last executing test programs: 4.012089285s ago: executing program 4 (id=983): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='/', 0x1}], 0x1, 0x0, 0x0, 0x4c810}, 0x8010) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000600), 0x4) 3.13326481s ago: executing program 1 (id=990): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) listen(r0, 0x100) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x300, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.024704898s ago: executing program 0 (id=993): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r1], 0x2c}}, 0x10) 3.006721094s ago: executing program 4 (id=994): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.897366254s ago: executing program 0 (id=995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8f7ffffb703000008000000b7040000000000008500000003000000185500000700000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000640)=ANY=[@ANYBLOB='b 0:4\t'], 0xa) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="080000000a0001000180c2000000000008000f0001000000fab7e5f93293a5db753505e4a5841825203c3f8048e99e641b85ee9245af2c0b25db9aa91e6d08d8a867638496412912604a6fd13125d6abeaf90ef9483f98d6d050731b74b16cbbb37a16250f97e439d6ebf94a72949835773aacd02c81399426ecfd67af310456ef26f0b21c280430ec8a2b32ec3a12f8df0f307b6ffe6bba76e7fa207df3b579f328442098d618374ac4088d1523f2ca26c6ba635b"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2.080693337s ago: executing program 0 (id=1001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], 0x0, 0x3, 0x0, 0x0, 0x304cc528dcb6eed9, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="15000000080000000800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f7b28a4d400d83df03f9100100000000000000bede794da87cbb8dc15874775dccb277729d2395e52f0e3d538367f09da40abd9b2b1a87580f8e98ee4fcb23dd33be35655438cf5fc07ec724c06ff165b0b895b363a7fc8b63b0b5fe600619edbd623b0e7e727bfcfc736f083e44820b366cf7f501df6cada3a3e0797f6630b2a30c6d6b47d38d748c8d5d50e4933b88478f5996fb0b305afdbfb7b8d3357421922d96834c6cdce343753baaac"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000100000000000000001811e7d73484cf542453a08e95a5e49faf2d5526e338e9353c4b0d54f67717d647e5b83f590a3eda0f57b860461bc542d1770df49b6827526dd6e2ba685d214bd60ef41f185b6446773d492d56172e2d72cd14362b16b8f180737298a34b83828cac3ffa0f8062f07db481bd181040ff5a6585934ff7213276aa5c975a9a674cf5243076f78b6e4c3ed7ea55b05c8200"/174, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00'}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400303a00fc010000000000000000000000000000ff020000000000f8000000000000000102009078000005006050835900000000fc010000000000000000000000000000fc0200"/102], 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6(0xa, 0x6, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e20, @private=0xa010101}], 0x68) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f00000000c0)=0x6, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 2.080170764s ago: executing program 1 (id=1002): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8040}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000821000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) 1.959544414s ago: executing program 4 (id=1004): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000600), 0x4) 1.905157245s ago: executing program 2 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r1], 0x2c}}, 0x10) 1.738553514s ago: executing program 2 (id=1006): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000002e80), 0x20000000}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x1000000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0xb4, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff8}, {0x8, 0xb, 0x6}}]}, 0xb4}}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000004000000040000000200010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000010000"], 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xf}, {0x0, 0x2}}, [@TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x11, 0x4, 0x7, 0x1, 0x8, 0x0, 0xa}}, {0x18, 0x2, [0x8, 0x14, 0x1, 0x6, 0x4, 0x7, 0x7, 0x7, 0x9, 0x7]}}, {{0x1c, 0x1, {0x4b, 0x1, 0x6, 0x8, 0x0, 0x0, 0x4, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xff, 0x5, 0x9, 0x4f7, 0x2, 0xfffffff7, 0x5da, 0x6}}, {0x10, 0x2, [0x0, 0xcbf1, 0x5, 0xc, 0x4, 0x9]}}, {{0x1c, 0x1, {0x2, 0x0, 0xff, 0x3, 0x0, 0x4, 0x6, 0x7}}, {0x12, 0x2, [0x0, 0x1, 0x935, 0x5, 0x6, 0xc, 0x7]}}, {{0x1c, 0x1, {0xe, 0x7, 0x7, 0x0, 0x1, 0xffffffff, 0x7, 0x2}}, {0x8, 0x2, [0x2, 0xf797]}}, {{0x1c, 0x1, {0x1, 0xff, 0x2, 0xcdc, 0x2, 0x3, 0x7, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x3, 0x5, 0x9, 0xd, 0x0, 0x40, 0xd560, 0x2}}, {0x8, 0x2, [0xe, 0x10]}}]}]}, 0x148}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005c00)={&(0x7f0000004b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x92f, 0x0, @void, @value}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) 1.712922557s ago: executing program 1 (id=1007): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x7c, r2, 0x5, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0x1, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x2, 0x7}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7965}]}, 0x7c}}, 0x0) 1.569027605s ago: executing program 0 (id=1008): socket$packet(0x11, 0x3, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000100000000000000000000000500030005000000100004006c6c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @private=0xa010101}], 0x4c) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x3, &(0x7f00000000c0)=0x6, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r8, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)=""/19, 0x13}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) 1.5686295s ago: executing program 3 (id=1009): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "4233cef7862331fb57fe2f96c38a9406b11137108e4967ecdddf7b33fe22e390", "605cbe9132acc98e8acb362c59b0153731ac1fa7036678ba8be8e880476eb1cb", "f615b390a80adfeceea384d6d0fec08f9d6a5e4bdc5cbe3d7910d2edfa95db88", "b46bc978bfe18b7a1e718ca12a11fd81de4297039af4b5645fce77bffae41a51", "b6ffbd8e3b1c9f26204634cdec2a37e24b2807e432a416a238ec85a3b2291f5a", "ab96edc499f3d8f90f12cbe4", 0xfffffffe, 0x1c00, 0xffffffff, 0xfff, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001340)=""/187, 0xbb}, {&(0x7f00000014c0)=""/212, 0xd4}, {&(0x7f00000025c0)=""/102, 0x66}], 0x3}, 0x994}], 0x1, 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x6, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8d32ba2e6a99b1b50276dc4f06166000d7069a3cc76f00", 0xb9}, {&(0x7f0000001180)="892950d6405ee8629d9384a91c16d1706a3e61f347cb1f86883d6910e68ac399655180063ec64b77f8444b18345a498b178eeeba0cde7319a5a46bfe7f5770e019efd9de2069edcced33a758c4e657f3a79bdc193a1911b4e82ea800ad7afe03c851a84fe74e14280ae14084e7b73abecd6ed56dc120720ef1a21a2ebd7f5ae74e159257f96eba1e26c988dbc0963ff471c771d894fc0da6bf1b667d6bfbf5cb8be82f190e1547de7474000000000000", 0xb0}, {&(0x7f0000001300)="a68cde0d56b170060000004f08000000000000007190f2f69f5f26aa338d900ff84bdd24004e9be7d083a1c86b2741179d6550e8fddeec9154c0", 0x3a}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r6 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000040)=0xfffffff7, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000002740)=ANY=[@ANYBLOB="33629e10a73aeede61514f1cab2362f7b3ed9498d0d48861ac9214afc691194b4ddfc124ed987c88cc4a405b0e0059fb82ab925be24eda05d32adf3d3e15351a79295c6d477ba6165b1d530f184eda094d1ce6c610be834c51581bae7b069dcb9d81b772211cd5b39b", @ANYRESHEX=r6, @ANYBLOB="020029bd7000fbdbdf250e000000cf007f0005b80c31027f601fb9a9247d84ac778375ad8fb76131594eb2dbd650beeb571dc7a9bdb13c0764a6f67f40ab6624ab26b9546f98669ffd7835423f194fbb9e467f0ada10c28838aa85b3702b2bd8ef97ecf13220c3a8f74d66acb29e75b890b27bb10c80a9db487808d01f8fdf6bb3799f14781b88bfd3614b57c0684ad2631c55af82c6cafb4aabe63e6aa9ecf1c1cd587b662297c5b6322aaa53cd21b90f87e37aa32a92c36ff60b5b7e3e937a7becd2e88275897bae863d70760606091500000071070100ffff01f908000a00800068042cf7a5000000"], 0xf0}, 0x1, 0x0, 0x0, 0x200048c1}, 0x4c005) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) 1.505419447s ago: executing program 1 (id=1010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_emit_ethernet(0x82, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) accept4(r6, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010102000000fedbdf252b00000008000300", @ANYRES32=r9, @ANYBLOB="040008010a00340002020202020600000000260011170000"], 0x34}, 0x1, 0x0, 0x0, 0x8884}, 0x14) socket(0x8, 0x6, 0x80000000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7fff, @empty, 0x9}}, 0xe5, 0x4, 0x0, 0xe, 0x1, 0x5, 0x9}, 0x9c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001b80)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4001c00) socketpair(0x2a, 0x2, 0xff, &(0x7f0000000140)) 1.443599045s ago: executing program 2 (id=1011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000060000000000000000000000000000000000000000000000f6ffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c0015005a"], 0xc4}}, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x32}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, {0x0, 0x0, 0x100}, 0x0, 0x6e6bb7}}, 0xb8}}, 0x0) 1.305103024s ago: executing program 2 (id=1012): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x4, 0x2, 0xcb, 0xf, 0x66, @private0, @loopback, 0x10, 0x7, 0x4, 0x9}}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010100000000000000000900000030000380050008000200000008000300000000001400020076657468b0f100005f626f6e4600000008000100"], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000300), 0x0}, 0x20) ppoll(&(0x7f0000000000)=[{r2, 0x24}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x40}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x4c}}, 0x0) 1.194094675s ago: executing program 0 (id=1013): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0xfffffef9, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0xfffffffffffffffa}, 0x0, 0x0) r1 = socket(0x13, 0xa, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, &(0x7f0000000200), 0x0}, 0x20) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6b) sendto$inet(r1, 0x0, 0xfffffffffffffe52, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r4, 0x1) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000040)=0x1000, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084000000020000000600040028000000fb2d332660"], 0x20, 0x6044}, 0x6) 1.130227485s ago: executing program 1 (id=1014): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000340)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) close(0x3) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 991.00569ms ago: executing program 4 (id=1015): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 909.05161ms ago: executing program 4 (id=1016): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000000c0)=0x7e6, 0x9) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/10, 0x22}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 621.816169ms ago: executing program 3 (id=1017): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @dev}, 0xfffffffe}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}, 0x2fc}, {{&(0x7f0000000580)={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@tclass={{0x14, 0x29, 0x43, 0x2c0}}], 0x18}}], 0x2, 0x4001c00) 552.854062ms ago: executing program 3 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @dev={0xac, 0x14, 0x14, 0xe}}]}}]}, 0x44}, 0x1, 0x0, 0x8847000000000000, 0x80}, 0x800) 374.187895ms ago: executing program 3 (id=1019): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) 357.859619ms ago: executing program 2 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fcdbdf252100000020000300", @ANYRES32=r2, @ANYBLOB="08009e000b"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) 313.685102ms ago: executing program 3 (id=1021): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[], 0xfe33) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r6, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0) 197.002406ms ago: executing program 0 (id=1022): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x21, 0x800, 0xdf) socket$packet(0x11, 0x3, 0x300) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000060eb", @ANYRES16=r2, @ANYBLOB="010025bd7010020000000400000005000500800000001c000680060005004e240000080006000100000008000300ffffffff"], 0x38}, 0x1, 0xfcffffff00000000, 0x0, 0x240000c0}, 0x4006844) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000940)="3e9f28d7b656b5c2d320276911cc763395b7384efe277c19f4035cc560edcef92eb86bfef4d1bf080c59dd9cc8292fc9371bb2c1b15fa6b6874d8f386aa6b9a1addda684eeed1037c00a526185bb0e3f19785edf25458d5766f691ddf7a93e9fb3296810d1b0e27fae9c7871c4a7c53cdb7e8c74921a349d489b91ec9e73dd4cf345bd3e2baa4a9a2f8fc6866c5b310190360ba334c2b11d86407fffa87cdff71e802e1c8c657675f7a583d8fe760b21904e98430d08c19f3d0d4fdcb5ba2de8061464d62f135e0a6decd56ab3c2d4ea1071f851278304e6e9f4cb72eed34e41a3aad3cef55aabb5dfa731f7d7047b4771699307540740fa841ce55375928e033f376a7bfabed525ee52b06ea7f7feff9c9fae4fad710f71b62fc1a2950695a502a80cd7abacada8e1755f09e8b5c840a86c9a526cac92cdc26b25edb5e710164e57d3950a6fd349660061fcc1e32dbdbb236181dd49e494b512437130baedb3ff5225a3083724c5d3ba9e14d25b6a78ab23d6b70f3f972dcefbb73211efee40b7d37bca75697e7a9eec81ef1029cf52afa990785ac01e761d9ad501c8139f67e83635479891006be1b6a732ddc8f2f2c046738aa2a79cc7a61cf631cc3d1c10c5f08914d08b849168dd80fd22ff9d208ec0e278e471451fbbf364b48cbee1a91344e610bb36de89f9328ee52cf08c855a5bd634dc8d7dfee0168c8996ea2a1734fb2b30b03ce2ddad97af3d6c38342ca6feabbd8336f2ec082a264e00cca2aaf03e8d021bd3fe27023d7cc04f60ee790b014bc0d6295597b511713a08e25da2d6621ec0246eabba32abb2645a6a24770f086e1bbee1546819fe39bf161df26c5ce3fb17d8930cb7b4dc7b553da7ed836a38a024ca845119c83080fe01a15598301622ca88cf47a487ab98805b41b9265c6a942c2a1c1f05c82e24eb96cacb7d2f552d7f666bf7de8170fb5abcd753b8e047155a8d26e8676173939fdc1c67a61c2856443b85264b631e8dbad8917af78e51651b2f0528cd2df9c91e70ff4c90664cfe0e232f0c74ae817ad110bebf71e01fe71ad26c5364ca783136620be8aa068878639a520375a364ef8affa10cba66cd3f393872dc1febfd7464f899213b400ad4dbd0e2405fd8dd95d910d5b6b21ce990b48520bae81cceb06b939ea29123ded0411b81de353ee708483f8329ce0c696a72c765682fd717ff28f7e86d63af798368da940742bbca6ce1b7141d8f0c0a32a989e805c2e7767f105bd34cf02b770f4cd1782d338e273a68b4cae1fd05ca698e771b9c090fad994e676c58087d30ff9e9bfd6586062a2be6cfc38787a190d70bc94affacf1c5e12c14aa8b520a06eb1e92b2ebbc21008765fa469413caf3e06684d3b2f4471b509faac7d231ca091bda85ae7fc7b9aee9da484051fb3af6c559ce41a52a0e838342e5af26a8a8156680acd3d7351a71ab0efe55fea8f07a131a0a371aa9919995bbc81bb2d1abefe210c4bd0444fd6bfa966495baaffb2383b94c1501fb533d922298f17ecaf602f94beb63aab31baab3dc5c1f23fcedfa13accf9880bf4cca709f33699a5eca37991aafa94215c686556b602c1514615b36069fcc80106de2186dad59bf0ecd990d4e7c881007006436ce714a4d58f17737e576260fe2440062424b126db860238a8efd22d6cfb5c111f3b88ce46710eb4cbe7ff0667f8440ea4104c22fe36b9ca8af9fd502b4896d1a1fd3022df68aab2bb6a2e3cbb4eda2ff89064fdfc52aecbd6935cb7739a0e09bace163ed2f9b5e3645f7a5b348f5de9a7fa413bd805168762bc4c620269a0ade3f1a386806f0be70f4a7953a39a8ad10872a66fb1bd047bf4fa031827dc71f536e4d42134022110b1115ed8b313ec68a6b96b02620fcfa31a6e85989af7dcd0fa2e058625fe9de1cccb83ec8742c4ce116e844ca2a84655dadffd20e23233b5470403f24012b0a71d28d8bc92d133aea4e058167561f363606e9df2c59ed03bc2943640bdbf75e4d936e37702cd6b0cfca6c13db7037c2b85267545c4dc94c49a2c575e17921ca9652f36551ade7b4ea09dc25ef94e09354265287332249f122a15521513bee9d453198a497e92b087e76f320f2586d9af7fc2ed0165adc270bb354e84ce48f937b3484d2d587e6392e0319396b6b5f9bfdd2435c2bba7220c569432b9b5f1128743f76c47312eb7c36f2e9a58a720cdbdc02a693515b3930130bcdbf7ac50eb0ae43235226ca9818befe362074de493eeb91bf95b544e027a1d2abe7ac6017c153ffe88e8498330010f45206000b74505fc99f9074e3e6d75bdf6be7ecbba4988068e5197b9fbcb9f61c8cf211d0f00d1a359091d0c6990ed14fe3bf316379a2ef831ceadb80978025541ac22f02def0a938f618ea8cd68a8d2cea9010c96b4a6f87ebe714a8183aeb7c0b60d3abb0bbe546fc367b17333d204a35f23a51ef179af3f3d397a004625fd0fa142f1fd4fbecc2baa8ac974d62d6efc04078e4cfa57f6d233eb25b5a3f6956c6c1a0ac081a2178565aa28b49f82de68ffea17c56ac597dc2a9dbb0fa5c62c92b720f06fbb9d813147879fc7f069b09f5179b151e37917ee671473ffd39b9195aad84a4b2cc1ae40f9b8cc6aa33c49f61234f103d8083e23673deaa237aa745e66968fdc98ded18c609b51ea2113f2b2cba0df1c9e544065ed9c91c91f75e86466702bd0363e7209a689742be1028445f9f3333e1fc1f30231bc30f8d237967ff0ae02e5daa49d8dca69a584ea62305ac7d2118e1fbbd6277bf8d17d8b7a07670b5bb942fc9f86e59f90b38e46daa2cbc3061ffb6218e72d1c6648e521e8b25cc9c485987251e83d31f2d85a3c08ba33506f0277d228e5af92bd482481d2c43039cb1afa788f8e7c27f8c7ca7a3e12fcba73ac1779e6d15dda707894033010a0c7e92820fabd2ab04f5cc25a21cfdb7ea7daefda441eb70b8ac62a404fd7c8e2ae86f09af1534c04ffdcc246608ed0e01a79114382e009eb6e4227300d937ded9cd8fafab3a52c63f622d50cbe8e4ea7181c87a253dcd64dc391ba19bd80429d0b72d1acca5e8ea99b035034ca4022c45c02c116eb1a70a73c0322f5b7d0e5e64d37e7c72cd8ddfc6d860a3372ef5244fab6af8efb1aa3167603ecd585e9a750cad88966840c45cf2eba273ee34970c5d5d705f2daf31dd88d599c8f1db8a361fce00520dd0571e04a28cfd9c236d6fe5feffc1fb77a83a6eae9fc405c815a5656408ce18275a8573e4b7aa0cd64917d413661cfa160fe4cfd628a4b69320ed8f9f53eb7c5ce4694c58bf3bc6607e36fc47cf8199a99ec67f9b96d08701ecf8cc1a9c83f89004a5186444af06dbed3dcea2cd3fae2f8357fe01582763d05fb3cfa254992e5aa657f858706b6c2dbfc6dc7a49e55b04b715701b1328ad2db1105d8088c433fd51e2dc55359aa736e2fa406ccc4b515e24ce5ce1ef333c06be5cd9ca65dfdd8895b6a60087dd631f1c7082b3e4bbfdf5b0c452a483841ede73dc8eb8a83486ddc9703b1c7fe1df9889c62f199e527bac472236bc08346a4dbbdd73601b74c315d0cc45201758d9191fe9d65202e24e2c017a3ac7b21a21168b6d79c62c5d6c455085e00807ed6a28cec223867ce9c9d589d24500fb9062ad4dbacc8fa895e5f28569deda0e0c1161c0dd1df09e090d0bcfb62fb0e7125952864ad345a057a6b82d72e5ac20399112a421febd411aa587ebfdd0ece78dcd331ff0da805274c7a61745d68a7d00ca45ff2a5a0a63cb389c7084ffffe2b09f6d38cc456efd59912eb0bb0a3d40b545abe59c8d0b7d2c051e6d098e3ffa3a9824c50ce2b0757c60851e73cc2806553c2914c0046bde9e0dde264c9bc87487b69bfef63e11638ff64fbcef2780f54e6c02c8e55d5632ce715341a5aa56bd1abae3c15a7d5c336bf76497e1d26bbf54d86c7a019ea07189256a20448c785073d5e77783bd55cf74afdc0bc8539b6ae948173bda18e4be1c0e1777b7e61fd65f4c059ddb6fac1de42a8d327cbde774eac4f9b9ab173cefd54417d00e3e77a200e79b97dfab1e43acda6529d359bcae8436c6c26c49d3079cce4ff29b2185702502a7b80a85078c5a41000c5fe28797f364164af303409c4d8ad78ae61cfe2e3494eb328fcaadf5e0281d06bcddbf3ba9101da4351314f097032ff42f56a00ec7b731a3b2b62a8e76bc09c3866dd3ee0116856294afaff024ace4dd1d75254f69259bdde46258050df8b4351fa50b34e0b57661da7187f7be93ad642d0a3aa8a37c1e122565e51a65ccc2361efbe0f165519cdd02c64aa885ca1c33f3c2c29ffc5b97c954cb04804e12bb21c6441355b493f258fa37a110cc695fa15e6dd61f89c7bcf3c992c11844f9d887b2d46600b5f7d6cbcdf40efe999171b06838c51cde3880d72d0b32b0b2ea15e4162e56d07b1a06856e31ad0091d8dbdf649a0bd6d09ac1343b32763073e11fd4d3a42873db4ed169dc9102f1552fcbd25160de17f9a0b1d11683acd5823f0f4169c12b0b409554c9508069b703ebf7d4366dc4d194fb9768787ab46c974f30a2dadc77da9fda5b53a26ff84434fda80793725460bc3535753c140223b8cac32ab3a7f2251aae25c637eec6243ea96838351f87bbd34eed43a7496ee188ed43696f6a4befed4e61baa031e21220833accc45df51a898916a9c0b23cc7090be98fff1cc817db257057cdbfa9a28d2d3908bc8fb99b0c4f91e8960b9b30061c264fc8de62258b8c90a1501fc5908a983b7d32089181ba99b931492a287af6fd285283d3f81af44ab28176cd7dbcd61d0a5a708e7ec9a563918a42c30021af6ee4a433ff05f41fe7d59c4c20f1923f8a58d6baf27a87c0e0ebacd988aee71be361478f39d4c8dcf25a5ce85372811a9a101d7fe0632cf2dc2d33746ec315916815ca2ef21b48085bbd03b14b81503be641ccc3604d9cdd479366d9a9fb5286340a07e91b0948c4d27f29797cb14fae8f55aa46b2d627b906e1b490e5e4a64c5caf2515f45a30ccf0f32257bc3905e4b8e273c0107813a71ff11370cac058ce2a47c03a984cf7300fecab596fa26074ede80604246b323d760254ba26c5b69b416258adc7c3995082b16c5a1e0259c4b4815359038705a1aa9fb506363a2a5c4dce597812f9f7d25777bbf794d2ae4412301c154572f4768c14064d7b4dcbce923ed09f84e4325c98bc8bc2e4d4cd8b0f104211091e8ebcdcda9f2f0e39368c17120aaa20f22f7f96acb9a1e88747788d94ca805555b2015cca87671b04246c2f7e264cd6b0df46f9619c64226f55ee6d48796539c9ebe3c98ff936277cf5325aba1570ebd328eaaeb16ff7dc9a518251075c67c73202e875a496ac2652348fbdd1be6b72bd16bc0dcf3134fa9ce7924430e592dac6ee2c63586b9d0b28d054155abc4f37eb18ed03739483690ff4567731da338ef8082c668528bf5c935a2b37179cadf74a86e1633d3a43804a036004799878358397e73ec558b5c8ff8a47081ef0bda5f3755403643fe7e9485bae971993b66e2c8381e900376d345cdbb92da13038de5c4e1ae6e4e1c6f71edbf9089afa5f581ff082ee8152975d15dbe9b15ed821742eaa1b4c7d2abef49fc3cec79545133ca1acc938c7f6e3ca627d45a1e0179d786f4afdb3de4155e4d8db427789efb5caa05643d783a45f65441fc3d2117b796a2ee8d2b866dc1928babc808b307507ea739309d65b8bf7a5c3b635e49897963c900ef543d28dea1fa86ccea0db509fcf9eb0f2e94044a0", 0xffc}, {&(0x7f0000000380)="d8ad23cf4a", 0x5}], 0x2, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x28, 0x9, 0x5, 0xfffff004}]}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01000d"]) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket(0x2b, 0x1, 0x0) 150.99494ms ago: executing program 2 (id=1023): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc080) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r4, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0xb, 0x9}, {0x0, 0xfff2}}}, 0x24}}, 0x800) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000680)={@broadcast, @dev, 0x0}, &(0x7f00000006c0)=0xc) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r13 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x7, 0x6, 0x17, 0x4, 0x4, 0x1}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @rand_addr, @multicast1}, &(0x7f0000000740)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x254, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x254}}, 0x10) r17 = socket$packet(0x11, 0x3, 0x300) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r18) ioctl$sock_SIOCGIFINDEX_80211(r17, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r18, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r19, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r20, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 126.633376ms ago: executing program 1 (id=1024): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x2, 0x2}]}}}}}}}}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="320000000a000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r4, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f00000000c0)={0x18, 0x2, {0x0, @local}}, 0x1e) close(0x3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c100000", @ANYRES16=r7, @ANYBLOB="33b629bd7000ffdbdf2507000000080004000bdf0000"], 0x1c}}, 0x20000000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xfa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40811}, 0x4000) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000030000000038000007000000d6000000", @ANYRES32, @ANYRES16=r1, @ANYRES64=r0, @ANYRES32, @ANYRES64=r4], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r11}, 0x38) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 29.135136ms ago: executing program 3 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x48}}, 0x400e4) 0s ago: executing program 4 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000dc0)={0x40, r1, 0x1, 0x70bd28, 0x0, {{0x3b, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @device_b, @device_a, @initial, {0x0, 0xd}}, 0x204a, 0x65, @random=0xfffc, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000000) kernel console output (not intermixed with test programs): 2.89': attribute type 1 has an invalid length. [ 98.838101][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 98.879169][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 99.018397][ T6325] netlink: 'syz.1.90': attribute type 11 has an invalid length. [ 99.118703][ T6330] xt_hashlimit: size too large, truncated to 1048576 [ 99.255794][ T6332] : renamed from bond0 (while UP) [ 99.278543][ T6336] Bluetooth: MGMT ver 1.23 [ 99.318867][ T6332] netlink: 'syz.0.91': attribute type 11 has an invalid length. [ 99.336940][ T6332] netlink: 232 bytes leftover after parsing attributes in process `syz.0.91'. [ 100.098678][ T6361] bond0: (slave macvlan3): Opening slave failed [ 100.751493][ T6383] Bluetooth: MGMT ver 1.23 [ 100.993051][ T6388] team0: Mode "llance" not found [ 101.278968][ T6389] team0: Mode "llance" not found [ 101.368915][ T5851] Bluetooth: hci0: command tx timeout [ 101.503716][ T6416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.107'. [ 101.556436][ T6418] FAULT_INJECTION: forcing a failure. [ 101.556436][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 101.594340][ T6418] CPU: 0 UID: 0 PID: 6418 Comm: syz.4.107 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 101.594369][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 101.594381][ T6418] Call Trace: [ 101.594388][ T6418] [ 101.594397][ T6418] dump_stack_lvl+0x241/0x360 [ 101.594429][ T6418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.594451][ T6418] ? __pfx__printk+0x10/0x10 [ 101.594490][ T6418] ? ref_tracker_alloc+0x332/0x490 [ 101.594530][ T6418] should_fail_ex+0x40a/0x550 [ 101.594558][ T6418] should_failslab+0xac/0x100 [ 101.594591][ T6418] ? skb_clone+0x20c/0x390 [ 101.594610][ T6418] kmem_cache_alloc_noprof+0x70/0x380 [ 101.594638][ T6418] skb_clone+0x20c/0x390 [ 101.594661][ T6418] __netlink_deliver_tap+0x3cc/0x7f0 [ 101.594704][ T6418] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.594733][ T6418] netlink_deliver_tap+0x19d/0x1b0 [ 101.594765][ T6418] netlink_sendskb+0x68/0x140 [ 101.594794][ T6418] netlink_unicast+0x39d/0x990 [ 101.594831][ T6418] ? __pfx_netlink_unicast+0x10/0x10 [ 101.594870][ T6418] netlink_rcv_skb+0x262/0x430 [ 101.594901][ T6418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.594926][ T6418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.594980][ T6418] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.595033][ T6418] netlink_unicast+0x7f6/0x990 [ 101.595072][ T6418] ? __pfx_netlink_unicast+0x10/0x10 [ 101.595098][ T6418] ? __virt_addr_valid+0x45f/0x530 [ 101.595130][ T6418] ? __phys_addr_symbol+0x2f/0x70 [ 101.595160][ T6418] ? __check_object_size+0x47a/0x730 [ 101.595198][ T6418] netlink_sendmsg+0x8e4/0xcb0 [ 101.595250][ T6418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.595288][ T6418] ? aa_sock_msg_perm+0x91/0x160 [ 101.595326][ T6418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.595356][ T6418] __sock_sendmsg+0x221/0x270 [ 101.595384][ T6418] ____sys_sendmsg+0x52a/0x7e0 [ 101.595426][ T6418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.595456][ T6418] ? __fget_files+0x2a/0x410 [ 101.595484][ T6418] ? __sys_sendmmsg+0x392/0x720 [ 101.595516][ T6418] ? __might_fault+0xaa/0x120 [ 101.595549][ T6418] __sys_sendmmsg+0x36a/0x720 [ 101.595594][ T6418] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.595640][ T6418] ? __pfx_lock_release+0x10/0x10 [ 101.595667][ T6418] ? kstrtouint_from_user+0x128/0x190 [ 101.595721][ T6418] ? ksys_write+0x22a/0x2b0 [ 101.595749][ T6418] ? __pfx_lock_release+0x10/0x10 [ 101.595784][ T6418] ? sb_end_write+0xe9/0x1c0 [ 101.595807][ T6418] ? vfs_write+0x7fa/0xd10 [ 101.595837][ T6418] ? __mutex_unlock_slowpath+0x227/0x800 [ 101.595896][ T6418] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 101.595927][ T6418] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.595957][ T6418] ? do_syscall_64+0x100/0x230 [ 101.595989][ T6418] __x64_sys_sendmmsg+0xa0/0xb0 [ 101.596024][ T6418] do_syscall_64+0xf3/0x230 [ 101.596051][ T6418] ? clear_bhb_loop+0x35/0x90 [ 101.596085][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.596113][ T6418] RIP: 0033:0x7fc0ab38cda9 [ 101.596131][ T6418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.596147][ T6418] RSP: 002b:00007fc0ac197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.596169][ T6418] RAX: ffffffffffffffda RBX: 00007fc0ab5a6080 RCX: 00007fc0ab38cda9 [ 101.596183][ T6418] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 000000000000000c [ 101.596196][ T6418] RBP: 00007fc0ac197090 R08: 0000000000000000 R09: 0000000000000000 [ 101.596208][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.596219][ T6418] R13: 0000000000000000 R14: 00007fc0ab5a6080 R15: 00007ffce8274f88 [ 101.596264][ T6418] [ 101.628314][ T6418] netlink: 32 bytes leftover after parsing attributes in process `syz.4.107'. [ 102.401616][ T6432] netlink: 'syz.2.112': attribute type 1 has an invalid length. [ 102.418153][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 102.539513][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 103.059303][ T6451] Bluetooth: MGMT ver 1.23 [ 103.112839][ T6454] FAULT_INJECTION: forcing a failure. [ 103.112839][ T6454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.185250][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.4.118 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 103.185280][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 103.185293][ T6454] Call Trace: [ 103.185300][ T6454] [ 103.185308][ T6454] dump_stack_lvl+0x241/0x360 [ 103.185337][ T6454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.185358][ T6454] ? __pfx__printk+0x10/0x10 [ 103.185397][ T6454] ? snprintf+0xda/0x120 [ 103.185421][ T6454] should_fail_ex+0x40a/0x550 [ 103.185450][ T6454] _copy_to_user+0x31/0xb0 [ 103.185472][ T6454] simple_read_from_buffer+0xca/0x150 [ 103.185509][ T6454] proc_fail_nth_read+0x1e9/0x250 [ 103.185546][ T6454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.185593][ T6454] ? rw_verify_area+0x243/0x630 [ 103.185637][ T6454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.185671][ T6454] vfs_read+0x1f8/0xb40 [ 103.185699][ T6454] ? fdget_pos+0x254/0x320 [ 103.185721][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 103.185748][ T6454] ? __pfx_vfs_read+0x10/0x10 [ 103.185778][ T6454] ? __fget_files+0x2a/0x410 [ 103.185801][ T6454] ? __fget_files+0x395/0x410 [ 103.185822][ T6454] ? __fget_files+0x2a/0x410 [ 103.185865][ T6454] ksys_read+0x18f/0x2b0 [ 103.185895][ T6454] ? __pfx_ksys_read+0x10/0x10 [ 103.185923][ T6454] ? do_syscall_64+0x100/0x230 [ 103.185954][ T6454] ? do_syscall_64+0xb6/0x230 [ 103.185985][ T6454] do_syscall_64+0xf3/0x230 [ 103.186012][ T6454] ? clear_bhb_loop+0x35/0x90 [ 103.186045][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.186072][ T6454] RIP: 0033:0x7fc0ab38b7bc [ 103.186091][ T6454] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.186107][ T6454] RSP: 002b:00007fc0ac1b8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.186129][ T6454] RAX: ffffffffffffffda RBX: 00007fc0ab5a5fa0 RCX: 00007fc0ab38b7bc [ 103.186144][ T6454] RDX: 000000000000000f RSI: 00007fc0ac1b80a0 RDI: 0000000000000006 [ 103.186156][ T6454] RBP: 00007fc0ac1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 103.186168][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.186179][ T6454] R13: 0000000000000000 R14: 00007fc0ab5a5fa0 R15: 00007ffce8274f88 [ 103.186210][ T6454] [ 103.464417][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 103.786978][ T6460] team0: Mode "llance" not found [ 104.351656][ T6481] ebtables: ebtables: counters copy to user failed while replacing table [ 105.072086][ T6516] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 105.094797][ T6516] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 105.398146][ T6525] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 105.424155][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.140'. [ 105.450140][ T6528] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 105.476014][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 105.727008][ T6537] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 105.735217][ T6535] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 105.743199][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 105.758227][ T6535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.144'. [ 105.816242][ T6535] FAULT_INJECTION: forcing a failure. [ 105.816242][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.837777][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.2.144 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 105.837808][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 105.837820][ T6535] Call Trace: [ 105.837828][ T6535] [ 105.837836][ T6535] dump_stack_lvl+0x241/0x360 [ 105.837866][ T6535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.837888][ T6535] ? __pfx__printk+0x10/0x10 [ 105.837922][ T6535] ? __pfx_lock_release+0x10/0x10 [ 105.837962][ T6535] should_fail_ex+0x40a/0x550 [ 105.837990][ T6535] _copy_from_user+0x2d/0xb0 [ 105.838011][ T6535] copy_msghdr_from_user+0xae/0x680 [ 105.838042][ T6535] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 105.838065][ T6535] ? __fget_files+0x2a/0x410 [ 105.838090][ T6535] ? __fget_files+0x2a/0x410 [ 105.838119][ T6535] __sys_sendmsg+0x209/0x350 [ 105.838156][ T6535] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.838199][ T6535] ? do_sys_openat2+0x17a/0x1d0 [ 105.838246][ T6535] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.838274][ T6535] ? do_syscall_64+0x100/0x230 [ 105.838305][ T6535] ? do_syscall_64+0xb6/0x230 [ 105.838335][ T6535] do_syscall_64+0xf3/0x230 [ 105.838361][ T6535] ? clear_bhb_loop+0x35/0x90 [ 105.838393][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.838419][ T6535] RIP: 0033:0x7f9870f8cda9 [ 105.838437][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.838453][ T6535] RSP: 002b:00007f9871de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.838475][ T6535] RAX: ffffffffffffffda RBX: 00007f98711a5fa0 RCX: 00007f9870f8cda9 [ 105.838489][ T6535] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000000b [ 105.838501][ T6535] RBP: 00007f9871de0090 R08: 0000000000000000 R09: 0000000000000000 [ 105.838513][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.838524][ T6535] R13: 0000000000000000 R14: 00007f98711a5fa0 R15: 00007ffddcafd828 [ 105.838553][ T6535] [ 106.663539][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 106.672874][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 106.686193][ T6568] veth0: entered promiscuous mode [ 106.692595][ T6568] dummy0: entered promiscuous mode [ 106.699673][ T6568] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 106.718491][ T6568] Cannot create hsr debugfs directory [ 106.875744][ T6576] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 106.990974][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 107.021599][ T6576] bond1: entered promiscuous mode [ 107.026841][ T6576] bond1: entered allmulticast mode [ 107.032654][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.086628][ T6582] netlink: 'syz.0.162': attribute type 72 has an invalid length. [ 107.119586][ T6582] netlink: 'syz.0.162': attribute type 8 has an invalid length. [ 107.120689][ T6586] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 107.144904][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.362206][ T6592] syzkaller0: entered promiscuous mode [ 107.367880][ T6592] syzkaller0: entered allmulticast mode [ 107.381476][ T6595] FAULT_INJECTION: forcing a failure. [ 107.381476][ T6595] name failslab, interval 1, probability 0, space 0, times 0 [ 107.427279][ T6595] CPU: 0 UID: 0 PID: 6595 Comm: syz.3.167 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 107.427308][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 107.427321][ T6595] Call Trace: [ 107.427328][ T6595] [ 107.427337][ T6595] dump_stack_lvl+0x241/0x360 [ 107.427366][ T6595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.427387][ T6595] ? __pfx__printk+0x10/0x10 [ 107.427422][ T6595] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 107.427448][ T6595] ? __pfx___might_resched+0x10/0x10 [ 107.427476][ T6595] should_fail_ex+0x40a/0x550 [ 107.427504][ T6595] should_failslab+0xac/0x100 [ 107.427563][ T6595] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 107.427586][ T6595] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.427613][ T6595] ? __kernfs_new_node+0x9d/0x870 [ 107.427639][ T6595] kstrdup+0x39/0xb0 [ 107.427664][ T6595] __kernfs_new_node+0x9d/0x870 [ 107.427682][ T6595] ? mark_lock+0x9a/0x360 [ 107.427717][ T6595] ? __lock_acquire+0x1397/0x2100 [ 107.427746][ T6595] ? __pfx___kernfs_new_node+0x10/0x10 [ 107.427778][ T6595] ? make_kgid+0x1f0/0x710 [ 107.427809][ T6595] ? __pfx_make_kgid+0x10/0x10 [ 107.427838][ T6595] kernfs_new_node+0x137/0x240 [ 107.427877][ T6595] kernfs_create_dir_ns+0x43/0x120 [ 107.427902][ T6595] sysfs_create_dir_ns+0x189/0x3a0 [ 107.427935][ T6595] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.427978][ T6595] kobject_add_internal+0x435/0x8d0 [ 107.428016][ T6595] kobject_add+0x152/0x220 [ 107.428044][ T6595] ? lockdep_hardirqs_on+0x99/0x150 [ 107.428068][ T6595] ? kobject_put+0x43d/0x480 [ 107.428096][ T6595] ? __pfx_kobject_add+0x10/0x10 [ 107.428128][ T6595] ? kobject_put+0x43d/0x480 [ 107.428162][ T6595] device_add+0x4e5/0xbf0 [ 107.428194][ T6595] ? device_initialize+0x266/0x460 [ 107.428230][ T6595] netdev_register_kobject+0x157/0x2e0 [ 107.428264][ T6595] register_netdevice+0x12c3/0x1b10 [ 107.428314][ T6595] ? __pfx_register_netdevice+0x10/0x10 [ 107.428347][ T6595] ? macvlan_changelink_sources+0x13aa/0x1740 [ 107.428388][ T6595] macvlan_common_newlink+0x1189/0x1930 [ 107.428411][ T6595] ? sized_strscpy+0x9a/0x2b0 [ 107.428452][ T6595] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 107.428478][ T6595] ? rtnl_create_link+0x91c/0xc20 [ 107.428512][ T6595] ? __pfx_macvlan_newlink+0x10/0x10 [ 107.428549][ T6595] rtnl_newlink_create+0x2ee/0xa40 [ 107.428587][ T6595] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 107.428621][ T6595] ? ns_capable+0x8a/0xf0 [ 107.428648][ T6595] rtnl_newlink+0x1c7e/0x2210 [ 107.428688][ T6595] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.428709][ T6595] ? __netlink_deliver_tap+0x56b/0x7f0 [ 107.428742][ T6595] ? __pfx_validate_chain+0x10/0x10 [ 107.428760][ T6595] ? __sock_sendmsg+0x221/0x270 [ 107.428782][ T6595] ? ____sys_sendmsg+0x52a/0x7e0 [ 107.428812][ T6595] ? __sys_sendmsg+0x269/0x350 [ 107.428841][ T6595] ? do_syscall_64+0xf3/0x230 [ 107.428866][ T6595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.428917][ T6595] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.428948][ T6595] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.428987][ T6595] ? mark_lock+0x9a/0x360 [ 107.429021][ T6595] ? __lock_acquire+0x1397/0x2100 [ 107.429085][ T6595] ? __pfx_lock_release+0x10/0x10 [ 107.429131][ T6595] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.429156][ T6595] rtnetlink_rcv_msg+0x791/0xcf0 [ 107.429177][ T6595] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 107.429206][ T6595] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.429238][ T6595] ? ref_tracker_free+0x643/0x7e0 [ 107.429270][ T6595] netlink_rcv_skb+0x1e3/0x430 [ 107.429302][ T6595] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.429328][ T6595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.429385][ T6595] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.429419][ T6595] netlink_unicast+0x7f6/0x990 [ 107.429458][ T6595] ? __pfx_netlink_unicast+0x10/0x10 [ 107.429484][ T6595] ? __virt_addr_valid+0x45f/0x530 [ 107.429515][ T6595] ? __phys_addr_symbol+0x2f/0x70 [ 107.429551][ T6595] ? __check_object_size+0x47a/0x730 [ 107.429590][ T6595] netlink_sendmsg+0x8e4/0xcb0 [ 107.429636][ T6595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.429673][ T6595] ? aa_sock_msg_perm+0x91/0x160 [ 107.429708][ T6595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.429738][ T6595] __sock_sendmsg+0x221/0x270 [ 107.429767][ T6595] ____sys_sendmsg+0x52a/0x7e0 [ 107.429809][ T6595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.429840][ T6595] ? __fget_files+0x2a/0x410 [ 107.429866][ T6595] ? __fget_files+0x2a/0x410 [ 107.429898][ T6595] __sys_sendmsg+0x269/0x350 [ 107.429936][ T6595] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.429983][ T6595] ? do_sys_openat2+0x17a/0x1d0 [ 107.430036][ T6595] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.430066][ T6595] ? do_syscall_64+0x100/0x230 [ 107.430097][ T6595] ? do_syscall_64+0xb6/0x230 [ 107.430127][ T6595] do_syscall_64+0xf3/0x230 [ 107.430154][ T6595] ? clear_bhb_loop+0x35/0x90 [ 107.430187][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.430214][ T6595] RIP: 0033:0x7f5cb258cda9 [ 107.430232][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.430248][ T6595] RSP: 002b:00007f5cb03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.430270][ T6595] RAX: ffffffffffffffda RBX: 00007f5cb27a5fa0 RCX: 00007f5cb258cda9 [ 107.430284][ T6595] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 107.430296][ T6595] RBP: 00007f5cb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 107.430308][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.430319][ T6595] R13: 0000000000000000 R14: 00007f5cb27a5fa0 R15: 00007ffe0b3f6828 [ 107.430351][ T6595] [ 108.052898][ T6595] kobject: kobject_add_internal failed for macvlan2 (error: -12 parent: net) [ 108.383477][ T6606] xt_hashlimit: max too large, truncated to 1048576 [ 108.408606][ T6589] netlink: 'syz.4.165': attribute type 10 has an invalid length. [ 108.422523][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.165'. [ 108.431801][ T6589] veth0_vlan: entered allmulticast mode [ 108.438495][ T6589] bridge0: port 1(veth0_vlan) entered blocking state [ 108.445391][ T6589] bridge0: port 1(veth0_vlan) entered disabled state [ 108.454310][ T6589] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 108.474646][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 110.885359][ T6658] dvmrp0: entered allmulticast mode [ 111.093532][ T6665] __nla_validate_parse: 2 callbacks suppressed [ 111.093554][ T6665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'. [ 111.182838][ T6665] validate_nla: 2 callbacks suppressed [ 111.182857][ T6665] netlink: 'syz.3.186': attribute type 11 has an invalid length. [ 111.291228][ T6668] Cannot find del_set index 286 as target [ 111.339531][ T6673] xt_policy: neither incoming nor outgoing policy selected [ 111.390109][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 111.420017][ T6679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.191'. [ 111.550558][ T6673] ipvlan2: entered promiscuous mode [ 111.558507][ T6673] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 111.566015][ T6673] team0: Device ipvlan2 is already an upper device of the team interface [ 112.365634][ T6705] netlink: 892 bytes leftover after parsing attributes in process `syz.1.197'. [ 112.857662][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.201'. [ 112.950684][ T6715] netlink: 'syz.0.201': attribute type 11 has an invalid length. [ 113.138962][ T6725] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 113.199074][ T6728] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 113.219043][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 113.944100][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.214'. [ 113.966060][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 114.419419][ T6771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 114.437040][ T6771] nbd: must specify at least one socket [ 115.272850][ T6788] team0: Mode "llance" not found [ 115.688316][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 116.237844][ T6828] team0: Mode "llance" not found [ 116.531112][ T6850] __nla_validate_parse: 1 callbacks suppressed [ 116.531132][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 116.584468][ T6850] netlink: 124 bytes leftover after parsing attributes in process `syz.0.237'. [ 116.743346][ T6858] syzkaller0: entered promiscuous mode [ 116.752851][ T6863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'. [ 116.779271][ T6858] syzkaller0: entered allmulticast mode [ 116.853878][ T6863] netlink: 'syz.2.239': attribute type 11 has an invalid length. [ 119.103680][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.252'. [ 119.190155][ T6925] batadv0: entered promiscuous mode [ 119.202418][ T6916] netlink: 3 bytes leftover after parsing attributes in process `syz.4.255'. [ 119.211838][ T6925] macvtap1: entered promiscuous mode [ 119.239112][ T6925] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 119.305573][ T6925] batadv0: left promiscuous mode [ 119.339739][ T6922] netlink: 204 bytes leftover after parsing attributes in process `syz.4.255'. [ 119.381135][ T6916] batadv1: entered promiscuous mode [ 119.386593][ T6916] batadv1: entered allmulticast mode [ 119.804909][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 120.302478][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'. [ 120.528946][ T6959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.265'. [ 120.537878][ T6959] nbd: must specify at least one socket [ 120.671697][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 120.707337][ T6971] netlink: 'syz.3.270': attribute type 10 has an invalid length. [ 121.296426][ T6986] ebtables: ebtables: counters copy to user failed while replacing table [ 121.591762][ T7001] __nla_validate_parse: 11 callbacks suppressed [ 121.591782][ T7001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.280'. [ 121.670125][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.282'. [ 121.889683][ T7012] netlink: 80 bytes leftover after parsing attributes in process `syz.1.285'. [ 121.974295][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.286'. [ 122.137293][ T7021] netlink: 'syz.1.288': attribute type 4 has an invalid length. [ 122.537131][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 122.700248][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.018705][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 123.038185][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 123.137429][ T7056] netlink: 'syz.4.299': attribute type 11 has an invalid length. [ 123.199424][ T7061] bridge1: entered promiscuous mode [ 123.210011][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'. [ 123.225204][ T7061] bridge1: entered allmulticast mode [ 123.259438][ T7061] team0: Device bridge1 is up. Set it down before adding it as a team port [ 123.347691][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 123.443738][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.308'. [ 123.547809][ T7072] syzkaller0: entered promiscuous mode [ 123.566071][ T7072] syzkaller0: entered allmulticast mode [ 123.661626][ T7075] ebtables: ebtables: counters copy to user failed while replacing table [ 123.890431][ T7097] netlink: 'syz.1.313': attribute type 4 has an invalid length. [ 125.602952][ T7110] netlink: 'syz.1.319': attribute type 11 has an invalid length. [ 126.071381][ T7132] FAULT_INJECTION: forcing a failure. [ 126.071381][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 126.123201][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.1.327 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 126.123231][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 126.123242][ T7132] Call Trace: [ 126.123249][ T7132] [ 126.123257][ T7132] dump_stack_lvl+0x241/0x360 [ 126.123288][ T7132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.123315][ T7132] ? __pfx__printk+0x10/0x10 [ 126.123349][ T7132] ? __lock_acquire+0x1397/0x2100 [ 126.123388][ T7132] should_fail_ex+0x40a/0x550 [ 126.123415][ T7132] should_failslab+0xac/0x100 [ 126.123451][ T7132] __kmalloc_noprof+0xdd/0x4c0 [ 126.123471][ T7132] ? __lock_acquire+0x1397/0x2100 [ 126.123496][ T7132] ? ___neigh_create+0x72b/0x2320 [ 126.123521][ T7132] ___neigh_create+0x72b/0x2320 [ 126.123553][ T7132] ? __ipv6_neigh_lookup_noref+0x496/0x680 [ 126.123590][ T7132] ip6_finish_output2+0xb48/0x1780 [ 126.123618][ T7132] ? ip6_mtu+0x81/0x3f0 [ 126.123638][ T7132] ? ip6_finish_output2+0x61d/0x1780 [ 126.123667][ T7132] ? __pfx_ip6_finish_output2+0x10/0x10 [ 126.123699][ T7132] ? ip6_mtu+0x81/0x3f0 [ 126.123723][ T7132] ip6_finish_output+0x41e/0x840 [ 126.123752][ T7132] ip6_send_skb+0x1b1/0x3b0 [ 126.123774][ T7132] ? ip6_send_skb+0xfd/0x3b0 [ 126.123801][ T7132] udp_v6_send_skb+0xbc5/0x1880 [ 126.123843][ T7132] udpv6_sendmsg+0x23ec/0x3310 [ 126.123873][ T7132] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 126.123906][ T7132] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 126.123935][ T7132] ? __pfx___might_resched+0x10/0x10 [ 126.123978][ T7132] ? aa_sk_perm+0x96d/0xab0 [ 126.124012][ T7132] ? sock_rps_record_flow+0x1a/0x400 [ 126.124030][ T7132] ? inet_send_prepare+0x21/0x260 [ 126.124054][ T7132] ? inet_send_prepare+0x5a/0x260 [ 126.124083][ T7132] __sock_sendmsg+0xef/0x270 [ 126.124112][ T7132] ____sys_sendmsg+0x52a/0x7e0 [ 126.124162][ T7132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.124193][ T7132] ? __fget_files+0x2a/0x410 [ 126.124219][ T7132] ? __fget_files+0x2a/0x410 [ 126.124252][ T7132] __sys_sendmmsg+0x36a/0x720 [ 126.124298][ T7132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 126.124345][ T7132] ? __pfx_lock_release+0x10/0x10 [ 126.124371][ T7132] ? kstrtouint_from_user+0x128/0x190 [ 126.124426][ T7132] ? ksys_write+0x22a/0x2b0 [ 126.124453][ T7132] ? __pfx_lock_release+0x10/0x10 [ 126.124488][ T7132] ? sb_end_write+0xe9/0x1c0 [ 126.124511][ T7132] ? vfs_write+0x7fa/0xd10 [ 126.124541][ T7132] ? __mutex_unlock_slowpath+0x227/0x800 [ 126.124601][ T7132] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 126.124633][ T7132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.124663][ T7132] ? do_syscall_64+0x100/0x230 [ 126.124695][ T7132] __x64_sys_sendmmsg+0xa0/0xb0 [ 126.124729][ T7132] do_syscall_64+0xf3/0x230 [ 126.124756][ T7132] ? clear_bhb_loop+0x35/0x90 [ 126.124789][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.124817][ T7132] RIP: 0033:0x7f855c98cda9 [ 126.124836][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.124853][ T7132] RSP: 002b:00007f855d8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 126.124891][ T7132] RAX: ffffffffffffffda RBX: 00007f855cba5fa0 RCX: 00007f855c98cda9 [ 126.124906][ T7132] RDX: 0000000000000002 RSI: 0000000020001b80 RDI: 0000000000000003 [ 126.124918][ T7132] RBP: 00007f855d8a8090 R08: 0000000000000000 R09: 0000000000000000 [ 126.124930][ T7132] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 126.124942][ T7132] R13: 0000000000000000 R14: 00007f855cba5fa0 R15: 00007ffcf95d7168 [ 126.124974][ T7132] [ 126.841176][ T7154] __nla_validate_parse: 9 callbacks suppressed [ 126.841198][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 126.884235][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'. [ 126.888688][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 126.920060][ T7162] netlink: 'syz.1.335': attribute type 11 has an invalid length. [ 127.030346][ T5851] Bluetooth: hci3: link tx timeout [ 127.036453][ T5851] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.348971][ T7178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.342'. [ 127.813558][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'. [ 127.874203][ T7198] netlink: 'syz.1.350': attribute type 11 has an invalid length. [ 127.993565][ T7194] ebtables: ebtables: counters copy to user failed while replacing table [ 128.970458][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 129.002218][ T7231] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.057634][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 129.391741][ T7249] FAULT_INJECTION: forcing a failure. [ 129.391741][ T7249] name failslab, interval 1, probability 0, space 0, times 0 [ 129.423414][ T7249] CPU: 1 UID: 0 PID: 7249 Comm: syz.3.371 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 129.423445][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 129.423457][ T7249] Call Trace: [ 129.423464][ T7249] [ 129.423473][ T7249] dump_stack_lvl+0x241/0x360 [ 129.423504][ T7249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.423526][ T7249] ? __pfx__printk+0x10/0x10 [ 129.423562][ T7249] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 129.423585][ T7249] ? __pfx___might_resched+0x10/0x10 [ 129.423614][ T7249] should_fail_ex+0x40a/0x550 [ 129.423642][ T7249] should_failslab+0xac/0x100 [ 129.423678][ T7249] __kmalloc_node_noprof+0xe1/0x4d0 [ 129.423700][ T7249] ? __kvmalloc_node_noprof+0x72/0x190 [ 129.423725][ T7249] ? is_bpf_text_address+0x26/0x2a0 [ 129.423757][ T7249] __kvmalloc_node_noprof+0x72/0x190 [ 129.423785][ T7249] bpf_test_run_xdp_live+0x21d/0x2230 [ 129.423819][ T7249] ? arch_stack_walk+0xfd/0x150 [ 129.423870][ T7249] ? stack_trace_save+0x118/0x1d0 [ 129.423897][ T7249] ? __pfx_stack_trace_save+0x10/0x10 [ 129.423924][ T7249] ? stack_depot_save_flags+0x37/0x940 [ 129.423949][ T7249] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 129.423979][ T7249] ? mark_lock+0x9a/0x360 [ 129.424059][ T7249] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 129.424103][ T7249] ? __might_fault+0xc6/0x120 [ 129.424133][ T7249] ? _copy_from_user+0x95/0xb0 [ 129.424154][ T7249] ? bpf_test_init+0x15a/0x180 [ 129.424181][ T7249] ? xdp_convert_md_to_buff+0x5b/0x330 [ 129.424215][ T7249] bpf_prog_test_run_xdp+0x805/0x11e0 [ 129.424253][ T7249] ? __pfx_lock_release+0x10/0x10 [ 129.424291][ T7249] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.424323][ T7249] ? __fget_files+0x2a/0x410 [ 129.424348][ T7249] ? __fget_files+0x2a/0x410 [ 129.424374][ T7249] ? fput+0x21b/0x290 [ 129.424394][ T7249] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 129.424427][ T7249] bpf_prog_test_run+0x2e4/0x360 [ 129.424458][ T7249] __sys_bpf+0x48d/0x810 [ 129.424485][ T7249] ? __pfx___sys_bpf+0x10/0x10 [ 129.424523][ T7249] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 129.424555][ T7249] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.424586][ T7249] ? do_syscall_64+0x100/0x230 [ 129.424618][ T7249] __x64_sys_bpf+0x7c/0x90 [ 129.424641][ T7249] do_syscall_64+0xf3/0x230 [ 129.424668][ T7249] ? clear_bhb_loop+0x35/0x90 [ 129.424700][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.424728][ T7249] RIP: 0033:0x7f5cb258cda9 [ 129.424746][ T7249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.424762][ T7249] RSP: 002b:00007f5cb03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.424783][ T7249] RAX: ffffffffffffffda RBX: 00007f5cb27a5fa0 RCX: 00007f5cb258cda9 [ 129.424798][ T7249] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 129.424810][ T7249] RBP: 00007f5cb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 129.424822][ T7249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.424833][ T7249] R13: 0000000000000000 R14: 00007f5cb27a5fa0 R15: 00007ffe0b3f6828 [ 129.424872][ T7249] [ 129.753359][ T7257] tipc: Enabled bearer , priority 18 [ 130.024712][ T7264] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 130.326576][ T7270] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 130.353115][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 130.509718][ T7276] netlink: 'syz.2.380': attribute type 8 has an invalid length. [ 130.728326][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 130.968547][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.393648][ T7300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.602081][ T7300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.718290][ T7306] netlink: 176 bytes leftover after parsing attributes in process `syz.4.390'. [ 131.759233][ T7310] ip6gre1: entered promiscuous mode [ 131.959175][ T7300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.136489][ T7300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.163236][ T7330] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 132.270902][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 132.304239][ T7336] bond1: entered promiscuous mode [ 132.317323][ T7336] bond1: entered allmulticast mode [ 132.323673][ T7336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.343469][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 132.487817][ T7300] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.556030][ T7340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.619715][ T7300] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.671308][ T7300] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.707334][ T7300] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.844387][ T7340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.131065][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139369][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.219944][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 133.302961][ T7340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.404861][ T7369] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 133.550177][ T7369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.756456][ T7340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.045795][ T7386] netlink: 'syz.0.410': attribute type 7 has an invalid length. [ 134.096541][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.410'. [ 134.099033][ T7388] netlink: 'syz.0.410': attribute type 2 has an invalid length. [ 134.260439][ T7340] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.395333][ T7340] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.444617][ T7340] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.485712][ T7340] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.725518][ T7403] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.734881][ T7403] bond0: (slave bond2): Enslaving as an active interface with an up link [ 134.946509][ T7392] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 134.975126][ T7417] netlink: 104 bytes leftover after parsing attributes in process `syz.0.420'. [ 135.271437][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.426'. [ 135.304964][ T7435] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 135.513397][ T7443] FAULT_INJECTION: forcing a failure. [ 135.513397][ T7443] name failslab, interval 1, probability 0, space 0, times 0 [ 135.543661][ T7443] CPU: 0 UID: 0 PID: 7443 Comm: syz.1.431 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 135.543691][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 135.543702][ T7443] Call Trace: [ 135.543709][ T7443] [ 135.543718][ T7443] dump_stack_lvl+0x241/0x360 [ 135.543763][ T7443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.543784][ T7443] ? __pfx__printk+0x10/0x10 [ 135.543820][ T7443] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 135.543845][ T7443] ? __pfx___might_resched+0x10/0x10 [ 135.543875][ T7443] should_fail_ex+0x40a/0x550 [ 135.543921][ T7443] should_failslab+0xac/0x100 [ 135.543956][ T7443] kmem_cache_alloc_node_noprof+0x77/0x380 [ 135.543977][ T7443] ? __alloc_skb+0x1c3/0x440 [ 135.544011][ T7443] __alloc_skb+0x1c3/0x440 [ 135.544049][ T7443] ? __pfx___alloc_skb+0x10/0x10 [ 135.544091][ T7443] ? netlink_ack_tlv_len+0x6e/0x200 [ 135.544130][ T7443] netlink_ack+0x145/0xa50 [ 135.544159][ T7443] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 135.544184][ T7443] ? __pfx_nl80211_post_doit+0x10/0x10 [ 135.544214][ T7443] ? __pfx___might_resched+0x10/0x10 [ 135.544258][ T7443] netlink_rcv_skb+0x262/0x430 [ 135.544295][ T7443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.544322][ T7443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.544389][ T7443] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 135.544437][ T7443] genl_rcv+0x28/0x40 [ 135.544464][ T7443] netlink_unicast+0x7f6/0x990 [ 135.544509][ T7443] ? __pfx_netlink_unicast+0x10/0x10 [ 135.544536][ T7443] ? __virt_addr_valid+0x45f/0x530 [ 135.544567][ T7443] ? __phys_addr_symbol+0x2f/0x70 [ 135.544601][ T7443] ? __check_object_size+0x47a/0x730 [ 135.544643][ T7443] netlink_sendmsg+0x8e4/0xcb0 [ 135.544697][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.544734][ T7443] ? aa_sock_msg_perm+0x91/0x160 [ 135.544780][ T7443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.544813][ T7443] __sock_sendmsg+0x221/0x270 [ 135.544841][ T7443] ____sys_sendmsg+0x52a/0x7e0 [ 135.544886][ T7443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.544924][ T7443] ? __fget_files+0x2a/0x410 [ 135.544954][ T7443] ? __fget_files+0x2a/0x410 [ 135.544985][ T7443] __sys_sendmsg+0x269/0x350 [ 135.545028][ T7443] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.545088][ T7443] ? do_sys_openat2+0x17a/0x1d0 [ 135.545140][ T7443] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.545174][ T7443] ? do_syscall_64+0x100/0x230 [ 135.545220][ T7443] ? do_syscall_64+0xb6/0x230 [ 135.545254][ T7443] do_syscall_64+0xf3/0x230 [ 135.545281][ T7443] ? clear_bhb_loop+0x35/0x90 [ 135.545321][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.545352][ T7443] RIP: 0033:0x7f855c98cda9 [ 135.545378][ T7443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.545394][ T7443] RSP: 002b:00007f855d8a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.545415][ T7443] RAX: ffffffffffffffda RBX: 00007f855cba5fa0 RCX: 00007f855c98cda9 [ 135.545429][ T7443] RDX: 0000000024008080 RSI: 0000000020000c00 RDI: 0000000000000004 [ 135.545442][ T7443] RBP: 00007f855d8a8090 R08: 0000000000000000 R09: 0000000000000000 [ 135.545454][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.545465][ T7443] R13: 0000000000000000 R14: 00007f855cba5fa0 R15: 00007ffcf95d7168 [ 135.545506][ T7443] [ 136.556841][ T7468] netlink: 'syz.2.443': attribute type 10 has an invalid length. [ 136.604654][ T7464] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 136.621236][ T7468] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.803978][ T7464] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 136.873286][ T7465] bond1: (slave gretap1): making interface the new active one [ 136.882686][ T7465] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 136.908692][ T7464] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 136.949363][ T7483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.959876][ T7483] bond0: (slave bond3): Enslaving as an active interface with an up link [ 136.993308][ T7464] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 137.049318][ T7464] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 137.057508][ T7464] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 137.397674][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 138.691981][ T7525] FAULT_INJECTION: forcing a failure. [ 138.691981][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.705410][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.4.464 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 138.705437][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 138.705450][ T7525] Call Trace: [ 138.705457][ T7525] [ 138.705465][ T7525] dump_stack_lvl+0x241/0x360 [ 138.705503][ T7525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.705525][ T7525] ? __pfx__printk+0x10/0x10 [ 138.705559][ T7525] ? __pfx_lock_release+0x10/0x10 [ 138.705598][ T7525] should_fail_ex+0x40a/0x550 [ 138.705626][ T7525] _copy_from_user+0x2d/0xb0 [ 138.705647][ T7525] copy_msghdr_from_user+0xae/0x680 [ 138.705672][ T7525] ? __pfx___might_resched+0x10/0x10 [ 138.705700][ T7525] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 138.705732][ T7525] ? do_recvmmsg+0x44e/0xab0 [ 138.705751][ T7525] ? __might_fault+0xaa/0x120 [ 138.705783][ T7525] do_recvmmsg+0x3bd/0xab0 [ 138.705815][ T7525] ? __pfx_do_recvmmsg+0x10/0x10 [ 138.705858][ T7525] ? ksys_write+0x22a/0x2b0 [ 138.705886][ T7525] ? __pfx_lock_release+0x10/0x10 [ 138.705920][ T7525] ? sb_end_write+0xe9/0x1c0 [ 138.705943][ T7525] ? vfs_write+0x7fa/0xd10 [ 138.705972][ T7525] ? __mutex_unlock_slowpath+0x227/0x800 [ 138.706010][ T7525] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.706036][ T7525] ? __fget_files+0x2a/0x410 [ 138.706074][ T7525] __x64_sys_recvmmsg+0x199/0x250 [ 138.706098][ T7525] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 138.706120][ T7525] ? do_syscall_64+0x100/0x230 [ 138.706150][ T7525] ? do_syscall_64+0xb6/0x230 [ 138.706180][ T7525] do_syscall_64+0xf3/0x230 [ 138.706206][ T7525] ? clear_bhb_loop+0x35/0x90 [ 138.706239][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.706267][ T7525] RIP: 0033:0x7fc0ab38cda9 [ 138.706286][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.706301][ T7525] RSP: 002b:00007fc0ac1b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 138.706323][ T7525] RAX: ffffffffffffffda RBX: 00007fc0ab5a5fa0 RCX: 00007fc0ab38cda9 [ 138.706336][ T7525] RDX: 03ffffffffffff67 RSI: 0000000020002440 RDI: 0000000000000007 [ 138.706349][ T7525] RBP: 00007fc0ac1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 138.706361][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.706371][ T7525] R13: 0000000000000000 R14: 00007fc0ab5a5fa0 R15: 00007ffce8274f88 [ 138.706401][ T7525] [ 138.992229][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 139.291195][ T7557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.476'. [ 139.356030][ T7557] validate_nla: 27 callbacks suppressed [ 139.356050][ T7557] netlink: 'syz.4.476': attribute type 4 has an invalid length. [ 139.386796][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.477'. [ 139.907802][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 140.016607][ T7585] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 140.040949][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 140.053320][ T7585] bond1: entered promiscuous mode [ 140.064307][ T7585] bond1: entered allmulticast mode [ 140.069927][ T7585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.078498][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 140.655361][ T7604] bond0: (slave bridge0): Releasing backup interface [ 140.750151][ T7604] bond0: (slave bond2): Releasing backup interface [ 140.759831][ T7604] bond0: (slave bond2): the permanent HWaddr of slave - 46:90:69:e8:93:d2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 140.902148][ T7604] bond0: (slave bond3): Releasing backup interface [ 141.029727][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 141.141360][ T7619] ebtables: ebtables: counters copy to user failed while replacing table [ 141.155322][ T7609] team0: Mode "llance" not found [ 141.180109][ T7616] batman_adv: batadv0: Adding interface: dummy0 [ 141.186574][ T7624] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 141.195739][ T7616] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.226309][ T7624] netlink: 224 bytes leftover after parsing attributes in process `syz.1.498'. [ 141.243353][ T7616] batman_adv: batadv0: Interface activated: dummy0 [ 141.413285][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.500'. [ 141.776774][ T7655] bridge1: entered promiscuous mode [ 141.796965][ T7655] bridge1: entered allmulticast mode [ 141.825585][ T7655] team0: Device bridge1 is up. Set it down before adding it as a team port [ 141.902233][ T7663] FAULT_INJECTION: forcing a failure. [ 141.902233][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 141.915012][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.3.509 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 141.915038][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 141.915051][ T7663] Call Trace: [ 141.915058][ T7663] [ 141.915067][ T7663] dump_stack_lvl+0x241/0x360 [ 141.915098][ T7663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.915120][ T7663] ? __pfx__printk+0x10/0x10 [ 141.915167][ T7663] should_fail_ex+0x40a/0x550 [ 141.915196][ T7663] should_failslab+0xac/0x100 [ 141.915231][ T7663] ? skb_clone+0x20c/0x390 [ 141.915249][ T7663] kmem_cache_alloc_noprof+0x70/0x380 [ 141.915277][ T7663] skb_clone+0x20c/0x390 [ 141.915301][ T7663] bpf_clone_redirect+0xab/0x3d0 [ 141.915332][ T7663] bpf_prog_b960c4b57b3b3b2a+0x5f/0x64 [ 141.915354][ T7663] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.915391][ T7663] ? bpf_test_run+0x370/0xa90 [ 141.915419][ T7663] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 141.915448][ T7663] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.915488][ T7663] ? bpf_test_run+0x370/0xa90 [ 141.915516][ T7663] ? __pfx___cant_migrate+0x10/0x10 [ 141.915538][ T7663] ? bpf_test_run+0x370/0xa90 [ 141.915567][ T7663] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 141.915594][ T7663] ? bpf_test_timer_continue+0x11a/0x350 [ 141.915630][ T7663] bpf_test_run+0x4f0/0xa90 [ 141.915666][ T7663] ? bpf_test_run+0x370/0xa90 [ 141.915708][ T7663] ? __pfx_bpf_test_run+0x10/0x10 [ 141.915763][ T7663] ? __pfx_eth_type_trans+0x10/0x10 [ 141.915789][ T7663] ? convert___skb_to_skb+0x41/0x620 [ 141.915824][ T7663] bpf_prog_test_run_skb+0xcaa/0x1830 [ 141.915877][ T7663] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 141.915904][ T7663] ? __fget_files+0x2a/0x410 [ 141.915941][ T7663] ? fput+0x21b/0x290 [ 141.915962][ T7663] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 141.915994][ T7663] bpf_prog_test_run+0x2e4/0x360 [ 141.916025][ T7663] __sys_bpf+0x48d/0x810 [ 141.916051][ T7663] ? __pfx___sys_bpf+0x10/0x10 [ 141.916088][ T7663] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.916119][ T7663] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.916150][ T7663] ? do_syscall_64+0x100/0x230 [ 141.916181][ T7663] __x64_sys_bpf+0x7c/0x90 [ 141.916203][ T7663] do_syscall_64+0xf3/0x230 [ 141.916230][ T7663] ? clear_bhb_loop+0x35/0x90 [ 141.916263][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.916290][ T7663] RIP: 0033:0x7f5cb258cda9 [ 141.916307][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.916323][ T7663] RSP: 002b:00007f5cb03f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.916344][ T7663] RAX: ffffffffffffffda RBX: 00007f5cb27a5fa0 RCX: 00007f5cb258cda9 [ 141.916359][ T7663] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 141.916371][ T7663] RBP: 00007f5cb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.916383][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.916394][ T7663] R13: 0000000000000000 R14: 00007f5cb27a5fa0 R15: 00007ffe0b3f6828 [ 141.916424][ T7663] [ 142.758961][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 142.925020][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 142.934675][ T7691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.518'. [ 142.968392][ T7696] x_tables: duplicate entry at hook 1 [ 143.005137][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 143.021695][ T7698] FAULT_INJECTION: forcing a failure. [ 143.021695][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 143.082768][ T7698] CPU: 1 UID: 0 PID: 7698 Comm: syz.2.519 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 143.082797][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.082808][ T7698] Call Trace: [ 143.082816][ T7698] [ 143.082824][ T7698] dump_stack_lvl+0x241/0x360 [ 143.082854][ T7698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.082876][ T7698] ? __pfx__printk+0x10/0x10 [ 143.082920][ T7698] ? kmem_cache_alloc_noprof+0x48/0x380 [ 143.082943][ T7698] ? __pfx___might_resched+0x10/0x10 [ 143.082973][ T7698] should_fail_ex+0x40a/0x550 [ 143.083001][ T7698] should_failslab+0xac/0x100 [ 143.083034][ T7698] ? __kernfs_new_node+0xd8/0x870 [ 143.083051][ T7698] kmem_cache_alloc_noprof+0x70/0x380 [ 143.083078][ T7698] __kernfs_new_node+0xd8/0x870 [ 143.083107][ T7698] ? __pfx___kernfs_new_node+0x10/0x10 [ 143.083134][ T7698] ? __pfx_lock_acquire+0x10/0x10 [ 143.083162][ T7698] ? sysfs_do_create_link_sd+0x77/0x110 [ 143.083191][ T7698] ? __pfx_lock_release+0x10/0x10 [ 143.083215][ T7698] ? do_raw_spin_lock+0x14f/0x370 [ 143.083243][ T7698] kernfs_new_node+0x137/0x240 [ 143.083279][ T7698] kernfs_create_link+0xa5/0x1f0 [ 143.083306][ T7698] sysfs_do_create_link_sd+0x85/0x110 [ 143.083343][ T7698] device_add_class_symlinks+0x1c5/0x250 [ 143.083398][ T7698] device_add+0x553/0xbf0 [ 143.083430][ T7698] ? device_initialize+0x266/0x460 [ 143.083464][ T7698] netdev_register_kobject+0x157/0x2e0 [ 143.083498][ T7698] register_netdevice+0x12c3/0x1b10 [ 143.083549][ T7698] ? __pfx_register_netdevice+0x10/0x10 [ 143.083582][ T7698] ? macvlan_changelink_sources+0x13aa/0x1740 [ 143.083623][ T7698] macvlan_common_newlink+0x1189/0x1930 [ 143.083646][ T7698] ? sized_strscpy+0x9a/0x2b0 [ 143.083689][ T7698] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 143.083716][ T7698] ? rtnl_create_link+0x91c/0xc20 [ 143.083750][ T7698] ? __pfx_macvlan_newlink+0x10/0x10 [ 143.083780][ T7698] rtnl_newlink_create+0x2ee/0xa40 [ 143.083815][ T7698] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 143.083849][ T7698] ? ns_capable+0x8a/0xf0 [ 143.083875][ T7698] rtnl_newlink+0x1c7e/0x2210 [ 143.083922][ T7698] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.083942][ T7698] ? __netlink_deliver_tap+0x56b/0x7f0 [ 143.083974][ T7698] ? __pfx_validate_chain+0x10/0x10 [ 143.083991][ T7698] ? __sock_sendmsg+0x221/0x270 [ 143.084013][ T7698] ? ____sys_sendmsg+0x52a/0x7e0 [ 143.084043][ T7698] ? __sys_sendmsg+0x269/0x350 [ 143.084071][ T7698] ? do_syscall_64+0xf3/0x230 [ 143.084096][ T7698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.084147][ T7698] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.084179][ T7698] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.084217][ T7698] ? mark_lock+0x9a/0x360 [ 143.084251][ T7698] ? __lock_acquire+0x1397/0x2100 [ 143.084316][ T7698] ? __pfx_lock_release+0x10/0x10 [ 143.084361][ T7698] ? __pfx_rtnl_newlink+0x10/0x10 [ 143.084386][ T7698] rtnetlink_rcv_msg+0x791/0xcf0 [ 143.084407][ T7698] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 143.084436][ T7698] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.084468][ T7698] ? ref_tracker_free+0x643/0x7e0 [ 143.084499][ T7698] netlink_rcv_skb+0x1e3/0x430 [ 143.084531][ T7698] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.084568][ T7698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.084622][ T7698] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.084656][ T7698] netlink_unicast+0x7f6/0x990 [ 143.084692][ T7698] ? __pfx_netlink_unicast+0x10/0x10 [ 143.084717][ T7698] ? __virt_addr_valid+0x45f/0x530 [ 143.084749][ T7698] ? __phys_addr_symbol+0x2f/0x70 [ 143.084777][ T7698] ? __check_object_size+0x47a/0x730 [ 143.084815][ T7698] netlink_sendmsg+0x8e4/0xcb0 [ 143.084860][ T7698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.084902][ T7698] ? aa_sock_msg_perm+0x91/0x160 [ 143.084935][ T7698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.084965][ T7698] __sock_sendmsg+0x221/0x270 [ 143.084992][ T7698] ____sys_sendmsg+0x52a/0x7e0 [ 143.085033][ T7698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.085061][ T7698] ? __fget_files+0x2a/0x410 [ 143.085086][ T7698] ? __fget_files+0x2a/0x410 [ 143.085118][ T7698] __sys_sendmsg+0x269/0x350 [ 143.085154][ T7698] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.085200][ T7698] ? do_sys_openat2+0x17a/0x1d0 [ 143.085252][ T7698] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.085281][ T7698] ? do_syscall_64+0x100/0x230 [ 143.085310][ T7698] ? do_syscall_64+0xb6/0x230 [ 143.085339][ T7698] do_syscall_64+0xf3/0x230 [ 143.085364][ T7698] ? clear_bhb_loop+0x35/0x90 [ 143.085396][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.085422][ T7698] RIP: 0033:0x7f9870f8cda9 [ 143.085440][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.085456][ T7698] RSP: 002b:00007f9871de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.085478][ T7698] RAX: ffffffffffffffda RBX: 00007f98711a5fa0 RCX: 00007f9870f8cda9 [ 143.085491][ T7698] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 143.085503][ T7698] RBP: 00007f9871de0090 R08: 0000000000000000 R09: 0000000000000000 [ 143.085514][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.085524][ T7698] R13: 0000000000000000 R14: 00007f98711a5fa0 R15: 00007ffddcafd828 [ 143.085555][ T7698] [ 143.613539][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 143.622467][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.521'. [ 144.114943][ T7716] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 144.158281][ T7716] netlink: 224 bytes leftover after parsing attributes in process `syz.4.527'. [ 144.184192][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 144.914675][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 144.984882][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 145.049771][ T7756] veth0: entered promiscuous mode [ 145.089293][ T7756] dummy0: entered promiscuous mode [ 145.095063][ T7756] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 145.137766][ T7756] Cannot create hsr debugfs directory [ 146.681596][ T7800] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 147.015315][ T7810] FAULT_INJECTION: forcing a failure. [ 147.015315][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 147.038468][ T7810] CPU: 0 UID: 0 PID: 7810 Comm: syz.2.557 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 147.038499][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 147.038511][ T7810] Call Trace: [ 147.038519][ T7810] [ 147.038527][ T7810] dump_stack_lvl+0x241/0x360 [ 147.038558][ T7810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.038579][ T7810] ? __pfx__printk+0x10/0x10 [ 147.038615][ T7810] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 147.038641][ T7810] ? __pfx___might_resched+0x10/0x10 [ 147.038669][ T7810] should_fail_ex+0x40a/0x550 [ 147.038697][ T7810] should_failslab+0xac/0x100 [ 147.038732][ T7810] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 147.038756][ T7810] ? __kernfs_new_node+0x9d/0x870 [ 147.038774][ T7810] ? __lock_acquire+0x1397/0x2100 [ 147.038807][ T7810] kstrdup+0x39/0xb0 [ 147.038840][ T7810] __kernfs_new_node+0x9d/0x870 [ 147.038869][ T7810] ? __pfx___kernfs_new_node+0x10/0x10 [ 147.038900][ T7810] ? sysfs_do_create_link_sd+0x77/0x110 [ 147.038926][ T7810] ? do_raw_spin_lock+0x14f/0x370 [ 147.038949][ T7810] ? __pfx_lock_release+0x10/0x10 [ 147.038983][ T7810] kernfs_new_node+0x137/0x240 [ 147.039031][ T7810] kernfs_create_link+0xa5/0x1f0 [ 147.039058][ T7810] sysfs_do_create_link_sd+0x85/0x110 [ 147.039089][ T7810] __netdev_adjacent_dev_insert+0x525/0x8d0 [ 147.039122][ T7810] ? __pfx___netdev_adjacent_dev_insert+0x10/0x10 [ 147.039145][ T7810] ? udp_tunnel_nic_netdevice_event+0x192/0x12f0 [ 147.039171][ T7810] ? ip6_route_dev_notify+0x99/0x600 [ 147.039205][ T7810] ? notifier_call_chain+0x3cc/0x3f0 [ 147.039238][ T7810] __netdev_upper_dev_link+0x404/0x670 [ 147.039270][ T7810] ? __pfx___netdev_upper_dev_link+0x10/0x10 [ 147.039300][ T7810] ? ref_tracker_alloc+0x332/0x490 [ 147.039324][ T7810] ? netdev_master_upper_dev_link+0x92/0x100 [ 147.039355][ T7810] netdev_master_upper_dev_link+0xb1/0x100 [ 147.039385][ T7810] ? __pfx_netdev_master_upper_dev_link+0x10/0x10 [ 147.039424][ T7810] batadv_hardif_enable_interface+0x26e/0x9f0 [ 147.039462][ T7810] batadv_softif_slave_add+0x79/0x100 [ 147.039494][ T7810] do_setlink+0xe40/0x4210 [ 147.039541][ T7810] ? __pfx_do_setlink+0x10/0x10 [ 147.039578][ T7810] ? __pfx___might_resched+0x10/0x10 [ 147.039604][ T7810] ? __pfx___mutex_trylock_common+0x10/0x10 [ 147.039630][ T7810] ? rcu_is_watching+0x15/0xb0 [ 147.039650][ T7810] ? trace_contention_end+0x3c/0x120 [ 147.039671][ T7810] ? __mutex_lock+0x397/0x1010 [ 147.039699][ T7810] ? __pfx_aa_get_newest_label+0x10/0x10 [ 147.039732][ T7810] ? rtnl_setlink+0x690/0xad0 [ 147.039756][ T7810] ? __pfx___mutex_lock+0x10/0x10 [ 147.039787][ T7810] ? nla_strscpy+0x100/0x180 [ 147.039813][ T7810] ? full_name_hash+0x93/0xe0 [ 147.039849][ T7810] rtnl_setlink+0x772/0xad0 [ 147.039878][ T7810] ? __pfx_rtnl_setlink+0x10/0x10 [ 147.039914][ T7810] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.039995][ T7810] ? rcu_read_unlock+0x87/0xa0 [ 147.040014][ T7810] ? __pfx_lock_release+0x10/0x10 [ 147.040056][ T7810] ? __pfx_rtnl_setlink+0x10/0x10 [ 147.040080][ T7810] rtnetlink_rcv_msg+0x791/0xcf0 [ 147.040118][ T7810] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 147.040146][ T7810] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.040177][ T7810] ? ref_tracker_free+0x643/0x7e0 [ 147.040208][ T7810] netlink_rcv_skb+0x1e3/0x430 [ 147.040241][ T7810] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.040266][ T7810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.040323][ T7810] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.040357][ T7810] netlink_unicast+0x7f6/0x990 [ 147.040395][ T7810] ? __pfx_netlink_unicast+0x10/0x10 [ 147.040421][ T7810] ? __virt_addr_valid+0x45f/0x530 [ 147.040452][ T7810] ? __phys_addr_symbol+0x2f/0x70 [ 147.040482][ T7810] ? __check_object_size+0x47a/0x730 [ 147.040521][ T7810] netlink_sendmsg+0x8e4/0xcb0 [ 147.040570][ T7810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.040607][ T7810] ? aa_sock_msg_perm+0x91/0x160 [ 147.040639][ T7810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.040669][ T7810] __sock_sendmsg+0x221/0x270 [ 147.040698][ T7810] ____sys_sendmsg+0x52a/0x7e0 [ 147.040740][ T7810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.040770][ T7810] ? __fget_files+0x2a/0x410 [ 147.040795][ T7810] ? __fget_files+0x2a/0x410 [ 147.040832][ T7810] __sys_sendmsg+0x269/0x350 [ 147.040869][ T7810] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.040934][ T7810] ? do_sys_openat2+0x17a/0x1d0 [ 147.040986][ T7810] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.041023][ T7810] ? do_syscall_64+0x100/0x230 [ 147.041054][ T7810] ? do_syscall_64+0xb6/0x230 [ 147.041084][ T7810] do_syscall_64+0xf3/0x230 [ 147.041110][ T7810] ? clear_bhb_loop+0x35/0x90 [ 147.041143][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.041170][ T7810] RIP: 0033:0x7f9870f8cda9 [ 147.041188][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.041204][ T7810] RSP: 002b:00007f9871de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.041226][ T7810] RAX: ffffffffffffffda RBX: 00007f98711a5fa0 RCX: 00007f9870f8cda9 [ 147.041240][ T7810] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 147.041252][ T7810] RBP: 00007f9871de0090 R08: 0000000000000000 R09: 0000000000000000 [ 147.041263][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.041274][ T7810] R13: 0000000000000000 R14: 00007f98711a5fa0 R15: 00007ffddcafd828 [ 147.041305][ T7810] [ 147.921394][ T7825] netlink: 'syz.1.559': attribute type 10 has an invalid length. [ 147.970246][ T7829] batman_adv: batadv0: Interface deactivated: dummy0 [ 147.977043][ T7829] batman_adv: batadv0: Removing interface: dummy0 [ 148.275679][ T7833] team0: Mode "llance" not found [ 148.351714][ T7851] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 148.657137][ T7857] __nla_validate_parse: 4 callbacks suppressed [ 148.657158][ T7857] netlink: 104 bytes leftover after parsing attributes in process `syz.3.571'. [ 149.485968][ T7880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'. [ 149.674706][ T7889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.579'. [ 150.185104][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 150.439100][ T7923] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 150.731444][ T7931] FAULT_INJECTION: forcing a failure. [ 150.731444][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 150.790527][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.4.590 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 150.790556][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 150.790568][ T7931] Call Trace: [ 150.790575][ T7931] [ 150.790584][ T7931] dump_stack_lvl+0x241/0x360 [ 150.790615][ T7931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.790636][ T7931] ? __pfx__printk+0x10/0x10 [ 150.790671][ T7931] ? __kmalloc_cache_noprof+0x48/0x390 [ 150.790695][ T7931] ? __pfx___might_resched+0x10/0x10 [ 150.790717][ T7931] ? __asan_memcpy+0x40/0x70 [ 150.790746][ T7931] should_fail_ex+0x40a/0x550 [ 150.790774][ T7931] should_failslab+0xac/0x100 [ 150.790810][ T7931] __kmalloc_cache_noprof+0x70/0x390 [ 150.790831][ T7931] ? device_add+0xc1/0xbf0 [ 150.790866][ T7931] device_add+0xc1/0xbf0 [ 150.790898][ T7931] ? device_initialize+0x266/0x460 [ 150.790933][ T7931] netdev_register_kobject+0x157/0x2e0 [ 150.790967][ T7931] register_netdevice+0x12c3/0x1b10 [ 150.791017][ T7931] ? __pfx_register_netdevice+0x10/0x10 [ 150.791050][ T7931] ? macvlan_changelink_sources+0x13aa/0x1740 [ 150.791091][ T7931] macvlan_common_newlink+0x1189/0x1930 [ 150.791114][ T7931] ? sized_strscpy+0x9a/0x2b0 [ 150.791156][ T7931] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 150.791182][ T7931] ? rtnl_create_link+0x91c/0xc20 [ 150.791215][ T7931] ? __pfx_macvlan_newlink+0x10/0x10 [ 150.791245][ T7931] rtnl_newlink_create+0x2ee/0xa40 [ 150.791289][ T7931] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 150.791324][ T7931] ? ns_capable+0x8a/0xf0 [ 150.791350][ T7931] rtnl_newlink+0x1c7e/0x2210 [ 150.791391][ T7931] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.791411][ T7931] ? __netlink_deliver_tap+0x56b/0x7f0 [ 150.791442][ T7931] ? __pfx_validate_chain+0x10/0x10 [ 150.791459][ T7931] ? __sock_sendmsg+0x221/0x270 [ 150.791481][ T7931] ? ____sys_sendmsg+0x52a/0x7e0 [ 150.791509][ T7931] ? __sys_sendmsg+0x269/0x350 [ 150.791536][ T7931] ? do_syscall_64+0xf3/0x230 [ 150.791559][ T7931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.791609][ T7931] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.791640][ T7931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.791678][ T7931] ? mark_lock+0x9a/0x360 [ 150.791712][ T7931] ? __lock_acquire+0x1397/0x2100 [ 150.791776][ T7931] ? __pfx_lock_release+0x10/0x10 [ 150.791820][ T7931] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.791845][ T7931] rtnetlink_rcv_msg+0x791/0xcf0 [ 150.791865][ T7931] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 150.791894][ T7931] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.791924][ T7931] ? ref_tracker_free+0x643/0x7e0 [ 150.791956][ T7931] netlink_rcv_skb+0x1e3/0x430 [ 150.791989][ T7931] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.792014][ T7931] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.792071][ T7931] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.792105][ T7931] netlink_unicast+0x7f6/0x990 [ 150.792154][ T7931] ? __pfx_netlink_unicast+0x10/0x10 [ 150.792179][ T7931] ? __virt_addr_valid+0x45f/0x530 [ 150.792208][ T7931] ? __phys_addr_symbol+0x2f/0x70 [ 150.792236][ T7931] ? __check_object_size+0x47a/0x730 [ 150.792279][ T7931] netlink_sendmsg+0x8e4/0xcb0 [ 150.792323][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.792358][ T7931] ? aa_sock_msg_perm+0x91/0x160 [ 150.792390][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.792419][ T7931] __sock_sendmsg+0x221/0x270 [ 150.792447][ T7931] ____sys_sendmsg+0x52a/0x7e0 [ 150.792487][ T7931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.792516][ T7931] ? __fget_files+0x2a/0x410 [ 150.792557][ T7931] ? __fget_files+0x2a/0x410 [ 150.792589][ T7931] __sys_sendmsg+0x269/0x350 [ 150.792627][ T7931] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.792674][ T7931] ? do_sys_openat2+0x17a/0x1d0 [ 150.792726][ T7931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.792756][ T7931] ? do_syscall_64+0x100/0x230 [ 150.792786][ T7931] ? do_syscall_64+0xb6/0x230 [ 150.792816][ T7931] do_syscall_64+0xf3/0x230 [ 150.792843][ T7931] ? clear_bhb_loop+0x35/0x90 [ 150.792875][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.792902][ T7931] RIP: 0033:0x7fc0ab38cda9 [ 150.792931][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.792947][ T7931] RSP: 002b:00007fc0ac1b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.792968][ T7931] RAX: ffffffffffffffda RBX: 00007fc0ab5a5fa0 RCX: 00007fc0ab38cda9 [ 150.792983][ T7931] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 150.792995][ T7931] RBP: 00007fc0ac1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 150.793007][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.793018][ T7931] R13: 0000000000000000 R14: 00007fc0ab5a5fa0 R15: 00007ffce8274f88 [ 150.793050][ T7931] [ 151.606622][ T7964] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 151.616760][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 151.865010][ T7972] FAULT_INJECTION: forcing a failure. [ 151.865010][ T7972] name failslab, interval 1, probability 0, space 0, times 0 [ 151.877734][ T7972] CPU: 0 UID: 0 PID: 7972 Comm: syz.1.603 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 151.877758][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.877770][ T7972] Call Trace: [ 151.877777][ T7972] [ 151.877785][ T7972] dump_stack_lvl+0x241/0x360 [ 151.877816][ T7972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.877838][ T7972] ? __pfx__printk+0x10/0x10 [ 151.877886][ T7972] should_fail_ex+0x40a/0x550 [ 151.877918][ T7972] should_failslab+0xac/0x100 [ 151.877952][ T7972] ? skb_clone+0x20c/0x390 [ 151.877970][ T7972] kmem_cache_alloc_noprof+0x70/0x380 [ 151.877998][ T7972] skb_clone+0x20c/0x390 [ 151.878022][ T7972] bpf_clone_redirect+0xab/0x3d0 [ 151.878053][ T7972] bpf_prog_b960c4b57b3b3b2a+0x5f/0x64 [ 151.878075][ T7972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.878113][ T7972] ? bpf_test_run+0x370/0xa90 [ 151.878142][ T7972] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 151.878179][ T7972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.878219][ T7972] ? bpf_test_run+0x370/0xa90 [ 151.878248][ T7972] ? __pfx___cant_migrate+0x10/0x10 [ 151.878270][ T7972] ? bpf_test_run+0x370/0xa90 [ 151.878299][ T7972] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 151.878326][ T7972] ? bpf_test_timer_continue+0x11a/0x350 [ 151.878363][ T7972] bpf_test_run+0x4f0/0xa90 [ 151.878399][ T7972] ? bpf_test_run+0x370/0xa90 [ 151.878442][ T7972] ? __pfx_bpf_test_run+0x10/0x10 [ 151.878498][ T7972] ? __pfx_eth_type_trans+0x10/0x10 [ 151.878525][ T7972] ? convert___skb_to_skb+0x41/0x620 [ 151.878560][ T7972] bpf_prog_test_run_skb+0xcaa/0x1830 [ 151.878614][ T7972] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 151.878643][ T7972] ? __fget_files+0x2a/0x410 [ 151.878669][ T7972] ? fput+0x21b/0x290 [ 151.878689][ T7972] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 151.878721][ T7972] bpf_prog_test_run+0x2e4/0x360 [ 151.878752][ T7972] __sys_bpf+0x48d/0x810 [ 151.878779][ T7972] ? __pfx___sys_bpf+0x10/0x10 [ 151.878818][ T7972] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.878849][ T7972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.878879][ T7972] ? do_syscall_64+0x100/0x230 [ 151.878924][ T7972] __x64_sys_bpf+0x7c/0x90 [ 151.878946][ T7972] do_syscall_64+0xf3/0x230 [ 151.878972][ T7972] ? clear_bhb_loop+0x35/0x90 [ 151.879003][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.879030][ T7972] RIP: 0033:0x7f855c98cda9 [ 151.879047][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.879062][ T7972] RSP: 002b:00007f855d8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.879084][ T7972] RAX: ffffffffffffffda RBX: 00007f855cba5fa0 RCX: 00007f855c98cda9 [ 151.879098][ T7972] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 151.879110][ T7972] RBP: 00007f855d8a8090 R08: 0000000000000000 R09: 0000000000000000 [ 151.879122][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.879133][ T7972] R13: 0000000000000000 R14: 00007f855cba5fa0 R15: 00007ffcf95d7168 [ 151.879169][ T7972] [ 152.218538][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 152.260324][ T7981] bridge1: entered promiscuous mode [ 152.266293][ T7981] bridge1: entered allmulticast mode [ 152.274726][ T7981] team0: Device bridge1 is up. Set it down before adding it as a team port [ 152.455023][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.608'. [ 153.019564][ T8013] netlink: 80 bytes leftover after parsing attributes in process `syz.1.618'. [ 153.039670][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 153.249543][ T8015] team0: Mode "llance" not found [ 153.255362][ T8017] FAULT_INJECTION: forcing a failure. [ 153.255362][ T8017] name failslab, interval 1, probability 0, space 0, times 0 [ 153.301230][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: syz.3.620 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 153.301263][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.301276][ T8017] Call Trace: [ 153.301283][ T8017] [ 153.301293][ T8017] dump_stack_lvl+0x241/0x360 [ 153.301322][ T8017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.301344][ T8017] ? __pfx__printk+0x10/0x10 [ 153.301377][ T8017] ? kmem_cache_alloc_noprof+0x48/0x380 [ 153.301401][ T8017] ? __pfx___might_resched+0x10/0x10 [ 153.301431][ T8017] should_fail_ex+0x40a/0x550 [ 153.301458][ T8017] should_failslab+0xac/0x100 [ 153.301491][ T8017] ? __kernfs_new_node+0xd8/0x870 [ 153.301509][ T8017] kmem_cache_alloc_noprof+0x70/0x380 [ 153.301537][ T8017] __kernfs_new_node+0xd8/0x870 [ 153.301563][ T8017] ? up_write+0x1a9/0x590 [ 153.301583][ T8017] ? __pfx___kernfs_new_node+0x10/0x10 [ 153.301608][ T8017] ? __pfx_up_write+0x10/0x10 [ 153.301643][ T8017] kernfs_new_node+0x137/0x240 [ 153.301682][ T8017] __kernfs_create_file+0x49/0x2e0 [ 153.301710][ T8017] sysfs_add_file_mode_ns+0x24a/0x310 [ 153.301746][ T8017] internal_create_group+0x782/0x12d0 [ 153.301792][ T8017] ? __pfx_up_write+0x10/0x10 [ 153.301814][ T8017] ? __pfx_internal_create_group+0x10/0x10 [ 153.301859][ T8017] sysfs_create_groups+0x56/0x120 [ 153.301891][ T8017] device_add_attrs+0xe5/0x600 [ 153.301928][ T8017] ? __pfx_device_add_attrs+0x10/0x10 [ 153.301970][ T8017] device_add+0x576/0xbf0 [ 153.302002][ T8017] ? device_initialize+0x266/0x460 [ 153.302037][ T8017] netdev_register_kobject+0x157/0x2e0 [ 153.302071][ T8017] register_netdevice+0x12c3/0x1b10 [ 153.302131][ T8017] ? __pfx_register_netdevice+0x10/0x10 [ 153.302165][ T8017] ? macvlan_changelink_sources+0x13aa/0x1740 [ 153.302205][ T8017] macvlan_common_newlink+0x1189/0x1930 [ 153.302229][ T8017] ? sized_strscpy+0x9a/0x2b0 [ 153.302277][ T8017] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 153.302303][ T8017] ? rtnl_create_link+0x91c/0xc20 [ 153.302337][ T8017] ? __pfx_macvlan_newlink+0x10/0x10 [ 153.302368][ T8017] rtnl_newlink_create+0x2ee/0xa40 [ 153.302406][ T8017] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 153.302441][ T8017] ? ns_capable+0x8a/0xf0 [ 153.302466][ T8017] rtnl_newlink+0x1c7e/0x2210 [ 153.302508][ T8017] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.302529][ T8017] ? __netlink_deliver_tap+0x56b/0x7f0 [ 153.302562][ T8017] ? __pfx_validate_chain+0x10/0x10 [ 153.302581][ T8017] ? __sock_sendmsg+0x221/0x270 [ 153.302602][ T8017] ? ____sys_sendmsg+0x52a/0x7e0 [ 153.302630][ T8017] ? __sys_sendmsg+0x269/0x350 [ 153.302657][ T8017] ? do_syscall_64+0xf3/0x230 [ 153.302682][ T8017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.302732][ T8017] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.302764][ T8017] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.302803][ T8017] ? mark_lock+0x9a/0x360 [ 153.302837][ T8017] ? __lock_acquire+0x1397/0x2100 [ 153.302901][ T8017] ? __pfx_lock_release+0x10/0x10 [ 153.302946][ T8017] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.302971][ T8017] rtnetlink_rcv_msg+0x791/0xcf0 [ 153.302993][ T8017] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 153.303022][ T8017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.303053][ T8017] ? ref_tracker_free+0x643/0x7e0 [ 153.303087][ T8017] netlink_rcv_skb+0x1e3/0x430 [ 153.303125][ T8017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.303151][ T8017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.303207][ T8017] ? netlink_deliver_tap+0x2e/0x1b0 [ 153.303242][ T8017] netlink_unicast+0x7f6/0x990 [ 153.303280][ T8017] ? __pfx_netlink_unicast+0x10/0x10 [ 153.303306][ T8017] ? __virt_addr_valid+0x45f/0x530 [ 153.303344][ T8017] ? __phys_addr_symbol+0x2f/0x70 [ 153.303373][ T8017] ? __check_object_size+0x47a/0x730 [ 153.303411][ T8017] netlink_sendmsg+0x8e4/0xcb0 [ 153.303457][ T8017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.303493][ T8017] ? aa_sock_msg_perm+0x91/0x160 [ 153.303526][ T8017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.303557][ T8017] __sock_sendmsg+0x221/0x270 [ 153.303586][ T8017] ____sys_sendmsg+0x52a/0x7e0 [ 153.303626][ T8017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.303654][ T8017] ? __fget_files+0x2a/0x410 [ 153.303680][ T8017] ? __fget_files+0x2a/0x410 [ 153.303712][ T8017] __sys_sendmsg+0x269/0x350 [ 153.303750][ T8017] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.303797][ T8017] ? do_sys_openat2+0x17a/0x1d0 [ 153.303848][ T8017] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.303878][ T8017] ? do_syscall_64+0x100/0x230 [ 153.303907][ T8017] ? do_syscall_64+0xb6/0x230 [ 153.303938][ T8017] do_syscall_64+0xf3/0x230 [ 153.303965][ T8017] ? clear_bhb_loop+0x35/0x90 [ 153.304000][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.304026][ T8017] RIP: 0033:0x7f5cb258cda9 [ 153.304044][ T8017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.304061][ T8017] RSP: 002b:00007f5cb03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.304084][ T8017] RAX: ffffffffffffffda RBX: 00007f5cb27a5fa0 RCX: 00007f5cb258cda9 [ 153.304099][ T8017] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 153.304111][ T8017] RBP: 00007f5cb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.304132][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.304144][ T8017] R13: 0000000000000000 R14: 00007f5cb27a5fa0 R15: 00007ffe0b3f6828 [ 153.304177][ T8017] [ 153.415008][ T8024] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.859682][ T8027] openvswitch: netlink: Multiple metadata blocks provided [ 153.989033][ T8042] netlink: 104 bytes leftover after parsing attributes in process `syz.3.625'. [ 154.851539][ T8067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.115146][ T8072] netlink: 'syz.1.636': attribute type 10 has an invalid length. [ 155.176101][ T8072] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 155.779927][ T8087] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 155.832528][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 155.883834][ T8081] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.894600][ T8081] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.905045][ T8081] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.914373][ T8081] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.965278][ T8081] bond1: left promiscuous mode [ 155.973405][ T8081] bond1: left allmulticast mode [ 156.022065][ T8088] bond2: entered promiscuous mode [ 156.079687][ T8088] bond2: entered allmulticast mode [ 156.121936][ T8088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.254565][ T8097] netlink: 100 bytes leftover after parsing attributes in process `syz.1.644'. [ 156.412881][ T8101] ip6gre1: entered allmulticast mode [ 156.506806][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 156.699657][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.652'. [ 156.728524][ T8116] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 156.764077][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 156.866248][ T8119] netlink: 'syz.2.654': attribute type 11 has an invalid length. [ 157.124607][ T8126] team0: Mode "llance" not found [ 157.211513][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 157.512841][ T8143] bridge1: entered promiscuous mode [ 157.529179][ T8143] bridge1: entered allmulticast mode [ 157.540009][ T8143] team0: Device bridge1 is up. Set it down before adding it as a team port [ 158.052963][ T8162] bond2 (unregistering): Released all slaves [ 158.677637][ T8194] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 158.685834][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.676'. [ 158.756612][ T8194] FAULT_INJECTION: forcing a failure. [ 158.756612][ T8194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.777651][ T8194] CPU: 1 UID: 0 PID: 8194 Comm: syz.0.676 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 158.777681][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 158.777695][ T8194] Call Trace: [ 158.777701][ T8194] [ 158.777710][ T8194] dump_stack_lvl+0x241/0x360 [ 158.777739][ T8194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.777760][ T8194] ? __pfx__printk+0x10/0x10 [ 158.777797][ T8194] ? snprintf+0xda/0x120 [ 158.777819][ T8194] should_fail_ex+0x40a/0x550 [ 158.777845][ T8194] _copy_to_user+0x31/0xb0 [ 158.777866][ T8194] simple_read_from_buffer+0xca/0x150 [ 158.777900][ T8194] proc_fail_nth_read+0x1e9/0x250 [ 158.777940][ T8194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.777981][ T8194] ? rw_verify_area+0x243/0x630 [ 158.778007][ T8194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.778041][ T8194] vfs_read+0x1f8/0xb40 [ 158.778066][ T8194] ? fdget_pos+0x254/0x320 [ 158.778090][ T8194] ? __pfx___mutex_lock+0x10/0x10 [ 158.778116][ T8194] ? __pfx_vfs_read+0x10/0x10 [ 158.778138][ T8194] ? do_sys_openat2+0x17a/0x1d0 [ 158.778163][ T8194] ? __fget_files+0x2a/0x410 [ 158.778186][ T8194] ? __fget_files+0x395/0x410 [ 158.778206][ T8194] ? __fget_files+0x2a/0x410 [ 158.778236][ T8194] ksys_read+0x18f/0x2b0 [ 158.778264][ T8194] ? __pfx_ksys_read+0x10/0x10 [ 158.778291][ T8194] ? do_syscall_64+0x100/0x230 [ 158.778321][ T8194] ? do_syscall_64+0xb6/0x230 [ 158.778349][ T8194] do_syscall_64+0xf3/0x230 [ 158.778376][ T8194] ? clear_bhb_loop+0x35/0x90 [ 158.778405][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.778430][ T8194] RIP: 0033:0x7f397078b7bc [ 158.778449][ T8194] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.778465][ T8194] RSP: 002b:00007f397169f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.778486][ T8194] RAX: ffffffffffffffda RBX: 00007f39709a5fa0 RCX: 00007f397078b7bc [ 158.778500][ T8194] RDX: 000000000000000f RSI: 00007f397169f0a0 RDI: 000000000000000c [ 158.778512][ T8194] RBP: 00007f397169f090 R08: 0000000000000000 R09: 0000000000000000 [ 158.778524][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.778535][ T8194] R13: 0000000000000000 R14: 00007f39709a5fa0 R15: 00007fffa26a0258 [ 158.778565][ T8194] [ 158.809009][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 159.056808][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'. [ 159.424092][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.681'. [ 159.486948][ T8200] team0: Mode "llance" not found [ 159.694091][ T8224] FAULT_INJECTION: forcing a failure. [ 159.694091][ T8224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.739533][ T8224] CPU: 1 UID: 0 PID: 8224 Comm: syz.4.682 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 159.739571][ T8224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 159.739585][ T8224] Call Trace: [ 159.739591][ T8224] [ 159.739600][ T8224] dump_stack_lvl+0x241/0x360 [ 159.739629][ T8224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.739669][ T8224] ? __pfx__printk+0x10/0x10 [ 159.739714][ T8224] should_fail_ex+0x40a/0x550 [ 159.739745][ T8224] _copy_to_user+0x31/0xb0 [ 159.739769][ T8224] bpf_test_finish+0x212/0x890 [ 159.739809][ T8224] ? __pfx_bpf_test_finish+0x10/0x10 [ 159.739837][ T8224] ? __might_fault+0xc6/0x120 [ 159.739870][ T8224] ? bpf_test_init+0x15a/0x180 [ 159.739903][ T8224] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 159.739941][ T8224] ? __pfx_lock_release+0x10/0x10 [ 159.739981][ T8224] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 159.740014][ T8224] ? __fget_files+0x2a/0x410 [ 159.740039][ T8224] ? __fget_files+0x2a/0x410 [ 159.740065][ T8224] ? fput+0x21b/0x290 [ 159.740085][ T8224] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 159.740118][ T8224] bpf_prog_test_run+0x2e4/0x360 [ 159.740148][ T8224] __sys_bpf+0x48d/0x810 [ 159.740173][ T8224] ? __pfx___sys_bpf+0x10/0x10 [ 159.740210][ T8224] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.740239][ T8224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.740269][ T8224] ? do_syscall_64+0x100/0x230 [ 159.740301][ T8224] __x64_sys_bpf+0x7c/0x90 [ 159.740322][ T8224] do_syscall_64+0xf3/0x230 [ 159.740348][ T8224] ? clear_bhb_loop+0x35/0x90 [ 159.740379][ T8224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.740406][ T8224] RIP: 0033:0x7fc0ab38cda9 [ 159.740423][ T8224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.740440][ T8224] RSP: 002b:00007fc0ac1b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.740462][ T8224] RAX: ffffffffffffffda RBX: 00007fc0ab5a5fa0 RCX: 00007fc0ab38cda9 [ 159.740477][ T8224] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 159.740490][ T8224] RBP: 00007fc0ac1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 159.740502][ T8224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.740513][ T8224] R13: 0000000000000000 R14: 00007fc0ab5a5fa0 R15: 00007ffce8274f88 [ 159.740541][ T8224] [ 160.868440][ T8275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.306974][ T8326] delete_channel: no stack [ 162.763682][ T8343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.771207][ T8343] bridge0: port 1(bond2) entered blocking state [ 162.777644][ T8343] bridge0: port 1(bond2) entered disabled state [ 162.784982][ T8343] bond2: entered allmulticast mode [ 162.793356][ T8343] bond2: entered promiscuous mode [ 162.825752][ T8350] bond0: (slave macvlan5): Opening slave failed [ 162.948535][ T8352] netlink: 'syz.1.713': attribute type 11 has an invalid length. [ 163.502986][ T8370] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.721'. [ 163.521192][ T8373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.723'. [ 163.552571][ T8372] FAULT_INJECTION: forcing a failure. [ 163.552571][ T8372] name failslab, interval 1, probability 0, space 0, times 0 [ 163.570743][ T8370] openvswitch: netlink: Message has 7 unknown bytes. [ 163.598660][ T8372] CPU: 0 UID: 0 PID: 8372 Comm: syz.0.722 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 163.598691][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 163.598703][ T8372] Call Trace: [ 163.598710][ T8372] [ 163.598720][ T8372] dump_stack_lvl+0x241/0x360 [ 163.598750][ T8372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.598773][ T8372] ? __pfx__printk+0x10/0x10 [ 163.598809][ T8372] ? kmem_cache_alloc_noprof+0x48/0x380 [ 163.598834][ T8372] ? __pfx___might_resched+0x10/0x10 [ 163.598866][ T8372] should_fail_ex+0x40a/0x550 [ 163.598896][ T8372] should_failslab+0xac/0x100 [ 163.598931][ T8372] ? __kernfs_new_node+0xd8/0x870 [ 163.598950][ T8372] kmem_cache_alloc_noprof+0x70/0x380 [ 163.598983][ T8372] __kernfs_new_node+0xd8/0x870 [ 163.599011][ T8372] ? up_write+0x1a9/0x590 [ 163.599032][ T8372] ? __pfx___kernfs_new_node+0x10/0x10 [ 163.599058][ T8372] ? __pfx_up_write+0x10/0x10 [ 163.599094][ T8372] kernfs_new_node+0x137/0x240 [ 163.599133][ T8372] __kernfs_create_file+0x49/0x2e0 [ 163.599163][ T8372] sysfs_add_file_mode_ns+0x24a/0x310 [ 163.599200][ T8372] internal_create_group+0x782/0x12d0 [ 163.599243][ T8372] ? __pfx_up_write+0x10/0x10 [ 163.599264][ T8372] ? __pfx_internal_create_group+0x10/0x10 [ 163.599310][ T8372] sysfs_create_groups+0x56/0x120 [ 163.599344][ T8372] device_add_attrs+0xe5/0x600 [ 163.599393][ T8372] ? __pfx_device_add_attrs+0x10/0x10 [ 163.599436][ T8372] device_add+0x576/0xbf0 [ 163.599470][ T8372] ? device_initialize+0x266/0x460 [ 163.599505][ T8372] netdev_register_kobject+0x157/0x2e0 [ 163.599539][ T8372] register_netdevice+0x12c3/0x1b10 [ 163.599590][ T8372] ? __pfx_register_netdevice+0x10/0x10 [ 163.599623][ T8372] ? macvlan_changelink_sources+0x13aa/0x1740 [ 163.599664][ T8372] macvlan_common_newlink+0x1189/0x1930 [ 163.599688][ T8372] ? sized_strscpy+0x9a/0x2b0 [ 163.599731][ T8372] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 163.599759][ T8372] ? rtnl_create_link+0x91c/0xc20 [ 163.599793][ T8372] ? __pfx_macvlan_newlink+0x10/0x10 [ 163.599823][ T8372] rtnl_newlink_create+0x2ee/0xa40 [ 163.599861][ T8372] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 163.599896][ T8372] ? ns_capable+0x8a/0xf0 [ 163.599924][ T8372] rtnl_newlink+0x1c7e/0x2210 [ 163.599966][ T8372] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.599987][ T8372] ? __netlink_deliver_tap+0x56b/0x7f0 [ 163.600020][ T8372] ? __pfx_validate_chain+0x10/0x10 [ 163.600039][ T8372] ? __sock_sendmsg+0x221/0x270 [ 163.600062][ T8372] ? ____sys_sendmsg+0x52a/0x7e0 [ 163.600092][ T8372] ? __sys_sendmsg+0x269/0x350 [ 163.600121][ T8372] ? do_syscall_64+0xf3/0x230 [ 163.600147][ T8372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.600199][ T8372] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 163.600231][ T8372] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.600268][ T8372] ? mark_lock+0x9a/0x360 [ 163.600300][ T8372] ? __lock_acquire+0x1397/0x2100 [ 163.600362][ T8372] ? __pfx_lock_release+0x10/0x10 [ 163.600412][ T8372] ? __pfx_rtnl_newlink+0x10/0x10 [ 163.600437][ T8372] rtnetlink_rcv_msg+0x791/0xcf0 [ 163.600458][ T8372] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 163.600486][ T8372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.600518][ T8372] ? ref_tracker_free+0x643/0x7e0 [ 163.600551][ T8372] netlink_rcv_skb+0x1e3/0x430 [ 163.600584][ T8372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 163.600610][ T8372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.600668][ T8372] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.600703][ T8372] netlink_unicast+0x7f6/0x990 [ 163.600743][ T8372] ? __pfx_netlink_unicast+0x10/0x10 [ 163.600769][ T8372] ? __virt_addr_valid+0x45f/0x530 [ 163.600801][ T8372] ? __phys_addr_symbol+0x2f/0x70 [ 163.600831][ T8372] ? __check_object_size+0x47a/0x730 [ 163.600871][ T8372] netlink_sendmsg+0x8e4/0xcb0 [ 163.600917][ T8372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.600956][ T8372] ? aa_sock_msg_perm+0x91/0x160 [ 163.600990][ T8372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.601020][ T8372] __sock_sendmsg+0x221/0x270 [ 163.601048][ T8372] ____sys_sendmsg+0x52a/0x7e0 [ 163.601089][ T8372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.601118][ T8372] ? __fget_files+0x2a/0x410 [ 163.601144][ T8372] ? __fget_files+0x2a/0x410 [ 163.601175][ T8372] __sys_sendmsg+0x269/0x350 [ 163.601212][ T8372] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.601259][ T8372] ? do_sys_openat2+0x17a/0x1d0 [ 163.601310][ T8372] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.601341][ T8372] ? do_syscall_64+0x100/0x230 [ 163.601379][ T8372] ? do_syscall_64+0xb6/0x230 [ 163.601408][ T8372] do_syscall_64+0xf3/0x230 [ 163.601435][ T8372] ? clear_bhb_loop+0x35/0x90 [ 163.601467][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.601495][ T8372] RIP: 0033:0x7f397078cda9 [ 163.601514][ T8372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.601532][ T8372] RSP: 002b:00007f397169f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.601554][ T8372] RAX: ffffffffffffffda RBX: 00007f39709a5fa0 RCX: 00007f397078cda9 [ 163.601569][ T8372] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 163.601580][ T8372] RBP: 00007f397169f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.601592][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.601603][ T8372] R13: 0000000000000000 R14: 00007f39709a5fa0 R15: 00007fffa26a0258 [ 163.601634][ T8372] [ 164.237675][ T8376] netlink: 'syz.1.725': attribute type 11 has an invalid length. [ 164.290666][ T8381] netlink: 'syz.3.726': attribute type 11 has an invalid length. [ 164.547467][ T8395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.729'. [ 164.572320][ T8392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.730'. [ 164.654919][ T8398] netlink: 'syz.1.730': attribute type 10 has an invalid length. [ 164.824895][ T8401] batadv0: entered promiscuous mode [ 164.862450][ T8401] macvtap1: entered promiscuous mode [ 164.897580][ T8401] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 164.918478][ T8401] batadv0: left promiscuous mode [ 164.972179][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.735'. [ 165.306946][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 165.600111][ T8419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.738'. [ 165.616795][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'. [ 165.634284][ T8419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.738'. [ 165.644890][ T8419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.738'. [ 165.791016][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 165.839364][ T9] IPVS: starting estimator thread 0... [ 165.938162][ T8429] IPVS: using max 22 ests per chain, 52800 per kthread [ 166.055262][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 166.090251][ T8442] FAULT_INJECTION: forcing a failure. [ 166.090251][ T8442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.134089][ T8442] CPU: 1 UID: 0 PID: 8442 Comm: syz.3.744 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 166.134132][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 166.134145][ T8442] Call Trace: [ 166.134153][ T8442] [ 166.134162][ T8442] dump_stack_lvl+0x241/0x360 [ 166.134193][ T8442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.134218][ T8442] ? __pfx__printk+0x10/0x10 [ 166.134252][ T8442] ? __pfx_lock_release+0x10/0x10 [ 166.134291][ T8442] should_fail_ex+0x40a/0x550 [ 166.134320][ T8442] _copy_from_user+0x2d/0xb0 [ 166.134341][ T8442] copy_msghdr_from_user+0xae/0x680 [ 166.134374][ T8442] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 166.134397][ T8442] ? __fget_files+0x2a/0x410 [ 166.134423][ T8442] ? __fget_files+0x2a/0x410 [ 166.134453][ T8442] __sys_sendmsg+0x209/0x350 [ 166.134491][ T8442] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.134537][ T8442] ? do_sys_openat2+0x17a/0x1d0 [ 166.134586][ T8442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.134617][ T8442] ? do_syscall_64+0x100/0x230 [ 166.134648][ T8442] ? do_syscall_64+0xb6/0x230 [ 166.134678][ T8442] do_syscall_64+0xf3/0x230 [ 166.134705][ T8442] ? clear_bhb_loop+0x35/0x90 [ 166.134738][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.134766][ T8442] RIP: 0033:0x7f5cb258cda9 [ 166.134784][ T8442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.134801][ T8442] RSP: 002b:00007f5cb03d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.134824][ T8442] RAX: ffffffffffffffda RBX: 00007f5cb27a6080 RCX: 00007f5cb258cda9 [ 166.134839][ T8442] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 166.134851][ T8442] RBP: 00007f5cb03d5090 R08: 0000000000000000 R09: 0000000000000000 [ 166.134864][ T8442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.134885][ T8442] R13: 0000000000000001 R14: 00007f5cb27a6080 R15: 00007ffe0b3f6828 [ 166.134916][ T8442] [ 166.359863][ T8451] netlink: 'syz.0.748': attribute type 39 has an invalid length. [ 166.412554][ T974] IPVS: starting estimator thread 0... [ 166.509156][ T8452] IPVS: using max 23 ests per chain, 55200 per kthread [ 167.142153][ T8494] netlink: 'syz.4.756': attribute type 1 has an invalid length. [ 167.172813][ T8494] netlink: 'syz.4.756': attribute type 4 has an invalid length. [ 167.422835][ T8501] netlink: 'syz.0.762': attribute type 11 has an invalid length. [ 168.083370][ T8531] xt_bpf: check failed: parse error [ 168.312153][ T8536] netlink: 'syz.4.772': attribute type 3 has an invalid length. [ 168.356843][ T8541] xt_policy: too many policy elements [ 168.391591][ T8542] bridge1: entered promiscuous mode [ 168.401539][ T8542] bridge1: entered allmulticast mode [ 168.431014][ T8542] team0: Device bridge1 is up. Set it down before adding it as a team port [ 168.549524][ T8549] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 168.644255][ T8552] netlink: 'syz.4.777': attribute type 11 has an invalid length. [ 169.047481][ T8571] FAULT_INJECTION: forcing a failure. [ 169.047481][ T8571] name failslab, interval 1, probability 0, space 0, times 0 [ 169.063582][ T8571] CPU: 0 UID: 0 PID: 8571 Comm: syz.1.783 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 169.063613][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 169.063625][ T8571] Call Trace: [ 169.063633][ T8571] [ 169.063642][ T8571] dump_stack_lvl+0x241/0x360 [ 169.063672][ T8571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.063694][ T8571] ? __pfx__printk+0x10/0x10 [ 169.063728][ T8571] ? kmem_cache_alloc_noprof+0x48/0x380 [ 169.063751][ T8571] ? __pfx___might_resched+0x10/0x10 [ 169.063782][ T8571] should_fail_ex+0x40a/0x550 [ 169.063810][ T8571] should_failslab+0xac/0x100 [ 169.063844][ T8571] ? __kernfs_new_node+0xd8/0x870 [ 169.063863][ T8571] kmem_cache_alloc_noprof+0x70/0x380 [ 169.063889][ T8571] __kernfs_new_node+0xd8/0x870 [ 169.063915][ T8571] ? up_write+0x1a9/0x590 [ 169.063945][ T8571] ? __pfx___kernfs_new_node+0x10/0x10 [ 169.063970][ T8571] ? __pfx_up_write+0x10/0x10 [ 169.064006][ T8571] kernfs_new_node+0x137/0x240 [ 169.064043][ T8571] __kernfs_create_file+0x49/0x2e0 [ 169.064071][ T8571] sysfs_add_file_mode_ns+0x24a/0x310 [ 169.064105][ T8571] internal_create_group+0x782/0x12d0 [ 169.064149][ T8571] ? __pfx_up_write+0x10/0x10 [ 169.064173][ T8571] ? __pfx_internal_create_group+0x10/0x10 [ 169.064217][ T8571] sysfs_create_groups+0x56/0x120 [ 169.064250][ T8571] device_add_attrs+0xe5/0x600 [ 169.064286][ T8571] ? __pfx_device_add_attrs+0x10/0x10 [ 169.064329][ T8571] device_add+0x576/0xbf0 [ 169.064362][ T8571] ? device_initialize+0x266/0x460 [ 169.064396][ T8571] netdev_register_kobject+0x157/0x2e0 [ 169.064430][ T8571] register_netdevice+0x12c3/0x1b10 [ 169.064480][ T8571] ? __pfx_register_netdevice+0x10/0x10 [ 169.064513][ T8571] ? macvlan_changelink_sources+0x13aa/0x1740 [ 169.064553][ T8571] macvlan_common_newlink+0x1189/0x1930 [ 169.064577][ T8571] ? sized_strscpy+0x9a/0x2b0 [ 169.064619][ T8571] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 169.064646][ T8571] ? rtnl_create_link+0x91c/0xc20 [ 169.064678][ T8571] ? __pfx_macvlan_newlink+0x10/0x10 [ 169.064709][ T8571] rtnl_newlink_create+0x2ee/0xa40 [ 169.064745][ T8571] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 169.064780][ T8571] ? ns_capable+0x8a/0xf0 [ 169.064806][ T8571] rtnl_newlink+0x1c7e/0x2210 [ 169.064847][ T8571] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.064871][ T8571] ? __pfx_validate_chain+0x10/0x10 [ 169.064914][ T8571] ? validate_chain+0x11e/0x5920 [ 169.064946][ T8571] ? __pfx_lock_acquire+0x10/0x10 [ 169.064979][ T8571] ? __pfx_lock_release+0x10/0x10 [ 169.065012][ T8571] ? __pfx_validate_chain+0x10/0x10 [ 169.065034][ T8571] ? mark_lock+0x9a/0x360 [ 169.065070][ T8571] ? __lock_acquire+0x1397/0x2100 [ 169.065134][ T8571] ? __pfx_lock_release+0x10/0x10 [ 169.065179][ T8571] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.065205][ T8571] rtnetlink_rcv_msg+0x791/0xcf0 [ 169.065227][ T8571] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 169.065252][ T8571] ? __lock_acquire+0x1397/0x2100 [ 169.065282][ T8571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.065324][ T8571] netlink_rcv_skb+0x1e3/0x430 [ 169.065358][ T8571] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.065385][ T8571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.065443][ T8571] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.065477][ T8571] netlink_unicast+0x7f6/0x990 [ 169.065517][ T8571] ? __pfx_netlink_unicast+0x10/0x10 [ 169.065544][ T8571] ? __virt_addr_valid+0x45f/0x530 [ 169.065575][ T8571] ? __phys_addr_symbol+0x2f/0x70 [ 169.065605][ T8571] ? __check_object_size+0x47a/0x730 [ 169.065645][ T8571] netlink_sendmsg+0x8e4/0xcb0 [ 169.065690][ T8571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.065727][ T8571] ? aa_sock_msg_perm+0x91/0x160 [ 169.065761][ T8571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.065792][ T8571] __sock_sendmsg+0x221/0x270 [ 169.065821][ T8571] ____sys_sendmsg+0x52a/0x7e0 [ 169.065864][ T8571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.065894][ T8571] ? __fget_files+0x2a/0x410 [ 169.065919][ T8571] ? __fget_files+0x2a/0x410 [ 169.065957][ T8571] __sys_sendmsg+0x269/0x350 [ 169.065995][ T8571] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.066041][ T8571] ? do_sys_openat2+0x17a/0x1d0 [ 169.066092][ T8571] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.066124][ T8571] ? do_syscall_64+0x100/0x230 [ 169.066153][ T8571] ? do_syscall_64+0xb6/0x230 [ 169.066183][ T8571] do_syscall_64+0xf3/0x230 [ 169.066210][ T8571] ? clear_bhb_loop+0x35/0x90 [ 169.066244][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.066270][ T8571] RIP: 0033:0x7f855c98cda9 [ 169.066289][ T8571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.066307][ T8571] RSP: 002b:00007f855d8a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.066329][ T8571] RAX: ffffffffffffffda RBX: 00007f855cba5fa0 RCX: 00007f855c98cda9 [ 169.066344][ T8571] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 169.066356][ T8571] RBP: 00007f855d8a8090 R08: 0000000000000000 R09: 0000000000000000 [ 169.066367][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.066378][ T8571] R13: 0000000000000000 R14: 00007f855cba5fa0 R15: 00007ffcf95d7168 [ 169.066409][ T8571] [ 169.962168][ T8586] netlink: 'syz.4.791': attribute type 11 has an invalid length. [ 170.481675][ T8603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.504115][ T8612] __nla_validate_parse: 7 callbacks suppressed [ 170.504137][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 170.518580][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.800'. [ 170.591575][ T8614] netlink: 'syz.4.800': attribute type 4 has an invalid length. [ 170.861467][ T8619] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 170.883561][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 171.273454][ T8638] netlink: 'syz.0.807': attribute type 11 has an invalid length. [ 171.600173][ T8646] bond0: (slave bridge0): Releasing backup interface [ 171.661918][ T8646] bond2: left allmulticast mode [ 171.683198][ T8646] bond2: left promiscuous mode [ 171.828006][ T8646] bridge0: port 1(bond2) entered disabled state [ 171.848603][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 172.056819][ T8652] team0: Mode "llance" not found [ 172.785240][ T8678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.815'. [ 173.493275][ T8695] netlink: 'syz.3.821': attribute type 11 has an invalid length. [ 174.845682][ T8712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.829'. [ 174.924612][ T8717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.827'. [ 174.935353][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.826'. [ 174.954018][ T8715] trusted_key: syz.0.825 sent an empty control message without MSG_MORE. [ 174.971276][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.826'. [ 174.976815][ T8717] netlink: 'syz.1.827': attribute type 4 has an invalid length. [ 174.987847][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.825'. [ 175.041452][ T8721] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 175.250500][ T8727] netlink: 'syz.4.832': attribute type 11 has an invalid length. [ 176.269129][ T8751] __nla_validate_parse: 1 callbacks suppressed [ 176.269151][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 176.612321][ T8759] macsec1: entered promiscuous mode [ 176.617607][ T8759] bond0: entered promiscuous mode [ 176.634951][ T8759] macsec1: entered allmulticast mode [ 176.644917][ T8759] bond0: entered allmulticast mode [ 176.688395][ T8759] bond0: left allmulticast mode [ 176.704477][ T8759] bond0: left promiscuous mode [ 176.785067][ T8762] gretap1: entered promiscuous mode [ 176.840334][ T8771] netlink: 'syz.0.845': attribute type 11 has an invalid length. [ 177.085861][ T8781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.565974][ T8799] bridge1: entered promiscuous mode [ 177.647512][ T8799] bridge1: entered allmulticast mode [ 177.662876][ T8799] team0: Device bridge1 is up. Set it down before adding it as a team port [ 177.711601][ T8804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.858'. [ 178.090887][ T8813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.375426][ T8821] netlink: 'syz.0.865': attribute type 4 has an invalid length. [ 178.918285][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.870'. [ 178.944133][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'. [ 179.644763][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.879'. [ 179.696899][ T8871] netlink: 'syz.2.879': attribute type 4 has an invalid length. [ 179.710846][ T8864] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.850363][ T8864] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.955878][ T8864] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.059172][ T8864] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.289776][ T8864] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.369416][ T8864] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.407482][ T8864] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.430005][ T8883] batman_adv: batadv0: Adding interface: dummy0 [ 180.452662][ T8883] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.508073][ T8883] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 180.552765][ T8864] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.730580][ T8887] batman_adv: batadv0: Removing interface: dummy0 [ 180.828828][ T8898] FAULT_INJECTION: forcing a failure. [ 180.828828][ T8898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.852554][ T8887] team0: Mode "llance" not found [ 180.878357][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.4.890 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 180.878387][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 180.878399][ T8898] Call Trace: [ 180.878407][ T8898] [ 180.878415][ T8898] dump_stack_lvl+0x241/0x360 [ 180.878456][ T8898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.878478][ T8898] ? __pfx__printk+0x10/0x10 [ 180.878511][ T8898] ? __pfx_lock_release+0x10/0x10 [ 180.878548][ T8898] should_fail_ex+0x40a/0x550 [ 180.878574][ T8898] _copy_from_iter+0x1e9/0x1c20 [ 180.878604][ T8898] ? __virt_addr_valid+0x183/0x530 [ 180.878645][ T8898] ? __alloc_skb+0x28f/0x440 [ 180.878672][ T8898] ? __pfx__copy_from_iter+0x10/0x10 [ 180.878702][ T8898] ? __virt_addr_valid+0x183/0x530 [ 180.878731][ T8898] ? __virt_addr_valid+0x183/0x530 [ 180.878759][ T8898] ? __virt_addr_valid+0x45f/0x530 [ 180.878788][ T8898] ? __phys_addr_symbol+0x2f/0x70 [ 180.878816][ T8898] ? __check_object_size+0x47a/0x730 [ 180.878854][ T8898] netlink_sendmsg+0x73d/0xcb0 [ 180.878898][ T8898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.878933][ T8898] ? aa_sock_msg_perm+0x91/0x160 [ 180.878965][ T8898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.878992][ T8898] __sock_sendmsg+0x221/0x270 [ 180.879019][ T8898] ____sys_sendmsg+0x52a/0x7e0 [ 180.879057][ T8898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.879086][ T8898] ? __fget_files+0x2a/0x410 [ 180.879111][ T8898] ? __fget_files+0x2a/0x410 [ 180.879139][ T8898] __sys_sendmsg+0x269/0x350 [ 180.879174][ T8898] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.879217][ T8898] ? do_sys_openat2+0x17a/0x1d0 [ 180.879274][ T8898] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.879303][ T8898] ? do_syscall_64+0x100/0x230 [ 180.879332][ T8898] ? do_syscall_64+0xb6/0x230 [ 180.879359][ T8898] do_syscall_64+0xf3/0x230 [ 180.879386][ T8898] ? clear_bhb_loop+0x35/0x90 [ 180.879417][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.879445][ T8898] RIP: 0033:0x7fc0ab38cda9 [ 180.879470][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.879486][ T8898] RSP: 002b:00007fc0ac197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.879506][ T8898] RAX: ffffffffffffffda RBX: 00007fc0ab5a6080 RCX: 00007fc0ab38cda9 [ 180.879521][ T8898] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 180.879533][ T8898] RBP: 00007fc0ac197090 R08: 0000000000000000 R09: 0000000000000000 [ 180.879545][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.879558][ T8898] R13: 0000000000000000 R14: 00007fc0ab5a6080 R15: 00007ffce8274f88 [ 180.879588][ T8898] [ 180.884683][ T8897] hsr_slave_0: left promiscuous mode [ 181.129302][ T8903] sctp: [Deprecated]: syz.0.888 (pid 8903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.129302][ T8903] Use struct sctp_sack_info instead [ 181.254593][ T8897] hsr_slave_1: left promiscuous mode [ 181.316086][ T8894] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 181.401944][ T8894] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 181.481469][ T8909] netlink: 'syz.0.888': attribute type 11 has an invalid length. [ 181.490653][ T8914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.893'. [ 181.516791][ T8914] netlink: 'syz.1.893': attribute type 9 has an invalid length. [ 181.558107][ T8914] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.893'. [ 181.692760][ T8917] sctp: [Deprecated]: syz.2.894 (pid 8917) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.692760][ T8917] Use struct sctp_sack_info instead [ 181.735234][ T8917] bridge_slave_1: entered allmulticast mode [ 181.751588][ T8917] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.132053][ T8916] bridge_slave_1: left allmulticast mode [ 182.269216][ T8925] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 182.278613][ T8923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.287100][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 182.344714][ T8927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.495607][ T8931] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 182.507541][ T8931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.900'. [ 182.551428][ T8933] macsec1: entered promiscuous mode [ 182.570328][ T8933] bond0: entered promiscuous mode [ 182.575611][ T8933] macsec1: entered allmulticast mode [ 182.597358][ T8933] bond0: entered allmulticast mode [ 182.609274][ T8933] bond0: left allmulticast mode [ 182.614388][ T8933] bond0: left promiscuous mode [ 182.855425][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 182.992084][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 183.004084][ T8801] Set syz1 is full, maxelem 65536 reached [ 183.215668][ T8952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.371268][ T8956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.479431][ T8961] netlink: 'syz.0.911': attribute type 2 has an invalid length. [ 183.684263][ T8966] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 183.736733][ T8970] netlink: 'syz.2.915': attribute type 4 has an invalid length. [ 183.763186][ T8971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.916'. [ 184.259903][ T8986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.919'. [ 184.418666][ T8991] FAULT_INJECTION: forcing a failure. [ 184.418666][ T8991] name failslab, interval 1, probability 0, space 0, times 0 [ 184.459962][ T8991] CPU: 1 UID: 0 PID: 8991 Comm: syz.4.923 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 184.459994][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 184.460007][ T8991] Call Trace: [ 184.460015][ T8991] [ 184.460023][ T8991] dump_stack_lvl+0x241/0x360 [ 184.460054][ T8991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.460075][ T8991] ? __pfx__printk+0x10/0x10 [ 184.460123][ T8991] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 184.460165][ T8991] ? __pfx___might_resched+0x10/0x10 [ 184.460196][ T8991] should_fail_ex+0x40a/0x550 [ 184.460224][ T8991] should_failslab+0xac/0x100 [ 184.460259][ T8991] kmem_cache_alloc_node_noprof+0x77/0x380 [ 184.460281][ T8991] ? __alloc_skb+0x1c3/0x440 [ 184.460314][ T8991] __alloc_skb+0x1c3/0x440 [ 184.460349][ T8991] ? __pfx___alloc_skb+0x10/0x10 [ 184.460381][ T8991] ? netlink_autobind+0xd6/0x2f0 [ 184.460400][ T8991] ? netlink_autobind+0x2b0/0x2f0 [ 184.460425][ T8991] netlink_sendmsg+0x638/0xcb0 [ 184.460469][ T8991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.460504][ T8991] ? aa_sock_msg_perm+0x91/0x160 [ 184.460536][ T8991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.460565][ T8991] __sock_sendmsg+0x221/0x270 [ 184.460593][ T8991] ____sys_sendmsg+0x52a/0x7e0 [ 184.460633][ T8991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.460662][ T8991] ? __fget_files+0x2a/0x410 [ 184.460686][ T8991] ? __fget_files+0x2a/0x410 [ 184.460724][ T8991] __sys_sendmsg+0x269/0x350 [ 184.460762][ T8991] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.460808][ T8991] ? do_sys_openat2+0x17a/0x1d0 [ 184.460858][ T8991] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 184.460888][ T8991] ? do_syscall_64+0x100/0x230 [ 184.460924][ T8991] ? do_syscall_64+0xb6/0x230 [ 184.460954][ T8991] do_syscall_64+0xf3/0x230 [ 184.460981][ T8991] ? clear_bhb_loop+0x35/0x90 [ 184.461014][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.461042][ T8991] RIP: 0033:0x7fc0ab38cda9 [ 184.461060][ T8991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.461077][ T8991] RSP: 002b:00007fc0ac1b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.461099][ T8991] RAX: ffffffffffffffda RBX: 00007fc0ab5a5fa0 RCX: 00007fc0ab38cda9 [ 184.461115][ T8991] RDX: 0000000000000004 RSI: 0000000020000180 RDI: 0000000000000003 [ 184.461127][ T8991] RBP: 00007fc0ac1b8090 R08: 0000000000000000 R09: 0000000000000000 [ 184.461139][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.461150][ T8991] R13: 0000000000000000 R14: 00007fc0ab5a5fa0 R15: 00007ffce8274f88 [ 184.461180][ T8991] [ 185.241142][ T9012] batman_adv: batadv0: Adding interface: dummy0 [ 185.258361][ T9012] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.293229][ T9012] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 185.308816][ T9014] Cannot find add_set index 2 as target [ 185.334653][ T9015] Cannot find add_set index 2 as target [ 186.148833][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.176295][ T9032] batman_adv: batadv0: Interface deactivated: dummy0 [ 186.279428][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.306682][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.434281][ T9032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.446366][ T9032] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.465484][ T9032] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.477012][ T9032] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.559069][ T9049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.903998][ T9061] xt_bpf: check failed: parse error [ 187.459805][ T9076] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 187.474721][ T9076] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 187.568884][ T9079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.944987][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.4.958'. [ 187.962441][ T9092] netlink: 88 bytes leftover after parsing attributes in process `syz.4.958'. [ 188.084048][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 188.386248][ T9113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.415420][ T9114] x_tables: duplicate underflow at hook 1 [ 188.512569][ T9119] netlink: 104 bytes leftover after parsing attributes in process `syz.0.965'. [ 188.546499][ T9121] FAULT_INJECTION: forcing a failure. [ 188.546499][ T9121] name failslab, interval 1, probability 0, space 0, times 0 [ 188.593969][ T9121] CPU: 1 UID: 0 PID: 9121 Comm: syz.3.968 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 188.593999][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 188.594012][ T9121] Call Trace: [ 188.594019][ T9121] [ 188.594028][ T9121] dump_stack_lvl+0x241/0x360 [ 188.594058][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.594079][ T9121] ? __pfx__printk+0x10/0x10 [ 188.594113][ T9121] ? kmem_cache_alloc_noprof+0x48/0x380 [ 188.594136][ T9121] ? __pfx___might_resched+0x10/0x10 [ 188.594168][ T9121] should_fail_ex+0x40a/0x550 [ 188.594197][ T9121] should_failslab+0xac/0x100 [ 188.594231][ T9121] ? __kernfs_new_node+0xd8/0x870 [ 188.594250][ T9121] kmem_cache_alloc_noprof+0x70/0x380 [ 188.594279][ T9121] __kernfs_new_node+0xd8/0x870 [ 188.594304][ T9121] ? mark_lock+0x9a/0x360 [ 188.594335][ T9121] ? __pfx___kernfs_new_node+0x10/0x10 [ 188.594355][ T9121] ? __lock_acquire+0x1397/0x2100 [ 188.594402][ T9121] kernfs_new_node+0x137/0x240 [ 188.594440][ T9121] __kernfs_create_file+0x49/0x2e0 [ 188.594482][ T9121] sysfs_add_file_mode_ns+0x24a/0x310 [ 188.594518][ T9121] internal_create_group+0x782/0x12d0 [ 188.594563][ T9121] ? __pfx_up_write+0x10/0x10 [ 188.594584][ T9121] ? __pfx_internal_create_group+0x10/0x10 [ 188.594630][ T9121] sysfs_create_groups+0x56/0x120 [ 188.594663][ T9121] device_add_attrs+0xe5/0x600 [ 188.594699][ T9121] ? __pfx_device_add_attrs+0x10/0x10 [ 188.594741][ T9121] device_add+0x576/0xbf0 [ 188.594773][ T9121] ? device_initialize+0x266/0x460 [ 188.594808][ T9121] netdev_register_kobject+0x157/0x2e0 [ 188.594841][ T9121] register_netdevice+0x12c3/0x1b10 [ 188.594891][ T9121] ? __pfx_register_netdevice+0x10/0x10 [ 188.594925][ T9121] ? macvlan_changelink_sources+0x13aa/0x1740 [ 188.594966][ T9121] macvlan_common_newlink+0x1189/0x1930 [ 188.594989][ T9121] ? sized_strscpy+0x9a/0x2b0 [ 188.595031][ T9121] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 188.595057][ T9121] ? rtnl_create_link+0x91c/0xc20 [ 188.595090][ T9121] ? __pfx_macvlan_newlink+0x10/0x10 [ 188.595120][ T9121] rtnl_newlink_create+0x2ee/0xa40 [ 188.595158][ T9121] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 188.595193][ T9121] ? ns_capable+0x8a/0xf0 [ 188.595220][ T9121] rtnl_newlink+0x1c7e/0x2210 [ 188.595262][ T9121] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.595286][ T9121] ? __pfx_validate_chain+0x10/0x10 [ 188.595330][ T9121] ? validate_chain+0x11e/0x5920 [ 188.595349][ T9121] ? __pfx_lock_acquire+0x10/0x10 [ 188.595382][ T9121] ? __pfx_lock_release+0x10/0x10 [ 188.595413][ T9121] ? __pfx_validate_chain+0x10/0x10 [ 188.595436][ T9121] ? mark_lock+0x9a/0x360 [ 188.595479][ T9121] ? __lock_acquire+0x1397/0x2100 [ 188.595545][ T9121] ? __pfx_lock_release+0x10/0x10 [ 188.595590][ T9121] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.595616][ T9121] rtnetlink_rcv_msg+0x791/0xcf0 [ 188.595639][ T9121] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 188.595663][ T9121] ? __lock_acquire+0x1397/0x2100 [ 188.595692][ T9121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.595736][ T9121] netlink_rcv_skb+0x1e3/0x430 [ 188.595770][ T9121] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.595796][ T9121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.595855][ T9121] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.595889][ T9121] netlink_unicast+0x7f6/0x990 [ 188.595928][ T9121] ? __pfx_netlink_unicast+0x10/0x10 [ 188.595954][ T9121] ? __virt_addr_valid+0x45f/0x530 [ 188.595986][ T9121] ? __phys_addr_symbol+0x2f/0x70 [ 188.596016][ T9121] ? __check_object_size+0x47a/0x730 [ 188.596055][ T9121] netlink_sendmsg+0x8e4/0xcb0 [ 188.596100][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.596138][ T9121] ? aa_sock_msg_perm+0x91/0x160 [ 188.596172][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.596203][ T9121] __sock_sendmsg+0x221/0x270 [ 188.596231][ T9121] ____sys_sendmsg+0x52a/0x7e0 [ 188.596274][ T9121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.596303][ T9121] ? __fget_files+0x2a/0x410 [ 188.596329][ T9121] ? __fget_files+0x2a/0x410 [ 188.596361][ T9121] __sys_sendmsg+0x269/0x350 [ 188.596399][ T9121] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.596456][ T9121] ? do_sys_openat2+0x17a/0x1d0 [ 188.596509][ T9121] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.596541][ T9121] ? do_syscall_64+0x100/0x230 [ 188.596572][ T9121] ? do_syscall_64+0xb6/0x230 [ 188.596602][ T9121] do_syscall_64+0xf3/0x230 [ 188.596629][ T9121] ? clear_bhb_loop+0x35/0x90 [ 188.596663][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.596689][ T9121] RIP: 0033:0x7f5cb258cda9 [ 188.596708][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.596725][ T9121] RSP: 002b:00007f5cb03f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.596747][ T9121] RAX: ffffffffffffffda RBX: 00007f5cb27a5fa0 RCX: 00007f5cb258cda9 [ 188.596762][ T9121] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 188.596774][ T9121] RBP: 00007f5cb03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.596786][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.596798][ T9121] R13: 0000000000000000 R14: 00007f5cb27a5fa0 R15: 00007ffe0b3f6828 [ 188.596831][ T9121] [ 189.330187][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 189.813889][ T9158] sctp: [Deprecated]: syz.0.977 (pid 9158) Use of int in max_burst socket option deprecated. [ 189.813889][ T9158] Use struct sctp_assoc_value instead [ 189.827428][ T9157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.412091][ T9171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 190.533152][ T9164] batadv0: entered promiscuous mode [ 190.552608][ T9164] macvtap1: entered promiscuous mode [ 190.571826][ T9164] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 190.599128][ T9164] batadv0: left promiscuous mode [ 190.840188][ T9182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'. [ 191.031390][ T9190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.084174][ T9194] macvtap1: entered promiscuous mode [ 191.094742][ T9194] batadv0: entered promiscuous mode [ 191.101721][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 191.106687][ T9194] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 191.118192][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 191.131634][ T9194] batadv0: left promiscuous mode [ 192.151254][ T9231] tipc: Enabling of bearer rejected, failed to enable media [ 192.188771][ T9220] ebtables: ebtables: counters copy to user failed while replacing table [ 192.198459][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 192.376906][ T9239] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.622473][ T9246] team0: Mode "llance" not found [ 192.819468][ T9263] IPVS: Unknown mcast interface: veth°ñ [ 193.747508][ T9282] __nla_validate_parse: 3 callbacks suppressed [ 193.747529][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1020'. [ 193.792124][ T9284] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 194.069928][ T5890] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN PTI [ 194.082571][ T5890] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 194.091004][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: kworker/0:4 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 194.101416][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 194.111476][ T5890] Workqueue: mld mld_ifc_work [ 194.116162][ T5890] RIP: 0010:neigh_resolve_output+0x153/0x740 [ 194.122168][ T5890] Code: 48 c1 e8 03 48 89 44 24 28 80 3c 28 00 74 08 48 89 df e8 a0 25 64 f8 48 89 5c 24 30 48 8b 1b 48 83 c3 10 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 7f 25 64 f8 48 83 3b 00 74 6d 4d 8d [ 194.141994][ T5890] RSP: 0018:ffffc9000446f590 EFLAGS: 00010202 [ 194.148099][ T5890] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff888046e75a00 [ 194.156098][ T5890] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 194.164091][ T5890] RBP: dffffc0000000000 R08: ffffffff89c1db9d R09: 1ffffffff285ed1b [ 194.172093][ T5890] R10: dffffc0000000000 R11: ffffffff89c1dab0 R12: ffff888059a15028 [ 194.180069][ T5890] R13: ffff88807d9b2800 R14: ffff888059ae6b40 R15: ffff88807d9b2930 [ 194.188059][ T5890] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 194.197051][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.203655][ T5890] CR2: 00007f00d2f12be0 CR3: 00000000639f0000 CR4: 00000000003526f0 [ 194.211658][ T5890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.219633][ T5890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.227608][ T5890] Call Trace: [ 194.230931][ T5890] [ 194.233884][ T5890] ? __die_body+0x5f/0xb0 [ 194.238258][ T5890] ? die_addr+0xb0/0xe0 [ 194.242441][ T5890] ? exc_general_protection+0x3dd/0x5d0 [ 194.248014][ T5890] ? asm_exc_general_protection+0x26/0x30 [ 194.253759][ T5890] ? __pfx_neigh_resolve_output+0x10/0x10 [ 194.259483][ T5890] ? neigh_resolve_output+0xed/0x740 [ 194.264774][ T5890] ? neigh_resolve_output+0x153/0x740 [ 194.270181][ T5890] ip6_finish_output2+0x12ad/0x1780 [ 194.275414][ T5890] ? ip6_finish_output2+0x61d/0x1780 [ 194.280717][ T5890] ? __pfx_ip6_finish_output2+0x10/0x10 [ 194.286293][ T5890] ? ip6_mtu+0x81/0x3f0 [ 194.290477][ T5890] ip6_finish_output+0x41e/0x840 [ 194.295431][ T5890] NF_HOOK+0x9e/0x430 [ 194.299414][ T5890] ? NF_HOOK+0xfa/0x430 [ 194.303599][ T5890] ? __pfx_NF_HOOK+0x10/0x10 [ 194.308210][ T5890] ? __pfx_dst_output+0x10/0x10 [ 194.313081][ T5890] ? icmp6_dst_alloc+0x3aa/0x420 [ 194.318041][ T5890] mld_sendpack+0x843/0xdb0 [ 194.322568][ T5890] ? __pfx_mld_newpack+0x10/0x10 [ 194.327530][ T5890] ? mld_sendpack+0x1e8/0xdb0 [ 194.332228][ T5890] ? __pfx_mld_sendpack+0x10/0x10 [ 194.337300][ T5890] mld_ifc_work+0x7d9/0xd90 [ 194.341808][ T5890] ? process_scheduled_works+0x976/0x1840 [ 194.347536][ T5890] process_scheduled_works+0xa66/0x1840 [ 194.353104][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.359096][ T5890] ? assign_work+0x364/0x3d0 [ 194.363695][ T5890] worker_thread+0x870/0xd30 [ 194.368303][ T5890] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.374226][ T5890] ? __kthread_parkme+0x169/0x1d0 [ 194.379257][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 194.384385][ T5890] kthread+0x7a9/0x920 [ 194.388480][ T5890] ? __pfx_kthread+0x10/0x10 [ 194.393094][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 194.398253][ T5890] ? __pfx_kthread+0x10/0x10 [ 194.402878][ T5890] ? __pfx_kthread+0x10/0x10 [ 194.407519][ T5890] ? __pfx_kthread+0x10/0x10 [ 194.412154][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.417397][ T5890] ? lockdep_hardirqs_on+0x99/0x150 [ 194.422632][ T5890] ? __pfx_kthread+0x10/0x10 [ 194.427265][ T5890] ret_from_fork+0x4b/0x80 [ 194.431722][ T5890] ? __pfx_kthread+0x10/0x10 [ 194.436335][ T5890] ret_from_fork_asm+0x1a/0x30 [ 194.441123][ T5890] [ 194.444154][ T5890] Modules linked in: [ 194.448825][ T5890] ---[ end trace 0000000000000000 ]--- [ 194.456150][ T5890] RIP: 0010:neigh_resolve_output+0x153/0x740 [ 194.463246][ T5890] Code: 48 c1 e8 03 48 89 44 24 28 80 3c 28 00 74 08 48 89 df e8 a0 25 64 f8 48 89 5c 24 30 48 8b 1b 48 83 c3 10 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 7f 25 64 f8 48 83 3b 00 74 6d 4d 8d [ 194.483488][ T5890] RSP: 0018:ffffc9000446f590 EFLAGS: 00010202 [ 194.490044][ T5890] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff888046e75a00 [ 194.498445][ T5890] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 194.506529][ T5890] RBP: dffffc0000000000 R08: ffffffff89c1db9d R09: 1ffffffff285ed1b [ 194.515026][ T5890] R10: dffffc0000000000 R11: ffffffff89c1dab0 R12: ffff888059a15028 [ 194.523656][ T5890] R13: ffff88807d9b2800 R14: ffff888059ae6b40 R15: ffff88807d9b2930 [ 194.532056][ T5890] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 194.541684][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.548909][ T5890] CR2: 00007f9871d9df98 CR3: 000000005eb16000 CR4: 00000000003526f0 [ 194.556930][ T5890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.565487][ T5890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.577104][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.578977][ T5890] Kernel panic - not syncing: Fatal exception [ 194.583616][ T5890] Kernel Offset: disabled