] ? vfs_write+0x7c4/0xc90 [ 239.745595][T13679] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.751914][T13679] ? do_syscall_64+0x100/0x230 [ 239.756677][T13679] ? do_syscall_64+0xb6/0x230 [ 239.761351][T13679] do_syscall_64+0xf3/0x230 [ 239.765846][T13679] ? clear_bhb_loop+0x35/0x90 [ 239.770514][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.776402][T13679] RIP: 0033:0x7fafbc375bd9 [ 239.780808][T13679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.800403][T13679] RSP: 002b:00007fafbd086048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.808809][T13679] RAX: ffffffffffffffda RBX: 00007fafbc504038 RCX: 00007fafbc375bd9 [ 239.816768][T13679] RDX: 0000000000004040 RSI: 0000000020000480 RDI: 0000000000000005 [ 239.824726][T13679] RBP: 00007fafbd0860a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.832683][T13679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.840639][T13679] R13: 000000000000006e R14: 00007fafbc504038 R15: 00007ffdb6107468 [ 239.848622][T13679] [ 239.993969][T13687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2788'. [ 240.037607][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2789'. [ 240.351417][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'. [ 240.386696][T13704] netlink: 'syz.4.2796': attribute type 2 has an invalid length. [ 240.410934][T13704] netlink: 'syz.4.2796': attribute type 8 has an invalid length. [ 240.424176][T13704] netlink: 'syz.4.2796': attribute type 1 has an invalid length. [ 240.440222][T13704] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2796'. [ 240.470671][T13704] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.990786][T13733] FAULT_INJECTION: forcing a failure. [ 240.990786][T13733] name failslab, interval 1, probability 0, space 0, times 0 [ 241.016302][T13733] CPU: 1 PID: 13733 Comm: syz.0.2803 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 241.026501][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 241.036568][T13733] Call Trace: [ 241.039861][T13733] [ 241.042807][T13733] dump_stack_lvl+0x241/0x360 [ 241.047512][T13733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.052729][T13733] ? __pfx__printk+0x10/0x10 [ 241.057337][T13733] ? __pfx___might_resched+0x10/0x10 [ 241.062650][T13733] should_fail_ex+0x3b0/0x4e0 [ 241.067355][T13733] ? nla_strdup+0x9c/0x140 [ 241.071787][T13733] should_failslab+0x9/0x20 [ 241.076314][T13733] __kmalloc_noprof+0xd8/0x400 [ 241.081097][T13733] ? __kasan_kmalloc+0x98/0xb0 [ 241.085881][T13733] nla_strdup+0x9c/0x140 [ 241.090146][T13733] nf_tables_newchain+0x2101/0x33a0 [ 241.093958][T13740] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 241.095370][T13733] ? __pfx_nf_tables_newchain+0x10/0x10 [ 241.095418][T13733] ? __pfx_lock_acquire+0x10/0x10 [ 241.113136][T13733] ? nfnl_pernet+0x23/0x240 [ 241.117661][T13733] ? __pfx_lock_release+0x10/0x10 [ 241.121788][T13738] IPVS: persistence engine module ip_vs_pe_À not found [ 241.122694][T13733] ? __nla_parse+0x40/0x60 [ 241.134053][T13733] nfnetlink_rcv+0x1427/0x2a90 [ 241.138874][T13733] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 241.144041][T13733] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.149242][T13733] ? skb_clone+0x240/0x390 [ 241.153653][T13733] ? __pfx_lock_release+0x10/0x10 [ 241.158677][T13733] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.163864][T13733] netlink_unicast+0x7f0/0x990 [ 241.168710][T13733] ? __pfx_netlink_unicast+0x10/0x10 [ 241.173980][T13733] ? __virt_addr_valid+0x183/0x520 [ 241.179091][T13733] ? __check_object_size+0x49c/0x900 [ 241.184370][T13733] ? bpf_lsm_netlink_send+0x9/0x10 [ 241.189480][T13733] netlink_sendmsg+0x8e4/0xcb0 [ 241.194260][T13733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.199547][T13733] ? __mutex_trylock_common+0x183/0x2e0 [ 241.205093][T13733] ? aa_sock_msg_perm+0x91/0x160 [ 241.210026][T13733] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.215297][T13733] ? security_socket_sendmsg+0x87/0xb0 [ 241.220749][T13733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.226025][T13733] __sock_sendmsg+0x221/0x270 [ 241.230697][T13733] sock_sendmsg+0x134/0x200 [ 241.235192][T13733] ? __pfx_sock_sendmsg+0x10/0x10 [ 241.240233][T13733] ? iov_iter_bvec+0x4e/0x180 [ 241.244900][T13733] splice_to_socket+0xa13/0x10b0 [ 241.249826][T13733] ? __pfx_lock_release+0x10/0x10 [ 241.254856][T13733] ? __pfx_splice_to_socket+0x10/0x10 [ 241.260245][T13733] ? __lock_acquire+0x1346/0x1fd0 [ 241.265270][T13733] ? bpf_lsm_file_permission+0x9/0x10 [ 241.270629][T13733] ? security_file_permission+0x7f/0xa0 [ 241.276170][T13733] ? rw_verify_area+0x1d2/0x6b0 [ 241.281017][T13733] ? __pfx_splice_to_socket+0x10/0x10 [ 241.286378][T13733] do_splice+0xd77/0x1900 [ 241.290705][T13733] ? __pfx_lock_release+0x10/0x10 [ 241.295725][T13733] ? vfs_write+0x7c4/0xc90 [ 241.300136][T13733] ? __mutex_unlock_slowpath+0x21d/0x750 [ 241.305763][T13733] ? pipe_clear_nowait+0x196/0x220 [ 241.310865][T13733] ? __pfx_do_splice+0x10/0x10 [ 241.315623][T13733] __se_sys_splice+0x331/0x4a0 [ 241.320383][T13733] ? __pfx___se_sys_splice+0x10/0x10 [ 241.325665][T13733] ? do_syscall_64+0x100/0x230 [ 241.330424][T13733] ? __x64_sys_splice+0x21/0xf0 [ 241.335294][T13733] do_syscall_64+0xf3/0x230 [ 241.339786][T13733] ? clear_bhb_loop+0x35/0x90 [ 241.344458][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.350337][T13733] RIP: 0033:0x7f1509575bd9 [ 241.354740][T13733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.374334][T13733] RSP: 002b:00007f150a405048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 241.382739][T13733] RAX: ffffffffffffffda RBX: 00007f1509704038 RCX: 00007f1509575bd9 [ 241.390697][T13733] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 241.398656][T13733] RBP: 00007f150a4050a0 R08: 0000000000007fff R09: 0000000000000000 [ 241.406618][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.414577][T13733] R13: 000000000000006e R14: 00007f1509704038 R15: 00007ffc73ec3f38 [ 241.422551][T13733] [ 241.465572][T13745] xt_cgroup: path and classid specified [ 241.555471][T13753] @ÿ: renamed from veth0_vlan (while UP) [ 241.601365][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2810'. [ 241.689571][T13765] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 241.793789][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2814'. [ 242.554334][T13823] bond3 (unregistering): Released all slaves [ 242.769008][T13837] macvlan5: entered allmulticast mode [ 242.783150][T13837] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 242.802475][T13843] netlink: 'syz.1.2837': attribute type 2 has an invalid length. [ 242.830166][T13843] netlink: 'syz.1.2837': attribute type 8 has an invalid length. [ 242.848679][T13843] netlink: 'syz.1.2837': attribute type 1 has an invalid length. [ 242.891107][T13843] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.974731][T13856] tipc: Enabling of bearer rejected, already enabled [ 243.012086][T13854] netlink: 'syz.4.2842': attribute type 10 has an invalid length. [ 243.055802][T13854] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 243.173448][T13854] team0: Port device wlan1 removed [ 243.197508][T13854] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 243.440193][T13867] 8021q: adding VLAN 0 to HW filter on device team1 [ 243.696067][T13882] openvswitch: netlink: Port -2 exceeds max allowable 65535 [ 243.722768][T13884] openvswitch: netlink: Port -2 exceeds max allowable 65535 [ 243.755732][T13892] netlink: 'syz.3.2853': attribute type 1 has an invalid length. [ 244.004431][T13911] netlink: 'syz.3.2861': attribute type 20 has an invalid length. [ 244.542163][T13941] __nla_validate_parse: 15 callbacks suppressed [ 244.542182][T13941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2874'. [ 244.579911][T13945] netlink: 'syz.4.2876': attribute type 10 has an invalid length. [ 244.588243][T13945] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2876'. [ 244.835826][T13967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2881'. [ 244.927325][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'. [ 245.036247][T13979] vlan3: entered allmulticast mode [ 245.065718][T13979] bond0: entered allmulticast mode [ 245.073346][T13979] bond_slave_0: entered allmulticast mode [ 245.100642][T13979] bond_slave_1: entered allmulticast mode [ 245.116280][T13979] bond0: left allmulticast mode [ 245.131163][T13979] bond_slave_0: left allmulticast mode [ 245.146905][T13979] bond_slave_1: left allmulticast mode [ 245.358733][T13990] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 245.378434][T13990] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 245.404253][T13990] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 245.412015][T13990] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 245.448832][T13990] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 245.470863][T13990] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 245.504341][T13990] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 245.746524][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2897'. [ 245.798565][T14025] smc: net device lo applied user defined pnetid SYZ2 [ 245.842814][T14025] smc: net device lo erased user defined pnetid SYZ2 [ 246.120551][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2906'. [ 246.269972][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2909'. [ 246.395622][T14075] veth1_macvtap: left promiscuous mode [ 246.410594][T14075] macsec0: entered promiscuous mode [ 246.423945][T14075] macsec0: entered allmulticast mode [ 246.452225][T14075] veth1_macvtap: entered promiscuous mode [ 246.466921][T14075] veth1_macvtap: entered allmulticast mode [ 246.473242][T14075] macsec0: left promiscuous mode [ 246.482911][T14075] macsec0: left allmulticast mode [ 246.489276][T14075] veth1_macvtap: left allmulticast mode [ 246.502424][T14075] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 246.610825][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2917'. [ 246.683212][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'. [ 246.777383][T14095] netlink: 1584 bytes leftover after parsing attributes in process `syz.4.2921'. [ 247.445480][T14134] xt_TCPMSS: Only works on TCP SYN packets [ 247.487155][T14137] lo speed is unknown, defaulting to 1000 [ 248.063913][T14166] xt_TCPMSS: Only works on TCP SYN packets [ 248.511920][T14201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.550104][T14201] team0: left allmulticast mode [ 248.562193][T14201] team_slave_0: left allmulticast mode [ 248.568058][T14201] team_slave_1: left allmulticast mode [ 248.573744][T14201] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 248.590771][T14201] bridge2: left allmulticast mode [ 248.598130][T14201] bridge7: left allmulticast mode [ 248.603410][T14201] team0: left promiscuous mode [ 248.609878][T14201] team_slave_0: left promiscuous mode [ 248.616273][T14201] team_slave_1: left promiscuous mode [ 248.622590][T14201] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 248.630223][T14201] bridge2: left promiscuous mode [ 248.635912][T14201] bridge7: left promiscuous mode [ 248.642628][T14201] bridge0: port 3(team0) entered disabled state [ 248.652925][T14201] team0: Cannot enslave team device to itself [ 248.762459][T14212] xt_TCPMSS: Only works on TCP SYN packets [ 249.268919][T14243] bond_slave_0: entered promiscuous mode [ 249.274706][T14243] bond_slave_1: entered promiscuous mode [ 249.332311][T14243] vlan3: entered promiscuous mode [ 249.345262][T14249] xt_TCPMSS: Only works on TCP SYN packets [ 249.353399][T14243] bond0: entered promiscuous mode [ 249.371620][T14243] macvlan3: entered promiscuous mode [ 249.407886][T14243] bond0: left promiscuous mode [ 249.421495][T14243] macvlan3: left promiscuous mode [ 249.447822][T14243] bond_slave_0: left promiscuous mode [ 249.453314][T14243] bond_slave_1: left promiscuous mode [ 249.688690][T14270] __nla_validate_parse: 17 callbacks suppressed [ 249.688712][T14270] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2982'. [ 250.054684][T14301] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2993'. [ 250.106262][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2994'. [ 250.132787][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2995'. [ 250.146197][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2994'. [ 250.212189][T14314] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2996'. [ 250.291199][T14314] ÊügáG: entered promiscuous mode [ 250.943960][T14350] FAULT_INJECTION: forcing a failure. [ 250.943960][T14350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.971305][T14350] CPU: 0 PID: 14350 Comm: syz.4.3008 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 250.981506][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 250.991577][T14350] Call Trace: [ 250.994875][T14350] [ 250.997816][T14350] dump_stack_lvl+0x241/0x360 [ 251.002509][T14350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.007724][T14350] ? __pfx__printk+0x10/0x10 [ 251.012326][T14350] ? __pfx_lock_release+0x10/0x10 [ 251.017381][T14350] should_fail_ex+0x3b0/0x4e0 [ 251.022083][T14350] _copy_from_user+0x2f/0xe0 [ 251.026689][T14350] copy_msghdr_from_user+0xae/0x680 [ 251.031928][T14350] ? __pfx___might_resched+0x10/0x10 [ 251.037323][T14350] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 251.043148][T14350] ? __might_fault+0xaa/0x120 [ 251.047849][T14350] do_recvmmsg+0x40f/0xae0 [ 251.052286][T14350] ? __pfx_lock_release+0x10/0x10 [ 251.057330][T14350] ? __pfx_do_recvmmsg+0x10/0x10 [ 251.062304][T14350] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 251.068215][T14350] ? ksys_write+0x23e/0x2c0 [ 251.072733][T14350] ? __pfx_lock_release+0x10/0x10 [ 251.077778][T14350] ? vfs_write+0x7c4/0xc90 [ 251.082214][T14350] ? __mutex_unlock_slowpath+0x21d/0x750 [ 251.087881][T14350] ? __fget_files+0x3f6/0x470 [ 251.092595][T14350] __x64_sys_recvmmsg+0x199/0x250 [ 251.097645][T14350] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 251.103215][T14350] ? do_syscall_64+0x100/0x230 [ 251.107997][T14350] ? do_syscall_64+0xb6/0x230 [ 251.112692][T14350] do_syscall_64+0xf3/0x230 [ 251.117210][T14350] ? clear_bhb_loop+0x35/0x90 [ 251.121905][T14350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.127812][T14350] RIP: 0033:0x7fba14375bd9 [ 251.132234][T14350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.151856][T14350] RSP: 002b:00007fba1512e048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 251.160290][T14350] RAX: ffffffffffffffda RBX: 00007fba14503f60 RCX: 00007fba14375bd9 [ 251.168362][T14350] RDX: e9627e53d33a589f RSI: 0000000020000480 RDI: 0000000000000003 [ 251.176344][T14350] RBP: 00007fba1512e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 251.184325][T14350] R10: 0000000000010020 R11: 0000000000000246 R12: 0000000000000002 [ 251.192311][T14350] R13: 000000000000000b R14: 00007fba14503f60 R15: 00007ffec27f9238 [ 251.200312][T14350] [ 251.309264][T14357] validate_nla: 6 callbacks suppressed [ 251.309283][T14357] netlink: 'syz.4.3011': attribute type 29 has an invalid length. [ 251.333771][T14359] IPVS: Error connecting to the multicast addr [ 251.337097][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'. [ 251.362070][T14355] lo speed is unknown, defaulting to 1000 [ 251.395097][T14357] netlink: 'syz.4.3011': attribute type 29 has an invalid length. [ 251.409785][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'. [ 251.465400][T14362] netlink: 'syz.1.3013': attribute type 1 has an invalid length. [ 251.496031][T14362] netlink: 'syz.1.3013': attribute type 2 has an invalid length. [ 251.832521][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 251.901750][T14383] tipc: Enabled bearer , priority 10 [ 251.984221][T14385] netlink: 'syz.1.3019': attribute type 14 has an invalid length. [ 252.057190][T14355] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3010'. [ 252.075915][T14388] FAULT_INJECTION: forcing a failure. [ 252.075915][T14388] name failslab, interval 1, probability 0, space 0, times 0 [ 252.096665][T14355] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 252.124156][T14388] CPU: 0 PID: 14388 Comm: syz.1.3021 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 252.134352][T14388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 252.144508][T14388] Call Trace: [ 252.147800][T14388] [ 252.150740][T14388] dump_stack_lvl+0x241/0x360 [ 252.155435][T14388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.160644][T14388] ? __pfx__printk+0x10/0x10 [ 252.165239][T14388] ? __pfx___might_resched+0x10/0x10 [ 252.170540][T14388] should_fail_ex+0x3b0/0x4e0 [ 252.175214][T14388] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 252.181449][T14388] should_failslab+0x9/0x20 [ 252.185945][T14388] __kmalloc_noprof+0xd8/0x400 [ 252.190708][T14388] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 252.196773][T14388] genl_rcv_msg+0x802/0xec0 [ 252.201269][T14388] ? mark_lock+0x9a/0x350 [ 252.205595][T14388] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.210627][T14388] ? __pfx_lock_acquire+0x10/0x10 [ 252.215641][T14388] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 252.221523][T14388] ? __pfx___might_resched+0x10/0x10 [ 252.226805][T14388] netlink_rcv_skb+0x1e3/0x430 [ 252.231561][T14388] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.236587][T14388] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.241870][T14388] ? __netlink_deliver_tap+0x77e/0x7c0 [ 252.247347][T14388] genl_rcv+0x28/0x40 [ 252.251327][T14388] netlink_unicast+0x7f0/0x990 [ 252.256086][T14388] ? __pfx_netlink_unicast+0x10/0x10 [ 252.261357][T14388] ? __virt_addr_valid+0x183/0x520 [ 252.266465][T14388] ? __check_object_size+0x49c/0x900 [ 252.271740][T14388] ? bpf_lsm_netlink_send+0x9/0x10 [ 252.276935][T14388] netlink_sendmsg+0x8e4/0xcb0 [ 252.281697][T14388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.286972][T14388] ? __import_iovec+0x536/0x820 [ 252.291809][T14388] ? aa_sock_msg_perm+0x91/0x160 [ 252.296746][T14388] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 252.302022][T14388] ? security_socket_sendmsg+0x87/0xb0 [ 252.307473][T14388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.312746][T14388] __sock_sendmsg+0x221/0x270 [ 252.317418][T14388] ____sys_sendmsg+0x525/0x7d0 [ 252.322185][T14388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.327475][T14388] __sys_sendmsg+0x2b0/0x3a0 [ 252.332061][T14388] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.337251][T14388] ? vfs_write+0x7c4/0xc90 [ 252.341688][T14388] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.348018][T14388] ? do_syscall_64+0x100/0x230 [ 252.352786][T14388] ? do_syscall_64+0xb6/0x230 [ 252.357455][T14388] do_syscall_64+0xf3/0x230 [ 252.361949][T14388] ? clear_bhb_loop+0x35/0x90 [ 252.366619][T14388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.372501][T14388] RIP: 0033:0x7f8261175bd9 [ 252.376904][T14388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.396503][T14388] RSP: 002b:00007f8261e97048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.404908][T14388] RAX: ffffffffffffffda RBX: 00007f8261303f60 RCX: 00007f8261175bd9 [ 252.412871][T14388] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 252.420827][T14388] RBP: 00007f8261e970a0 R08: 0000000000000000 R09: 0000000000000000 [ 252.428792][T14388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.436753][T14388] R13: 000000000000000b R14: 00007f8261303f60 R15: 00007fffc3c28b58 [ 252.444726][T14388] [ 252.644413][ T5093] Bluetooth: hci3: command 0x0405 tx timeout [ 253.020576][T14413] netlink: 'syz.1.3028': attribute type 7 has an invalid length. [ 253.312899][T14420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.432205][T14436] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 253.860570][T14454] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 253.896439][T14454] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 254.020529][T14461] ip6gre2: entered allmulticast mode [ 254.116551][T14468] netlink: 'syz.3.3049': attribute type 6 has an invalid length. [ 254.205872][T14471] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 254.919345][T14495] atomic_op ffff888011f5a998 conn xmit_atomic 0000000000000000 [ 254.930115][T14495] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 254.978955][T14497] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 254.993108][T14495] bridge0: port 3(vlan3) entered blocking state [ 255.000604][T14495] bridge0: port 3(vlan3) entered disabled state [ 255.000967][T14497] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 255.007569][T14495] vlan3: entered allmulticast mode [ 255.009306][T14495] vlan3: entered promiscuous mode [ 255.018354][T14470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.284476][ C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 255.514403][ T5093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.525629][ T5093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.539304][ T5093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.549737][ T5093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.558353][ T5093] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 255.565776][ T5093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.711653][T14527] __nla_validate_parse: 7 callbacks suppressed [ 255.711672][T14527] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3069'. [ 255.728852][T14527] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3069'. [ 255.820385][T14513] lo speed is unknown, defaulting to 1000 [ 256.024229][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.030600][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.091507][ T2866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.181298][ T2866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.434949][T14561] dccp_invalid_packet: P.Data Offset(0) too small [ 256.454781][T14562] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3078'. [ 256.563538][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3077'. [ 257.609315][ T5093] Bluetooth: hci5: command tx timeout [ 257.863612][ T2866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.012075][ T2866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.040615][T14574] xt_cgroup: path and classid specified [ 258.070201][T14576] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 258.085108][ T5093] Bluetooth: hci1: command 0x0406 tx timeout [ 258.085175][ T53] Bluetooth: hci0: command tx timeout [ 258.150830][T14578] netlink: 'syz.0.3084': attribute type 6 has an invalid length. [ 258.190428][T14585] FAULT_INJECTION: forcing a failure. [ 258.190428][T14585] name failslab, interval 1, probability 0, space 0, times 0 [ 258.244501][T14585] CPU: 1 PID: 14585 Comm: syz.2.3087 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 258.254718][T14585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 258.264796][T14585] Call Trace: [ 258.268091][T14585] [ 258.271036][T14585] dump_stack_lvl+0x241/0x360 [ 258.275736][T14585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.280950][T14585] ? __pfx__printk+0x10/0x10 [ 258.285573][T14585] should_fail_ex+0x3b0/0x4e0 [ 258.290275][T14585] ? __alloc_skb+0x1c3/0x440 [ 258.294885][T14585] should_failslab+0x9/0x20 [ 258.299408][T14585] kmem_cache_alloc_node_noprof+0x71/0x320 [ 258.305247][T14585] __alloc_skb+0x1c3/0x440 [ 258.309674][T14585] ? ip_generic_getfrag+0x1d5/0x310 [ 258.314868][T14585] ? __pfx___alloc_skb+0x10/0x10 [ 258.319798][T14585] ? raw6_getfrag+0x104/0x350 [ 258.324467][T14585] ? skb_put+0x114/0x1f0 [ 258.328704][T14585] __ip6_append_data+0x2ba6/0x4070 [ 258.333824][T14585] ? __pfx_raw6_getfrag+0x10/0x10 [ 258.338847][T14585] ? __pfx___ip6_append_data+0x10/0x10 [ 258.344293][T14585] ? ip6_setup_cork+0x9fd/0xfb0 [ 258.349134][T14585] ip6_append_data+0x264/0x3a0 [ 258.353888][T14585] ? __pfx_raw6_getfrag+0x10/0x10 [ 258.358904][T14585] rawv6_sendmsg+0x18f1/0x23c0 [ 258.363676][T14585] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 258.368785][T14585] ? aa_sk_perm+0x967/0xab0 [ 258.373289][T14585] ? __might_fault+0xaa/0x120 [ 258.377965][T14585] ? inet_sendmsg+0x330/0x390 [ 258.382627][T14585] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 258.387898][T14585] ? security_socket_sendmsg+0x87/0xb0 [ 258.393351][T14585] __sock_sendmsg+0x1a6/0x270 [ 258.398026][T14585] ____sys_sendmsg+0x525/0x7d0 [ 258.402792][T14585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.408084][T14585] __sys_sendmsg+0x2b0/0x3a0 [ 258.412669][T14585] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.417781][T14585] ? vfs_write+0x7c4/0xc90 [ 258.422219][T14585] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.428535][T14585] ? do_syscall_64+0x100/0x230 [ 258.433292][T14585] ? do_syscall_64+0xb6/0x230 [ 258.437957][T14585] do_syscall_64+0xf3/0x230 [ 258.442451][T14585] ? clear_bhb_loop+0x35/0x90 [ 258.447123][T14585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.453007][T14585] RIP: 0033:0x7f36f0f75bd9 [ 258.457412][T14585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.477008][T14585] RSP: 002b:00007f36f1e01048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.485414][T14585] RAX: ffffffffffffffda RBX: 00007f36f1103f60 RCX: 00007f36f0f75bd9 [ 258.493376][T14585] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000004 [ 258.501340][T14585] RBP: 00007f36f1e010a0 R08: 0000000000000000 R09: 0000000000000000 [ 258.509305][T14585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.517277][T14585] R13: 000000000000000b R14: 00007f36f1103f60 R15: 00007ffff1873158 [ 258.525261][T14585] [ 258.626645][T14513] chnl_net:caif_netlink_parms(): no params data found [ 258.630741][T14597] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 258.719985][ T2866] bridge_slave_1: left allmulticast mode [ 258.733427][ T2866] bridge_slave_1: left promiscuous mode [ 258.743438][ T2866] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.767826][ T2866] bridge_slave_0: left allmulticast mode [ 258.773507][ T2866] bridge_slave_0: left promiscuous mode [ 258.788467][ T2866] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.846834][T14606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.892405][ T2866] bridge0: left promiscuous mode [ 259.057495][T14612] FAULT_INJECTION: forcing a failure. [ 259.057495][T14612] name failslab, interval 1, probability 0, space 0, times 0 [ 259.076189][T14612] CPU: 1 PID: 14612 Comm: syz.4.3098 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 259.086354][T14612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 259.096421][T14612] Call Trace: [ 259.099690][T14612] [ 259.102722][T14612] dump_stack_lvl+0x241/0x360 [ 259.107406][T14612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.112612][T14612] ? __pfx__printk+0x10/0x10 [ 259.117197][T14612] should_fail_ex+0x3b0/0x4e0 [ 259.121874][T14612] ? sctp_add_bind_addr+0x89/0x3a0 [ 259.126992][T14612] should_failslab+0x9/0x20 [ 259.131487][T14612] kmalloc_trace_noprof+0x6c/0x2c0 [ 259.136693][T14612] sctp_add_bind_addr+0x89/0x3a0 [ 259.141635][T14612] sctp_copy_local_addr_list+0x311/0x500 [ 259.147265][T14612] ? sctp_copy_local_addr_list+0xab/0x500 [ 259.152976][T14612] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 259.159123][T14612] ? sctp_v6_is_any+0x60/0x70 [ 259.163800][T14612] sctp_bind_addr_copy+0xad/0x3b0 [ 259.168817][T14612] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 259.175136][T14612] sctp_connect_new_asoc+0x2f3/0x6c0 [ 259.180413][T14612] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 259.186206][T14612] ? sctp_sendmsg+0xbb9/0x3520 [ 259.190967][T14612] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 259.196571][T14612] ? security_sctp_bind_connect+0x90/0xb0 [ 259.202284][T14612] sctp_sendmsg+0x219a/0x3520 [ 259.206968][T14612] ? __pfx_sctp_sendmsg+0x10/0x10 [ 259.211990][T14612] ? __pfx_aa_sk_perm+0x10/0x10 [ 259.216848][T14612] ? inet_sendmsg+0x330/0x390 [ 259.221526][T14612] __sock_sendmsg+0x1a6/0x270 [ 259.226194][T14612] ____sys_sendmsg+0x525/0x7d0 [ 259.230958][T14612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.236252][T14612] __sys_sendmmsg+0x3b2/0x740 [ 259.240928][T14612] ? __pfx___sys_sendmmsg+0x10/0x10 [ 259.246148][T14612] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 259.252119][T14612] ? ksys_write+0x23e/0x2c0 [ 259.256611][T14612] ? __pfx_lock_release+0x10/0x10 [ 259.261627][T14612] ? vfs_write+0x7c4/0xc90 [ 259.266037][T14612] ? __mutex_unlock_slowpath+0x21d/0x750 [ 259.271663][T14612] ? __pfx_vfs_write+0x10/0x10 [ 259.276438][T14612] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.282408][T14612] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.288726][T14612] ? do_syscall_64+0x100/0x230 [ 259.293483][T14612] __x64_sys_sendmmsg+0xa0/0xb0 [ 259.298330][T14612] do_syscall_64+0xf3/0x230 [ 259.302823][T14612] ? clear_bhb_loop+0x35/0x90 [ 259.307515][T14612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.313399][T14612] RIP: 0033:0x7fba14375bd9 [ 259.317815][T14612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.337434][T14612] RSP: 002b:00007fba1512e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 259.345843][T14612] RAX: ffffffffffffffda RBX: 00007fba14503f60 RCX: 00007fba14375bd9 [ 259.353895][T14612] RDX: 0000000000000001 RSI: 000000002000cf00 RDI: 0000000000000003 [ 259.361854][T14612] RBP: 00007fba1512e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 259.369812][T14612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.377771][T14612] R13: 000000000000000b R14: 00007fba14503f60 R15: 00007ffec27f9238 [ 259.385745][T14612] [ 259.483974][ T2866] team0: Port device vlan2 removed [ 259.685403][ T4491] Bluetooth: hci5: command tx timeout [ 259.748164][ T2866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.762414][ T2866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.775245][ T2866] bond0 (unregistering): Released all slaves [ 259.787595][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'. [ 259.803866][T14600] macvlan4: entered promiscuous mode [ 259.809488][T14600] macvlan4: entered allmulticast mode [ 259.901382][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'. [ 259.993965][T14633] netlink: 528 bytes leftover after parsing attributes in process `syz.1.3104'. [ 259.995432][T14630] macvlan5: entered promiscuous mode [ 260.024483][T14630] macvlan5: entered allmulticast mode [ 260.051161][T14638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3105'. [ 260.271041][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'. [ 260.291355][T14513] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.313811][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.331784][T14513] bridge_slave_0: entered allmulticast mode [ 260.353613][T14513] bridge_slave_0: entered promiscuous mode [ 260.497176][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.524416][T14513] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.540819][T14513] bridge_slave_1: entered allmulticast mode [ 260.549364][T14513] bridge_slave_1: entered promiscuous mode [ 260.558574][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'. [ 260.609038][ T2866] hsr_slave_0: left promiscuous mode [ 260.631722][ T2866] hsr_slave_1: left promiscuous mode [ 260.652406][ T2866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.666699][ T2866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.685814][ T2866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.693513][ T2866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.757106][ T2866] veth1_macvtap: left promiscuous mode [ 260.771143][ T2866] veth0_macvtap: left promiscuous mode [ 260.779511][ T2866] veth1_vlan: left promiscuous mode [ 260.785481][ T2866] veth0_vlan: left promiscuous mode [ 260.819180][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3122'. [ 260.941835][ T2866] team0 (unregistering): Port device batadv1 removed [ 261.443694][ T2866] team0 (unregistering): Port device team_slave_1 removed [ 261.510722][ T2866] team0 (unregistering): Port device team_slave_0 removed [ 261.765892][ T53] Bluetooth: hci5: command tx timeout [ 261.981546][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.004351][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.012365][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.020316][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.030840][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.050474][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.071695][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.080163][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.089243][T14680] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 262.123072][T14682] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3122'. [ 262.159161][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.243006][T14513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.302712][T14513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.432441][T14513] team0: Port device team_slave_0 added [ 262.551966][T14513] team0: Port device team_slave_1 added [ 262.657348][T14513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.685059][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.726211][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3133'. [ 262.739992][T14513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.767272][T14513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.784491][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.823386][T14513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.960604][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3139'. [ 263.024547][T14513] hsr_slave_0: entered promiscuous mode [ 263.044843][T14513] hsr_slave_1: entered promiscuous mode [ 263.083772][T14513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.105685][T14513] Cannot create hsr debugfs directory [ 263.126988][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3143'. [ 263.288416][T14757] block nbd1: not configured, cannot reconfigure [ 263.578841][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 263.601047][T14777] macvlan5: entered promiscuous mode [ 263.606870][T14777] macvlan5: entered allmulticast mode [ 263.690606][T14775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3155'. [ 263.709567][T14775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3155'. [ 263.731060][T14786] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 263.738361][T14775] macvlan0: entered promiscuous mode [ 263.762811][T14775] batadv_slave_0: entered promiscuous mode [ 263.844570][ T4491] Bluetooth: hci5: command tx timeout [ 263.923412][T14513] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.938603][T14513] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.952930][T14513] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.966511][T14513] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.183840][T14513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.238888][T14513] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.273797][T14028] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.281017][T14028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.319212][T14027] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.326407][T14027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.418845][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3171'. [ 264.453234][T14821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3172'. [ 264.475395][T14821] validate_nla: 4 callbacks suppressed [ 264.475413][T14821] netlink: 'syz.0.3172': attribute type 10 has an invalid length. [ 264.718612][T14513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.721973][T14836] netlink: 'syz.1.3176': attribute type 1 has an invalid length. [ 264.874940][T14513] veth0_vlan: entered promiscuous mode [ 264.937437][T14513] veth1_vlan: entered promiscuous mode [ 265.075475][T14513] veth0_macvtap: entered promiscuous mode [ 265.103518][T14513] veth1_macvtap: entered promiscuous mode [ 265.159064][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.180408][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.210920][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.232043][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.243256][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.256045][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.268828][T14513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.296342][T14865] team_slave_0: left promiscuous mode [ 265.317960][T14865] team_slave_1: left promiscuous mode [ 265.323764][T14865] bridge2: left promiscuous mode [ 265.373700][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.411520][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.430163][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.451434][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.479678][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.510327][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.534244][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.552248][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.565652][T14513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.576438][T14513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.589250][T14513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.660260][T14513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.685531][T14513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.704405][T14513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.713573][T14513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.854775][T14892] __nla_validate_parse: 4 callbacks suppressed [ 265.854826][T14892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3192'. [ 265.998644][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.030238][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.046968][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3195'. [ 266.090260][ T2821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.101105][ T2821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.686876][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'. [ 266.709026][T14932] netlink: 'syz.4.3206': attribute type 1 has an invalid length. [ 266.734611][T14932] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3206'. [ 267.028541][T14962] bridge0: port 2(bridge_slave_1) entered listening state [ 267.083019][T14965] netlink: 'syz.1.3215': attribute type 6 has an invalid length. [ 267.478895][T14991] FAULT_INJECTION: forcing a failure. [ 267.478895][T14991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.555446][T14991] CPU: 1 PID: 14991 Comm: syz.0.3224 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 267.565667][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 267.575753][T14991] Call Trace: [ 267.579092][T14991] [ 267.582022][T14991] dump_stack_lvl+0x241/0x360 [ 267.586709][T14991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.591904][T14991] ? __pfx__printk+0x10/0x10 [ 267.596488][T14991] ? __pfx_lock_release+0x10/0x10 [ 267.601510][T14991] should_fail_ex+0x3b0/0x4e0 [ 267.606188][T14991] _copy_from_user+0x2f/0xe0 [ 267.610770][T14991] copy_msghdr_from_user+0xae/0x680 [ 267.615966][T14991] ? __pfx___might_resched+0x10/0x10 [ 267.621250][T14991] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 267.627052][T14991] ? __might_fault+0xaa/0x120 [ 267.631726][T14991] do_recvmmsg+0x40f/0xae0 [ 267.636139][T14991] ? __pfx_lock_release+0x10/0x10 [ 267.641157][T14991] ? __pfx_do_recvmmsg+0x10/0x10 [ 267.646099][T14991] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 267.651984][T14991] ? ksys_write+0x23e/0x2c0 [ 267.656478][T14991] ? __pfx_lock_release+0x10/0x10 [ 267.661494][T14991] ? vfs_write+0x7c4/0xc90 [ 267.665905][T14991] ? __mutex_unlock_slowpath+0x21d/0x750 [ 267.671540][T14991] ? __fget_files+0x3f6/0x470 [ 267.676221][T14991] __x64_sys_recvmmsg+0x199/0x250 [ 267.681242][T14991] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 267.686779][T14991] ? do_syscall_64+0x100/0x230 [ 267.691532][T14991] ? do_syscall_64+0xb6/0x230 [ 267.696199][T14991] do_syscall_64+0xf3/0x230 [ 267.700692][T14991] ? clear_bhb_loop+0x35/0x90 [ 267.705361][T14991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.711245][T14991] RIP: 0033:0x7f1509575bd9 [ 267.715655][T14991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.735273][T14991] RSP: 002b:00007f150a426048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 267.743695][T14991] RAX: ffffffffffffffda RBX: 00007f1509703f60 RCX: 00007f1509575bd9 [ 267.751668][T14991] RDX: e9627e53d33a589f RSI: 0000000020000480 RDI: 0000000000000003 [ 267.759651][T14991] RBP: 00007f150a4260a0 R08: 0000000000000000 R09: 0000000000000000 [ 267.767643][T14991] R10: 0000000000010020 R11: 0000000000000246 R12: 0000000000000002 [ 267.775618][T14991] R13: 000000000000000b R14: 00007f1509703f60 R15: 00007ffc73ec3f38 [ 267.783597][T14991] [ 267.958027][T14999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3228'. [ 268.306448][T15020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.452018][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'. [ 268.557276][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 268.558058][T15032] netlink: 'syz.2.3240': attribute type 3 has an invalid length. [ 268.601847][T15043] netlink: 'syz.2.3240': attribute type 3 has an invalid length. [ 268.640931][T15032] netlink: 6740 bytes leftover after parsing attributes in process `syz.2.3240'. [ 268.654419][T15043] netlink: 6740 bytes leftover after parsing attributes in process `syz.2.3240'. [ 268.666624][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3243'. [ 268.990294][T15064] tipc: Bearer : already 2 bearers with priority 10 [ 269.014079][T15064] tipc: Bearer : trying with adjusted priority [ 269.033081][T15064] tipc: Enabled bearer , priority 9 [ 269.109493][T15066] tipc: Enabling of bearer rejected, already enabled [ 269.138873][T15064] netlink: 'syz.0.3248': attribute type 3 has an invalid length. [ 269.449830][T15088] team0: Port device bridge5 added [ 269.495685][T15097] vlan4: entered promiscuous mode [ 269.527208][T15097] ip6gretap0: entered promiscuous mode [ 269.668814][T15097] ip6gretap0: left promiscuous mode [ 269.768616][T15101] netlink: 'syz.0.3262': attribute type 10 has an invalid length. [ 270.188734][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.199110][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.224484][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.246679][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.256860][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.264826][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.364961][T15116] lo speed is unknown, defaulting to 1000 [ 270.460754][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.588110][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.712803][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.770671][T15135] team0: Port device bridge8 added [ 270.862488][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.883440][T15146] netlink: 'syz.2.3275': attribute type 6 has an invalid length. [ 270.897670][T15116] chnl_net:caif_netlink_parms(): no params data found [ 271.156744][T15116] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.163910][T15116] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.173171][T15116] bridge_slave_0: entered allmulticast mode [ 271.181126][T15116] bridge_slave_0: entered promiscuous mode [ 271.195486][ T11] bridge_slave_1: left allmulticast mode [ 271.201164][ T11] bridge_slave_1: left promiscuous mode [ 271.209078][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.231466][ T11] bridge_slave_0: left allmulticast mode [ 271.244575][ T11] bridge_slave_0: left promiscuous mode [ 271.251306][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.452087][T15177] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 271.968749][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.993450][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.015053][ T11] bond0 (unregistering): Released all slaves [ 272.030593][T15116] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.038159][T15116] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.045673][T15116] bridge_slave_1: entered allmulticast mode [ 272.055384][T15116] bridge_slave_1: entered promiscuous mode [ 272.128382][T15201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.252951][T15116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.290361][T15116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.330049][ T53] Bluetooth: hci3: command tx timeout [ 272.595281][T15224] __nla_validate_parse: 5 callbacks suppressed [ 272.595301][T15224] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3296'. [ 272.712299][T15116] team0: Port device team_slave_0 added [ 272.761333][T15116] team0: Port device team_slave_1 added [ 272.897386][T15116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.912641][T15116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.952569][T15116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.034554][ T11] hsr_slave_0: left promiscuous mode [ 273.062817][ T11] hsr_slave_1: left promiscuous mode [ 273.076493][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.099686][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.114931][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.130184][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.161219][ T11] veth1_macvtap: left promiscuous mode [ 273.167095][ T11] veth0_macvtap: left promiscuous mode [ 273.172663][ T11] veth1_vlan: left promiscuous mode [ 273.178133][ T11] veth0_vlan: left promiscuous mode [ 273.644341][ T11] team0 (unregistering): Port device team_slave_1 removed [ 273.683851][ T11] team0 (unregistering): Port device team_slave_0 removed [ 274.102380][T15116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.109669][T15116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.135951][T15116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.359689][T15270] tipc: Enabling of bearer rejected, already enabled [ 274.411601][ T53] Bluetooth: hci3: command tx timeout [ 274.448928][T15116] hsr_slave_0: entered promiscuous mode [ 274.518205][T15116] hsr_slave_1: entered promiscuous mode [ 274.604226][T15116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.623344][T15116] Cannot create hsr debugfs directory [ 274.642398][T15282] netlink: 'syz.0.3316': attribute type 6 has an invalid length. [ 274.939413][ T4491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.956572][ T4491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.964684][ T4491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.973384][ T4491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.983065][ T4491] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.990598][ T4491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.056803][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3322'. [ 275.180710][T15292] lo speed is unknown, defaulting to 1000 [ 275.259976][T15303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3323'. [ 275.295020][T15305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3324'. [ 275.430378][T15312] netlink: 'syz.4.3328': attribute type 13 has an invalid length. [ 275.593309][T15292] chnl_net:caif_netlink_parms(): no params data found [ 275.899643][T15116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.929444][T15292] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.951846][T15292] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.963001][T15292] bridge_slave_0: entered allmulticast mode [ 275.971795][T15292] bridge_slave_0: entered promiscuous mode [ 275.980001][T15116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.002625][T15292] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.019276][T15292] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.030142][T15292] bridge_slave_1: entered allmulticast mode [ 276.042390][T15336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.056089][T15292] bridge_slave_1: entered promiscuous mode [ 276.066265][T15116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.117495][T15116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.203813][T15292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.206145][T15336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.227610][T15345] netlink: 'syz.0.3334': attribute type 10 has an invalid length. [ 276.243879][T15292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.248013][T15336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.325860][T15343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.353220][T15343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.366361][T15350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3336'. [ 276.390756][T15292] team0: Port device team_slave_0 added [ 276.393300][T15352] netlink: 528 bytes leftover after parsing attributes in process `syz.4.3337'. [ 276.410680][T15292] team0: Port device team_slave_1 added [ 276.491481][ T53] Bluetooth: hci3: command tx timeout [ 276.526347][T15292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.534658][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.562604][T15292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.568755][T15358] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3340'. [ 276.586250][T15292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.593395][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.624114][T15292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.728593][T15292] hsr_slave_0: entered promiscuous mode [ 276.741448][T15292] hsr_slave_1: entered promiscuous mode [ 276.750121][T15292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.757980][T15292] Cannot create hsr debugfs directory [ 276.965888][T15292] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.978200][T15292] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.003917][T15116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.033879][T15116] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.046000][ T53] Bluetooth: hci4: command tx timeout [ 277.047149][T14032] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.059037][T14032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.102211][T15292] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.113057][T15292] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.142111][T14032] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.149323][T14032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.235137][T15292] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.246484][T15292] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.362405][T15292] team0: Port device netdevsim0 removed [ 277.371640][T15292] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.387873][T15292] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.407497][T15371] nft_compat: unsupported protocol 5 [ 277.432165][T15371] sctp: [Deprecated]: syz.4.3342 (pid 15371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.432165][T15371] Use struct sctp_sack_info instead [ 277.703513][T15116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.747461][T15292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.822395][T15292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.843665][T15292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.885240][T15292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.961962][T15116] veth0_vlan: entered promiscuous mode [ 278.001746][T15404] sctp: [Deprecated]: syz.0.3352 (pid 15404) Use of int in max_burst socket option. [ 278.001746][T15404] Use struct sctp_assoc_value instead [ 278.035442][T15116] veth1_vlan: entered promiscuous mode [ 278.226010][T15116] veth0_macvtap: entered promiscuous mode [ 278.237940][T15116] veth1_macvtap: entered promiscuous mode [ 278.270186][T15292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.302451][T15413] FAULT_INJECTION: forcing a failure. [ 278.302451][T15413] name failslab, interval 1, probability 0, space 0, times 0 [ 278.315640][T15413] CPU: 0 PID: 15413 Comm: syz.2.3356 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 278.325813][T15413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 278.335884][T15413] Call Trace: [ 278.339161][T15413] [ 278.342084][T15413] dump_stack_lvl+0x241/0x360 [ 278.346777][T15413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.351966][T15413] ? __pfx__printk+0x10/0x10 [ 278.356549][T15413] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 278.362265][T15413] should_fail_ex+0x3b0/0x4e0 [ 278.366944][T15413] ? __hw_addr_add_ex+0x1a8/0x610 [ 278.371963][T15413] should_failslab+0x9/0x20 [ 278.376468][T15413] kmalloc_trace_noprof+0x6c/0x2c0 [ 278.381577][T15413] __hw_addr_add_ex+0x1a8/0x610 [ 278.386426][T15413] dev_mc_add+0xa3/0x110 [ 278.390661][T15413] igmp_group_added+0x1bf/0x8d0 [ 278.395505][T15413] ? __local_bh_enable_ip+0x168/0x200 [ 278.400866][T15413] ? lockdep_hardirqs_on+0x99/0x150 [ 278.406067][T15413] ? __pfx_igmp_group_added+0x10/0x10 [ 278.411429][T15413] ? ____ip_mc_inc_group+0x990/0xbf0 [ 278.416715][T15413] ____ip_mc_inc_group+0x998/0xbf0 [ 278.421821][T15413] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 278.427448][T15413] ? trace_kmalloc+0x1f/0xd0 [ 278.432036][T15413] ? __ip_mc_join_group+0x386/0x500 [ 278.437229][T15413] __ip_mc_join_group+0x422/0x500 [ 278.442250][T15413] do_mcast_group_source+0x584/0x8e0 [ 278.447616][T15413] ? __pfx_do_mcast_group_source+0x10/0x10 [ 278.453412][T15413] ? __pfx_register_lock_class+0x10/0x10 [ 278.459039][T15413] ? mark_lock+0x9a/0x350 [ 278.463362][T15413] ? __lock_acquire+0x1346/0x1fd0 [ 278.468411][T15413] ? __local_bh_enable_ip+0x168/0x200 [ 278.473771][T15413] ? do_ip_setsockopt+0x1a2d/0x3cd0 [ 278.478958][T15413] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 278.484675][T15413] do_ip_setsockopt+0x1f36/0x3cd0 [ 278.489701][T15413] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 278.495063][T15413] ? aa_sk_perm+0x967/0xab0 [ 278.499572][T15413] ? __pfx_aa_sk_perm+0x10/0x10 [ 278.504417][T15413] ? __pfx_lock_acquire+0x10/0x10 [ 278.509428][T15413] ? aa_sock_opt_perm+0x79/0x120 [ 278.514361][T15413] ip_setsockopt+0x63/0x100 [ 278.518857][T15413] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 278.524743][T15413] do_sock_setsockopt+0x3af/0x720 [ 278.529767][T15413] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 278.535302][T15413] ? __fget_files+0x29/0x470 [ 278.540057][T15413] ? __fget_files+0x3f6/0x470 [ 278.544751][T15413] __sys_setsockopt+0x1ae/0x250 [ 278.549714][T15413] __x64_sys_setsockopt+0xb5/0xd0 [ 278.554744][T15413] do_syscall_64+0xf3/0x230 [ 278.559244][T15413] ? clear_bhb_loop+0x35/0x90 [ 278.563937][T15413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.569918][T15413] RIP: 0033:0x7f36f0f75bd9 [ 278.574327][T15413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.593945][T15413] RSP: 002b:00007f36f1e01048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 278.602371][T15413] RAX: ffffffffffffffda RBX: 00007f36f1103f60 RCX: 00007f36f0f75bd9 [ 278.610356][T15413] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000003 [ 278.618318][T15413] RBP: 00007f36f1e010a0 R08: 0000000000000108 R09: 0000000000000000 [ 278.626280][T15413] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 278.634241][T15413] R13: 000000000000000b R14: 00007f36f1103f60 R15: 00007ffff1873158 [ 278.642217][T15413] [ 278.652728][ T53] Bluetooth: hci3: command tx timeout [ 278.681530][T15116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.692388][T15116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.703100][T15116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.714026][T15116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.723857][T15116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.735000][T15116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.746924][T15116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.776162][T15292] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.793411][T15116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.802492][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3358'. [ 278.813096][T15116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.813115][T15116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.813131][T15116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.813146][T15116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.813159][T15116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.813173][T15116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.813185][T15116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.813199][T15116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.813212][T15116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.820297][T15116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.922073][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3358'. [ 278.943774][T15422] dccp_v4_rcv: dropped packet with invalid checksum [ 278.975873][T14032] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.982998][T14032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.007730][T15116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.017008][T15116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.027305][T15116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.037032][T15116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.046664][T15429] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 279.073456][T14028] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.080686][T14028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.125688][ T53] Bluetooth: hci4: command 0x041b tx timeout [ 279.297103][T15438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3365'. [ 279.403059][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.444495][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.487141][ T2821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.514112][ T2821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.536792][T15447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3367'. [ 279.928851][T15292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.951607][T15470] nbd: couldn't find a device at index 3 [ 280.087418][T15292] veth0_vlan: entered promiscuous mode [ 280.123153][T15292] veth1_vlan: entered promiscuous mode [ 280.172727][T15487] xt_connbytes: Forcing CT accounting to be enabled [ 280.214794][T15487] xt_bpf: check failed: parse error [ 280.270311][T15292] veth0_macvtap: entered promiscuous mode [ 280.292148][T15292] veth1_macvtap: entered promiscuous mode [ 280.327356][T15492] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3381'. [ 280.362724][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.388398][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.418364][T15497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3384'. [ 280.422140][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.427907][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 280.463837][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.477996][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.493013][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.503140][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.514589][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.526862][T15292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.582678][T15500] can: request_module (can-proto-0) failed. [ 280.584461][T15506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3385'. [ 280.601925][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.634198][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.638884][T15508] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3387'. [ 280.663507][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.684095][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.706683][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.742479][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.764146][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.784192][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.796178][T15511] batman_adv: batadv0: adding TT local entry 4a:c8:93:54:21:00 to non-existent VLAN 2358 [ 280.814660][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.834160][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.854223][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.874217][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.895825][T15292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.908889][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3384'. [ 280.942120][T15506] macvlan5: entered allmulticast mode [ 280.951726][T15506] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 281.005451][T15292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.020469][T15292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.045033][T15292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.053767][T15292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.205083][ T4491] Bluetooth: hci4: command 0x041b tx timeout [ 281.450577][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.481003][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.596109][ T2866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.623948][ T2866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.744086][T15541] bridge37: entered allmulticast mode [ 281.846692][T15546] netlink: 'syz.0.3399': attribute type 1 has an invalid length. [ 282.456478][T15563] bond_slave_0: entered promiscuous mode [ 282.462248][T15563] bond_slave_1: entered promiscuous mode [ 282.474728][T15563] vlan3: entered promiscuous mode [ 282.487792][T15563] bond0: entered promiscuous mode [ 282.498033][T15563] macvlan3: entered promiscuous mode [ 282.517670][T15563] bond0: left promiscuous mode [ 282.525320][T15563] macvlan3: left promiscuous mode [ 282.533760][T15566] xt_cgroup: path and classid specified [ 282.534577][T15563] bond_slave_0: left promiscuous mode [ 282.544902][T15563] bond_slave_1: left promiscuous mode [ 282.715694][T15568] hsr0: entered promiscuous mode [ 282.918888][T15596] netlink: 'syz.4.3413': attribute type 33 has an invalid length. [ 283.285266][ T4491] Bluetooth: hci4: command 0x041b tx timeout [ 283.586556][T15623] FAULT_INJECTION: forcing a failure. [ 283.586556][T15623] name failslab, interval 1, probability 0, space 0, times 0 [ 283.621312][T15623] CPU: 0 PID: 15623 Comm: syz.1.3421 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 283.631510][T15623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 283.641563][T15623] Call Trace: [ 283.644836][T15623] [ 283.647764][T15623] dump_stack_lvl+0x241/0x360 [ 283.652437][T15623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.657627][T15623] ? __pfx__printk+0x10/0x10 [ 283.662392][T15623] should_fail_ex+0x3b0/0x4e0 [ 283.667077][T15623] ? sctp_add_bind_addr+0x89/0x3a0 [ 283.672211][T15623] should_failslab+0x9/0x20 [ 283.676713][T15623] kmalloc_trace_noprof+0x6c/0x2c0 [ 283.681828][T15623] sctp_add_bind_addr+0x89/0x3a0 [ 283.686772][T15623] sctp_copy_local_addr_list+0x311/0x500 [ 283.692439][T15623] ? sctp_copy_local_addr_list+0xab/0x500 [ 283.698165][T15623] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 283.704317][T15623] ? sctp_v6_is_any+0x60/0x70 [ 283.708998][T15623] sctp_bind_addr_copy+0xad/0x3b0 [ 283.714023][T15623] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 283.720351][T15623] sctp_connect_new_asoc+0x2f3/0x6c0 [ 283.725655][T15623] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 283.731471][T15623] ? sctp_sendmsg+0xbb9/0x3520 [ 283.736254][T15623] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 283.741805][T15623] ? security_sctp_bind_connect+0x90/0xb0 [ 283.747532][T15623] sctp_sendmsg+0x219a/0x3520 [ 283.752228][T15623] ? __pfx_sctp_sendmsg+0x10/0x10 [ 283.757251][T15623] ? __pfx_aa_sk_perm+0x10/0x10 [ 283.762105][T15623] ? inet_sendmsg+0x330/0x390 [ 283.766775][T15623] __sock_sendmsg+0x1a6/0x270 [ 283.771469][T15623] __sys_sendto+0x3a4/0x4f0 [ 283.775970][T15623] ? __pfx___sys_sendto+0x10/0x10 [ 283.781008][T15623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.786983][T15623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.793307][T15623] __x64_sys_sendto+0xde/0x100 [ 283.798070][T15623] do_syscall_64+0xf3/0x230 [ 283.802565][T15623] ? clear_bhb_loop+0x35/0x90 [ 283.807235][T15623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.813150][T15623] RIP: 0033:0x7fac51375bd9 [ 283.817561][T15623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.837242][T15623] RSP: 002b:00007fac521cf048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 283.845653][T15623] RAX: ffffffffffffffda RBX: 00007fac51503f60 RCX: 00007fac51375bd9 [ 283.853616][T15623] RDX: 0000000000000001 RSI: 0000000020000580 RDI: 0000000000000003 [ 283.861577][T15623] RBP: 00007fac521cf0a0 R08: 0000000020000100 R09: 000000000000001c [ 283.869539][T15623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 283.877504][T15623] R13: 000000000000000b R14: 00007fac51503f60 R15: 00007ffcd3ce7e88 [ 283.885482][T15623] [ 284.768518][T15615] bridge0: port 2(bridge_slave_1) entered listening state [ 284.791727][T15616] lo speed is unknown, defaulting to 1000 [ 284.809884][T15619] __nla_validate_parse: 3 callbacks suppressed [ 284.809904][T15619] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3418'. [ 284.856071][T15619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.970456][T15639] netlink: 'syz.4.3427': attribute type 1 has an invalid length. [ 284.979402][T15637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3426'. [ 284.996810][T15639] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.3427'. [ 285.027142][T15639] netlink: 'syz.4.3427': attribute type 2 has an invalid length. [ 285.103114][T15639] netlink: 'syz.4.3427': attribute type 1 has an invalid length. [ 285.142315][T15644] netlink: 'syz.0.3428': attribute type 29 has an invalid length. [ 285.159934][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'. [ 285.207646][T15650] FAULT_INJECTION: forcing a failure. [ 285.207646][T15650] name failslab, interval 1, probability 0, space 0, times 0 [ 285.224922][T15640] netlink: 'syz.4.3427': attribute type 1 has an invalid length. [ 285.253003][T15644] netlink: 'syz.0.3428': attribute type 29 has an invalid length. [ 285.261509][T15640] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.3427'. [ 285.287392][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'. [ 285.294207][T15650] CPU: 1 PID: 15650 Comm: syz.3.3429 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 285.306416][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.307992][T15640] netlink: 'syz.4.3427': attribute type 2 has an invalid length. [ 285.316460][T15650] Call Trace: [ 285.316472][T15650] [ 285.316481][T15650] dump_stack_lvl+0x241/0x360 [ 285.316509][T15650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.316528][T15650] ? __pfx__printk+0x10/0x10 [ 285.344820][T15650] should_fail_ex+0x3b0/0x4e0 [ 285.349503][T15650] ? nf_tables_newtable+0x52e/0x1dc0 [ 285.354779][T15650] should_failslab+0x9/0x20 [ 285.359274][T15650] kmalloc_trace_noprof+0x6c/0x2c0 [ 285.364379][T15650] ? nft_pernet+0x23/0x240 [ 285.368785][T15650] nf_tables_newtable+0x52e/0x1dc0 [ 285.373884][T15650] ? nfnl_pernet+0x23/0x240 [ 285.378381][T15650] ? __pfx_nf_tables_newtable+0x10/0x10 [ 285.383923][T15650] ? __nla_parse+0x40/0x60 [ 285.388335][T15650] nfnetlink_rcv+0x1427/0x2a90 [ 285.393116][T15650] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 285.398259][T15650] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.403451][T15650] ? skb_clone+0x240/0x390 [ 285.407863][T15650] ? __pfx_lock_release+0x10/0x10 [ 285.412889][T15650] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.418077][T15650] netlink_unicast+0x7f0/0x990 [ 285.422835][T15650] ? __pfx_netlink_unicast+0x10/0x10 [ 285.428203][T15650] ? __virt_addr_valid+0x183/0x520 [ 285.433315][T15650] ? __check_object_size+0x49c/0x900 [ 285.438593][T15650] ? bpf_lsm_netlink_send+0x9/0x10 [ 285.443699][T15650] netlink_sendmsg+0x8e4/0xcb0 [ 285.448470][T15650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.453747][T15650] ? __mutex_trylock_common+0x183/0x2e0 [ 285.459291][T15650] ? aa_sock_msg_perm+0x91/0x160 [ 285.464223][T15650] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 285.469492][T15650] ? security_socket_sendmsg+0x87/0xb0 [ 285.474942][T15650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.480221][T15650] __sock_sendmsg+0x221/0x270 [ 285.484893][T15650] sock_sendmsg+0x134/0x200 [ 285.489389][T15650] ? __pfx_sock_sendmsg+0x10/0x10 [ 285.494416][T15650] ? iov_iter_bvec+0x4e/0x180 [ 285.499083][T15650] splice_to_socket+0xa13/0x10b0 [ 285.504014][T15650] ? __pfx_lock_release+0x10/0x10 [ 285.509055][T15650] ? __pfx_splice_to_socket+0x10/0x10 [ 285.514434][T15650] ? __lock_acquire+0x1346/0x1fd0 [ 285.519460][T15650] ? bpf_lsm_file_permission+0x9/0x10 [ 285.524821][T15650] ? security_file_permission+0x7f/0xa0 [ 285.530364][T15650] ? rw_verify_area+0x1d2/0x6b0 [ 285.535210][T15650] ? __pfx_splice_to_socket+0x10/0x10 [ 285.540572][T15650] do_splice+0xd77/0x1900 [ 285.544984][T15650] ? __pfx_lock_release+0x10/0x10 [ 285.550002][T15650] ? vfs_write+0x7c4/0xc90 [ 285.554416][T15650] ? __mutex_unlock_slowpath+0x21d/0x750 [ 285.560048][T15650] ? pipe_clear_nowait+0x196/0x220 [ 285.565150][T15650] ? __pfx_do_splice+0x10/0x10 [ 285.569908][T15650] __se_sys_splice+0x331/0x4a0 [ 285.574668][T15650] ? __pfx___se_sys_splice+0x10/0x10 [ 285.579941][T15650] ? do_syscall_64+0x100/0x230 [ 285.584697][T15650] ? __x64_sys_splice+0x21/0xf0 [ 285.589539][T15650] do_syscall_64+0xf3/0x230 [ 285.594037][T15650] ? clear_bhb_loop+0x35/0x90 [ 285.598715][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.604598][T15650] RIP: 0033:0x7f7f2db75bd9 [ 285.609002][T15650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.628601][T15650] RSP: 002b:00007f7f2e9e2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 285.637017][T15650] RAX: ffffffffffffffda RBX: 00007f7f2dd04038 RCX: 00007f7f2db75bd9 [ 285.644982][T15650] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 285.652969][T15650] RBP: 00007f7f2e9e20a0 R08: 0000000000007fff R09: 0000000000000000 [ 285.660943][T15650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.668915][T15650] R13: 000000000000006e R14: 00007f7f2dd04038 R15: 00007ffd169f41e8 [ 285.676896][T15650] [ 285.705876][ T4491] Bluetooth: hci4: command 0x041b tx timeout [ 285.712177][T15640] netlink: 'syz.4.3427': attribute type 1 has an invalid length. [ 285.755219][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3430'. [ 285.947187][T15665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3434'. [ 286.095190][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 286.144681][T15671] x_tables: duplicate underflow at hook 1 [ 286.338704][T15686] FAULT_INJECTION: forcing a failure. [ 286.338704][T15686] name failslab, interval 1, probability 0, space 0, times 0 [ 286.356315][T15686] CPU: 1 PID: 15686 Comm: syz.1.3441 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 286.366506][T15686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 286.376575][T15686] Call Trace: [ 286.379140][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3443'. [ 286.379846][T15686] [ 286.391716][T15686] dump_stack_lvl+0x241/0x360 [ 286.396419][T15686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.401633][T15686] ? __pfx__printk+0x10/0x10 [ 286.406237][T15686] ? __pfx___might_resched+0x10/0x10 [ 286.411544][T15686] should_fail_ex+0x3b0/0x4e0 [ 286.416249][T15686] should_failslab+0x9/0x20 [ 286.420771][T15686] __kmalloc_node_noprof+0xdf/0x440 [ 286.425988][T15686] ? kvmalloc_node_noprof+0x72/0x190 [ 286.431289][T15686] kvmalloc_node_noprof+0x72/0x190 [ 286.436418][T15686] nf_tables_newchain+0x22ea/0x33a0 [ 286.441660][T15686] ? __pfx_nf_tables_newchain+0x10/0x10 [ 286.447245][T15686] ? __pfx_lock_acquire+0x10/0x10 [ 286.452287][T15686] ? nfnl_pernet+0x23/0x240 [ 286.456804][T15686] ? __pfx_lock_release+0x10/0x10 [ 286.461858][T15686] ? __nla_parse+0x40/0x60 [ 286.466304][T15686] nfnetlink_rcv+0x1427/0x2a90 [ 286.471124][T15686] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 286.476285][T15686] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.481476][T15686] ? skb_clone+0x240/0x390 [ 286.485894][T15686] ? __pfx_lock_release+0x10/0x10 [ 286.490919][T15686] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.496109][T15686] netlink_unicast+0x7f0/0x990 [ 286.500871][T15686] ? __pfx_netlink_unicast+0x10/0x10 [ 286.506150][T15686] ? __virt_addr_valid+0x183/0x520 [ 286.511256][T15686] ? __check_object_size+0x49c/0x900 [ 286.516536][T15686] ? bpf_lsm_netlink_send+0x9/0x10 [ 286.521644][T15686] netlink_sendmsg+0x8e4/0xcb0 [ 286.526408][T15686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.531681][T15686] ? __mutex_trylock_common+0x183/0x2e0 [ 286.537218][T15686] ? aa_sock_msg_perm+0x91/0x160 [ 286.542169][T15686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.547541][T15686] ? security_socket_sendmsg+0x87/0xb0 [ 286.553004][T15686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.558293][T15686] __sock_sendmsg+0x221/0x270 [ 286.562992][T15686] sock_sendmsg+0x134/0x200 [ 286.567514][T15686] ? __pfx_sock_sendmsg+0x10/0x10 [ 286.572565][T15686] ? iov_iter_bvec+0x4e/0x180 [ 286.577240][T15686] splice_to_socket+0xa13/0x10b0 [ 286.582179][T15686] ? __pfx_lock_release+0x10/0x10 [ 286.587216][T15686] ? __pfx_splice_to_socket+0x10/0x10 [ 286.592596][T15686] ? __lock_acquire+0x1346/0x1fd0 [ 286.597622][T15686] ? bpf_lsm_file_permission+0x9/0x10 [ 286.603087][T15686] ? security_file_permission+0x7f/0xa0 [ 286.608626][T15686] ? rw_verify_area+0x1d2/0x6b0 [ 286.613470][T15686] ? __pfx_splice_to_socket+0x10/0x10 [ 286.618836][T15686] do_splice+0xd77/0x1900 [ 286.623175][T15686] ? __pfx_lock_release+0x10/0x10 [ 286.628189][T15686] ? vfs_write+0x7c4/0xc90 [ 286.632600][T15686] ? __mutex_unlock_slowpath+0x21d/0x750 [ 286.638231][T15686] ? pipe_clear_nowait+0x196/0x220 [ 286.643335][T15686] ? __pfx_do_splice+0x10/0x10 [ 286.648098][T15686] __se_sys_splice+0x331/0x4a0 [ 286.652869][T15686] ? __pfx___se_sys_splice+0x10/0x10 [ 286.658583][T15686] ? do_syscall_64+0x100/0x230 [ 286.663339][T15686] ? __x64_sys_splice+0x21/0xf0 [ 286.668208][T15686] do_syscall_64+0xf3/0x230 [ 286.672706][T15686] ? clear_bhb_loop+0x35/0x90 [ 286.677379][T15686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.683261][T15686] RIP: 0033:0x7fac51375bd9 [ 286.687664][T15686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.707259][T15686] RSP: 002b:00007fac521ae048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 286.715751][T15686] RAX: ffffffffffffffda RBX: 00007fac51504038 RCX: 00007fac51375bd9 [ 286.723711][T15686] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 286.731670][T15686] RBP: 00007fac521ae0a0 R08: 0000000000007fff R09: 0000000000000000 [ 286.739653][T15686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.747627][T15686] R13: 000000000000006e R14: 00007fac51504038 R15: 00007ffcd3ce7e88 [ 286.755610][T15686] [ 286.829199][T15694] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3446'. [ 286.932853][T15701] IPv6: NLM_F_REPLACE set, but no existing node found! [ 286.941831][ T5140] IPVS: starting estimator thread 0... [ 286.992773][T15701] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 287.045439][T15702] IPVS: using max 24 ests per chain, 57600 per kthread [ 287.114922][T15707] validate_nla: 1 callbacks suppressed [ 287.114944][T15707] netlink: 'syz.2.3449': attribute type 63 has an invalid length. [ 287.185924][T15709] tipc: Started in network mode [ 287.196637][T15709] tipc: Node identity , cluster identity 4711 [ 287.216332][T15709] tipc: Failed to set node id, please configure manually [ 287.226619][T15709] tipc: Enabling of bearer rejected, failed to enable media [ 287.275766][T15711] tipc: Started in network mode [ 287.302835][T15711] tipc: Node identity , cluster identity 4711 [ 287.327401][T15711] tipc: Failed to set node id, please configure manually [ 287.344451][T15711] tipc: Enabling of bearer rejected, failed to enable media [ 287.581434][ T2803] ================================================================== [ 287.589532][ T2803] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0 [ 287.597525][ T2803] Write of size 8 at addr ffff888062747808 by task kworker/u8:7/2803 [ 287.605595][ T2803] [ 287.607923][ T2803] CPU: 0 PID: 2803 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 287.618166][ T2803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.628323][ T2803] Workqueue: l2tp l2tp_tunnel_del_work [ 287.633820][ T2803] Call Trace: [ 287.637107][ T2803] [ 287.640042][ T2803] dump_stack_lvl+0x241/0x360 [ 287.644740][ T2803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.649952][ T2803] ? __pfx__printk+0x10/0x10 [ 287.654549][ T2803] ? _printk+0xd5/0x120 [ 287.658710][ T2803] ? __virt_addr_valid+0x183/0x520 [ 287.663840][ T2803] ? __virt_addr_valid+0x183/0x520 [ 287.669030][ T2803] print_report+0x169/0x550 [ 287.673548][ T2803] ? __virt_addr_valid+0x183/0x520 [ 287.678670][ T2803] ? __virt_addr_valid+0x183/0x520 [ 287.683797][ T2803] ? __virt_addr_valid+0x44e/0x520 [ 287.688931][ T2803] ? __phys_addr+0xba/0x170 [ 287.693453][ T2803] ? l2tp_session_delete+0x28/0x9e0 [ 287.698665][ T2803] kasan_report+0x143/0x180 [ 287.703192][ T2803] ? l2tp_session_delete+0x28/0x9e0 [ 287.708405][ T2803] kasan_check_range+0x282/0x290 [ 287.713360][ T2803] l2tp_session_delete+0x28/0x9e0 [ 287.718404][ T2803] l2tp_tunnel_del_work+0x1cb/0x330 [ 287.723613][ T2803] ? process_scheduled_works+0x945/0x1830 [ 287.729344][ T2803] process_scheduled_works+0xa2c/0x1830 [ 287.734915][ T2803] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.740915][ T2803] ? assign_work+0x364/0x3d0 [ 287.745519][ T2803] worker_thread+0x86d/0xd50 [ 287.750121][ T2803] ? __kthread_parkme+0x169/0x1d0 [ 287.755143][ T2803] ? __pfx_worker_thread+0x10/0x10 [ 287.760247][ T2803] kthread+0x2f0/0x390 [ 287.764306][ T2803] ? __pfx_worker_thread+0x10/0x10 [ 287.769402][ T2803] ? __pfx_kthread+0x10/0x10 [ 287.773979][ T2803] ret_from_fork+0x4b/0x80 [ 287.778400][ T2803] ? __pfx_kthread+0x10/0x10 [ 287.782994][ T2803] ret_from_fork_asm+0x1a/0x30 [ 287.787766][ T2803] [ 287.790781][ T2803] [ 287.793090][ T2803] Allocated by task 15694: [ 287.797504][ T2803] kasan_save_track+0x3f/0x80 [ 287.802262][ T2803] __kasan_kmalloc+0x98/0xb0 [ 287.806844][ T2803] __kmalloc_noprof+0x1f9/0x400 [ 287.811689][ T2803] l2tp_session_create+0x3b/0xc20 [ 287.816713][ T2803] pppol2tp_connect+0xca3/0x17a0 [ 287.821653][ T2803] __sys_connect+0x2df/0x310 [ 287.826234][ T2803] __x64_sys_connect+0x7a/0x90 [ 287.831006][ T2803] do_syscall_64+0xf3/0x230 [ 287.835502][ T2803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.841383][ T2803] [ 287.843693][ T2803] Freed by task 16: [ 287.847485][ T2803] kasan_save_track+0x3f/0x80 [ 287.852165][ T2803] kasan_save_free_info+0x40/0x50 [ 287.857190][ T2803] poison_slab_object+0xe0/0x150 [ 287.862121][ T2803] __kasan_slab_free+0x37/0x60 [ 287.866874][ T2803] kfree+0x149/0x360 [ 287.870759][ T2803] __sk_destruct+0x58/0x5f0 [ 287.875253][ T2803] rcu_core+0xafd/0x1830 [ 287.879482][ T2803] handle_softirqs+0x2c4/0x970 [ 287.884322][ T2803] run_ksoftirqd+0xca/0x130 [ 287.888813][ T2803] smpboot_thread_fn+0x544/0xa30 [ 287.893733][ T2803] kthread+0x2f0/0x390 [ 287.897875][ T2803] ret_from_fork+0x4b/0x80 [ 287.902277][ T2803] ret_from_fork_asm+0x1a/0x30 [ 287.907027][ T2803] [ 287.909332][ T2803] Last potentially related work creation: [ 287.915026][ T2803] kasan_save_stack+0x3f/0x60 [ 287.919685][ T2803] __kasan_record_aux_stack+0xac/0xc0 [ 287.925058][ T2803] call_rcu+0x167/0xa70 [ 287.929373][ T2803] pppol2tp_release+0x24b/0x350 [ 287.934234][ T2803] sock_close+0xbc/0x240 [ 287.938470][ T2803] __fput+0x24a/0x8a0 [ 287.942437][ T2803] task_work_run+0x24f/0x310 [ 287.947013][ T2803] syscall_exit_to_user_mode+0x168/0x360 [ 287.952634][ T2803] do_syscall_64+0x100/0x230 [ 287.957213][ T2803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.963099][ T2803] [ 287.965410][ T2803] The buggy address belongs to the object at ffff888062747800 [ 287.965410][ T2803] which belongs to the cache kmalloc-1k of size 1024 [ 287.979447][ T2803] The buggy address is located 8 bytes inside of [ 287.979447][ T2803] freed 1024-byte region [ffff888062747800, ffff888062747c00) [ 287.993148][ T2803] [ 287.995473][ T2803] The buggy address belongs to the physical page: [ 288.001884][ T2803] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62740 [ 288.010636][ T2803] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 288.019137][ T2803] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 288.026687][ T2803] page_type: 0xffffefff(slab) [ 288.031357][ T2803] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 288.039935][ T2803] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 288.048511][ T2803] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 288.057179][ T2803] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 288.065841][ T2803] head: 00fff00000000003 ffffea000189d001 ffffffffffffffff 0000000000000000 [ 288.074500][ T2803] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 288.083166][ T2803] page dumped because: kasan: bad access detected [ 288.089580][ T2803] page_owner tracks the page as allocated [ 288.095280][ T2803] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2803, tgid 2803 (kworker/u8:7), ts 62168595660, free_ts 14858482812 [ 288.114550][ T2803] post_alloc_hook+0x1f3/0x230 [ 288.119310][ T2803] get_page_from_freelist+0x2e4c/0x2f10 [ 288.124848][ T2803] __alloc_pages_noprof+0x256/0x6c0 [ 288.130034][ T2803] alloc_slab_page+0x5f/0x120 [ 288.134697][ T2803] allocate_slab+0x5a/0x2f0 [ 288.139185][ T2803] ___slab_alloc+0xcd1/0x14b0 [ 288.143844][ T2803] __slab_alloc+0x58/0xa0 [ 288.148158][ T2803] __kmalloc_noprof+0x257/0x400 [ 288.152998][ T2803] ___neigh_create+0x691/0x2470 [ 288.157840][ T2803] ip6_finish_output2+0x1631/0x1680 [ 288.163021][ T2803] ip6_finish_output+0x41e/0x810 [ 288.167957][ T2803] ndisc_send_skb+0xab2/0x1380 [ 288.172709][ T2803] addrconf_dad_completed+0x76c/0xcd0 [ 288.178075][ T2803] addrconf_dad_work+0xdc2/0x16f0 [ 288.183088][ T2803] process_scheduled_works+0xa2c/0x1830 [ 288.188623][ T2803] worker_thread+0x86d/0xd50 [ 288.193206][ T2803] page last free pid 1 tgid 1 stack trace: [ 288.198993][ T2803] free_unref_page+0xd22/0xea0 [ 288.203747][ T2803] free_contig_range+0x9e/0x160 [ 288.208585][ T2803] destroy_args+0x8a/0x890 [ 288.212990][ T2803] debug_vm_pgtable+0x4be/0x550 [ 288.217824][ T2803] do_one_initcall+0x248/0x880 [ 288.222575][ T2803] do_initcall_level+0x157/0x210 [ 288.227503][ T2803] do_initcalls+0x3f/0x80 [ 288.231821][ T2803] kernel_init_freeable+0x435/0x5d0 [ 288.237006][ T2803] kernel_init+0x1d/0x2b0 [ 288.241322][ T2803] ret_from_fork+0x4b/0x80 [ 288.245728][ T2803] ret_from_fork_asm+0x1a/0x30 [ 288.250483][ T2803] [ 288.252789][ T2803] Memory state around the buggy address: [ 288.258403][ T2803] ffff888062747700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 288.266446][ T2803] ffff888062747780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 288.274517][ T2803] >ffff888062747800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.282556][ T2803] ^ [ 288.286863][ T2803] ffff888062747880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.294909][ T2803] ffff888062747900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.302954][ T2803] ================================================================== [ 288.313085][ C0] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 288.341329][ T2803] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 288.348559][ T2803] CPU: 1 PID: 2803 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 288.358803][ T2803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 288.368851][ T2803] Workqueue: l2tp l2tp_tunnel_del_work [ 288.374309][ T2803] Call Trace: [ 288.377576][ T2803] [ 288.380499][ T2803] dump_stack_lvl+0x241/0x360 [ 288.385170][ T2803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.390359][ T2803] ? __pfx__printk+0x10/0x10 [ 288.394955][ T2803] ? preempt_schedule+0xe1/0xf0 [ 288.399815][ T2803] ? vscnprintf+0x5d/0x90 [ 288.404143][ T2803] panic+0x349/0x860 [ 288.408032][ T2803] ? check_panic_on_warn+0x21/0xb0 [ 288.413134][ T2803] ? __pfx_panic+0x10/0x10 [ 288.417546][ T2803] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 288.423517][ T2803] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 288.429837][ T2803] ? print_report+0x502/0x550 [ 288.434511][ T2803] check_panic_on_warn+0x86/0xb0 [ 288.439442][ T2803] ? l2tp_session_delete+0x28/0x9e0 [ 288.444636][ T2803] end_report+0x77/0x160 [ 288.448876][ T2803] kasan_report+0x154/0x180 [ 288.453368][ T2803] ? l2tp_session_delete+0x28/0x9e0 [ 288.458558][ T2803] kasan_check_range+0x282/0x290 [ 288.463488][ T2803] l2tp_session_delete+0x28/0x9e0 [ 288.468531][ T2803] l2tp_tunnel_del_work+0x1cb/0x330 [ 288.473723][ T2803] ? process_scheduled_works+0x945/0x1830 [ 288.479427][ T2803] process_scheduled_works+0xa2c/0x1830 [ 288.484968][ T2803] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.490943][ T2803] ? assign_work+0x364/0x3d0 [ 288.495530][ T2803] worker_thread+0x86d/0xd50 [ 288.500123][ T2803] ? __kthread_parkme+0x169/0x1d0 [ 288.505140][ T2803] ? __pfx_worker_thread+0x10/0x10 [ 288.510237][ T2803] kthread+0x2f0/0x390 [ 288.514294][ T2803] ? __pfx_worker_thread+0x10/0x10 [ 288.519390][ T2803] ? __pfx_kthread+0x10/0x10 [ 288.523971][ T2803] ret_from_fork+0x4b/0x80 [ 288.528399][ T2803] ? __pfx_kthread+0x10/0x10 [ 288.532993][ T2803] ret_from_fork_asm+0x1a/0x30 [ 288.537766][ T2803] [ 288.540996][ T2803] Kernel Offset: disabled [ 288.545309][ T2803] Rebooting in 86400 seconds..