last executing test programs: 17.374667929s ago: executing program 2 (id=3537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000010000000000000000000000791209000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x400}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000010000000000000000000000791209000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 17.132568192s ago: executing program 2 (id=3541): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x8001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = socket(0x5, 0x800, 0x5) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x1402, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x40}}, 0x40) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x1, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44880}, 0x40150) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000c80)=@filter={'filter\x00', 0xe, 0x4, 0x6e8, [0x0, 0x20000580, 0x200006e6, 0x200008b4], 0x0, &(0x7f0000000540), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x0, 0x50, 0xf8, 'virt_wifi0\x00', 'ip_vti0\x00', 'ip6gretap0\x00', 'geneve0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xe6, 0xe6, 0x136, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@mcast1, @remote, [0xffffff00, 0xff, 0xffffff00, 0xffff00], [0x0, 0xff, 0xffffff00, 0xff000000], 0xfa, 0x1d, 0xc, 0x0, 0x4e21, 0x4e22, 0x4e20, 0x4e20}}}], [], @common=@log={'log\x00', 0x28, {{0xa, "7e1af52866f7d3412250140d6547ed36c759d2b6cfb5006ac2e32d15f58c", 0x3}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x10, 0x6558, 'pimreg0\x00', 'lo\x00', 'geneve0\x00', 'wg1\x00', @multicast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff], 0x13e, 0x16e, 0x19e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x312, 0x201, 0x0, @remote, 0x0, @private=0xa010100, 0xff, @multicast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0xc, 0x3c}}}, @stp={{'stp\x00', 0x0, 0x48}, {{0x8, {0x3, 0x3ff, 0x10, @local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xff, 0x800, 0x8, 0x5, @link_local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x4e21, 0x4e20, 0x9, 0x0, 0x4, 0x5, 0x5, 0x7f, 0x3, 0xb4}, 0x80, 0x120}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x40, 0x9100, 'veth0_to_bond\x00', 'wg2\x00', 'syzkaller0\x00', 'sit0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, [0x0, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"d288b894db0ad2a23fe4cb87d164f773048cedd421b3e246bcb7483f88e6"}}}, {0x5, 0x48, 0x8864, 'dvmrp0\x00', 'ip6gre0\x00', 'team0\x00', 'vcan0\x00', @local, [0x0, 0xff, 0xcb777259c668df0, 0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0x7f], 0x10e, 0x26e, 0x29e, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0x7, {0x5}}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x204, 0x88a2, 0x2, @broadcast, 0xff000000, @empty, 0xffffff00, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0x0, 0x0, 0x0, 0x867fe9aabf062120, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x12, 0xaa}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x80000000}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x2, 'system_u:object_r:auditd_var_run_t:s0\x00'}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x760) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) r7 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) write$cgroup_type(r6, &(0x7f0000000d80), 0x9) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)={'nat\x00', 0x0, [0x2, 0x7, 0x9, 0x85c1, 0x4]}, &(0x7f0000000e40)=0x54) sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x6800202}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000f80)={0x0, @in={{0x2, 0x4e20, @local}}, [0x1ff, 0x53d, 0x4, 0x9, 0x5, 0x4, 0x9, 0x7, 0x6, 0xfffffffffffffc00, 0x7, 0x3, 0x100, 0x6, 0x2]}, &(0x7f0000001080)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f00000010c0)={r8, 0xd}, 0x8) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000001100)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x108, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0xec, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x1, 0x81, 0x0, 0x81, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x9, 0x5}}, @random={0x0, 0x22, "08b6094a5d37e184b665fc56cdf3325844b283eee8238bceffa5b09f5e0b0dbf9208"}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, {{}, 0xff, 0x2, @device_b, 0xf, @void, 0x101, 0xffffffff, @device_a, 0xd1af}}, @supported_rates={0x1, 0x6, [{0x2, 0x1}, {0x48, 0x1}, {0x36}, {0x3}, {0x16, 0x1}, {0x16}]}, @preq={0x82, 0x67, {{0x1}, 0x3, 0xa3, 0x192fd9fb, @device_a, 0x0, @void, 0xd7a, 0x80000000, 0x7, [{{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{0x1}, @broadcast, 0x1}, {{}, @broadcast, 0x2}, {{0x1}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @device_a, 0x81}, {{}, @device_b}]}}, @chsw_timing={0x68, 0x4, {0x200, 0xd8ee}}, @cf={0x4, 0x6, {0x6, 0x3d, 0x3, 0xd617}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x24020041) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x30, r11, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x9ae535d7f548b4a3) setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, &(0x7f00000014c0)="56ed6230498322c38ca591eead7960b054376e588b47e3e783a5f98724d6f8bda4a972d708572791", 0x28) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001600)={{}, 0x0, 0x2, @unused=[0x5, 0x8000, 0x4, 0x6], @name="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"}) 16.875847837s ago: executing program 2 (id=3546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)='.', 0x1}], 0x1, 0x0, 0x0, 0xc400}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)="082b3a14", 0xc3ff}], 0x1}}], 0x2, 0x0) 16.734321005s ago: executing program 2 (id=3549): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x2, 0x0, 0x0, 0x0, 0x0, @in, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4(r3, &(0x7f0000000400)=@isdn, &(0x7f0000000500)=0x80, 0x80800) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x5c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "64cff2cf132839b1"}, 0x1}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x2, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x5c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@updsa={0x1ec, 0x1a, 0x100, 0x70bd27, 0x25dfdbfd, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0xfffa, 0x4e24, 0x0, 0x0, 0xe0, 0xe0, 0x3c, r2, r5}, {@in=@remote, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @local}, {0x6, 0xffffffffffffffff, 0xffff, 0x5, 0x1, 0xd74a, 0x2, 0x15bc}, {0x1, 0x82, 0x8000000000000000}, {0xee, 0x2, 0x2}, 0x70bd29, 0x34ff, 0x2, 0x4, 0xf7, 0x10}, [@algo_crypt={0xfc, 0x2, {{'ctr(cast5)\x00'}, 0x5a0, "7dc2ef48b3401f8b51b1f225c92f5abe1d73924f2c8003d03c716ca7dfa58213d297878d886df1d0d1f7f6260769bb89d2a65e36e5d1b824edbec48975a5029002ffa592d0ec3d13a98672b80e67d2894775b1c1621136853ea20537c2d9b46879d5ece7ec396abca5981b35a0ae2ec47d38d781c5eb8621409728c5af77f5f63c145ac0831d6fcafa21bfca065a1115c6e6bc0e58e441e5558f4c3203cc7ff20445e184903e2f1f5f5aee5ef9655479041e1127"}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20008891}, 0x488c5) 16.410601347s ago: executing program 2 (id=3552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8001) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) (async) sendmmsg$inet(r6, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="6464aa4712f30d62562fb844e3e5afdc3fc4bed00df46db22c92377032d4ce282f0e96eac5f0d43d784d8033cc09e3f5a6eec686581e8302aa830d4d068b6c3e54a7f32cfe4a3cc0d1652a7599a456a88d402e416bd481fcbd6afa0298e393755c1c280f48ce366aa6a402cdfce819db38fcdf6b5be9df0d417b50c1d8c5794e", 0x80}, {&(0x7f0000000300)="df", 0xfffffe61}], 0x2}}], 0x1, 0x40400c0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff041, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030000703000000000000000003"], 0x1c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}]}]}, 0x44}}, 0x0) 14.026593316s ago: executing program 1 (id=3596): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x8e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500580600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYBLOB="600200009078"], 0x0) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)="429ac6fcf57d42d6ddf2b3a267961435a1fcd897a640c87136d3a6de4df0e6ceb4e7e4486366be71e92ab71e7448c3a8c9643fbff384146e6b96a080fb8c6f4422e8f1ecc6b7c5433e499b45e69c967dae3932fb3759a6be0bf90bc118071eb4dd3bb39cfb165c8e27733a15d0e2c86d78d204b2745b4409041282adb60ac50546fda7a388c541b90233c33ce6db78fc01ceab902882de00a7c8d3c41476aaeed9eb5c94a8d5b579e799753c6873cff01de6f3187b612ea2867b75260d91ae0fdedd5b310eed2231a348ea", 0xcb}, {&(0x7f0000000180)="a8ab1ec693492adc1132b83c052b3fc5f3aa4bb0aff7700ddd4319beb79f59ae466c", 0x22}, {&(0x7f00000001c0)="d29b0af10486cc9135a987300da0187c66e2541b717a6baa40f04b02d09f37cd653384cb3694f784af95a080b1cfc82728396da28c4309174743b45bf506b9a10e14b53e6498479a2d6317429fe15e1b5c0ea4f55c1604fc2f6ade6298a681fe4847400b29888c448dd8a1a09cbd9515c7bf4e00f12b3dbdc6c7c67aadd4999ec2e13c", 0x83}, {&(0x7f0000000280)="0ed52bcf7e36fe2a970f3f0d1a26a0b2671ac76ee9a8d89aceee6191a066a01368bdb86f012efd6d4b07c9fffb6be567ce319ad07324a4205253bd95cf10648b1f2c7729c4239b7330f4e23b3e1c391fb5c358287fd7e1d1a4fe6af9e4f88709ecdb6af81efedd70d3c0caf6a644bc6acb860ef5c720ed5e91ae540726faae56d475dba4b8e31bd4ca722a84b60c4facb9c6960efc98e4f765fdb033c2d695f1bc93f96fa80a83134ee3102805ddecafe0d2a247b078ef1f", 0xb8}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000340)="800edc866ed3cb0d8ca18c2c59a05a6c36399e6da9b3d36ef1f1201518b12747e616ad346738511d64be1837a668dcfca060c02346ae679d782b33290993c081b0bfa4a9851fba9f951a9291fc0a82a43b0d55d3018b74be82a48408254becd0a48649d49efe6cab090bbe6b267dc5deade227b9f4c89f2e1cd09878211253c9412184dbde3e2527bd13c7a83d3366f77e5e8d66be4213518a8c0849df1ffa14beb446fd1912acd6ee43562dde49bb043a09e9607b3d433fe50b2d719b68abeda8d018b7ed1eaab4aa55f81d29507c5c72477ddffa370b16cb54e36625983aca54fb4bfc93b9478ada2138bf92a0284e3fc4f9ed5caed715", 0xf8}, {&(0x7f0000000540)="81a7cd2263e3a4729792807a4ad3a15db0c9d259f2f1e7079160bdc4c64a8093ba38e5d76c370c1e918ac83b0c321a5273ca2c8385fa0d8967e23050725318ad85a0c0d4a120e8c6d00a415b86d43bbb4a231328f8e72bb36a751dd24231c24f9d13fc1f21c0ef4c29c1d881b8432bfd93fd94b075b5c43def8c86016db8639094ff27de4bc96725c4994e3fab6afc263efb00311f9abc3462225342b6562dfaefd8433788a9b0990f4bb00bffe9d9f8cee89178aa26c8e63c0082cbf136835ed0320890106fa832abdf82a1", 0xcc}, {&(0x7f0000000640)="54aecf4a0c623ecd2355b63b1741ddaaee87e0be4a79fe38819445b7cc6068634c147c2bfc6e4228a12cd6f4ee329ec1ab0a420bae9639cd7c10a79b153cc0c6f3b38d97ba83fcfe61437e9f3da3393cbadaf7eb3f1c95af5f3985adc8d14745ea1a990716913089f42658d65a8511f2c32ce7c6b5d4eae13aba36bd52da5d095415fda1f1af96ef5c60fb01afd7797081f678020ba907c3b2213e402b5ee3beeea9", 0xa2}, {&(0x7f0000000440)="565a5e5df5dc954773aa6440164425db978b62f9a428dea3662cd09b36fcdc237eac8a8b6b7201ebb7d79e252fd2bc82e1de3e65b982ddf2d7d0e8bff7f95be77395fe839b9ac06f8ea36ee21e1ad4621c306f9c843a6d2dd5fdf5ef854ef8e73df3966227737eb1", 0x68}], 0x9}, 0x20000800) 13.82018581s ago: executing program 1 (id=3600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x53, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4830}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001", @ANYRESHEX=0x0], 0x78}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_emit_ethernet(0xee, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x1, 'i'}, 0x2) 13.698613472s ago: executing program 1 (id=3603): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0) (async) r3 = openat$cgroup_int(r2, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_int(r3, &(0x7f0000000180), 0x12) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmmsg$unix(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)="9cdfa98e", 0xdf9c}], 0x1}}], 0x1, 0x0) 13.697581163s ago: executing program 0 (id=3604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x7000004, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000ff8100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) 13.653819011s ago: executing program 1 (id=3605): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 13.586513653s ago: executing program 0 (id=3607): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0xfffffffffffffd5d, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01000000000000000000020000002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000380)={0x1, 0x10, [0x7, 0x4, 0xffffffffffffff80, 0x2c4b], &(0x7f0000000340)=[0x0, 0x0]}) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0xd, 0xb, 0x7, 0xfffffffffffffff4, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000480)='syzkaller\x00', 0x4, 0xe1, &(0x7f0000000580)=""/225, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[r3, r3, r3, r3], &(0x7f0000000700)=[{0x3, 0x1, 0xa, 0x8}, {0x1, 0x3, 0x6, 0x7}, {0x2, 0x1, 0x2}, {0x4, 0x2, 0xd, 0x3}, {0x5, 0x2, 0x10, 0x4}, {0x2, 0x3, 0xe, 0x2}, {0x0, 0x4, 0x1, 0x5}, {0x1, 0x1, 0x7, 0x1}], 0x10, 0x400, @void, @value}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f00000003c0)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c000000000000000000000008001f"], 0x28}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000840)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x3, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x846d) r6 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x1, 'ip6gre0\x00', {}, 0x2}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000940)=0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="080100002b0001000000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"], 0x108}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0x9, 0x79fa87ff, 0xffffffff}, 0x10) 13.387025432s ago: executing program 1 (id=3609): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085110000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 13.384546624s ago: executing program 0 (id=3611): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b100000000000000ff075b9b00000000634e3000000000009500bb2458175f26"], &(0x7f0000003ff6)='GPL\x00', 0xffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x20000000}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x6, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.349310787s ago: executing program 0 (id=3612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000f1ff00"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000880)={0x0, 0x6}, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x600c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='rpm_return_int\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=ANY=[], 0x230}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1b, 0x1f, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56}}, @ldst={0x0, 0x2, 0x5, 0xb, 0x3, 0xffffffffffffffc0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x7fff, 0x8f, &(0x7f0000000580)=""/143, 0x41000, 0x26, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x2, 0xe, 0x37, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff77f9, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) 13.282440364s ago: executing program 1 (id=3614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r3, 0x81, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x88, 0x65, 0x0, 0x20000000) close(0x4) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x19, 0x1, "000000000000001991319c00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x22, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb7a8b065daa76ffff9ef083611ceda17b7c503f95b6ae9e9fd25ada6dd69f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x24, &(0x7f0000001d40)=0x421, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @mcast2, 0x1}, 0x1c) sendmsg$NFC_CMD_GET_SE(r8, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x14, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20004805) 13.034423747s ago: executing program 0 (id=3618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}]}]}], {0x14}}, 0xb8}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1, 0x5}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xa4, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xa4}}, 0x40040) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = gettid() sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r3]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r8, r6}}}], 0xb0}, 0x20000000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) r10 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r13 = getpid() sendmsg$unix(r12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r13}}}], 0x20}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000ac0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000b80)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) sendmsg$netlink(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x1220}, {&(0x7f0000000700)={0x228, 0x24, 0x1, 0x70bd26, 0x25dfdbfb, "", [@generic="c5d26d6bad88ddbb637384083e19c29006b16d910f4e393a12719b58e66383a476b279efb6d42259a1c0919819e267b4a89c4dd2a78d7a63a9b9dbabaa70b0aac76d540d0b256a90e25932e55ecff60aaabf691c6a22a7fbf27ccad9ca36095b1226cf0d735c3cb9a7e695ff54dff2d06b9badc04146d3", @generic="8ef7b83216406d1394ed7372a401e3ba541be8649f6cdfb2dd7d31e483dac42418b7f635f702bdef339dc42f7f3418a3ff5eb8699a63e8eca759e3a7bb7bd20db1aa78cc3da17cf93cd74a94cc6eae4d3ef4826c3a010e26d07824e4bacd34713823a330c6e54909ed703d16592169f7ee9000194162cecb6d1dca705907a23b43d700f676c86a6531687cc23bd163a6e722becfc4245cd1769d3f8cd6669515cf3890087332431e5e4c7a05a5d2686d5f55571b66e0b0c1c476a778b16d6949f82e3d4ff2d8a4cdff299106167aa6a4c1d56e73c87e486dedc43eb04be32daa87481ba102af1d1d97ee8e1a16043173e8e420eca6456611eab10a96f6", @typed={0xa1, 0x64, 0x0, 0x0, @binary="9c86b27ce9382713edb16b9814689aa52861a17846c2a255d0c7e69dc67d3813678117c2ee3f248fc623090195da767ee14241427205e90b6445a17f14b78ca1d8aaf09109c232f2e33e0d670c231b34ff598007e93c35c652370388735ea86c4878cae2cee2055393df49c82803c44043f3eca05fe4b141f5b896c3c7524f82174f996b5d845bf6fa24f887bc2ef81d675fe212647379a5797d17fe24"}]}, 0x228}, {&(0x7f0000000500)={0xbc, 0x3a, 0x2, 0x70bd27, 0x25dfdbfe, "", [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r6}, @generic="8aaea73dc8552876cccbcf48a4901df7df00a1852df0972bed25b310382a6b44ea6e2e40f64de2e1ee985bdb49bf2f08fa356dc7e3d6a4fc87b526b593d127f77d83eb3a6aea31a0599fee3f0af0ec9d4eefb69d7e2cadd0a1639a8172e422284e", @generic="6427eb3081daf7407e4d902fc9eccdf3abea1ff01a6d1f6728e03d5b49c5aaaf66a8a6296c4ad57ebf2bc1b474e1b81c1f94fd544053"]}, 0xbc}], 0x3, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}], 0xc0, 0x40}, 0x4004005) 12.849142582s ago: executing program 0 (id=3621): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500e0ffff0000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 3.737215703s ago: executing program 3 (id=3622): r0 = socket$inet6(0xa, 0xa, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x200000000000001, 0xd9b8}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendfile(r0, r0, &(0x7f0000000080)=0x1a5, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x478, 0xf0, 0x0, 0x0, 0xf0, 0x300, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x101, 0x6, @multicast2, 0x4e24}}}, {{@ip={@broadcast, @rand_addr=0x64010102, 0xff000000, 0xffffff00, 'veth1_virt_wifi\x00', 'batadv0\x00', {0xff}, {0xff}, 0x2f, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x8}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x69, {0x7ff}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xff, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x12, 0x1}}}, {{@ip={@loopback, @private=0xa010100, 0x0, 0xffff7f, 'vlan1\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x29, 0x2}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x12, '`Z', 0x1}}, @common=@socket0={{0x20}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x18}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) 3.737030334s ago: executing program 2 (id=3615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000140000000000000a20000000000a03000000000000000000270000000900010073797a30000000004c000000090a010400000000000000000700000008000700000000000000020073797a31000000000900010073797a3000000000080005400000000c08000640ffffff000800034000000008400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014000380"], 0xd4}}, 0x0) 3.142758462s ago: executing program 3 (id=3625): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x1358, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x5}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x1324, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x12fc, 0x7, [@m_mpls={0xa0, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0xd74, 0x3, 0x0, 0x0, {{0xb}, {0xcd0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x2, 0xfffffff9, 0x7, 0x81, {0x8, 0x2, 0x7fff, 0x5e, 0x3, 0x2}, {0x8, 0x1, 0xff80, 0x7fff, 0xfffe, 0x2}, 0xfffff398, 0x7f, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x5, 0x8a, 0x10, 0x7fff, 0x5, 0x1, 0x1, 0x5, 0x8, 0x3, 0x8, 0x5, 0x1, 0x8, 0x46db, 0xa, 0x0, 0x2, 0x9, 0x7, 0x7ff, 0x2, 0x32f, 0x4e, 0x4, 0x8, 0xfffffff8, 0x6, 0x8, 0x5, 0x8, 0x6, 0x8, 0x101, 0x7fff, 0x7, 0x49f3ee42, 0xffff6f63, 0x2eab, 0xcedc, 0x100, 0x5, 0x0, 0x5, 0x5, 0x6, 0xff, 0x7, 0x6f, 0x1, 0x1ff, 0x3, 0x2, 0xffffff01, 0x9, 0x6, 0x6, 0x1, 0x400, 0x0, 0xffff, 0x6, 0x2, 0x4, 0x5, 0x8, 0x8, 0x0, 0x7327, 0x5, 0x4, 0x1, 0xfffffc01, 0xfff, 0x7959, 0x8, 0x1ff, 0x81, 0x4, 0x1, 0x80000001, 0xe73, 0x80000000, 0x9, 0x3, 0x5, 0x9, 0xb, 0x7, 0x80000001, 0x0, 0x7, 0x6, 0x1, 0x100, 0x1, 0x8, 0x4, 0x26, 0xb79, 0x0, 0xfffffffd, 0x2, 0x8, 0x1ff, 0x2, 0x9, 0x9, 0x5ce, 0x6, 0xfff, 0x166, 0x7fff, 0xe1, 0x4, 0x7f, 0xffffff00, 0x3, 0x3, 0x7f, 0xa, 0x6, 0x9, 0x2221, 0x82, 0xfffffff8, 0x5, 0x7, 0xffff, 0x6, 0xffff, 0x101, 0x80000, 0x8, 0x9, 0x26c7, 0x5, 0x31cb, 0x270, 0xfffffff7, 0x8, 0x0, 0x8000, 0x3, 0xffffffff, 0x4, 0x8, 0x0, 0x7ff, 0x9, 0x2, 0x7fff, 0x7fff, 0x2, 0x2b6, 0x757, 0xf74, 0xb73, 0x9, 0x1, 0x101, 0x3, 0x0, 0x7, 0x9, 0x3, 0x8000, 0x48a, 0x5, 0x4, 0x3, 0x200, 0xd2f2, 0x7fffffff, 0x0, 0x8, 0x5, 0xe, 0x3660, 0x7, 0x0, 0x7, 0x8, 0x6, 0xbb, 0x148d77dd, 0xff, 0x100, 0xb, 0x5, 0x7, 0x1, 0x5, 0xfff, 0xfa13, 0x28, 0xfffffffa, 0x9, 0x2, 0x5, 0xb814, 0xfffffff7, 0x2, 0x100, 0x7ab, 0xfffffffb, 0x5, 0xd4, 0x7, 0x0, 0x5, 0x0, 0x4d, 0x100, 0xff, 0x80000000, 0x4, 0x2, 0x2, 0x28, 0x7fffffff, 0x5b1d659, 0x8, 0x0, 0x1ff, 0x8, 0x1000, 0x6, 0x9, 0x2, 0x200, 0x2, 0x9, 0xb1c3, 0x8, 0x1, 0x635e, 0x1, 0x3, 0x1, 0xd3, 0x30000000, 0xe3, 0x80000001, 0x8001, 0xb, 0x93, 0x200, 0x3, 0x1, 0x8001, 0x1ff, 0x0, 0xbd4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x20, 0x0, 0x10, 0x9, 0x22d, 0x10001, 0x8, 0x1ff, 0xd4, 0x6, 0xe74, 0x7, 0x779, 0x4, 0x80, 0xf, 0x80, 0xa, 0x5, 0x1c000000, 0x5, 0x1, 0x8001, 0x9, 0x4, 0x4, 0x6, 0x401, 0x0, 0x200, 0x5774ae69, 0x9, 0xdcdc, 0x400, 0x100, 0xfff, 0x1, 0x200, 0xf, 0x7, 0x80, 0x7, 0xdf, 0x7, 0x0, 0x980f, 0x9, 0x7, 0x101, 0x1, 0x1, 0x0, 0xd, 0x0, 0xc, 0x3, 0x3, 0x9, 0x1, 0x9, 0x1, 0x9, 0xf46, 0xe1, 0xffffffff, 0xfffffff2, 0x0, 0x7, 0x5, 0x7, 0x7, 0x4, 0x0, 0x7, 0xa, 0x7, 0x67, 0x3, 0x8, 0x7, 0x5, 0x6, 0xfffffff7, 0x3, 0x64, 0x0, 0xfffffff9, 0x9, 0x2, 0xdc, 0xfffffffe, 0x6de, 0x3, 0x6, 0x0, 0x4, 0x8, 0xf104, 0x9, 0x40000000, 0x6, 0xfffffffe, 0x4, 0x10001, 0x3, 0xf, 0x600, 0xe4b0, 0x2, 0x1, 0x3, 0x4, 0x800, 0x7d1, 0x100, 0x0, 0x200, 0xef8, 0x6, 0x4, 0x100, 0x7, 0x7fff, 0x0, 0x3, 0x8, 0xd2, 0x1, 0x5, 0x7fffffff, 0x8, 0x2, 0xfffffff8, 0x9, 0x57c, 0x4, 0x9, 0x4, 0xc0000000, 0x2, 0xf0, 0x100000, 0x9, 0x4, 0xc4fc, 0x200, 0x7, 0x8001, 0xee, 0x7ff, 0x2, 0x4, 0x7fffffff, 0xa, 0x7, 0xf, 0x0, 0x9, 0x8, 0x618c69d, 0xe60, 0x1c26, 0xac7b, 0xae, 0x4, 0x1000, 0x101, 0x7ff, 0xfff, 0x1, 0xc45, 0x115, 0x5, 0x6, 0x5, 0xfffff801, 0xd0, 0x1ff, 0x9, 0x7, 0xfff, 0x9, 0x3, 0x7, 0x3277, 0x6, 0x1, 0x2, 0x6, 0x6, 0x4, 0x81, 0xc, 0x10000, 0x2, 0x401, 0xfffffffa, 0xff, 0x0, 0x8001, 0x100, 0x87, 0x6, 0x70f, 0x1, 0x9, 0x1, 0xc, 0x4, 0x81fe, 0x2, 0x5e0, 0x1, 0x3, 0x6, 0x10001, 0x8b, 0x7, 0x3, 0x80, 0x9, 0x6, 0x6, 0x4, 0x19, 0x3ff, 0x5, 0x5, 0x7, 0x1, 0x3, 0x9, 0x4, 0x2, 0x14d, 0x4, 0xe264, 0x7, 0xfff, 0x7, 0x5, 0x77, 0x2, 0x7, 0x3, 0xfffffff7, 0x200, 0x1, 0x200, 0x3, 0x80000000, 0xffff092e, 0x0, 0x9, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x5a0, 0x6, 0x7fff, {0x8, 0x1, 0x9d6f, 0xfffa, 0xffff, 0x3}, {0x9, 0x0, 0x3, 0xc, 0x2, 0xffff0d2a}, 0x41, 0xf, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x100, 0xbdce, 0x200, {0x8, 0x1, 0x80, 0x1, 0x1, 0x4}, {0x7, 0x2, 0x6, 0x9c2, 0x0, 0x667}, 0x5, 0x101}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbd400000, 0x4, 0x90d, 0x7ff, 0x2, 0x7, 0x1, 0x8, 0x0, 0x400, 0x5, 0x1, 0x2, 0x9, 0x4, 0x1, 0xfffffffb, 0x6, 0xfff, 0x3, 0x74ca3289, 0x10000, 0x1, 0x0, 0x32, 0x4, 0xb791, 0x1, 0x7, 0x101, 0x4, 0x9, 0x8, 0x0, 0x3, 0xf, 0x401, 0x0, 0x1, 0x7fffffff, 0x2, 0xa34, 0x8000, 0x9, 0x0, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x7, 0x3, 0x5, 0x8, 0x8ee0, 0x400, 0x9, 0xfffffff9, 0x0, 0x200, 0x6, 0x8, 0x1, 0x4, 0x8, 0x10001, 0x2, 0x10, 0x98e8, 0x4, 0x1, 0x9, 0xcebc, 0x21d, 0x6, 0x2, 0x1, 0x460, 0x9, 0x8, 0x100, 0xfffeffff, 0x7, 0x80000001, 0x7, 0x4, 0x1, 0xffff8001, 0xd9e7, 0xa, 0xd9, 0x6, 0xaf0, 0x4b7, 0x1ff, 0x6f, 0x7, 0x2, 0x6, 0x10, 0x9, 0x1, 0x7fff, 0x587a, 0x1, 0x6, 0x577, 0x60, 0x5, 0xb8d, 0x6, 0x6, 0xae, 0x0, 0x0, 0x5, 0x40, 0x5, 0x3, 0x0, 0x1, 0x5, 0xf5, 0xffff, 0x3, 0xfffffff8, 0x7fffffff, 0x4, 0x1, 0x1000, 0x7fffffff, 0x6, 0x8, 0x9, 0x7fffffff, 0x8, 0x3, 0xffffff00, 0x7fffffff, 0x5, 0xfffffff6, 0x0, 0x93, 0x6d49, 0x401, 0x4, 0xf, 0x3, 0x1, 0xc0b8, 0x2, 0x80000001, 0x81, 0x6, 0x4a69, 0xb, 0x4, 0x0, 0x200, 0x7, 0x0, 0x1, 0x3, 0x5, 0x6, 0x142, 0x944f, 0x0, 0x8, 0xbcd0, 0x4, 0x2, 0x80000001, 0x1ff, 0x7, 0x3, 0x5, 0x4, 0x0, 0x2, 0x4, 0x5e05, 0x8000, 0x2, 0x3, 0x2, 0x1, 0x1ff, 0x640, 0x0, 0x4, 0x7, 0x9, 0x5, 0x3, 0x1, 0x0, 0xe81d, 0x4, 0x10, 0x1, 0x2, 0x8, 0x4, 0x4, 0xf208000, 0x8, 0x78b, 0x3e0, 0x495, 0xcdd, 0x82, 0x6, 0x9, 0x7, 0x8, 0x0, 0xfff, 0xfffffff7, 0x9, 0x1, 0x0, 0x9, 0x6, 0x7, 0xc, 0x5, 0x3, 0x8, 0x2, 0x7, 0x100, 0x2, 0x6, 0x90, 0x27e62ac2, 0x3, 0x45, 0x2, 0x5, 0x8001, 0x4, 0x9, 0x3958, 0x3, 0x10001, 0x9, 0xa1, 0x2, 0x80000001, 0x4ecdf54e, 0x4, 0xffffff13, 0x5b9, 0x3, 0x6]}]]}, {0x79, 0x6, "225918433a849052b8fcd4dc2c13437dc660975ad756e5a5ea5c38a0669e09b751359e9add6ee7ba7c064120185c1e9b57130da11505ae5a73d24eb287e0bde3da0fd7973d04afb0d523cf660dcd76142ad4f0118d3d2941c0f15ac3f871d9879b483f5d0b903d21c2200640fb466500d53d1161b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x154, 0xf, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x8, 0x800, 0xffff}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x2, 0x0, 0x0, 0x2}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x40, 0x1, 0xfffffffa, 0x7}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xf84d, 0x20000000, 0x8, 0x401}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x10000000, 0x100, 0x2}, 0x6d}}]}, {0x9a, 0x6, "af293a3703ed07de89ee0f4a3502b2a211cd8d46ac38a863d38b3dac1d7e7fa6e3dfc4e4c9e29fbf91b48e31c54ff6cfd76cb8bb38a023a698f0020d1439b8cf53761fb56c034ec2e4c38bb01d07c6885c39b84a9dfb526d61cf90af1111bff18ec9c21724d9944d2eb5a4cdfa1536185e553fec86894e1e931f0a0390721ae004707bd7749ba033f619ae9b3ffad923d22d04a88330"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x64, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}]}, {0x2d, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e4d1b78"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa9, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68c8f4ce4718278e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x160, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0xd1, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c04cd22f512591403a4b3bf2f517e65c5c9da8db780c47af490bf4f5a3657faefcdd5726a3328052df3f62a23cdddee72c32714d8e6fe2a05fbf6e706ce8982979ef8f4a0b551d14b2f93f6166542955dc5bce3689be9fe95626bbded9b18f97e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}]}, 0x1358}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.734299793s ago: executing program 3 (id=3627): r0 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00f5ff08000300", @ANYRES32=r2, @ANYBLOB="05003400b10000000600660000000000"], 0x2c}}, 0x0) 2.210365178s ago: executing program 3 (id=3629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000060000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) 2.11986005s ago: executing program 4 (id=3630): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x300) 1.954822913s ago: executing program 3 (id=3631): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x121, &(0x7f0000000380)={@empty, @local, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @igmp={{0xc, 0x4, 0x0, 0x25, 0x10b, 0x68, 0x0, 0x4, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @empty, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xdb, [@broadcast, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x8d, [@local]}]}}, {0x15, 0x81, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, "689d6a23d7853544328819d7efe9dbbe210e9ef18516c2c019da234a22591eb4b9541433bd739a612c117979107761c51f74ffaaf1f64c81eb43dc3f799637f96dd233dcf6adbadfa2c7154318c6ba3d392aab338c04153e49570112eccbf76707a57775820d1b43939066003ceed315476d9fac3b9e117f04675fa79b199b01bae0dcaa8278e3dce057773dbba6a416180dcff31ae99373124f8522159f24249074182b53e0c28ea0dfe6674565940e1f3ad52fc5705994c1538598b74b6bab55d04467dd61970123f735dcba14313714ca7d"}}}}}, &(0x7f0000000040)={0x1, 0xffffffff, [0x63f, 0x19a, 0xe40, 0x4ee]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000100000000000006000300000000000800010000000000240002"], 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000340)="01947dc2", 0x4}], 0x1}}], 0x1, 0x4000000) 1.886686917s ago: executing program 4 (id=3632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000380)={'gre0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc401}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 1.78831122s ago: executing program 3 (id=3633): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 645.080912ms ago: executing program 4 (id=3634): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40806) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYRES32=r0], 0x398}}, 0x0) 422.45629ms ago: executing program 4 (id=3635): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xe409}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r1, 0xa8, "41313b033bf2038f36ef34a167ac53a8dd7dba05655fcb90eee827a283b45d8fb69de919226e98a9d4d47acf0096e630cd42ffd13a2cbfffc7bd73473e7f74c5be45de0e3533e4db2ef6347a16846497f6b2ddde04f7b0c85ca3e4c590c09c1af12a31823e4883d06c4b9fa87f688dc1bfe2b0f4329b0cc0df247e37ba0588c5e4a76d602ec426f8284acb611aef3267b1d438794346d202a57a703b94426dc02da4bbeb81be7718"}, &(0x7f0000000080)=0xb0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 281.049815ms ago: executing program 4 (id=3636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x1358, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x5}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x1324, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x12fc, 0x7, [@m_mpls={0xa0, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0xd74, 0x3, 0x0, 0x0, {{0xb}, {0xcd0, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x2, 0xfffffff9, 0x7, 0x81, {0x8, 0x2, 0x7fff, 0x5e, 0x3, 0x2}, {0x8, 0x1, 0xff80, 0x7fff, 0xfffe, 0x2}, 0xfffff398, 0x7f, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0x5, 0x8a, 0x10, 0x7fff, 0x5, 0x1, 0x1, 0x5, 0x8, 0x3, 0x8, 0x5, 0x1, 0x8, 0x46db, 0xa, 0x0, 0x2, 0x9, 0x7, 0x7ff, 0x2, 0x32f, 0x4e, 0x4, 0x8, 0xfffffff8, 0x6, 0x8, 0x5, 0x8, 0x6, 0x8, 0x101, 0x7fff, 0x7, 0x49f3ee42, 0xffff6f63, 0x2eab, 0xcedc, 0x100, 0x5, 0x0, 0x5, 0x5, 0x6, 0xff, 0x7, 0x6f, 0x1, 0x1ff, 0x3, 0x2, 0xffffff01, 0x9, 0x6, 0x6, 0x1, 0x400, 0x0, 0xffff, 0x6, 0x2, 0x4, 0x5, 0x8, 0x8, 0x0, 0x7327, 0x5, 0x4, 0x1, 0xfffffc01, 0xfff, 0x7959, 0x8, 0x1ff, 0x81, 0x4, 0x1, 0x80000001, 0xe73, 0x80000000, 0x9, 0x3, 0x5, 0x9, 0xb, 0x7, 0x80000001, 0x0, 0x7, 0x6, 0x1, 0x100, 0x1, 0x8, 0x4, 0x26, 0xb79, 0x0, 0xfffffffd, 0x2, 0x8, 0x1ff, 0x2, 0x9, 0x9, 0x5ce, 0x6, 0xfff, 0x166, 0x7fff, 0xe1, 0x4, 0x7f, 0xffffff00, 0x3, 0x3, 0x7f, 0xa, 0x6, 0x9, 0x2221, 0x82, 0xfffffff8, 0x5, 0x7, 0xffff, 0x6, 0xffff, 0x101, 0x80000, 0x8, 0x9, 0x26c7, 0x5, 0x31cb, 0x270, 0xfffffff7, 0x8, 0x0, 0x8000, 0x3, 0xffffffff, 0x4, 0x8, 0x0, 0x7ff, 0x9, 0x2, 0x7fff, 0x7fff, 0x2, 0x2b6, 0x757, 0xf74, 0xb73, 0x9, 0x1, 0x101, 0x3, 0x0, 0x7, 0x9, 0x3, 0x8000, 0x48a, 0x5, 0x4, 0x3, 0x200, 0xd2f2, 0x7fffffff, 0x0, 0x8, 0x5, 0xe, 0x3660, 0x7, 0x0, 0x7, 0x8, 0x6, 0xbb, 0x148d77dd, 0xff, 0x100, 0xb, 0x5, 0x7, 0x1, 0x5, 0xfff, 0xfa13, 0x28, 0xfffffffa, 0x9, 0x2, 0x5, 0xb814, 0xfffffff7, 0x2, 0x100, 0x7ab, 0xfffffffb, 0x5, 0xd4, 0x7, 0x0, 0x5, 0x0, 0x4d, 0x100, 0xff, 0x80000000, 0x4, 0x2, 0x2, 0x28, 0x7fffffff, 0x5b1d659, 0x8, 0x0, 0x1ff, 0x8, 0x1000, 0x6, 0x9, 0x2, 0x200, 0x2, 0x9, 0xb1c3, 0x8, 0x1, 0x635e, 0x1, 0x3, 0x1, 0xd3, 0x30000000, 0xe3, 0x80000001, 0x8001, 0xb, 0x93, 0x200, 0x3, 0x1, 0x8001, 0x1ff, 0x0, 0xbd4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x20, 0x0, 0x10, 0x9, 0x22d, 0x10001, 0x8, 0x1ff, 0xd4, 0x6, 0xe74, 0x7, 0x779, 0x4, 0x80, 0xf, 0x80, 0xa, 0x5, 0x1c000000, 0x5, 0x1, 0x8001, 0x9, 0x4, 0x4, 0x6, 0x401, 0x0, 0x200, 0x5774ae69, 0x9, 0xdcdc, 0x400, 0x100, 0xfff, 0x1, 0x200, 0xf, 0x7, 0x80, 0x7, 0xdf, 0x7, 0x0, 0x980f, 0x9, 0x7, 0x101, 0x1, 0x1, 0x0, 0xd, 0x0, 0xc, 0x3, 0x3, 0x9, 0x1, 0x9, 0x1, 0x9, 0xf46, 0xe1, 0xffffffff, 0xfffffff2, 0x0, 0x7, 0x5, 0x7, 0x7, 0x4, 0x0, 0x7, 0xa, 0x7, 0x67, 0x3, 0x8, 0x7, 0x5, 0x6, 0xfffffff7, 0x3, 0x64, 0x0, 0xfffffff9, 0x9, 0x2, 0xdc, 0xfffffffe, 0x6de, 0x3, 0x6, 0x0, 0x4, 0x8, 0xf104, 0x9, 0x40000000, 0x6, 0xfffffffe, 0x4, 0x10001, 0x3, 0xf, 0x600, 0xe4b0, 0x2, 0x1, 0x3, 0x4, 0x800, 0x7d1, 0x100, 0x0, 0x200, 0xef8, 0x6, 0x4, 0x100, 0x7, 0x7fff, 0x0, 0x3, 0x8, 0xd2, 0x1, 0x5, 0x7fffffff, 0x8, 0x2, 0xfffffff8, 0x9, 0x57c, 0x4, 0x9, 0x4, 0xc0000000, 0x2, 0xf0, 0x100000, 0x9, 0x4, 0xc4fc, 0x200, 0x7, 0x8001, 0xee, 0x7ff, 0x2, 0x4, 0x7fffffff, 0xa, 0x7, 0xf, 0x0, 0x9, 0x8, 0x618c69d, 0xe60, 0x1c26, 0xac7b, 0xae, 0x4, 0x1000, 0x101, 0x7ff, 0xfff, 0x1, 0xc45, 0x115, 0x5, 0x6, 0x5, 0xfffff801, 0xd0, 0x1ff, 0x9, 0x7, 0xfff, 0x9, 0x3, 0x7, 0x3277, 0x6, 0x1, 0x2, 0x6, 0x6, 0x4, 0x81, 0xc, 0x10000, 0x2, 0x401, 0xfffffffa, 0xff, 0x0, 0x8001, 0x100, 0x87, 0x6, 0x70f, 0x1, 0x9, 0x1, 0xc, 0x4, 0x81fe, 0x2, 0x5e0, 0x1, 0x3, 0x6, 0x10001, 0x8b, 0x7, 0x3, 0x80, 0x9, 0x6, 0x6, 0x4, 0x19, 0x3ff, 0x5, 0x5, 0x7, 0x1, 0x3, 0x9, 0x4, 0x2, 0x14d, 0x4, 0xe264, 0x7, 0xfff, 0x7, 0x5, 0x77, 0x2, 0x7, 0x3, 0xfffffff7, 0x200, 0x1, 0x200, 0x3, 0x80000000, 0xffff092e, 0x0, 0x9, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x5a0, 0x6, 0x7fff, {0x8, 0x1, 0x9d6f, 0xfffa, 0xffff, 0x3}, {0x9, 0x0, 0x3, 0xc, 0x2, 0xffff0d2a}, 0x41, 0xf, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x100, 0xbdce, 0x200, {0x8, 0x1, 0x80, 0x1, 0x1, 0x4}, {0x7, 0x2, 0x6, 0x9c2, 0x0, 0x667}, 0x5, 0x101}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbd400000, 0x4, 0x90d, 0x7ff, 0x2, 0x7, 0x1, 0x8, 0x0, 0x400, 0x5, 0x1, 0x2, 0x9, 0x4, 0x1, 0xfffffffb, 0x6, 0xfff, 0x3, 0x74ca3289, 0x10000, 0x1, 0x0, 0x32, 0x4, 0xb791, 0x1, 0x7, 0x101, 0x4, 0x9, 0x8, 0x0, 0x3, 0xf, 0x401, 0x0, 0x1, 0x7fffffff, 0x2, 0xa34, 0x8000, 0x9, 0x0, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x7, 0x3, 0x5, 0x8, 0x8ee0, 0x400, 0x9, 0xfffffff9, 0x0, 0x200, 0x6, 0x8, 0x1, 0x4, 0x8, 0x10001, 0x2, 0x10, 0x98e8, 0x4, 0x1, 0x9, 0xcebc, 0x21d, 0x6, 0x2, 0x1, 0x460, 0x9, 0x8, 0x100, 0xfffeffff, 0x7, 0x80000001, 0x7, 0x4, 0x1, 0xffff8001, 0xd9e7, 0xa, 0xd9, 0x6, 0xaf0, 0x4b7, 0x1ff, 0x6f, 0x7, 0x2, 0x6, 0x10, 0x9, 0x1, 0x7fff, 0x587a, 0x1, 0x6, 0x577, 0x60, 0x5, 0xb8d, 0x6, 0x6, 0xae, 0x0, 0x0, 0x5, 0x40, 0x5, 0x3, 0x0, 0x1, 0x5, 0xf5, 0xffff, 0x3, 0xfffffff8, 0x7fffffff, 0x4, 0x1, 0x1000, 0x7fffffff, 0x6, 0x8, 0x9, 0x7fffffff, 0x8, 0x3, 0xffffff00, 0x7fffffff, 0x5, 0xfffffff6, 0x0, 0x93, 0x6d49, 0x401, 0x4, 0xf, 0x3, 0x1, 0xc0b8, 0x2, 0x80000001, 0x81, 0x6, 0x4a69, 0xb, 0x4, 0x0, 0x200, 0x7, 0x0, 0x1, 0x3, 0x5, 0x6, 0x142, 0x944f, 0x0, 0x8, 0xbcd0, 0x4, 0x2, 0x80000001, 0x1ff, 0x7, 0x3, 0x5, 0x4, 0x0, 0x2, 0x4, 0x5e05, 0x8000, 0x2, 0x3, 0x2, 0x1, 0x1ff, 0x640, 0x0, 0x4, 0x7, 0x9, 0x5, 0x3, 0x1, 0x0, 0xe81d, 0x4, 0x10, 0x1, 0x2, 0x8, 0x4, 0x4, 0xf208000, 0x8, 0x78b, 0x3e0, 0x495, 0xcdd, 0x82, 0x6, 0x9, 0x7, 0x8, 0x0, 0xfff, 0xfffffff7, 0x9, 0x1, 0x0, 0x9, 0x6, 0x7, 0xc, 0x5, 0x3, 0x8, 0x2, 0x7, 0x100, 0x2, 0x6, 0x90, 0x27e62ac2, 0x3, 0x45, 0x2, 0x5, 0x8001, 0x4, 0x9, 0x3958, 0x3, 0x10001, 0x9, 0xa1, 0x2, 0x80000001, 0x4ecdf54e, 0x4, 0xffffff13, 0x5b9, 0x3, 0x6]}]]}, {0x79, 0x6, "225918433a849052b8fcd4dc2c13437dc660975ad756e5a5ea5c38a0669e09b751359e9add6ee7ba7c064120185c1e9b57130da11505ae5a73d24eb287e0bde3da0fd7973d04afb0d523cf660dcd76142ad4f0118d3d2941c0f15ac3f871d9879b483f5d0b903d21c2200640fb466500d53d1161b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x154, 0xf, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x8, 0x800, 0xffff}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x2, 0x0, 0x0, 0x2}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x40, 0x1, 0xfffffffa, 0x7}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xf84d, 0x20000000, 0x8, 0x401}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x10000000, 0x100, 0x2}, 0x6d}}]}, {0x9a, 0x6, "af293a3703ed07de89ee0f4a3502b2a211cd8d46ac38a863d38b3dac1d7e7fa6e3dfc4e4c9e29fbf91b48e31c54ff6cfd76cb8bb38a023a698f0020d1439b8cf53761fb56c034ec2e4c38bb01d07c6885c39b84a9dfb526d61cf90af1111bff18ec9c21724d9944d2eb5a4cdfa1536185e553fec86894e1e931f0a0390721ae004707bd7749ba033f619ae9b3ffad923d22d04a88330"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x64, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}]}, {0x2d, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e4d1b78"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa9, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68c8f4ce4718278e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x160, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0xd1, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c04cd22f512591403a4b3bf2f517e65c5c9da8db780c47af490bf4f5a3657faefcdd5726a3328052df3f62a23cdddee72c32714d8e6fe2a05fbf6e706ce8982979ef8f4a0b551d14b2f93f6166542955dc5bce3689be9fe95626bbded9b18f97e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}]}, 0x1358}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 4 (id=3637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) writev(r2, &(0x7f00000024c0)=[{&(0x7f0000000140)="b2", 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x40002}, &(0x7f0000000000)=0x8) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) sendmmsg$sock(r3, &(0x7f0000000fc0)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000400)=[{0xfffffffffffffffe}, {&(0x7f00000000c0)="35bfaa5b4c0be9071e586812192f1b3ac339b4bc76ae2cf7f9c15f4e88d642800102eb2608cf5b5307ba0373d7bcd5cf0c7d334e91c4440ac4894173d3e1aea98dc669bd7898e3ecb6a56b790da80fe98560f44c1a9e", 0x56}, {&(0x7f0000000200)="5171e77751dd5344d34eaca88ae111508668137765167d0748c4b55ca9db287539cd42b760801c2ce3211a5a6db2f5df941144242fa2816d6f11e5575fa855dfda357e1881a5718e4a245b17daf7e241e8708ac8e376b2e73e36c811aefd5cd7bd02f3a8a1cf778ed1c4cb2a02e8b1c653454f9b8c27fb0ef141b692521cfe0c1dcca9", 0x83}, {&(0x7f00000002c0)="74fae61ce4988e9e2f59a7ce47d560a7be9771659a29b4d67fe81082b991a8a31e9d15d1d51a08d82797b2879c151ef004d7b251492e794a24b195912b7f66f91de2a4513bcd69267de187971687b587bbdd604812610409c0ec8091338690a93bf39813f4a0e1e11631a78551fa1505a6d5ca989a784c3e3c9c062b594cff10499e956b510174dda594c93d051e871f29dde2bcb44500cc5929de23ee512af1cf6137dcce81fe55caf22e4b1a08c254d87403ec05b276d10ed89c6409f68127f1f4202e6de952c57c19406ff7be35ca99af40a2d64c9fde5be0df413fd37e26b370e93db0040657c60c379dae6f2c6159da82dc", 0xf4}, {&(0x7f00000003c0)="98acdfa1fcaaf0b2f6c568c0b5", 0xd}], 0x5, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0xc7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xcbc1}}], 0x60}}, {{&(0x7f0000000640)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000700)="9ac808c2720bb1c07927892594f02f09061f0dfbf5384b8d95891bbe4e01de3e30c161f2a8b0a4154d5a226ad1a39b837a66b3f3e1927b8ece4d76f411e1bd3872f0d18e1b6b3a667f26e5a662545d95051845896739d4835352e1002d6cd766f418c5db6108202bc809c584a153d4142d51fbaa27fafd4c95856d93c6091a5334a11efcb66be19edec1649e966287b3441571b1066aad52e96d480c94f948ce8a28e6499c880e6cfeed4b602eb02ee248f2b8a4e9fb2efc349f9a5ae02ecdffd979540eef498d3cfb9d36c2cf027740f1e521d99233643479a50db85c75fbc0cfa0cb434c5cbb84ec30695e9daeb7f0ae7ff1", 0xf3}], 0x1, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @mark={{0x14, 0x1, 0x24, 0x91ab}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xf0}}, {{&(0x7f0000000900)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000980)="ac0634f75c97002f905fa3677fcd397870c00f05ef7f2042edb7c9555ef18606f3263097ac82841c78d48e1f4b27ab4e5efe0a9f7b631de68174db6bc98e614054a560d78b5462ed966089264e75dc3ac2d9859c33015d40ab37793ab1ddd3fe8edf9e6171c2500842be3b6ebdea3a8e120b8f476e68c566f129b3324c2c88da0c063744e295b85d65d80321", 0x8c}, {&(0x7f0000000a40)="21fb4af4821762c8be91290150ad93dddb13a4fbdca20184288563e78f5f7dd98e3b2fc75e000de60cfc27c37d083cf88f9632ed5370f2437fc2815c81d63c2cf87b1d9dd6fde008489f6d63eea3db628d4299e3da178cafd6da575be4daf8272c1dff9857e2e22a3108842d1eee1f65bb50aff590f4b29fdbfcd3b0511443033effd4e314eeea574a36fda171645a172d1238c8d178fb30e0bc1441eee94e208f0c12342b8de4ce11b1", 0xaa}, {&(0x7f0000000b00)="6e4c06ea7e1f5ffd482b073233db97463c6d2ae5baba5953b91ed0f0bbe3d67e382f3214adb2aa14b89f3cc3c0d21c1f9d053a6903a62427c8aa96d35c959f3b9c29c1a0822bd06ba97689f12e", 0x4d}, {&(0x7f0000000b80)="d3a0009d075e01e26bdd9204f2eb4596e7a2cafe559d69f1388243679d538e9fe60f1b91202916ade30daed611f2abf32459c6a7196416", 0x37}, {&(0x7f0000000bc0)="1c520ae97324acb96bdad789eb913c6b213fb4621cb661040a2cd2f472abc6466e45443ca425bda652a37f28babd6d4bf1e450806413414ff3e8fcbdcbdca43f9eae1e39ee8cbc9dd65669d0a1c11f048be38779a395b80087842d65a561c45c07e8590993e42712fcb366fc9d5dbbe615d2e3edce1e307c4b6d65bd0ae91bf71701ba2b2399aaeba7", 0x89}, {&(0x7f0000000c80)="b62197ae731cad1b606e878ef9d6ecefb1b5ebb94d61505f4b564b71a8a3d5bcb79a93d8e2297b89277a10230b2d90343ed0aa4dc60ea7eab5eb634877209f8dcb4ccec65c0a650a66b8c635e0554267368c36ceca28657c11940bc3dd8cd7db399df295c3ef9e168d407cba0ea970be8b876f3316f1944c6168de5ee7d9b3a9ab8579c0ef0e7cbe1bbf51359377e10fcdce26f5c98717b883b5660c250577c776890d8e05ff6f458c51b89b8166477b055cbef17376473710c3911bde2f18c41ccbea8a4b9ad6e2b6f6c9b42c6c88572311b462844e65e3fb79d2e5f802a1cb3ca341cda5a655bcf737c089a03f4c49d7b4ea6abd", 0xf5}, {&(0x7f0000000d80)="d1a91658a9686dfd14edcc45291f85e84a11b80fa7f83bec86abd4368a6ff05d6c74b18bccf9abcf049f9f4304845ef1d0afb0629ebadb9d8e3095c3b99f", 0x3e}, {&(0x7f0000000dc0)="11c931b31840c460ccb4785e7810973823386932f63ffe8a1377d5f98fe6fd50a325f01b9b0f9cbbefaa06bf860c3cfa49c43ed88a3e82eff13d2f5883c1ba362a45b723124f94e65432060672873487fe929ffe6a04841455fb02b11e096af6ef5f52d29ad6e2f139abb9fabb725d4f6a58310a7aa2e0b8", 0x78}], 0x8, &(0x7f0000000ec0)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0xd8}}], 0x3, 0x8014) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in, 0x0, 0x2}]}]}, 0xfc}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) unshare(0x2c060000) (async) unshare(0x24020400) (async) bind$unix(r7, &(0x7f0000000200)=@file={0x1, './file0/../file0\x00'}, 0x6e) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000003c0)='yeah\x00', 0x5) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r4, @ANYBLOB="4a4fcd01006272696467655f736c617665000000000c00058005001e00000000b92c6af44858737406af8e6511c9dcada5af5f1a12e993f32475390ff95f5030c8fca72b5e8df1d6f7c1ac1604b779fb4917ab969c8c0cdaa88d149e18d54aad7bc3cc7a19a33331e20ee0f529ecf61f22c2eaf1a6aa466bd7311fc6078ac052a7a9f86810e5579246bb6ce1ad47f61d83c91f58d30ce835464e51e5b3468e6590a1f814ae5d3c20eb4709bf9ef7cfd0e31b580c17287023bc2540a715020c6f280875e25f3884f15b2d35bde255dc7eab45cf4093b8e13d622e6f7d9d601be6981c805f"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): d/0x1d60 [ 302.068582][T12095] ? __virt_addr_valid+0x183/0x530 [ 302.073734][T12095] ? __pfx_lock_release+0x10/0x10 [ 302.078817][T12095] ? __alloc_skb+0x28f/0x440 [ 302.083451][T12095] ? __pfx__copy_from_iter+0x10/0x10 [ 302.088787][T12095] ? __virt_addr_valid+0x183/0x530 [ 302.093935][T12095] ? __virt_addr_valid+0x183/0x530 [ 302.099081][T12095] ? __virt_addr_valid+0x45f/0x530 [ 302.104242][T12095] ? __check_object_size+0x48e/0x900 [ 302.109575][T12095] netlink_sendmsg+0x73d/0xcb0 [ 302.114385][T12095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.119714][T12095] ? aa_sock_msg_perm+0x91/0x160 [ 302.124707][T12095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.130037][T12095] __sock_sendmsg+0x221/0x270 [ 302.134786][T12095] ____sys_sendmsg+0x52a/0x7e0 [ 302.139607][T12095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.144948][T12095] __sys_sendmsg+0x292/0x380 [ 302.149583][T12095] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.154767][T12095] ? __pfx_vfs_write+0x10/0x10 [ 302.159605][T12095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.165987][T12095] ? do_syscall_64+0x100/0x230 [ 302.170797][T12095] ? do_syscall_64+0xb6/0x230 [ 302.175538][T12095] do_syscall_64+0xf3/0x230 [ 302.180091][T12095] ? clear_bhb_loop+0x35/0x90 [ 302.184822][T12095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.190768][T12095] RIP: 0033:0x7f70dab7dff9 [ 302.195222][T12095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.214867][T12095] RSP: 002b:00007f70dba19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.223328][T12095] RAX: ffffffffffffffda RBX: 00007f70dad35f80 RCX: 00007f70dab7dff9 [ 302.231337][T12095] RDX: 0000000020000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 302.239352][T12095] RBP: 00007f70dba19090 R08: 0000000000000000 R09: 0000000000000000 [ 302.247364][T12095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.255372][T12095] R13: 0000000000000000 R14: 00007f70dad35f80 R15: 00007ffdab9685a8 [ 302.263399][T12095] [ 302.380475][T12112] openvswitch: netlink: Missing key (keys=40, expected=100) [ 302.441674][T12117] __nla_validate_parse: 10 callbacks suppressed [ 302.441696][T12117] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2442'. [ 302.580739][T12125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2447'. [ 302.590598][T12126] netlink: 'syz.0.2446': attribute type 1 has an invalid length. [ 302.605590][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 303.051748][T12158] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2459'. [ 303.189289][T12165] openvswitch: netlink: Unknown nsh attribute 0 [ 317.273398][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.279911][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.171017][T12174] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2467'. [ 323.226044][T12174] Κό: entered promiscuous mode [ 323.227201][T12184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2465'. [ 323.442485][T12200] openvswitch: netlink: Actions may not be safe on all matching packets [ 323.542039][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2474'. [ 323.678664][T12220] openvswitch: netlink: Unknown nsh attribute 0 [ 323.725158][T12222] netlink: 'syz.0.2479': attribute type 2 has an invalid length. [ 323.936249][T12238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2484'. [ 324.057611][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 324.185287][T12255] openvswitch: netlink: Unknown nsh attribute 0 [ 324.585061][T12280] sctp: [Deprecated]: syz.3.2500 (pid 12280) Use of int in max_burst socket option. [ 324.585061][T12280] Use struct sctp_assoc_value instead [ 324.653258][T12288] openvswitch: netlink: Unknown nsh attribute 0 [ 324.672325][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 324.750443][T12291] netlink: 'syz.3.2504': attribute type 1 has an invalid length. [ 324.758230][T12291] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.2504'. [ 324.807544][T12291] netlink: 'syz.3.2504': attribute type 1 has an invalid length. [ 324.876037][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2506'. [ 324.903168][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2506'. [ 324.922159][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2506'. [ 324.986994][ T4623] block nbd0: Receive control failed (result -107) [ 325.082359][T12311] openvswitch: netlink: Unknown nsh attribute 0 [ 325.535398][T12340] openvswitch: netlink: Actions may not be safe on all matching packets [ 325.716914][T12350] ipvlan1: entered promiscuous mode [ 325.732477][T12350] ipvlan1: entered allmulticast mode [ 325.746922][T12350] veth0_vlan: entered allmulticast mode [ 325.757296][T12350] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 325.876864][T12359] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 327.326940][T12443] netlink: 'syz.2.2560': attribute type 15 has an invalid length. [ 327.440200][T12453] (unnamed net_device) (uninitialized): option mode: invalid value (9) [ 327.738475][ T12] tipc: Subscription rejected, illegal request [ 327.967099][T12479] netlink: 'syz.4.2575': attribute type 4 has an invalid length. [ 328.054329][T12482] IPVS: set_ctl: invalid protocol: 60 172.20.20.33:20000 [ 328.071815][T12483] x_tables: duplicate underflow at hook 3 [ 328.257832][T12493] pimreg: entered allmulticast mode [ 328.309220][T12496] __nla_validate_parse: 22 callbacks suppressed [ 328.309242][T12496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2584'. [ 328.359358][T12496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2584'. [ 328.558092][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'. [ 328.837378][T12533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.839095][T12531] IPv6: sit2: Disabled Multicast RS [ 328.856161][T12533] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 328.955661][T12536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.065808][T12536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.147750][T12544] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2600'. [ 329.213382][T12536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.256394][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 329.349253][T12536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.519324][T12563] openvswitch: netlink: Unknown nsh attribute 0 [ 329.659104][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2609'. [ 329.732600][T12536] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.786981][T12536] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.986345][T12536] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.062199][T12536] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.257180][T12608] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.2623'. [ 330.508582][T12620] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2629'. [ 331.348940][T12658] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2646'. [ 331.412023][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2648'. [ 331.764932][T12678] wg2: left promiscuous mode [ 331.787840][T12678] netlink: 'syz.1.2656': attribute type 2 has an invalid length. [ 331.799938][T12678] netlink: 'syz.1.2656': attribute type 8 has an invalid length. [ 331.832810][T12678] wg2: entered promiscuous mode [ 331.837741][T12678] wg2: entered allmulticast mode [ 332.062730][T12695] netlink: 'syz.1.2656': attribute type 3 has an invalid length. [ 332.723503][T12721] netlink: 'syz.2.2674': attribute type 3 has an invalid length. [ 332.733447][T12721] FAULT_INJECTION: forcing a failure. [ 332.733447][T12721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.764764][T12721] CPU: 1 UID: 0 PID: 12721 Comm: syz.2.2674 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 332.775580][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 332.785680][T12721] Call Trace: [ 332.789004][T12721] [ 332.791966][T12721] dump_stack_lvl+0x241/0x360 [ 332.796689][T12721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.801925][T12721] ? __pfx__printk+0x10/0x10 [ 332.806555][T12721] ? snprintf+0xda/0x120 [ 332.810841][T12721] should_fail_ex+0x3b0/0x4e0 [ 332.815575][T12721] _copy_to_user+0x2f/0xb0 [ 332.820052][T12721] simple_read_from_buffer+0xca/0x150 [ 332.825486][T12721] proc_fail_nth_read+0x1e9/0x250 [ 332.830536][T12721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.836101][T12721] ? rw_verify_area+0x55e/0x6f0 [ 332.840967][T12721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.846529][T12721] vfs_read+0x201/0xbc0 [ 332.850707][T12721] ? __pfx_lock_release+0x10/0x10 [ 332.855755][T12721] ? __pfx_vfs_read+0x10/0x10 [ 332.860455][T12721] ? __fget_files+0x3f3/0x470 [ 332.865149][T12721] ? fdget_pos+0x24e/0x320 [ 332.869579][T12721] ksys_read+0x183/0x2b0 [ 332.873831][T12721] ? __pfx_ksys_read+0x10/0x10 [ 332.878604][T12721] ? do_syscall_64+0x100/0x230 [ 332.883382][T12721] ? do_syscall_64+0xb6/0x230 [ 332.888072][T12721] do_syscall_64+0xf3/0x230 [ 332.892586][T12721] ? clear_bhb_loop+0x35/0x90 [ 332.897277][T12721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.903189][T12721] RIP: 0033:0x7f70dab7ca3c [ 332.907612][T12721] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 332.927230][T12721] RSP: 002b:00007f70dba19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.935670][T12721] RAX: ffffffffffffffda RBX: 00007f70dad35f80 RCX: 00007f70dab7ca3c [ 332.943650][T12721] RDX: 000000000000000f RSI: 00007f70dba190a0 RDI: 0000000000000004 [ 332.951629][T12721] RBP: 00007f70dba19090 R08: 0000000000000000 R09: 0000000000000000 [ 332.959606][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.967595][T12721] R13: 0000000000000000 R14: 00007f70dad35f80 R15: 00007ffdab9685a8 [ 332.975594][T12721] [ 333.431778][T12754] __nla_validate_parse: 10 callbacks suppressed [ 333.431803][T12754] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2689'. [ 333.457208][T12754] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 333.483180][T12756] netlink: 'syz.2.2690': attribute type 15 has an invalid length. [ 333.546590][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2691'. [ 334.096355][T12767] team0: Device ipvlan1 failed to register rx_handler [ 334.315158][T12778] openvswitch: netlink: Unknown nsh attribute 0 [ 334.507087][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 334.520573][T12788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2703'. [ 334.664736][T12794] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.704549][T12803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2708'. [ 334.772283][T12794] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.853302][T12810] team0: Device ipvlan1 failed to register rx_handler [ 334.886484][T12813] netlink: 'syz.4.2714': attribute type 10 has an invalid length. [ 334.910789][T12813] bond0: (slave bond_slave_0): Releasing backup interface [ 334.936293][T12794] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.990675][T12811] netlink: 'syz.3.2712': attribute type 3 has an invalid length. [ 334.998471][T12811] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2712'. [ 335.103613][T12794] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.243535][T12794] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.268564][T12794] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.292344][T12794] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.314671][T12794] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.464208][T12842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2723'. [ 335.558190][T12847] FAULT_INJECTION: forcing a failure. [ 335.558190][T12847] name failslab, interval 1, probability 0, space 0, times 0 [ 335.602025][T12847] CPU: 1 UID: 0 PID: 12847 Comm: syz.0.2725 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 335.612848][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.622938][T12847] Call Trace: [ 335.626248][T12847] [ 335.629220][T12847] dump_stack_lvl+0x241/0x360 [ 335.633940][T12847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.639260][T12847] ? __pfx__printk+0x10/0x10 [ 335.643915][T12847] ? ref_tracker_alloc+0x332/0x490 [ 335.649117][T12847] should_fail_ex+0x3b0/0x4e0 [ 335.653849][T12847] ? skb_clone+0x20c/0x390 [ 335.658316][T12847] should_failslab+0xac/0x100 [ 335.663036][T12847] ? skb_clone+0x20c/0x390 [ 335.667497][T12847] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 335.672926][T12847] skb_clone+0x20c/0x390 [ 335.677225][T12847] __netlink_deliver_tap+0x3cc/0x7c0 [ 335.682565][T12847] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.687801][T12847] netlink_deliver_tap+0x19d/0x1b0 [ 335.692954][T12847] netlink_unicast+0x7c4/0x990 [ 335.697779][T12847] ? __pfx_netlink_unicast+0x10/0x10 [ 335.703137][T12847] ? __virt_addr_valid+0x183/0x530 [ 335.708263][T12847] ? __check_object_size+0x48e/0x900 [ 335.713595][T12847] netlink_sendmsg+0x8e4/0xcb0 [ 335.718412][T12847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.723748][T12847] ? aa_sock_msg_perm+0x91/0x160 [ 335.728737][T12847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.734068][T12847] __sock_sendmsg+0x221/0x270 [ 335.738811][T12847] ____sys_sendmsg+0x52a/0x7e0 [ 335.743632][T12847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.748969][T12847] __sys_sendmsg+0x292/0x380 [ 335.753574][T12847] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.758712][T12847] ? __pfx_vfs_write+0x10/0x10 [ 335.763533][T12847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.769904][T12847] ? do_syscall_64+0x100/0x230 [ 335.774680][T12847] ? do_syscall_64+0xb6/0x230 [ 335.779374][T12847] do_syscall_64+0xf3/0x230 [ 335.783888][T12847] ? clear_bhb_loop+0x35/0x90 [ 335.788583][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.794540][T12847] RIP: 0033:0x7f871717dff9 [ 335.798140][T12856] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2728'. [ 335.798955][T12847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.798981][T12847] RSP: 002b:00007f8717ffb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.799011][T12847] RAX: ffffffffffffffda RBX: 00007f8717335f80 RCX: 00007f871717dff9 [ 335.799031][T12847] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 335.799049][T12847] RBP: 00007f8717ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 335.859910][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.867932][T12847] R13: 0000000000000000 R14: 00007f8717335f80 R15: 00007fff608cb2e8 [ 335.875965][T12847] [ 335.951675][T12853] team0: Device ipvlan1 failed to register rx_handler [ 336.145143][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.181333][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.213752][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 336.232101][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.254141][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.271382][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.295760][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.332016][T12878] netlink: 'syz.3.2736': attribute type 18 has an invalid length. [ 336.347963][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.359889][T12878] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.368114][T12878] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.376439][T12878] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.384711][T12878] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.394892][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.443072][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.460232][T12882] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2738'. [ 336.481813][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.501015][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.527074][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.569330][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.610175][T12888] macvlan1: entered allmulticast mode [ 336.615610][T12888] veth1_vlan: entered allmulticast mode [ 336.641381][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.670975][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.682261][T12893] netlink: 'syz.1.2741': attribute type 1 has an invalid length. [ 336.690819][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.708678][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.719747][T12893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.727431][T12893] IPv6: NLM_F_CREATE should be set when creating new route [ 336.734957][T12893] IPv6: NLM_F_CREATE should be set when creating new route [ 336.765550][T12898] FAULT_INJECTION: forcing a failure. [ 336.765550][T12898] name failslab, interval 1, probability 0, space 0, times 0 [ 336.770672][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.778249][T12898] CPU: 1 UID: 0 PID: 12898 Comm: syz.4.2744 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 336.798499][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.798600][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.810434][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.818349][T12898] Call Trace: [ 336.829545][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.831321][T12898] [ 336.831334][T12898] dump_stack_lvl+0x241/0x360 [ 336.831375][T12898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.831403][T12898] ? __pfx__printk+0x10/0x10 [ 336.831441][T12898] should_fail_ex+0x3b0/0x4e0 [ 336.831480][T12898] ? skb_clone+0x20c/0x390 [ 336.831508][T12898] should_failslab+0xac/0x100 [ 336.831538][T12898] ? skb_clone+0x20c/0x390 [ 336.831565][T12898] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 336.831602][T12898] skb_clone+0x20c/0x390 [ 336.831628][T12898] ? dev_queue_xmit_nit+0x220/0xc10 [ 336.831665][T12898] dev_queue_xmit_nit+0x419/0xc10 [ 336.831700][T12898] ? dev_queue_xmit_nit+0x2b/0xc10 [ 336.831739][T12898] ? validate_xmit_skb+0x9f9/0x1120 [ 336.858935][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.863556][T12898] dev_hard_start_xmit+0x15f/0x7e0 [ 336.863592][T12898] ? __pfx_validate_xmit_skb+0x10/0x10 [ 336.863633][T12898] __dev_queue_xmit+0x1b11/0x3ed0 [ 336.870389][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.872707][T12898] ? kasan_save_track+0x51/0x80 [ 336.872747][T12898] ? do_syscall_64+0xf3/0x230 [ 336.878729][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.882502][T12898] ? __dev_queue_xmit+0x2da/0x3ed0 [ 336.882541][T12898] ? __pfx___dev_queue_xmit+0x10/0x10 [ 336.882588][T12898] ? __copy_skb_header+0x437/0x5b0 [ 336.882619][T12898] ? __asan_memcpy+0x40/0x70 [ 336.882665][T12898] ? skb_clone+0x240/0x390 [ 336.882698][T12898] __netlink_deliver_tap+0x54d/0x7c0 [ 336.882737][T12898] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.882761][T12898] netlink_deliver_tap+0x19d/0x1b0 [ 336.882787][T12898] netlink_unicast+0x7c4/0x990 [ 336.882832][T12898] ? __pfx_netlink_unicast+0x10/0x10 [ 336.882864][T12898] ? __virt_addr_valid+0x183/0x530 [ 336.882894][T12898] ? __check_object_size+0x48e/0x900 [ 336.882930][T12898] netlink_sendmsg+0x8e4/0xcb0 [ 336.882970][T12898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.883001][T12898] ? aa_sock_msg_perm+0x91/0x160 [ 336.883034][T12898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.883057][T12898] __sock_sendmsg+0x221/0x270 [ 336.883095][T12898] ____sys_sendmsg+0x52a/0x7e0 [ 336.883132][T12898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.883177][T12898] __sys_sendmsg+0x292/0x380 [ 336.883207][T12898] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.883250][T12898] ? __pfx_vfs_write+0x10/0x10 [ 336.883304][T12898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.883350][T12898] ? do_syscall_64+0x100/0x230 [ 336.883380][T12898] ? do_syscall_64+0xb6/0x230 [ 336.902713][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.902938][T12898] do_syscall_64+0xf3/0x230 [ 336.911922][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.917821][T12898] ? clear_bhb_loop+0x35/0x90 [ 336.917857][T12898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.925355][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.928415][T12898] RIP: 0033:0x7f178977dff9 [ 336.928443][T12898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.928465][T12898] RSP: 002b:00007f178a5a3038 EFLAGS: 00000246 [ 336.943113][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.943165][T12898] ORIG_RAX: 000000000000002e [ 336.949652][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.952666][T12898] RAX: ffffffffffffffda RBX: 00007f1789936058 RCX: 00007f178977dff9 [ 336.952690][T12898] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 336.952708][T12898] RBP: 00007f178a5a3090 R08: 0000000000000000 R09: 0000000000000000 [ 336.952725][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.966058][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.967520][T12898] R13: 0000000000000000 R14: 00007f1789936058 R15: 00007ffd6fdcc758 [ 336.967560][T12898] [ 336.975058][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.004100][T12900] openvswitch: netlink: Unknown nsh attribute 0 [ 337.021865][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.273526][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.284826][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.301858][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.330809][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.348888][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.365646][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.385422][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.422475][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.436658][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.447827][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.460156][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.471301][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.500793][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.512326][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.525291][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.536491][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.548010][T12870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.715735][T12926] FAULT_INJECTION: forcing a failure. [ 337.715735][T12926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.742732][T12926] CPU: 0 UID: 0 PID: 12926 Comm: syz.1.2753 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 337.753551][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 337.763638][T12926] Call Trace: [ 337.766946][T12926] [ 337.769908][T12926] dump_stack_lvl+0x241/0x360 [ 337.774631][T12926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.779889][T12926] ? __pfx__printk+0x10/0x10 [ 337.784512][T12926] ? __pfx_lock_release+0x10/0x10 [ 337.789581][T12926] should_fail_ex+0x3b0/0x4e0 [ 337.794304][T12926] _copy_from_user+0x2f/0xe0 [ 337.798955][T12926] copy_msghdr_from_user+0xae/0x680 [ 337.804212][T12926] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 337.810095][T12926] __sys_sendmsg+0x22d/0x380 [ 337.814728][T12926] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.819898][T12926] ? __pfx_vfs_write+0x10/0x10 [ 337.824708][T12926] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.831063][T12926] ? do_syscall_64+0x100/0x230 [ 337.835845][T12926] ? do_syscall_64+0xb6/0x230 [ 337.840550][T12926] do_syscall_64+0xf3/0x230 [ 337.845068][T12926] ? clear_bhb_loop+0x35/0x90 [ 337.849759][T12926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.855666][T12926] RIP: 0033:0x7f5f7457dff9 [ 337.860113][T12926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.879727][T12926] RSP: 002b:00007f5f75334038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.888151][T12926] RAX: ffffffffffffffda RBX: 00007f5f74736130 RCX: 00007f5f7457dff9 [ 337.896132][T12926] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005 [ 337.904110][T12926] RBP: 00007f5f75334090 R08: 0000000000000000 R09: 0000000000000000 [ 337.912087][T12926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.920064][T12926] R13: 0000000000000001 R14: 00007f5f74736130 R15: 00007fff0f0c0d78 [ 337.928060][T12926] [ 338.170208][T12943] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 338.248062][T12952] FAULT_INJECTION: forcing a failure. [ 338.248062][T12952] name failslab, interval 1, probability 0, space 0, times 0 [ 338.279875][T12952] CPU: 1 UID: 0 PID: 12952 Comm: syz.1.2765 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 338.290692][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 338.300880][T12952] Call Trace: [ 338.304178][T12952] [ 338.307112][T12952] dump_stack_lvl+0x241/0x360 [ 338.311799][T12952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.317007][T12952] ? __pfx__printk+0x10/0x10 [ 338.321618][T12952] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 338.327134][T12952] ? __pfx___might_resched+0x10/0x10 [ 338.332464][T12952] ? trace_contention_end+0x3c/0x120 [ 338.337796][T12952] should_fail_ex+0x3b0/0x4e0 [ 338.342546][T12952] should_failslab+0xac/0x100 [ 338.347264][T12952] ? __inet_diag_dump_start+0x9d/0xa50 [ 338.352771][T12952] __kmalloc_cache_noprof+0x6c/0x2c0 [ 338.358108][T12952] __inet_diag_dump_start+0x9d/0xa50 [ 338.363508][T12952] __netlink_dump_start+0x45c/0x790 [ 338.368771][T12952] inet_diag_rcv_msg_compat+0x209/0x4e0 [ 338.374371][T12952] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 338.380492][T12952] ? sock_diag_rcv_msg+0xca/0x5f0 [ 338.385558][T12952] ? __pfx_lock_release+0x10/0x10 [ 338.390633][T12952] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 338.397011][T12952] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 338.402860][T12952] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 338.408546][T12952] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 338.414664][T12952] sock_diag_rcv_msg+0x3dc/0x5f0 [ 338.419651][T12952] netlink_rcv_skb+0x1e3/0x430 [ 338.424465][T12952] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 338.429968][T12952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.435320][T12952] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.440561][T12952] netlink_unicast+0x7f6/0x990 [ 338.445381][T12952] ? __pfx_netlink_unicast+0x10/0x10 [ 338.450703][T12952] ? __virt_addr_valid+0x183/0x530 [ 338.455846][T12952] ? __check_object_size+0x48e/0x900 [ 338.461177][T12952] netlink_sendmsg+0x8e4/0xcb0 [ 338.465985][T12952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.471311][T12952] ? aa_sock_msg_perm+0x91/0x160 [ 338.476294][T12952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.481613][T12952] __sock_sendmsg+0x221/0x270 [ 338.486340][T12952] ____sys_sendmsg+0x52a/0x7e0 [ 338.491162][T12952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.496503][T12952] __sys_sendmsg+0x292/0x380 [ 338.501132][T12952] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.506295][T12952] ? __pfx_vfs_write+0x10/0x10 [ 338.511125][T12952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.517515][T12952] ? do_syscall_64+0x100/0x230 [ 338.522327][T12952] ? do_syscall_64+0xb6/0x230 [ 338.527057][T12952] do_syscall_64+0xf3/0x230 [ 338.531607][T12952] ? clear_bhb_loop+0x35/0x90 [ 338.536332][T12952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.542290][T12952] RIP: 0033:0x7f5f7457dff9 [ 338.546737][T12952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.566379][T12952] RSP: 002b:00007f5f75355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.574842][T12952] RAX: ffffffffffffffda RBX: 00007f5f74736058 RCX: 00007f5f7457dff9 [ 338.582902][T12952] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 338.590910][T12952] RBP: 00007f5f75355090 R08: 0000000000000000 R09: 0000000000000000 [ 338.598919][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.606935][T12952] R13: 0000000000000000 R14: 00007f5f74736058 R15: 00007fff0f0c0d78 [ 338.614963][T12952] [ 338.705495][T12964] __nla_validate_parse: 9 callbacks suppressed [ 338.705518][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 339.061963][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 339.257834][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2785'. [ 339.276970][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2785'. [ 339.324806][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2787'. [ 339.397695][T13003] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 339.410739][T13002] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 339.470716][T13006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2791'. [ 339.578824][T13015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2794'. [ 339.709182][T13019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2794'. [ 339.863545][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 340.065995][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2803'. [ 340.859619][T13090] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 341.295659][T13119] netlink: 'syz.2.2834': attribute type 1 has an invalid length. [ 341.375435][T13124] ax25_connect(): syz.0.2836 uses autobind, please contact jreuter@yaina.de [ 341.610679][T13140] netem: change failed [ 341.630121][T13143] netlink: 'syz.2.2843': attribute type 3 has an invalid length. [ 343.170486][T13233] netlink: 'syz.2.2876': attribute type 4 has an invalid length. [ 343.907296][T13285] __nla_validate_parse: 18 callbacks suppressed [ 343.907318][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2897'. [ 343.977222][T13285] tipc: Enabling of bearer rejected, failed to enable media [ 344.391060][T13310] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1625412485) [ 344.431862][T13310] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 344.552142][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 344.569151][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2912'. [ 344.590024][T13321] netlink: 'syz.1.2912': attribute type 15 has an invalid length. [ 344.623513][T13325] netlink: 'syz.2.2914': attribute type 1 has an invalid length. [ 344.638384][T13325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2914'. [ 344.642972][T13321] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 344.671143][T13323] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2913'. [ 344.994553][T13343] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 345.009207][T13343] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 345.312424][T13367] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 345.339322][T13368] netlink: 'syz.1.2929': attribute type 1 has an invalid length. [ 345.351860][T13368] netlink: 9396 bytes leftover after parsing attributes in process `syz.1.2929'. [ 345.383757][T13377] FAULT_INJECTION: forcing a failure. [ 345.383757][T13377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.404209][T13368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.415127][T13377] CPU: 1 UID: 0 PID: 13377 Comm: syz.2.2930 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 345.426030][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.436123][T13377] Call Trace: [ 345.439433][T13377] [ 345.442395][T13377] dump_stack_lvl+0x241/0x360 [ 345.447117][T13377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.452354][T13377] ? __pfx__printk+0x10/0x10 [ 345.456987][T13377] ? __pfx_lock_release+0x10/0x10 [ 345.462069][T13377] should_fail_ex+0x3b0/0x4e0 [ 345.466800][T13377] _copy_from_user+0x2f/0xe0 [ 345.471441][T13377] ipv6_mcast_join_leave+0xf6/0x260 [ 345.476681][T13377] ? __pfx_ipv6_mcast_join_leave+0x10/0x10 [ 345.482558][T13377] ? do_ipv6_setsockopt+0xbf3/0x3630 [ 345.487892][T13377] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.493691][T13377] do_ipv6_setsockopt+0x194d/0x3630 [ 345.498942][T13377] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 345.504559][T13377] ? __pfx___might_resched+0x10/0x10 [ 345.509894][T13377] ? __lock_acquire+0x1384/0x2050 [ 345.514986][T13377] ? aa_sk_perm+0x96d/0xab0 [ 345.519515][T13377] ? __pfx_aa_sk_perm+0x10/0x10 [ 345.524382][T13377] ? __pfx_lock_acquire+0x10/0x10 [ 345.529428][T13377] ipv6_setsockopt+0x5d/0x170 [ 345.534120][T13377] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 345.540031][T13377] do_sock_setsockopt+0x3af/0x720 [ 345.545085][T13377] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 345.550643][T13377] ? __fget_files+0x29/0x470 [ 345.555251][T13377] ? __fget_files+0x3f3/0x470 [ 345.559942][T13377] ? __fget_files+0x29/0x470 [ 345.564560][T13377] __sys_setsockopt+0x1a2/0x250 [ 345.569430][T13377] __x64_sys_setsockopt+0xb5/0xd0 [ 345.574491][T13377] do_syscall_64+0xf3/0x230 [ 345.579010][T13377] ? clear_bhb_loop+0x35/0x90 [ 345.583703][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.589615][T13377] RIP: 0033:0x7f70dab7dff9 [ 345.594043][T13377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.613664][T13377] RSP: 002b:00007f70db9f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 345.622101][T13377] RAX: ffffffffffffffda RBX: 00007f70dad36058 RCX: 00007f70dab7dff9 [ 345.630084][T13377] RDX: 000000000000002d RSI: 0000000000000029 RDI: 0000000000000006 [ 345.638067][T13377] RBP: 00007f70db9f8090 R08: 0000000000000108 R09: 0000000000000000 [ 345.646047][T13377] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 345.654027][T13377] R13: 0000000000000001 R14: 00007f70dad36058 R15: 00007ffdab9685a8 [ 345.662026][T13377] [ 345.966092][T13400] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2938'. [ 345.984393][T13400] netlink: 'syz.2.2938': attribute type 2 has an invalid length. [ 346.000617][T13400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2938'. [ 346.066039][T13408] lo: entered promiscuous mode [ 346.157087][T13408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.339442][T13422] netlink: 'syz.2.2943': attribute type 3 has an invalid length. [ 346.389302][T13422] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2943'. [ 346.462164][T13430] FAULT_INJECTION: forcing a failure. [ 346.462164][T13430] name failslab, interval 1, probability 0, space 0, times 0 [ 346.490387][T13430] CPU: 1 UID: 0 PID: 13430 Comm: syz.1.2945 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 346.501218][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.511321][T13430] Call Trace: [ 346.514648][T13430] [ 346.517626][T13430] dump_stack_lvl+0x241/0x360 [ 346.522359][T13430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.527605][T13430] ? __pfx__printk+0x10/0x10 [ 346.532241][T13430] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 346.537765][T13430] ? __pfx___might_resched+0x10/0x10 [ 346.543097][T13430] ? __mutex_trylock_common+0x183/0x2e0 [ 346.544579][T13434] netlink: 'syz.3.2946': attribute type 10 has an invalid length. [ 346.548672][T13430] should_fail_ex+0x3b0/0x4e0 [ 346.561246][T13430] should_failslab+0xac/0x100 [ 346.565965][T13430] ? igmp6_group_dropped+0x3a6/0xef0 [ 346.571295][T13430] __kmalloc_cache_noprof+0x6c/0x2c0 [ 346.576633][T13430] ? ndisc_mc_map+0x499/0x7e0 [ 346.580803][T13434] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2946'. [ 346.581338][T13430] igmp6_group_dropped+0x3a6/0xef0 [ 346.590797][T13435] netlink: 'syz.2.2947': attribute type 1 has an invalid length. [ 346.595366][T13430] ? __ipv6_dev_mc_dec+0x66/0x340 [ 346.595405][T13430] ? __pfx___mutex_lock+0x10/0x10 [ 346.613238][T13430] ? __pfx_igmp6_group_dropped+0x10/0x10 [ 346.619034][T13430] __ipv6_dev_mc_dec+0x2bd/0x340 [ 346.624032][T13430] ipv6_sock_mc_drop+0x4f4/0x640 [ 346.629029][T13430] ipv6_mcast_join_leave+0x1d6/0x260 [ 346.634357][T13430] ? __pfx_ipv6_mcast_join_leave+0x10/0x10 [ 346.640223][T13430] ? do_ipv6_setsockopt+0xbf3/0x3630 [ 346.645571][T13430] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 346.651361][T13430] do_ipv6_setsockopt+0x194d/0x3630 [ 346.656623][T13430] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 346.662229][T13430] ? __pfx___might_resched+0x10/0x10 [ 346.667574][T13430] ? __lock_acquire+0x1384/0x2050 [ 346.672667][T13430] ? aa_sk_perm+0x96d/0xab0 [ 346.677235][T13430] ? __pfx_aa_sk_perm+0x10/0x10 [ 346.682147][T13430] ? __pfx_lock_acquire+0x10/0x10 [ 346.687234][T13430] ipv6_setsockopt+0x5d/0x170 [ 346.691958][T13430] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 346.697902][T13430] do_sock_setsockopt+0x3af/0x720 [ 346.702980][T13430] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 346.708573][T13430] ? __fget_files+0x29/0x470 [ 346.713205][T13430] ? __fget_files+0x3f3/0x470 [ 346.717926][T13430] ? __fget_files+0x29/0x470 [ 346.722573][T13430] __sys_setsockopt+0x1a2/0x250 [ 346.727483][T13430] __x64_sys_setsockopt+0xb5/0xd0 [ 346.732557][T13430] do_syscall_64+0xf3/0x230 [ 346.737103][T13430] ? clear_bhb_loop+0x35/0x90 [ 346.741823][T13430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.747767][T13430] RIP: 0033:0x7f5f7457dff9 [ 346.752218][T13430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.771862][T13430] RSP: 002b:00007f5f75355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 346.780324][T13430] RAX: ffffffffffffffda RBX: 00007f5f74736058 RCX: 00007f5f7457dff9 [ 346.788338][T13430] RDX: 000000000000002d RSI: 0000000000000029 RDI: 0000000000000006 [ 346.796362][T13430] RBP: 00007f5f75355090 R08: 0000000000000108 R09: 0000000000000000 [ 346.804382][T13430] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 346.812392][T13430] R13: 0000000000000001 R14: 00007f5f74736058 R15: 00007fff0f0c0d78 [ 346.820428][T13430] [ 347.006528][T13448] netlink: 'syz.4.2952': attribute type 21 has an invalid length. [ 347.098197][T13455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.421302][T13470] bond0: left promiscuous mode [ 347.434590][T13470] bond_slave_0: left promiscuous mode [ 347.441562][T13470] bond_slave_1: left promiscuous mode [ 347.451328][T13470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.459503][T13470] team0: Port device bond0 added [ 347.656946][T13486] FAULT_INJECTION: forcing a failure. [ 347.656946][T13486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.677856][ T5239] Bluetooth: hci10: command 0x0405 tx timeout [ 347.689320][T13486] CPU: 1 UID: 0 PID: 13486 Comm: syz.1.2965 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 347.700156][T13486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.710247][T13486] Call Trace: [ 347.713556][T13486] [ 347.716537][T13486] dump_stack_lvl+0x241/0x360 [ 347.721263][T13486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.726519][T13486] ? __pfx__printk+0x10/0x10 [ 347.731163][T13486] ? snprintf+0xda/0x120 [ 347.735454][T13486] should_fail_ex+0x3b0/0x4e0 [ 347.740185][T13486] _copy_to_user+0x2f/0xb0 [ 347.744653][T13486] simple_read_from_buffer+0xca/0x150 [ 347.750077][T13486] proc_fail_nth_read+0x1e9/0x250 [ 347.755134][T13486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.760712][T13486] ? rw_verify_area+0x55e/0x6f0 [ 347.765592][T13486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.771171][T13486] vfs_read+0x201/0xbc0 [ 347.775348][T13486] ? __pfx_lock_release+0x10/0x10 [ 347.780403][T13486] ? __pfx_vfs_read+0x10/0x10 [ 347.785105][T13486] ? __fget_files+0x3f3/0x470 [ 347.789811][T13486] ? fdget_pos+0x24e/0x320 [ 347.794252][T13486] ksys_read+0x183/0x2b0 [ 347.798505][T13486] ? __pfx_ksys_read+0x10/0x10 [ 347.803277][T13486] ? do_syscall_64+0x100/0x230 [ 347.808056][T13486] ? do_syscall_64+0xb6/0x230 [ 347.812746][T13486] do_syscall_64+0xf3/0x230 [ 347.817259][T13486] ? clear_bhb_loop+0x35/0x90 [ 347.821947][T13486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.827880][T13486] RIP: 0033:0x7f5f7457ca3c [ 347.832305][T13486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 347.851926][T13486] RSP: 002b:00007f5f75355030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.860366][T13486] RAX: ffffffffffffffda RBX: 00007f5f74736058 RCX: 00007f5f7457ca3c [ 347.868355][T13486] RDX: 000000000000000f RSI: 00007f5f753550a0 RDI: 0000000000000009 [ 347.876334][T13486] RBP: 00007f5f75355090 R08: 0000000000000000 R09: 0000000000000000 [ 347.884404][T13486] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 347.892388][T13486] R13: 0000000000000001 R14: 00007f5f74736058 R15: 00007fff0f0c0d78 [ 347.900390][T13486] [ 348.069300][T13501] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 348.086148][T13496] team0: Device ipvlan1 failed to register rx_handler [ 348.570047][T13525] team0: Port device team_slave_1 removed [ 348.849248][T13547] netlink: 'syz.3.2989': attribute type 3 has an invalid length. [ 348.939966][T13549] bridge_slave_0: left allmulticast mode [ 348.945679][T13549] bridge_slave_0: left promiscuous mode [ 348.953009][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.968190][T13549] bridge_slave_1: left allmulticast mode [ 348.974050][T13549] bridge_slave_1: left promiscuous mode [ 348.982941][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.996811][T13555] __nla_validate_parse: 8 callbacks suppressed [ 348.996828][T13555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2990'. [ 349.020123][T13549] bond0: (slave bond_slave_0): Releasing backup interface [ 349.030624][T13549] bond_slave_0: left promiscuous mode [ 349.052377][T13549] bond0: (slave bond_slave_1): Releasing backup interface [ 349.064739][T13549] bond_slave_1: left promiscuous mode [ 349.097674][T13549] team0: Port device team_slave_0 removed [ 349.120779][T13549] team0: Port device team_slave_1 removed [ 349.134892][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.142868][T13549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.151885][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.159385][T13549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.178519][T13549] bond1: (slave bond2): Releasing backup interface [ 349.215459][T13555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2990'. [ 349.538445][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3001'. [ 349.950090][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 350.078133][ T5239] Bluetooth: hci10: command 0x0405 tx timeout [ 350.088768][T13605] FAULT_INJECTION: forcing a failure. [ 350.088768][T13605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.154115][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.4.3014 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 350.164950][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 350.175044][T13605] Call Trace: [ 350.178357][T13605] [ 350.181326][T13605] dump_stack_lvl+0x241/0x360 [ 350.186056][T13605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.191307][T13605] ? __pfx__printk+0x10/0x10 [ 350.195943][T13605] ? __kasan_kmalloc_large+0x8a/0xa0 [ 350.201285][T13605] should_fail_ex+0x3b0/0x4e0 [ 350.206019][T13605] _copy_from_user+0x2f/0xe0 [ 350.210661][T13605] sctp_setsockopt+0xcc/0x11c0 [ 350.215477][T13605] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 350.221423][T13605] do_sock_setsockopt+0x3af/0x720 [ 350.226498][T13605] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 350.232089][T13605] ? __fget_files+0x29/0x470 [ 350.236725][T13605] ? __fget_files+0x3f3/0x470 [ 350.241440][T13605] ? __fget_files+0x29/0x470 [ 350.246082][T13605] __sys_setsockopt+0x1a2/0x250 [ 350.250983][T13605] __x64_sys_setsockopt+0xb5/0xd0 [ 350.256063][T13605] do_syscall_64+0xf3/0x230 [ 350.260606][T13605] ? clear_bhb_loop+0x35/0x90 [ 350.265939][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.271885][T13605] RIP: 0033:0x7f178977dff9 [ 350.276335][T13605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.296842][T13605] RSP: 002b:00007f178a5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.305281][T13605] RAX: ffffffffffffffda RBX: 00007f1789935f80 RCX: 00007f178977dff9 [ 350.313267][T13605] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 350.321254][T13605] RBP: 00007f178a5c4090 R08: 000000000001000f R09: 0000000000000000 [ 350.329242][T13605] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 350.337226][T13605] R13: 0000000000000000 R14: 00007f1789935f80 R15: 00007ffd6fdcc758 [ 350.345226][T13605] [ 350.425074][T13620] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3019'. [ 350.513008][T13626] batadv_slave_1: entered promiscuous mode [ 350.524060][T13628] netlink: 'syz.1.3023': attribute type 3 has an invalid length. [ 350.538522][T13626] netlink: 'syz.0.3022': attribute type 4 has an invalid length. [ 350.543093][T13628] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3023'. [ 350.547447][T13626] netlink: 'syz.0.3022': attribute type 4 has an invalid length. [ 350.564818][T13626] netlink: 126012 bytes leftover after parsing attributes in process `syz.0.3022'. [ 350.581374][T13625] batadv_slave_1: left promiscuous mode [ 350.589027][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'. [ 350.664268][T13637] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.3024'. [ 350.687783][T13637] openvswitch: netlink: Message has 8 unknown bytes. [ 350.979979][T13653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.044867][T13653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.093512][T13653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.146264][T13653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.327845][T13653] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.361004][T13653] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.393811][T13653] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.442350][T13653] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.506308][T13663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3035'. [ 351.675285][T13674] syzkaller0: left promiscuous mode [ 351.681997][T13674] syzkaller0: left allmulticast mode [ 352.017336][T13692] netlink: 'syz.0.3044': attribute type 3 has an invalid length. [ 352.163959][T13703] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.185979][T13703] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.202759][T13703] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 352.239207][T13708] SET target dimension over the limit! [ 352.260077][T13703] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.271344][T13703] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.282264][T13703] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 352.335401][T13703] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.349822][T13703] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.379949][T13703] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 352.463067][T13718] FAULT_INJECTION: forcing a failure. [ 352.463067][T13718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.486972][T13718] CPU: 0 UID: 0 PID: 13718 Comm: syz.1.3054 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 352.497795][T13718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.507883][T13718] Call Trace: [ 352.511193][T13718] [ 352.514147][T13718] dump_stack_lvl+0x241/0x360 [ 352.518860][T13718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.524096][T13718] ? __pfx__printk+0x10/0x10 [ 352.528722][T13718] ? __pfx_lock_release+0x10/0x10 [ 352.533809][T13718] should_fail_ex+0x3b0/0x4e0 [ 352.538546][T13718] _copy_from_iter+0x1ed/0x1d60 [ 352.543441][T13718] ? __virt_addr_valid+0x183/0x530 [ 352.548591][T13718] ? __pfx_lock_release+0x10/0x10 [ 352.553678][T13718] ? __alloc_skb+0x28f/0x440 [ 352.558314][T13718] ? __pfx__copy_from_iter+0x10/0x10 [ 352.563646][T13718] ? __virt_addr_valid+0x183/0x530 [ 352.568807][T13718] ? __virt_addr_valid+0x183/0x530 [ 352.573964][T13718] ? __virt_addr_valid+0x45f/0x530 [ 352.579119][T13718] ? __check_object_size+0x48e/0x900 [ 352.584449][T13718] netlink_sendmsg+0x73d/0xcb0 [ 352.589258][T13718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.594562][T13718] ? aa_sock_msg_perm+0x91/0x160 [ 352.599521][T13718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.604816][T13718] __sock_sendmsg+0x221/0x270 [ 352.609515][T13718] ____sys_sendmsg+0x52a/0x7e0 [ 352.614299][T13718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.619611][T13718] __sys_sendmsg+0x292/0x380 [ 352.624237][T13718] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.629371][T13718] ? __pfx_vfs_write+0x10/0x10 [ 352.634167][T13718] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.640517][T13718] ? do_syscall_64+0x100/0x230 [ 352.645294][T13718] ? do_syscall_64+0xb6/0x230 [ 352.649984][T13718] do_syscall_64+0xf3/0x230 [ 352.654512][T13718] ? clear_bhb_loop+0x35/0x90 [ 352.659201][T13718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.665293][T13718] RIP: 0033:0x7f5f7457dff9 [ 352.669736][T13718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.689357][T13718] RSP: 002b:00007f5f75376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.697789][T13718] RAX: ffffffffffffffda RBX: 00007f5f74735f80 RCX: 00007f5f7457dff9 [ 352.705772][T13718] RDX: 0000000000000044 RSI: 0000000020000080 RDI: 0000000000000003 [ 352.713762][T13718] RBP: 00007f5f75376090 R08: 0000000000000000 R09: 0000000000000000 [ 352.721835][T13718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.729815][T13718] R13: 0000000000000000 R14: 00007f5f74735f80 R15: 00007fff0f0c0d78 [ 352.737836][T13718] [ 352.753364][T13703] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.806498][T13703] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 352.816949][T13703] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 352.945884][T13703] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.979872][T13703] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 352.997680][T13703] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 353.023346][T13703] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.038822][T13703] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 353.060530][T13703] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 353.094783][T13703] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.104948][T13703] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 353.114666][T13703] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 353.155772][T13703] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.200215][T13703] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 353.218023][T13703] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 353.456419][T13762] netlink: 'syz.2.3071': attribute type 10 has an invalid length. [ 353.889071][T13786] netlink: 'syz.2.3082': attribute type 1 has an invalid length. [ 353.897408][T13786] netlink: 'syz.2.3082': attribute type 1 has an invalid length. [ 353.933847][T13786] ip6t_srh: unknown srh invflags A757 [ 354.038760][T13793] __nla_validate_parse: 11 callbacks suppressed [ 354.038781][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 354.267675][T13808] netlink: 'syz.4.3090': attribute type 3 has an invalid length. [ 354.284654][T13808] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3090'. [ 354.585543][T13828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3097'. [ 354.616915][T13828] unsupported nlmsg_type 40 [ 354.876217][T13849] netlink: 816 bytes leftover after parsing attributes in process `syz.2.3102'. [ 355.152038][T13865] openvswitch: netlink: Unknown nsh attribute 0 [ 355.440443][T13880] netlink: 'syz.2.3116': attribute type 27 has an invalid length. [ 355.482689][T13880] hsr0: entered promiscuous mode [ 355.792916][T13902] openvswitch: netlink: Unknown nsh attribute 0 [ 355.894767][T13910] netlink: 'syz.4.3128': attribute type 3 has an invalid length. [ 355.912648][T13910] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3128'. [ 356.048885][T13918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3133'. [ 356.077145][T13918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3133'. [ 356.689060][T13948] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.713070][T13948] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.726987][T13948] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.807217][T13948] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.818898][T13948] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.829627][T13948] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.922797][T13948] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.950192][T13948] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 356.973263][T13948] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 356.999043][T13954] xt_TPROXY: Can be used only with -p tcp or -p udp [ 357.047274][T13948] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.077235][T13954] xt_TPROXY: Can be used only with -p tcp or -p udp [ 357.096933][T13948] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 357.127528][T13948] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 357.290528][T13966] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3149'. [ 357.331950][T13966] unknown channel width for channel at 909000KHz? [ 357.421886][T13948] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.437943][T13948] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.452924][T13948] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 357.469479][T13948] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.478422][T13948] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.487911][T13948] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 357.558737][T13948] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.587614][T13948] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.608366][T13948] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 357.637337][T13948] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.657063][T13948] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 357.676008][T13948] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 357.795891][T13989] netlink: 'syz.0.3159': attribute type 1 has an invalid length. [ 357.811917][T13989] nbd: couldn't find a device at index 2097172 [ 357.838781][T13985] netlink: 'syz.2.3157': attribute type 9 has an invalid length. [ 357.862489][T13985] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.3157'. [ 358.042661][T13999] netlink: 'syz.4.3164': attribute type 3 has an invalid length. [ 358.059921][T13999] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3164'. [ 358.168143][T14003] veth4: entered allmulticast mode [ 358.210329][T14005] veth6: entered allmulticast mode [ 358.243502][T14007] macvlan2: entered promiscuous mode [ 358.267156][T14007] team0: entered promiscuous mode [ 358.277782][T14007] team_slave_0: entered promiscuous mode [ 358.288233][T14007] team_slave_1: entered promiscuous mode [ 358.305256][T14007] bond0: entered promiscuous mode [ 358.317095][T14007] bond_slave_0: entered promiscuous mode [ 358.334731][T14007] bond_slave_1: entered promiscuous mode [ 358.347284][T14007] macvlan2: entered allmulticast mode [ 358.364373][T14007] team0: entered allmulticast mode [ 358.369530][T14007] team_slave_0: entered allmulticast mode [ 358.377314][T14019] FAULT_INJECTION: forcing a failure. [ 358.377314][T14019] name failslab, interval 1, probability 0, space 0, times 0 [ 358.391830][T14007] team_slave_1: entered allmulticast mode [ 358.397577][T14007] bond0: entered allmulticast mode [ 358.403332][T14019] CPU: 0 UID: 0 PID: 14019 Comm: syz.2.3172 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 358.414151][T14019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.424237][T14019] Call Trace: [ 358.427543][T14019] [ 358.430502][T14019] dump_stack_lvl+0x241/0x360 [ 358.435230][T14019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.440471][T14019] ? __pfx__printk+0x10/0x10 [ 358.445100][T14019] ? __kmalloc_noprof+0xb0/0x400 [ 358.450084][T14019] ? __pfx___might_resched+0x10/0x10 [ 358.455434][T14019] should_fail_ex+0x3b0/0x4e0 [ 358.460176][T14019] ? ethnl_default_start+0x13e/0x560 [ 358.465499][T14019] should_failslab+0xac/0x100 [ 358.470219][T14019] ? ethnl_default_start+0x13e/0x560 [ 358.475551][T14019] __kmalloc_noprof+0xd8/0x400 [ 358.480370][T14019] ethnl_default_start+0x13e/0x560 [ 358.485532][T14019] genl_start+0x4d6/0x6d0 [ 358.490022][T14019] __netlink_dump_start+0x45c/0x790 [ 358.495286][T14019] genl_rcv_msg+0x88c/0xec0 [ 358.499810][T14019] ? mark_lock+0x9a/0x360 [ 358.504181][T14019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.505454][T14007] bond_slave_0: entered allmulticast mode [ 358.509230][T14019] ? __pfx_genl_start+0x10/0x10 [ 358.509267][T14019] ? __pfx_genl_dumpit+0x10/0x10 [ 358.517754][T14007] bond_slave_1: entered allmulticast mode [ 358.519822][T14019] ? __pfx_genl_done+0x10/0x10 [ 358.519874][T14019] ? __pfx_lock_acquire+0x10/0x10 [ 358.519908][T14019] ? __pfx_ethnl_default_start+0x10/0x10 [ 358.519933][T14019] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 358.519956][T14019] ? __pfx_ethnl_default_done+0x10/0x10 [ 358.519981][T14019] ? __pfx___might_resched+0x10/0x10 [ 358.520024][T14019] netlink_rcv_skb+0x1e3/0x430 [ 358.527538][T14007] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 358.530644][T14019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.530683][T14019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.530723][T14019] ? __netlink_deliver_tap+0x77e/0x7c0 [ 358.530765][T14019] genl_rcv+0x28/0x40 [ 358.530793][T14019] netlink_unicast+0x7f6/0x990 [ 358.563596][T14012] macvlan3: entered promiscuous mode [ 358.567533][T14019] ? __pfx_netlink_unicast+0x10/0x10 [ 358.567573][T14019] ? __virt_addr_valid+0x183/0x530 [ 358.578555][T14012] macvlan3: entered allmulticast mode [ 358.579431][T14019] ? __check_object_size+0x48e/0x900 [ 358.625389][T14019] netlink_sendmsg+0x8e4/0xcb0 [ 358.630204][T14019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.635525][T14019] ? aa_sock_msg_perm+0x91/0x160 [ 358.640495][T14019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.645799][T14019] __sock_sendmsg+0x221/0x270 [ 358.650510][T14019] ____sys_sendmsg+0x52a/0x7e0 [ 358.655310][T14019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.660635][T14019] __sys_sendmsg+0x292/0x380 [ 358.665266][T14019] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.670437][T14019] ? __pfx_vfs_write+0x10/0x10 [ 358.675253][T14019] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.681608][T14019] ? do_syscall_64+0x100/0x230 [ 358.686400][T14019] ? do_syscall_64+0xb6/0x230 [ 358.691100][T14019] do_syscall_64+0xf3/0x230 [ 358.695667][T14019] ? clear_bhb_loop+0x35/0x90 [ 358.700370][T14019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.706298][T14019] RIP: 0033:0x7f70dab7dff9 [ 358.710732][T14019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.730468][T14019] RSP: 002b:00007f70dba19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.738920][T14019] RAX: ffffffffffffffda RBX: 00007f70dad35f80 RCX: 00007f70dab7dff9 [ 358.746899][T14019] RDX: 0000000000000044 RSI: 0000000020000080 RDI: 0000000000000003 [ 358.754876][T14019] RBP: 00007f70dba19090 R08: 0000000000000000 R09: 0000000000000000 [ 358.762862][T14019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.770864][T14019] R13: 0000000000000000 R14: 00007f70dad35f80 R15: 00007ffdab9685a8 [ 358.778875][T14019] [ 358.823035][T14017] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.837479][T14017] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.853874][T14017] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.868948][T14017] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.125893][T14040] netlink: 'syz.2.3179': attribute type 3 has an invalid length. [ 359.147349][T14040] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3179'. [ 359.305101][T14046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3182'. [ 359.315260][T14046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3182'. [ 359.724118][T14059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3185'. [ 359.864816][T14064] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.927643][T14064] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.015531][T14064] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.102239][T14064] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.180585][T14082] netlink: 'syz.0.3195': attribute type 10 has an invalid length. [ 360.229519][T14082] batman_adv: batadv0: Adding interface: team0 [ 360.245140][T14082] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.272755][T14082] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 360.388922][T14064] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.411627][T14087] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 360.419157][T14087] syzkaller0: Linktype set failed because interface is up [ 360.439000][T14064] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.258770][T14064] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.283354][T14064] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.380860][T14111] team0: Device ipvlan1 failed to register rx_handler [ 362.407852][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'. [ 362.688126][T14132] vlan2: entered promiscuous mode [ 362.713407][T14136] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 362.932914][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3217'. [ 363.477343][T14157] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 363.531123][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.540214][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.647391][T14163] tipc: Started in network mode [ 363.665117][T14163] tipc: Node identity 4, cluster identity 4711 [ 363.685313][T14163] tipc: Node number set to 4 [ 363.778020][T14168] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 363.881682][T14176] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3226'. [ 363.997348][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'. [ 364.235109][T14199] FAULT_INJECTION: forcing a failure. [ 364.235109][T14199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.270207][T14199] CPU: 0 UID: 0 PID: 14199 Comm: syz.1.3236 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 364.281031][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 364.291132][T14199] Call Trace: [ 364.294444][T14199] [ 364.297406][T14199] dump_stack_lvl+0x241/0x360 [ 364.302129][T14199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.307371][T14199] ? __pfx__printk+0x10/0x10 [ 364.312014][T14199] ? __pfx_lock_release+0x10/0x10 [ 364.317100][T14199] should_fail_ex+0x3b0/0x4e0 [ 364.321833][T14199] _copy_from_iter+0x1ed/0x1d60 [ 364.326749][T14199] ? __virt_addr_valid+0x183/0x530 [ 364.331896][T14199] ? tcp_leave_memory_pressure+0xe8/0x100 [ 364.337654][T14199] ? __pfx_lock_release+0x10/0x10 [ 364.342749][T14199] ? __pfx__copy_from_iter+0x10/0x10 [ 364.348082][T14199] ? __virt_addr_valid+0x183/0x530 [ 364.353235][T14199] ? __virt_addr_valid+0x183/0x530 [ 364.358393][T14199] ? __virt_addr_valid+0x45f/0x530 [ 364.363555][T14199] ? __phys_addr_symbol+0x2f/0x70 [ 364.368618][T14199] ? __check_object_size+0x48e/0x900 [ 364.373953][T14199] sk_msg_memcopy_from_iter+0x2ee/0x5f0 [ 364.379529][T14199] tcp_bpf_sendmsg+0x634/0x1a70 [ 364.384427][T14199] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 364.389758][T14199] ? ima_get_action+0x75/0xb0 [ 364.394527][T14199] ? sock_rps_record_flow+0x1a/0x400 [ 364.399835][T14199] ? inet_send_prepare+0x21/0x260 [ 364.404884][T14199] ? inet_send_prepare+0x5a/0x260 [ 364.409937][T14199] __sock_sendmsg+0xef/0x270 [ 364.414552][T14199] ____sys_sendmsg+0x52a/0x7e0 [ 364.419340][T14199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.424648][T14199] ? rcu_is_watching+0x15/0xb0 [ 364.429431][T14199] ? __might_fault+0xaa/0x120 [ 364.434126][T14199] __sys_sendmmsg+0x3ab/0x730 [ 364.438833][T14199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 364.444061][T14199] ? __pfx_lock_release+0x10/0x10 [ 364.449116][T14199] ? kstrtouint_from_user+0x128/0x190 [ 364.454532][T14199] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 364.460469][T14199] ? ksys_write+0x229/0x2b0 [ 364.464995][T14199] ? __pfx_lock_release+0x10/0x10 [ 364.470082][T14199] ? vfs_write+0x7bf/0xc90 [ 364.474531][T14199] ? kmem_cache_free+0x1a2/0x420 [ 364.479505][T14199] ? __mutex_unlock_slowpath+0x21d/0x750 [ 364.485172][T14199] ? __fget_files+0x3f3/0x470 [ 364.489889][T14199] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 364.495904][T14199] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.502298][T14199] ? do_syscall_64+0x100/0x230 [ 364.507084][T14199] __x64_sys_sendmmsg+0xa0/0xb0 [ 364.511955][T14199] do_syscall_64+0xf3/0x230 [ 364.516503][T14199] ? clear_bhb_loop+0x35/0x90 [ 364.521285][T14199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.527211][T14199] RIP: 0033:0x7f5f7457dff9 [ 364.531639][T14199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.551269][T14199] RSP: 002b:00007f5f75376038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.559716][T14199] RAX: ffffffffffffffda RBX: 00007f5f74735f80 RCX: 00007f5f7457dff9 [ 364.567718][T14199] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 364.575709][T14199] RBP: 00007f5f75376090 R08: 0000000000000000 R09: 0000000000000000 [ 364.583693][T14199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.591670][T14199] R13: 0000000000000000 R14: 00007f5f74735f80 R15: 00007fff0f0c0d78 [ 364.599668][T14199] [ 364.727878][T14213] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3242'. [ 365.374592][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.392229][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.393940][ T6384] syz_tun (unregistering): left promiscuous mode [ 365.407018][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.418958][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.428107][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 365.442868][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.524408][ T1121] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.685563][ T1121] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.759478][ T1121] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.911735][ T1121] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.091232][T14308] FAULT_INJECTION: forcing a failure. [ 366.091232][T14308] name failslab, interval 1, probability 0, space 0, times 0 [ 366.104837][T14260] chnl_net:caif_netlink_parms(): no params data found [ 366.106294][T14308] CPU: 1 UID: 0 PID: 14308 Comm: syz.2.3271 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 366.122411][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.132506][T14308] Call Trace: [ 366.135816][T14308] [ 366.138785][T14308] dump_stack_lvl+0x241/0x360 [ 366.143507][T14308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.148739][T14308] ? __pfx__printk+0x10/0x10 [ 366.153367][T14308] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 366.159396][T14308] ? __pfx___might_resched+0x10/0x10 [ 366.164733][T14308] should_fail_ex+0x3b0/0x4e0 [ 366.169446][T14308] should_failslab+0xac/0x100 [ 366.174178][T14308] ? __alloc_skb+0x1c3/0x440 [ 366.178781][T14308] kmem_cache_alloc_node_noprof+0x71/0x320 [ 366.184612][T14308] __alloc_skb+0x1c3/0x440 [ 366.189048][T14308] ? __pfx___alloc_skb+0x10/0x10 [ 366.194007][T14308] ? netlink_autobind+0xd6/0x2f0 [ 366.198956][T14308] ? netlink_autobind+0x2b0/0x2f0 [ 366.203995][T14308] netlink_sendmsg+0x638/0xcb0 [ 366.208777][T14308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.214076][T14308] ? aa_sock_msg_perm+0x91/0x160 [ 366.219031][T14308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.224323][T14308] __sock_sendmsg+0x221/0x270 [ 366.229020][T14308] ____sys_sendmsg+0x52a/0x7e0 [ 366.233800][T14308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.239112][T14308] __sys_sendmsg+0x292/0x380 [ 366.243715][T14308] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.248845][T14308] ? __pfx_vfs_write+0x10/0x10 [ 366.253642][T14308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 366.259990][T14308] ? do_syscall_64+0x100/0x230 [ 366.264765][T14308] ? do_syscall_64+0xb6/0x230 [ 366.269461][T14308] do_syscall_64+0xf3/0x230 [ 366.273988][T14308] ? clear_bhb_loop+0x35/0x90 [ 366.278679][T14308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.284588][T14308] RIP: 0033:0x7f70dab7dff9 [ 366.289012][T14308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.308630][T14308] RSP: 002b:00007f70dba19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.317061][T14308] RAX: ffffffffffffffda RBX: 00007f70dad35f80 RCX: 00007f70dab7dff9 [ 366.325044][T14308] RDX: 0000000000000804 RSI: 0000000020000140 RDI: 0000000000000003 [ 366.333022][T14308] RBP: 00007f70dba19090 R08: 0000000000000000 R09: 0000000000000000 [ 366.341003][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.348978][T14308] R13: 0000000000000000 R14: 00007f70dad35f80 R15: 00007ffdab9685a8 [ 366.356972][T14308] [ 366.444620][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 366.807708][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3279'. [ 367.012500][ T1121] dvmrp1 (unregistering): left allmulticast mode [ 367.375366][ T1121] bond0 (unregistering): Released all slaves [ 367.389132][ T1121] bond1 (unregistering): Released all slaves [ 367.518082][ T1121] bond2 (unregistering): Released all slaves [ 367.520441][ T5239] Bluetooth: hci0: command tx timeout [ 367.654361][ T1121] tipc: Left network mode [ 367.707311][T14260] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.725306][T14260] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.734860][T14260] bridge_slave_0: entered allmulticast mode [ 367.742635][T14260] bridge_slave_0: entered promiscuous mode [ 367.803994][T14260] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.829534][T14260] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.838567][T14260] bridge_slave_1: entered allmulticast mode [ 367.847748][T14260] bridge_slave_1: entered promiscuous mode [ 367.881220][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'. [ 367.920859][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'. [ 367.984880][T14363] FAULT_INJECTION: forcing a failure. [ 367.984880][T14363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.025242][T14260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.056143][T14363] CPU: 0 UID: 0 PID: 14363 Comm: syz.4.3287 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 368.066973][T14363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 368.077056][T14363] Call Trace: [ 368.080355][T14363] [ 368.083322][T14363] dump_stack_lvl+0x241/0x360 [ 368.088050][T14363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.093284][T14363] ? __pfx__printk+0x10/0x10 [ 368.097887][T14363] ? __pfx_lock_release+0x10/0x10 [ 368.102940][T14363] should_fail_ex+0x3b0/0x4e0 [ 368.107634][T14363] _copy_from_user+0x2f/0xe0 [ 368.112243][T14363] copy_msghdr_from_user+0xae/0x680 [ 368.117459][T14363] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 368.123323][T14363] __sys_sendmmsg+0x36d/0x730 [ 368.128059][T14363] ? __pfx___sys_sendmmsg+0x10/0x10 [ 368.133409][T14363] ? __pfx_lock_release+0x10/0x10 [ 368.138507][T14363] ? kstrtouint_from_user+0x128/0x190 [ 368.143953][T14363] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 368.149897][T14363] ? ksys_write+0x229/0x2b0 [ 368.154435][T14363] ? __pfx_lock_release+0x10/0x10 [ 368.159494][T14363] ? vfs_write+0x7bf/0xc90 [ 368.163925][T14363] ? kmem_cache_free+0x1a2/0x420 [ 368.168880][T14363] ? __mutex_unlock_slowpath+0x21d/0x750 [ 368.174542][T14363] ? __fget_files+0x3f3/0x470 [ 368.179244][T14363] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.185246][T14363] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.191600][T14363] ? do_syscall_64+0x100/0x230 [ 368.196377][T14363] __x64_sys_sendmmsg+0xa0/0xb0 [ 368.201256][T14363] do_syscall_64+0xf3/0x230 [ 368.205804][T14363] ? clear_bhb_loop+0x35/0x90 [ 368.210530][T14363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.216492][T14363] RIP: 0033:0x7f178977dff9 [ 368.220957][T14363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.240598][T14363] RSP: 002b:00007f178a5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.249119][T14363] RAX: ffffffffffffffda RBX: 00007f1789935f80 RCX: 00007f178977dff9 [ 368.257116][T14363] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 368.265116][T14363] RBP: 00007f178a5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 368.273139][T14363] R10: 0000000004000300 R11: 0000000000000246 R12: 0000000000000001 [ 368.281155][T14363] R13: 0000000000000000 R14: 00007f1789935f80 R15: 00007ffd6fdcc758 [ 368.289188][T14363] [ 368.342107][T14260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.533327][T14260] team0: Port device team_slave_0 added [ 368.583538][ T1121] batadv_slave_0: left promiscuous mode [ 368.635508][ T1121] hsr_slave_0: left promiscuous mode [ 368.649001][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'. [ 368.681167][ T1121] hsr_slave_1: left promiscuous mode [ 368.687311][ T1121] batman_adv: batadv0: Removing interface: team0 [ 368.735243][T14392] netlink: 828 bytes leftover after parsing attributes in process `syz.3.3293'. [ 368.743558][ T1121] batadv0: left allmulticast mode [ 368.764875][ T1121] batadv0: left promiscuous mode [ 368.779020][ T1121] veth1_macvtap: left promiscuous mode [ 368.785300][ T1121] veth0_macvtap: left promiscuous mode [ 368.812768][ T1121] veth1_vlan: left promiscuous mode [ 368.818231][ T1121] veth0_vlan: left promiscuous mode [ 369.592420][ T5239] Bluetooth: hci0: command tx timeout [ 369.664211][T14260] team0: Port device team_slave_1 added [ 369.788867][T14260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.799987][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.826141][T14260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.860432][T14260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.867470][T14260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.953789][T14260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.986824][T14414] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3298'. [ 370.176441][T14260] hsr_slave_0: entered promiscuous mode [ 370.215435][T14260] hsr_slave_1: entered promiscuous mode [ 370.553245][T14440] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3306'. [ 370.732537][T14448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3307'. [ 370.792904][T14456] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3310'. [ 370.905504][ T1121] IPVS: stop unused estimator thread 0... [ 371.065500][T14466] ipvlan1: entered promiscuous mode [ 371.078822][T14466] ipvlan1: entered allmulticast mode [ 371.087661][T14466] veth0_vlan: entered allmulticast mode [ 371.099463][T14466] team0: Device ipvlan1 is of different type [ 371.434138][T14483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3320'. [ 371.464767][T14483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3320'. [ 371.482690][T14484] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3319'. [ 371.636826][T14260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.668784][T14260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 371.675892][ T5239] Bluetooth: hci0: command tx timeout [ 371.745228][T14260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 371.752538][T14497] netlink: 'syz.2.3322': attribute type 1 has an invalid length. [ 371.771180][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3322'. [ 371.781606][T14260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 371.793083][T14499] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 372.038951][T14260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.097603][T14260] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.119462][T14514] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 372.151072][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.158295][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.212139][ T926] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.219310][ T926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.766971][T14260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.803259][T14260] veth0_vlan: entered promiscuous mode [ 372.814811][T14260] veth1_vlan: entered promiscuous mode [ 372.867560][T14553] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3341'. [ 372.932627][T14260] veth0_macvtap: entered promiscuous mode [ 372.965790][T14260] veth1_macvtap: entered promiscuous mode [ 372.984893][T14561] ipvlan1: entered promiscuous mode [ 372.990304][T14561] ipvlan1: entered allmulticast mode [ 372.995703][T14561] veth0_vlan: entered allmulticast mode [ 373.005181][T14561] team0: Device ipvlan1 failed to register rx_handler [ 373.194523][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.249327][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.272246][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.287512][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.308284][T14260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.362574][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.373593][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.404070][T14260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.429844][T14260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.483604][T14260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.573322][T14260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.619298][T14260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.648262][T14260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.659822][T14260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.749887][ T5239] Bluetooth: hci0: command tx timeout [ 374.398594][T14607] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.406396][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.709096][T14607] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 374.781963][ T926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.798155][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.806279][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.811809][ T926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.980801][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3360'. [ 375.427626][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.439240][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.447641][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.455836][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.464788][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 375.472305][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.668415][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 375.751557][T14685] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3372'. [ 375.996594][T14668] chnl_net:caif_netlink_parms(): no params data found [ 376.098620][T14712] netlink: 'syz.0.3378': attribute type 30 has an invalid length. [ 376.168910][T14668] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.186656][T14668] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.208264][T14668] bridge_slave_0: entered allmulticast mode [ 376.215655][T14668] bridge_slave_0: entered promiscuous mode [ 376.224358][T14668] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.232534][T14668] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.240299][T14668] bridge_slave_1: entered allmulticast mode [ 376.248765][T14668] bridge_slave_1: entered promiscuous mode [ 376.369446][T14721] syz.2.3382 (14721) used greatest stack depth: 18464 bytes left [ 376.443575][T14726] netlink: 'syz.4.3383': attribute type 9 has an invalid length. [ 376.449563][T14668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.457999][T14726] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3383'. [ 376.467715][T14668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.537204][T14668] team0: Port device team_slave_0 added [ 376.580233][T14668] team0: Port device team_slave_1 added [ 376.626944][T14725] netlink: 'syz.4.3383': attribute type 9 has an invalid length. [ 376.651674][T14668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.657863][T14725] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3383'. [ 376.658832][T14668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.694573][T14668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.717295][T14668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.727065][T14668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.776921][T14668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.923536][T14668] hsr_slave_0: entered promiscuous mode [ 376.952189][T14668] hsr_slave_1: entered promiscuous mode [ 376.968461][T14668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.997488][T14668] Cannot create hsr debugfs directory [ 377.238591][T14761] TCP: TCP_TX_DELAY enabled [ 377.308285][T14668] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.437249][T14668] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.604618][ T4623] Bluetooth: hci1: command tx timeout [ 377.605571][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'. [ 377.650862][T14668] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.706442][T14791] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.725297][T14791] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.739327][T14791] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.744647][T14795] netlink: 'syz.0.3407': attribute type 2 has an invalid length. [ 377.816836][T14668] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.854521][T14791] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.875812][T14791] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.906418][T14791] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 377.932349][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3409'. [ 377.962000][T14791] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.983683][T14791] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 377.994171][T14791] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.146363][T14668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.171468][T14791] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.181727][T14791] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 378.202185][T14791] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 378.223227][T14668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.243010][T14668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.254940][T14668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.343803][T14791] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.357934][T14791] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 378.367741][T14791] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.408721][T14791] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.427489][T14791] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 378.446757][T14791] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.481491][T14791] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.491394][T14791] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 378.500582][T14791] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.502021][T14824] openvswitch: netlink: Unknown nsh attribute 0 [ 378.556724][T14791] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.584941][T14791] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 378.618620][T14791] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.724055][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.848230][T14668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.893893][T14668] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.933083][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.940273][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.008531][T14258] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.015772][T14258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.037719][T14844] bond0: option ad_select: unable to set because the bond device is up [ 379.050575][T14844] netlink: 'syz.0.3427': attribute type 1 has an invalid length. [ 379.058426][T14844] netlink: 9372 bytes leftover after parsing attributes in process `syz.0.3427'. [ 379.068201][T14844] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3427'. [ 379.077671][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3427'. [ 379.120503][T14848] openvswitch: netlink: Unknown nsh attribute 0 [ 379.150827][T14850] Cannot find add_set index 0 as target [ 379.168793][T14668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.181439][T14668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.329140][T14856] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.350629][T14856] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.452282][T14856] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.489994][T14856] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.559598][T14856] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.599212][T14856] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.625925][T14668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.670927][ T4623] Bluetooth: hci1: command tx timeout [ 379.706205][T14856] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.724755][T14856] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.835610][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'. [ 379.862160][T14668] veth0_vlan: entered promiscuous mode [ 379.922444][T14856] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.940909][T14856] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.978958][T14856] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.989215][T14856] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.013361][T14668] veth1_vlan: entered promiscuous mode [ 380.053156][T14889] FAULT_INJECTION: forcing a failure. [ 380.053156][T14889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.058017][T14856] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.083435][T14856] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.089331][T14889] CPU: 1 UID: 0 PID: 14889 Comm: syz.0.3445 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 380.099512][T14668] veth0_macvtap: entered promiscuous mode [ 380.102380][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.102399][T14889] Call Trace: [ 380.102408][T14889] [ 380.102419][T14889] dump_stack_lvl+0x241/0x360 [ 380.120482][T14856] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.121489][T14889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.124430][T14856] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.129081][T14889] ? __pfx__printk+0x10/0x10 [ 380.155206][T14889] ? __pfx_lock_release+0x10/0x10 [ 380.160256][T14889] ? rcu_is_watching+0x15/0xb0 [ 380.165031][T14889] should_fail_ex+0x3b0/0x4e0 [ 380.169734][T14889] _copy_from_iter+0x1ed/0x1d60 [ 380.174612][T14889] ? alloc_pages_mpol_noprof+0x417/0x680 [ 380.180346][T14889] ? __pfx__copy_from_iter+0x10/0x10 [ 380.185648][T14889] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 380.191658][T14889] ? alloc_pages_noprof+0xef/0x170 [ 380.196779][T14889] ? page_copy_sane+0x46/0x260 [ 380.201561][T14889] copy_page_from_iter+0x7a/0x100 [ 380.206604][T14889] tun_get_user+0x2046/0x47e0 [ 380.211298][T14889] ? tun_get_user+0x871/0x47e0 [ 380.216078][T14889] ? __lock_acquire+0x1384/0x2050 [ 380.221129][T14889] ? __pfx_tun_get_user+0x10/0x10 [ 380.226181][T14889] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 380.231648][T14889] ? tun_get+0x1e/0x2f0 [ 380.235822][T14889] ? __pfx_lock_release+0x10/0x10 [ 380.240880][T14889] ? tun_get+0x1e/0x2f0 [ 380.245050][T14889] ? tun_get+0x27d/0x2f0 [ 380.249307][T14889] tun_chr_write_iter+0x10d/0x1f0 [ 380.254350][T14889] vfs_write+0xa6d/0xc90 [ 380.258605][T14889] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 380.264162][T14889] ? __pfx_vfs_write+0x10/0x10 [ 380.268945][T14889] ? fdget_pos+0x19a/0x320 [ 380.273379][T14889] ksys_write+0x183/0x2b0 [ 380.277720][T14889] ? __pfx_ksys_write+0x10/0x10 [ 380.282580][T14889] ? do_syscall_64+0x100/0x230 [ 380.287380][T14889] ? do_syscall_64+0xb6/0x230 [ 380.292072][T14889] do_syscall_64+0xf3/0x230 [ 380.296587][T14889] ? clear_bhb_loop+0x35/0x90 [ 380.301293][T14889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.307235][T14889] RIP: 0033:0x7f53f5f7cadf [ 380.311690][T14889] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 380.331344][T14889] RSP: 002b:00007f53f6cf3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 380.339790][T14889] RAX: ffffffffffffffda RBX: 00007f53f6135f80 RCX: 00007f53f5f7cadf [ 380.347791][T14889] RDX: 00000000000000be RSI: 00000000200008c0 RDI: 00000000000000c8 [ 380.355778][T14889] RBP: 00007f53f6cf3090 R08: 0000000000000000 R09: 0000000000000000 [ 380.363761][T14889] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 380.371742][T14889] R13: 0000000000000000 R14: 00007f53f6135f80 R15: 00007ffc92d94768 [ 380.379738][T14889] [ 380.403569][T14668] veth1_macvtap: entered promiscuous mode [ 380.478719][T14668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.500199][T14668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.510472][T14668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.521220][T14668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.532033][T14668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.543455][T14668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.555170][T14668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.566272][T14668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.576785][T14668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.586719][T14668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.597450][T14668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.607416][T14668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.617902][T14668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.629953][T14668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.653330][T14668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.662708][T14668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.671978][T14668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.681324][T14668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.801149][ T3111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.828421][ T3111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.904445][T14258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.920864][T14258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.964282][T14910] FAULT_INJECTION: forcing a failure. [ 380.964282][T14910] name failslab, interval 1, probability 0, space 0, times 0 [ 380.980107][T14910] CPU: 1 UID: 0 PID: 14910 Comm: syz.4.3454 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 380.990922][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.001009][T14910] Call Trace: [ 381.004312][T14910] [ 381.007266][T14910] dump_stack_lvl+0x241/0x360 [ 381.011984][T14910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.017237][T14910] ? __pfx__printk+0x10/0x10 [ 381.021865][T14910] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 381.027896][T14910] ? __pfx___might_resched+0x10/0x10 [ 381.033235][T14910] should_fail_ex+0x3b0/0x4e0 [ 381.037962][T14910] should_failslab+0xac/0x100 [ 381.042678][T14910] ? __alloc_skb+0x1c3/0x440 [ 381.047305][T14910] kmem_cache_alloc_node_noprof+0x71/0x320 [ 381.053160][T14910] __alloc_skb+0x1c3/0x440 [ 381.057620][T14910] ? __pfx___alloc_skb+0x10/0x10 [ 381.062599][T14910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.068987][T14910] sock_omalloc+0xd5/0x1e0 [ 381.073453][T14910] msg_zerocopy_realloc+0x9a/0x7d0 [ 381.078619][T14910] __ip_append_data+0xb38/0x41d0 [ 381.083617][T14910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.089998][T14910] ? __local_bh_enable_ip+0x168/0x200 [ 381.095407][T14910] ? __local_bh_enable_ip+0x168/0x200 [ 381.100808][T14910] ? rt_set_nexthop+0x664/0xa50 [ 381.105688][T14910] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 381.111264][T14910] ? ip_route_output_key_hash+0xdf/0x2b0 [ 381.116912][T14910] ? __pfx___ip_append_data+0x10/0x10 [ 381.122299][T14910] ? ipv4_mtu+0x2bc/0x3d0 [ 381.126648][T14910] ? ip_setup_cork+0x4ae/0x8b0 [ 381.131434][T14910] ip_make_skb+0x198/0x420 [ 381.135871][T14910] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 381.141440][T14910] ? __pfx_ip_make_skb+0x10/0x10 [ 381.146407][T14910] udp_sendmsg+0x1bef/0x2a60 [ 381.151049][T14910] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 381.156620][T14910] ? __pfx_udp_sendmsg+0x10/0x10 [ 381.161588][T14910] ? unwind_next_frame+0x18e6/0x22d0 [ 381.166890][T14910] ? 0xffffffffa0000948 [ 381.171053][T14910] ? 0xffffffffa0000948 [ 381.175225][T14910] udpv6_sendmsg+0x1386/0x3270 [ 381.180025][T14910] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 381.185182][T14910] ? inet_send_prepare+0x21/0x260 [ 381.190243][T14910] __sock_sendmsg+0xef/0x270 [ 381.194858][T14910] ____sys_sendmsg+0x52a/0x7e0 [ 381.199647][T14910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.204953][T14910] ? lockdep_hardirqs_on+0x99/0x150 [ 381.210169][T14910] ? __might_fault+0xaa/0x120 [ 381.214864][T14910] __sys_sendmmsg+0x3ab/0x730 [ 381.219561][T14910] ? __pfx___sys_sendmmsg+0x10/0x10 [ 381.224785][T14910] ? __pfx_lock_release+0x10/0x10 [ 381.229827][T14910] ? kstrtouint_from_user+0x128/0x190 [ 381.235229][T14910] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 381.241137][T14910] ? ksys_write+0x229/0x2b0 [ 381.245652][T14910] ? __pfx_lock_release+0x10/0x10 [ 381.250719][T14910] ? vfs_write+0x7bf/0xc90 [ 381.255145][T14910] ? kmem_cache_free+0x1a2/0x420 [ 381.260100][T14910] ? __mutex_unlock_slowpath+0x21d/0x750 [ 381.265751][T14910] ? __fget_files+0x3f3/0x470 [ 381.270456][T14910] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.276460][T14910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.282809][T14910] ? do_syscall_64+0x100/0x230 [ 381.287585][T14910] __x64_sys_sendmmsg+0xa0/0xb0 [ 381.292463][T14910] do_syscall_64+0xf3/0x230 [ 381.296981][T14910] ? clear_bhb_loop+0x35/0x90 [ 381.301676][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.307591][T14910] RIP: 0033:0x7f178977dff9 [ 381.312023][T14910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.331747][T14910] RSP: 002b:00007f178a5c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 381.340180][T14910] RAX: ffffffffffffffda RBX: 00007f1789935f80 RCX: 00007f178977dff9 [ 381.348167][T14910] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 381.356166][T14910] RBP: 00007f178a5c4090 R08: 0000000000000000 R09: 0000000000000000 [ 381.364151][T14910] R10: 0000000004000300 R11: 0000000000000246 R12: 0000000000000002 [ 381.372219][T14910] R13: 0000000000000000 R14: 00007f1789935f80 R15: 00007ffd6fdcc758 [ 381.380213][T14910] [ 381.571280][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'. [ 381.750764][ T4623] Bluetooth: hci1: command tx timeout [ 381.850137][T14933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 382.150605][T14943] netlink: 'syz.0.3466': attribute type 9 has an invalid length. [ 382.195277][T14943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3466'. [ 382.234790][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3468'. [ 382.278901][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.287771][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.300571][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3468'. [ 382.324171][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.334145][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.342749][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 382.370139][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.485039][T14957] netlink: 'syz.2.3471': attribute type 15 has an invalid length. [ 382.610436][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3475'. [ 382.736297][T14974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3478'. [ 382.862540][T14952] chnl_net:caif_netlink_parms(): no params data found [ 382.910387][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3482'. [ 382.977316][T14989] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 383.002615][T14998] openvswitch: netlink: Unknown nsh attribute 0 [ 383.066569][T15000] FAULT_INJECTION: forcing a failure. [ 383.066569][T15000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.092993][T14952] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.105156][T14952] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.130088][T15000] CPU: 0 UID: 0 PID: 15000 Comm: syz.2.3485 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 383.140910][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.150980][T15000] Call Trace: [ 383.154266][T15000] [ 383.157211][T15000] dump_stack_lvl+0x241/0x360 [ 383.161909][T15000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.167125][T15000] ? __pfx__printk+0x10/0x10 [ 383.171730][T15000] ? __pfx_lock_release+0x10/0x10 [ 383.176812][T15000] should_fail_ex+0x3b0/0x4e0 [ 383.181515][T15000] _copy_from_user+0x2f/0xe0 [ 383.186132][T15000] copy_msghdr_from_user+0xae/0x680 [ 383.191367][T15000] ? __pfx___might_resched+0x10/0x10 [ 383.196680][T15000] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 383.202507][T15000] ? lockdep_hardirqs_on+0x99/0x150 [ 383.207717][T15000] ? rcu_is_watching+0x15/0xb0 [ 383.212496][T15000] ? __might_fault+0xaa/0x120 [ 383.217185][T15000] __sys_sendmmsg+0x36d/0x730 [ 383.221884][T15000] ? __pfx___sys_sendmmsg+0x10/0x10 [ 383.227106][T15000] ? __pfx_lock_release+0x10/0x10 [ 383.232150][T15000] ? kstrtouint_from_user+0x128/0x190 [ 383.237555][T15000] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 383.243465][T15000] ? ksys_write+0x229/0x2b0 [ 383.247979][T15000] ? __pfx_lock_release+0x10/0x10 [ 383.253028][T15000] ? vfs_write+0x7bf/0xc90 [ 383.257452][T15000] ? kmem_cache_free+0x1a2/0x420 [ 383.262408][T15000] ? __mutex_unlock_slowpath+0x21d/0x750 [ 383.268068][T15000] ? __fget_files+0x3f3/0x470 [ 383.272772][T15000] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.278771][T15000] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.285116][T15000] ? do_syscall_64+0x100/0x230 [ 383.289896][T15000] __x64_sys_sendmmsg+0xa0/0xb0 [ 383.294764][T15000] do_syscall_64+0xf3/0x230 [ 383.299280][T15000] ? clear_bhb_loop+0x35/0x90 [ 383.303976][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.309893][T15000] RIP: 0033:0x7f70dab7dff9 [ 383.314409][T15000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.334048][T15000] RSP: 002b:00007f70dba19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 383.342481][T15000] RAX: ffffffffffffffda RBX: 00007f70dad35f80 RCX: 00007f70dab7dff9 [ 383.350465][T15000] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 383.358460][T15000] RBP: 00007f70dba19090 R08: 0000000000000000 R09: 0000000000000000 [ 383.366452][T15000] R10: 0000000004000300 R11: 0000000000000246 R12: 0000000000000002 [ 383.374438][T15000] R13: 0000000000000000 R14: 00007f70dad35f80 R15: 00007ffdab9685a8 [ 383.382456][T15000] [ 383.396361][T14952] bridge_slave_0: entered allmulticast mode [ 383.409865][T14952] bridge_slave_0: entered promiscuous mode [ 383.418002][T14952] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.446763][T14952] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.470422][T14952] bridge_slave_1: entered allmulticast mode [ 383.477438][T14952] bridge_slave_1: entered promiscuous mode [ 383.573249][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 383.586723][T14952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.631525][T15013] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3490'. [ 383.643746][T14952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.743112][T14952] team0: Port device team_slave_0 added [ 383.764645][T14952] team0: Port device team_slave_1 added [ 383.847648][ T4623] Bluetooth: hci1: command tx timeout [ 383.921593][T14952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.928587][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.982563][T15027] openvswitch: netlink: Unknown nsh attribute 0 [ 383.989384][T14952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.022031][T14952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.029022][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.092509][T14952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.284784][T14952] hsr_slave_0: entered promiscuous mode [ 384.310576][T14952] hsr_slave_1: entered promiscuous mode [ 384.330204][T14952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.338212][T14952] Cannot create hsr debugfs directory [ 384.471731][ T4623] Bluetooth: hci2: command tx timeout [ 384.504400][T15049] bridge0: entered promiscuous mode [ 384.593256][T14952] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.617940][T14952] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.704028][T14952] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.739444][T14952] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.847831][T14952] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.879725][T14952] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.982071][T14952] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.992085][T14952] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.155488][T14952] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.205202][T14952] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.267096][T14952] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.342212][T14952] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.579072][T14952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.630299][T14952] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.671463][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.678594][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.687814][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.695026][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.988216][T15112] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 3, id = 0 [ 386.546694][T14952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.554672][ T4623] Bluetooth: hci2: command tx timeout [ 386.673841][T15096] __nla_validate_parse: 3 callbacks suppressed [ 386.673864][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3521'. [ 386.710637][T15141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3535'. [ 386.933631][T15145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3536'. [ 386.954425][T15145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3536'. [ 387.299114][T14952] veth0_vlan: entered promiscuous mode [ 387.324005][T14952] veth1_vlan: entered promiscuous mode [ 387.451831][T14952] veth0_macvtap: entered promiscuous mode [ 387.473733][T14952] veth1_macvtap: entered promiscuous mode [ 387.538236][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.579849][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.609732][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.627827][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.643597][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.654256][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.664791][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.693150][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.706359][T14952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.746875][T15190] openvswitch: netlink: Actions may not be safe on all matching packets [ 387.806995][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.851725][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.889762][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.909964][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.931069][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.944547][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'. [ 387.954321][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.967249][T14952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.978244][T14952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.994918][T14952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.013893][T14952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.026696][T14952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.035871][T14952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.045154][T14952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.055762][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'. [ 388.228707][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.258935][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.305579][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.350699][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.502042][T15220] SET target dimension over the limit! [ 388.630510][ T4623] Bluetooth: hci2: command tx timeout [ 388.767643][T15237] netlink: 'syz.0.3570': attribute type 1 has an invalid length. [ 388.831119][T15232] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3566'. [ 388.832557][T15237] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3570'. [ 388.970539][T15249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3571'. [ 389.102466][T15257] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3574'. [ 389.301843][T15264] openvswitch: netlink: Unknown nsh attribute 0 [ 389.639031][T15286] netlink: 'syz.0.3584': attribute type 14 has an invalid length. [ 389.923630][T15302] openvswitch: netlink: Unknown nsh attribute 0 [ 390.029276][T15297] raw_sendmsg: syz.4.3589 forgot to set AF_INET. Fix it! [ 390.069167][T15297] netlink: 'syz.4.3589': attribute type 3 has an invalid length. [ 390.711459][ T4623] Bluetooth: hci2: command tx timeout [ 390.726529][T15347] sit0: entered promiscuous mode [ 390.756215][T15347] netlink: 'syz.4.3608': attribute type 1 has an invalid length. [ 390.833108][T15353] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 391.092142][T15371] netlink: 'syz.4.3617': attribute type 8 has an invalid length. [ 391.271778][T15375] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 391.432209][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.291330][ T5239] Bluetooth: hci0: command 0x0401 tx timeout [ 400.297465][ T5239] Bluetooth: hci4: command 0x1003 tx timeout [ 400.306131][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.396488][ T4623] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 400.407496][T15381] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 400.636553][T15389] x_tables: duplicate underflow at hook 1 [ 400.807857][T15385] __nla_validate_parse: 10 callbacks suppressed [ 400.807882][T15385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3621'. [ 400.842312][T15385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3621'. [ 401.261678][ T926] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.299072][ T5250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.308456][ T5250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.321240][T15395] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3624'. [ 401.341772][ T5250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.372363][ T5250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.380774][ T5250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 401.388170][ T5250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 401.552402][ T926] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.774044][ T926] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.786575][ T5250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.796126][ T5250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.804734][ T5250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.812976][ T5250] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.820907][ T5250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 401.831344][ T5250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.985722][ T5250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.006081][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.022302][ T5250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.038297][ T5250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.047555][ T5250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 402.055220][ T5250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.162861][T15416] netlink: 'syz.4.3630': attribute type 3 has an invalid length. [ 402.170949][T15416] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3630'. [ 402.184808][ T926] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.516069][T15398] chnl_net:caif_netlink_parms(): no params data found [ 403.431052][ T5239] Bluetooth: hci4: command tx timeout [ 403.446314][ T926] team0: Port device bond0 removed [ 403.453989][ T926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.472319][ T926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.484218][ T926] bond0 (unregistering): Released all slaves [ 403.496928][ T926] bond1 (unregistering): Released all slaves [ 403.509384][ T926] bond2 (unregistering): Released all slaves [ 403.526107][ T926] bond3 (unregistering): Released all slaves [ 403.582032][T15406] chnl_net:caif_netlink_parms(): no params data found [ 403.644055][ T926] Κό: left promiscuous mode [ 403.673274][T15447] netlink: 892 bytes leftover after parsing attributes in process `syz.4.3634'. [ 403.749369][ T926] tipc: Disabling bearer [ 403.760003][ T926] tipc: Disabling bearer [ 403.777793][ T926] tipc: Left network mode [ 403.813220][ T926] IPVS: stopping backup sync thread 15112 ... [ 403.915663][ T5239] Bluetooth: hci5: command tx timeout [ 404.061631][T15411] chnl_net:caif_netlink_parms(): no params data found [ 404.074008][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.082158][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.089345][T15398] bridge_slave_0: entered allmulticast mode [ 404.096763][T15398] bridge_slave_0: entered promiscuous mode [ 404.149890][ T5239] Bluetooth: hci1: command tx timeout [ 404.156648][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.176864][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.185488][T15398] bridge_slave_1: entered allmulticast mode [ 404.193319][T15398] bridge_slave_1: entered promiscuous mode [ 404.313153][ C0] ================================================================== [ 404.321272][ C0] BUG: KASAN: slab-use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 [ 404.329659][ C0] Read of size 4 at addr ffff88806bd00008 by task ksoftirqd/0/16 [ 404.337403][ C0] [ 404.339758][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 404.350374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 404.360454][ C0] Call Trace: [ 404.363755][ C0] [ 404.366717][ C0] dump_stack_lvl+0x241/0x360 [ 404.371430][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.376656][ C0] ? __pfx__printk+0x10/0x10 [ 404.381277][ C0] ? _printk+0xd5/0x120 [ 404.385455][ C0] ? __virt_addr_valid+0x183/0x530 [ 404.390703][ C0] ? __virt_addr_valid+0x183/0x530 [ 404.395856][ C0] print_report+0x169/0x550 [ 404.400397][ C0] ? __virt_addr_valid+0x183/0x530 [ 404.405545][ C0] ? __virt_addr_valid+0x183/0x530 [ 404.410684][ C0] ? __virt_addr_valid+0x45f/0x530 [ 404.415823][ C0] ? __phys_addr+0xba/0x170 [ 404.420350][ C0] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 404.425928][ C0] kasan_report+0x143/0x180 [ 404.430464][ C0] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 404.436069][ C0] rhashtable_lookup_fast+0x77a/0x9b0 [ 404.441485][ C0] ? rhashtable_lookup_fast+0xe9/0x9b0 [ 404.447015][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 404.451819][ C0] ? __pfx_rhashtable_lookup_fast+0x10/0x10 [ 404.457745][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 404.462553][ C0] ila_nf_input+0x1fe/0x3c0 [ 404.467084][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 404.471880][ C0] ? ila_nf_input+0xe4/0x3c0 [ 404.476500][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 404.481563][ C0] nf_hook_slow+0xc3/0x220 [ 404.486040][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 404.491285][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 404.496535][ C0] NF_HOOK+0x29e/0x450 [ 404.500636][ C0] ? skb_orphan+0x4b/0xd0 [ 404.504999][ C0] ? NF_HOOK+0x9a/0x450 [ 404.509184][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 404.513805][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 404.519032][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 404.523736][ C0] __netif_receive_skb+0x1ea/0x650 [ 404.528887][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 404.533952][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 404.539622][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 404.545645][ C0] ? __pfx_lock_release+0x10/0x10 [ 404.550723][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 404.555874][ C0] process_backlog+0x662/0x15b0 [ 404.560774][ C0] ? process_backlog+0x33b/0x15b0 [ 404.565837][ C0] ? __pfx_process_backlog+0x10/0x10 [ 404.571159][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 404.577172][ C0] ? __lock_acquire+0x1384/0x2050 [ 404.582230][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.588591][ C0] __napi_poll+0xcb/0x490 [ 404.592936][ C0] net_rx_action+0x89b/0x1240 [ 404.597630][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 404.602762][ C0] ? sched_clock+0x4a/0x70 [ 404.607205][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 404.613565][ C0] ? __schedule+0x189d/0x4b30 [ 404.618346][ C0] handle_softirqs+0x2c5/0x980 [ 404.623150][ C0] ? run_ksoftirqd+0xca/0x130 [ 404.627862][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 404.633190][ C0] run_ksoftirqd+0xca/0x130 [ 404.637716][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 404.642857][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 404.647977][ C0] smpboot_thread_fn+0x544/0xa30 [ 404.652948][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 404.657983][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 404.663454][ C0] kthread+0x2f0/0x390 [ 404.667525][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 404.672991][ C0] ? __pfx_kthread+0x10/0x10 [ 404.677585][ C0] ret_from_fork+0x4b/0x80 [ 404.682012][ C0] ? __pfx_kthread+0x10/0x10 [ 404.686603][ C0] ret_from_fork_asm+0x1a/0x30 [ 404.691388][ C0] [ 404.694413][ C0] [ 404.696733][ C0] Allocated by task 15454: [ 404.701143][ C0] kasan_save_track+0x3f/0x80 [ 404.705821][ C0] __kasan_kmalloc+0x98/0xb0 [ 404.710409][ C0] __kmalloc_noprof+0x1fc/0x400 [ 404.715264][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 404.720818][ C0] tomoyo_check_open_permission+0x255/0x500 [ 404.726713][ C0] security_file_open+0x777/0x990 [ 404.731757][ C0] do_dentry_open+0x369/0x1460 [ 404.736529][ C0] vfs_open+0x3e/0x330 [ 404.740603][ C0] path_openat+0x2c84/0x3590 [ 404.745201][ C0] do_filp_open+0x235/0x490 [ 404.749718][ C0] do_sys_openat2+0x13e/0x1d0 [ 404.754407][ C0] __x64_sys_openat+0x247/0x2a0 [ 404.759262][ C0] do_syscall_64+0xf3/0x230 [ 404.763769][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.769685][ C0] [ 404.772013][ C0] Freed by task 15454: [ 404.776092][ C0] kasan_save_track+0x3f/0x80 [ 404.780770][ C0] kasan_save_free_info+0x40/0x50 [ 404.785802][ C0] __kasan_slab_free+0x59/0x70 [ 404.790568][ C0] kfree+0x1a0/0x440 [ 404.794474][ C0] tomoyo_realpath_from_path+0x5a9/0x5e0 [ 404.800133][ C0] tomoyo_check_open_permission+0x255/0x500 [ 404.806038][ C0] security_file_open+0x777/0x990 [ 404.811061][ C0] do_dentry_open+0x369/0x1460 [ 404.815828][ C0] vfs_open+0x3e/0x330 [ 404.819901][ C0] path_openat+0x2c84/0x3590 [ 404.824515][ C0] do_filp_open+0x235/0x490 [ 404.829025][ C0] do_sys_openat2+0x13e/0x1d0 [ 404.833704][ C0] __x64_sys_openat+0x247/0x2a0 [ 404.838560][ C0] do_syscall_64+0xf3/0x230 [ 404.843072][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.848974][ C0] [ 404.851294][ C0] The buggy address belongs to the object at ffff88806bd00000 [ 404.851294][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 404.865346][ C0] The buggy address is located 8 bytes inside of [ 404.865346][ C0] freed 4096-byte region [ffff88806bd00000, ffff88806bd01000) [ 404.879055][ C0] [ 404.881376][ C0] The buggy address belongs to the physical page: [ 404.887791][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6bd00 [ 404.896559][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 404.905058][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 404.912610][ C0] page_type: f5(slab) [ 404.916590][ C0] raw: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 404.925170][ C0] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 404.933757][ C0] head: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 404.942426][ C0] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 404.951102][ C0] head: 00fff00000000003 ffffea0001af4001 ffffffffffffffff 0000000000000000 [ 404.959782][ C0] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 404.968453][ C0] page dumped because: kasan: bad access detected [ 404.974872][ C0] page_owner tracks the page as allocated [ 404.980581][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15454, tgid 15454 (modprobe), ts 403821369517, free_ts 403813175098 [ 405.001160][ C0] post_alloc_hook+0x1f3/0x230 [ 405.005935][ C0] get_page_from_freelist+0x3045/0x3190 [ 405.011482][ C0] __alloc_pages_noprof+0x292/0x710 [ 405.016679][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 405.022137][ C0] alloc_slab_page+0x6a/0x120 [ 405.026810][ C0] allocate_slab+0x5a/0x2f0 [ 405.031313][ C0] ___slab_alloc+0xcd1/0x14b0 [ 405.035997][ C0] __slab_alloc+0x58/0xa0 [ 405.040332][ C0] __kmalloc_noprof+0x25a/0x400 [ 405.045186][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 405.050738][ C0] tomoyo_check_open_permission+0x255/0x500 [ 405.056630][ C0] security_file_open+0x777/0x990 [ 405.061663][ C0] do_dentry_open+0x369/0x1460 [ 405.066433][ C0] vfs_open+0x3e/0x330 [ 405.070508][ C0] path_openat+0x2c84/0x3590 [ 405.075106][ C0] do_filp_open+0x235/0x490 [ 405.079619][ C0] page last free pid 926 tgid 926 stack trace: [ 405.085778][ C0] free_unref_page+0xcfb/0xf20 [ 405.090553][ C0] __folio_put+0x2c7/0x440 [ 405.094969][ C0] free_large_kmalloc+0x105/0x1c0 [ 405.099997][ C0] kfree+0x21c/0x440 [ 405.103894][ C0] rhashtable_free_and_destroy+0x7c6/0x920 [ 405.109711][ C0] ila_xlat_exit_net+0x4f/0xa0 [ 405.114496][ C0] cleanup_net+0x802/0xcc0 [ 405.118932][ C0] process_scheduled_works+0xa63/0x1850 [ 405.124486][ C0] worker_thread+0x870/0xd30 [ 405.129102][ C0] kthread+0x2f0/0x390 [ 405.133173][ C0] ret_from_fork+0x4b/0x80 [ 405.137612][ C0] ret_from_fork_asm+0x1a/0x30 [ 405.142389][ C0] [ 405.144716][ C0] Memory state around the buggy address: [ 405.150343][ C0] ffff88806bcfff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 405.158400][ C0] ffff88806bcfff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 405.166457][ C0] >ffff88806bd00000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 405.174513][ C0] ^ [ 405.178837][ C0] ffff88806bd00080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 405.186893][ C0] ffff88806bd00100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 405.194947][ C0] ================================================================== [ 405.203152][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 405.210395][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc3-syzkaller-00163-g8a7d12d674ac #0 [ 405.221004][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 405.231082][ C0] Call Trace: [ 405.234379][ C0] [ 405.237325][ C0] dump_stack_lvl+0x241/0x360 [ 405.242036][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.247267][ C0] ? __pfx__printk+0x10/0x10 [ 405.251890][ C0] ? vscnprintf+0x5d/0x90 [ 405.256247][ C0] panic+0x349/0x880 [ 405.260167][ C0] ? check_panic_on_warn+0x21/0xb0 [ 405.265317][ C0] ? __pfx_panic+0x10/0x10 [ 405.269768][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 405.275716][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 405.281658][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 405.288026][ C0] ? print_report+0x502/0x550 [ 405.292730][ C0] check_panic_on_warn+0x86/0xb0 [ 405.297689][ C0] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 405.303275][ C0] end_report+0x77/0x160 [ 405.307551][ C0] kasan_report+0x154/0x180 [ 405.312083][ C0] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 405.317669][ C0] rhashtable_lookup_fast+0x77a/0x9b0 [ 405.323080][ C0] ? rhashtable_lookup_fast+0xe9/0x9b0 [ 405.328591][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 405.333394][ C0] ? __pfx_rhashtable_lookup_fast+0x10/0x10 [ 405.339340][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 405.344151][ C0] ila_nf_input+0x1fe/0x3c0 [ 405.348700][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 405.353513][ C0] ? ila_nf_input+0xe4/0x3c0 [ 405.358141][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 405.363195][ C0] nf_hook_slow+0xc3/0x220 [ 405.367656][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 405.372883][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 405.378110][ C0] NF_HOOK+0x29e/0x450 [ 405.382210][ C0] ? skb_orphan+0x4b/0xd0 [ 405.386575][ C0] ? NF_HOOK+0x9a/0x450 [ 405.390758][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 405.395394][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 405.400637][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 405.405345][ C0] __netif_receive_skb+0x1ea/0x650 [ 405.410499][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 405.415561][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 405.421231][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 405.427247][ C0] ? __pfx_lock_release+0x10/0x10 [ 405.432355][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 405.437528][ C0] process_backlog+0x662/0x15b0 [ 405.442424][ C0] ? process_backlog+0x33b/0x15b0 [ 405.447490][ C0] ? __pfx_process_backlog+0x10/0x10 [ 405.452816][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 405.458842][ C0] ? __lock_acquire+0x1384/0x2050 [ 405.463907][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 405.470273][ C0] __napi_poll+0xcb/0x490 [ 405.474644][ C0] net_rx_action+0x89b/0x1240 [ 405.479387][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 405.484561][ C0] ? sched_clock+0x4a/0x70 [ 405.489019][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 405.495387][ C0] ? __schedule+0x189d/0x4b30 [ 405.500121][ C0] handle_softirqs+0x2c5/0x980 [ 405.504921][ C0] ? run_ksoftirqd+0xca/0x130 [ 405.509632][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 405.514957][ C0] run_ksoftirqd+0xca/0x130 [ 405.519508][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 405.524676][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 405.529827][ C0] smpboot_thread_fn+0x544/0xa30 [ 405.534809][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 405.539880][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 405.545380][ C0] kthread+0x2f0/0x390 [ 405.549473][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 405.554971][ C0] ? __pfx_kthread+0x10/0x10 [ 405.559594][ C0] ret_from_fork+0x4b/0x80 [ 405.564054][ C0] ? __pfx_kthread+0x10/0x10 [ 405.568674][ C0] ret_from_fork_asm+0x1a/0x30 [ 405.573493][ C0] [ 405.576896][ C0] Kernel Offset: disabled [ 405.581233][ C0] Rebooting in 86400 seconds..