last executing test programs: 3.264370451s ago: executing program 3 (id=903): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 2.985635651s ago: executing program 3 (id=906): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b000000000000071200000000000000"], 0x30}, 0x0) 2.605678229s ago: executing program 1 (id=912): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x14, 0x32, 0x200, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x4040854}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x20000004) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1e0022000000000000000000000000ac1414aa0000000000000000000000000000000000010000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d432000000ac141400000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000da0400000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000001000000000000000000000000000feffffff010000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 2.46861959s ago: executing program 3 (id=913): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001"], 0xe0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.283919751s ago: executing program 2 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xffffff4a}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) listen(r2, 0x5) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844) r3 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400ca081a9bda97c937b442cb5e19c94f0700000000000000000000000000000000001400030073"], 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001006269747769736500080002"], 0xe0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'caif0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 2.274085189s ago: executing program 1 (id=917): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffff9c6404800000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004a000301b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761051ce540c772e201b2de17dfdb5b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e015064716897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03440eafe1c8660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) 2.059063703s ago: executing program 0 (id=918): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[], 0xfe33) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xe, &(0x7f00000002c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4840}, 0x4010) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070600000000000000002d0000000c000500000000000000000008002f000000140005002b00427b00000a0001007770616e3100000005002e"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f080000004801001010da904d19002b000a0001000500000000000072080003002000000000", 0x39}], 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) pipe(&(0x7f0000000440)) 2.058822425s ago: executing program 1 (id=919): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) socket(0x1, 0x803, 0x0) unshare(0x44040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x280, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x280, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xd], 0x3, 0xdab9f66e79d89cfe}, {0x1, [0x0, 0x4, 0x2, 0x0, 0x5, 0x2], 0x1}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x410) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000000)={'vcan0\x00'}) socket$inet6(0xa, 0x80002, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1.946173378s ago: executing program 4 (id=920): syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x1000, 0x60, &(0x7f00000015c0)="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", &(0x7f00000000c0)=""/96, 0x3, 0x0, 0xb9, 0x2c, &(0x7f0000000140)="86b6902928fc523a1c993de4c2640755e58eec36c292074fff539e2d4be882c642cbd403054f5344c750aaf17bf5002654fe50f35297c588795e47f15d89243baefe6eb3b9dc8abd0b94b4609494df502bf1245a4732e8de490d83734361ec4fb7ac365d23f4a1dbb0ad797aee3da02cb76cf39276301a9b462cf287a82d8374126d56052905579a6b0102affbeaf6fdc0e315ed3d7613a3ac4d7b7a9d455a6acbe10bb877f3a71bda70562d956801ebdcd269e1758f569b3c", &(0x7f0000000300)="0a34e05a13c0b74485911424e75ffaa1ef97397365e755ef285d24dfafa0f580b604369a6e9086ca3aa84209", 0x0, 0x0, 0x200}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) write$cgroup_pid(r2, &(0x7f00000000c0)=r3, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a4000000010201010000000000000000030000070800044000000002080004400000000108000d40000000e20600074000020000540001800c009280050001003a0000002c00018014000300fe80000000000000000000000000000100000000000100000000000000000000000000010600034000000000060003400002000006000340000a000b00512e3933310000000800044000007ea908000b00736970009d08d257cb0e4187102884c4f83cccf3adca61ad0a24e334030bc2e0fbb030c23f50013b7148ee5c345dd8050f3c4408659d4b585cffa270420e48b2d2d4dc3a75fe73637bf5919a0a119a91acf292571afb8d0c929c8b05de64ea26d30f072d3b5f5e1856e1509d5dce7d99020731"], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="621600541aa3c8c4ce6f196613fb1f3d7bdeb827", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) (async) socket(0x1, 0x803, 0x0) 1.94481056s ago: executing program 3 (id=921): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001"], 0xe0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) (fail_nth: 8) 1.931210677s ago: executing program 2 (id=922): epoll_create(0x5) (async) r0 = epoll_create(0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xd5e93709d453f02a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xd5e93709d453f02a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000012}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000012}) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x8000) r8 = socket(0x10, 0x3, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, 0x0, 0x0) sendmmsg$sock(r9, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601820000000000000000720e000905000100070000009d2081ae04a0a6af1c68ecb0689caca15a8b3199d8c73cbd"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040601820000000000000000720e000905000100070000009d2081ae04a0a6af1c68ecb0689caca15a8b3199d8c73cbd"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r10, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r10, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) 1.811191082s ago: executing program 0 (id=923): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b000000000000071200000000000000"], 0x30}, 0x0) 1.683656153s ago: executing program 4 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffffffffffd40, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x7, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xb8}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2b}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x39}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x18}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1.651039338s ago: executing program 0 (id=925): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a80a100", @ANYRES32=r2, @ANYBLOB="14000200ff"], 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.64846841s ago: executing program 2 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$netlink(0x10, 0x3, 0x8) accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000800) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000400)) r4 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0x2, 0x2004000c, &(0x7f00000003c0)={0x2, 0x4e20, @multicast2}, 0xfee4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000240)=0x4) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x6}, 0x0, {0x2, 0x0, @local}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r8}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)}}], 0x2, 0x4048010) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000280)) 1.302898247s ago: executing program 3 (id=927): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.196106509s ago: executing program 2 (id=928): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x8}, 0x8) 1.132032091s ago: executing program 4 (id=929): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="aa000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800020005000000"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) 1.075183036s ago: executing program 1 (id=930): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x25, 0x0, &(0x7f0000000900)) (async) r1 = socket(0x2, 0x3, 0x5) setsockopt(r1, 0xff, 0x1, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x400448c9, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) (async, rerun: 64) recvmsg(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000280)=""/139, 0x8b}, {&(0x7f0000000340)=""/54, 0x36}], 0x6, &(0x7f0000000500)=""/142, 0x8e}, 0x10000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.048568843s ago: executing program 4 (id=931): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0xfffffcad) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYBLOB="055b7d"], 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000f70000000000bb08000100"], 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x26c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23b42394}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fdcfc07}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x132cb458}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x573a3fe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d5dd851}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f515e47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x739e752c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69a1e291}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1b4, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x427bf626}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78f182b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17c9d49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18397e89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f37ff97}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3182bbc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46bcc8f7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d29b68f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b802167}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60801604}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7458bfca}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11d14761}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5761bfa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dc5466b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d2fdb1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f93a0fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d9a5f5c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bb009fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74586001}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dedb271}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d82924d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f41720d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17fb81b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7876a086}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e4277d3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c55dd44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47dd2d81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf84559b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69ded2ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a2f53f0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35beeb40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x454ad67}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x78}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x19a, &(0x7f0000000480)='cgrouj\x00\xc6\xbfQf\xf6\xcf\x81\xf8\x1b\xf8\xcf\xd0\xdb^\t\x82=\x8f\t\xf4yY\x111]\xca\xe5\x18\x18\xc3\x9d\x9fu\f5\xe1\xfb\xa7u\xa9\x80\xefbD\xa4\xa4\x00\xc1\xa9\xe7\xa4\x8c\x97P7\xfd\xd5tY\x86\x96\xb4\a\x90\x1d$\xbe$\x9d\x03\xb0R\xda\x183\x9d\xe3,~\x9e\x9c\xf9OYe\x9f&\x8fs\xb2gj\x01/F\xbc\xb8E\xba\xce\xbbJ\xc1d\x1e9\x16\x1bn\x86=\xe6}$\xb1?\xdcj\xcb\\\xc6\xb4\x7f\xef\x01\x17;\xf3\xb3\x00\xb5\xd94\xe7\xb5\xad~\x80z\xc1c\xa9H\xea\x03Y\xd3\xa9\xbd6)}\xb4G\xdb\xf9\xcee\x98\xd3V\xa0\xdf\xf0[\xe2\x12\x85\xd2\x87\x8e\x0fv\x8b\xcd\xb4\xd4.\x0eY\xd2\xcf{\xe7\xf9\xccx\xb3\x18\xee\xcaC{\xd8j\xb6*\x04\xaf,\x0e\x7f\x1d\xb4\x96n=\xff\xfakhs`0\xdc\x88\x83\xdd(T\xf4\xcf\x17\xfeSzd\n\x7f\xc4\x83\xa3\x1ae\xb9_\x05\\f\x9ahf\xfe\x91\xb0t\x1c2\xe0\x88\x88\x88\x9cs&l\xbe\a\xf3\x7fN\x11*\x12\x17\x1a\xb3^\xbe|\xa5H\xf9\xc2TQ\xac\x8e\xdc\xed\xe1^\x97\x95z\x02\xd8\xf5]B\x9eB\x13\xc7\xe6\xb25\xf3\x94p\xe6\x88\x9f\xe0@\xd2\xd2mEt\"\xc4M+wv\xca~\x87x\xcez!\x05\x00\xa6\x12Pd\xb1\xc8\xd0\xbb\n\x1e\x80\x91\x88\x99Kc\x1dn&\x1c\xef[\xe5\n\x9c\xe1\xde\x02\xd8\x89\xdd\xd3?pQ\xfc\xd8\xfdD\x039\x01M8\xa5\x9d@G\xc8\x98O\xfd\xfb\xb76\xd3\xa7\x82I\x16M\xa5\xaci\xb5\xe6\x17\x81\xef\"\xd21\xfd\xdd\xd3\xcd\x17\x06'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000340)=[{r0, 0x3028}, {r11, 0x1000}, {r3, 0x11c}, {r1}, {r9, 0x200}, {r2, 0x42}, {r0, 0x80}, {r8, 0x3400}, {r1, 0x401}, {r1, 0x501a}], 0xa, 0x6) write$cgroup_subtree(r10, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 978.044297ms ago: executing program 2 (id=932): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001006269747769736500080002"], 0xe0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 930.397627ms ago: executing program 0 (id=933): r0 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001"], 0xe0}}, 0x20000000) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8005}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0400000000000000000000000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x40, 0x30, 0x1, 0x9cc}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}, [0x9, 0x1, 0xa474, 0x8, 0x5, 0x6, 0xd771, 0x2, 0x1, 0x41, 0x401, 0x7fffffffffffffff, 0x9, 0x9, 0x7]}, &(0x7f0000000340)=0x100) 928.831706ms ago: executing program 3 (id=934): r0 = socket$inet(0x2, 0x2, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f00000004c0)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xb, 0x10, 0x100000001, 0x4}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0xebd6, @private0, 0x8}}, 0x401, 0x2, 0x2, 0xec8, 0x7f}, &(0x7f0000000080)=0x98) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x8000000001ba81, 0xfffffd1a) writev(r3, 0x0, 0x0) write$tun(r3, 0x0, 0x5e) 787.040042ms ago: executing program 1 (id=935): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="181d3384e7a80293009500000000f4ff00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) r11 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002a80)={0x23f4, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x23e3, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @nested={0x22e3, 0x11c, 0x0, 0x1, [@nested={0x20, 0x8f, 0x0, 0x1, [@typed={0xc, 0x133, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x14, 0x0, 0x0, @u32}, @typed={0x8, 0x7c, 0x0, 0x0, @pid}]}, @nested={0x3a, 0x106, 0x0, 0x1, [@nested={0x4, 0xb1}, @nested={0x4, 0xb4}, @generic="2c71816d7d0d04d51a8fad8a71e00620f2fa404140b82def0f9b1ac0ea71990412f2", @nested={0x4, 0xbe}, @typed={0x5, 0x56, 0x0, 0x0, @str='\x00'}]}, @generic="a6937616e1344c828e10ae9be68fc35d91dd77a604ec8100a00eeff404472642fd476b4ee97334df38626c97133d5add343e038061ae2c41a0513ee88fec02f37d94e9d86a7dfa10901fb82849eb06c7aca696cf5864a46f109cb694528ad177e4e47c9b627b69cb0925746b9a2014fa0656274989095f31ec65eb34712185f8236ff0aa7cf842063c43c40ceb89decdadba4a3f0d514a6ff55ad9ecc4f1063f15077d534e2069d3897681734ae2bdb8294685fe41b66105aa430d26d759bd94f9c0c998479b8fb15edd3b35f30bce37ef9ef3fcaa7c0f250755721c82cd97450c340fbd58dd6a2edbd58068329cc515ade6ee0de5ba686ab5fee8a9b135a2bb2bc663193d111fa403391ec40c188c1df0d6aff521b1e44d13c7837a2643d1c173d0723af1d7e71ea13bd4e554daf4aec486bf20c8087e7ae3a85983f84cbdc7144df9026ddb9514729d45b5f891cd39f0ce309b667d64b60598e32298f85543ebf893e298f883d897004e05fd5a091d80ba4c03b4d77783961de6aff28e57fa70e5072b907786257aaa7762062f52388e2abe10cce73a666e44d1be9ea0488f91f67dde268748c013e5682df648de3a8e9af69390cfdebd43c53f42e19ab55ee527393e382a4b0ead96e4648765f6f789d224f75f0133e648c0303bcb36e184540c1d752c5d898dc5a97b97370232b289e01412bb577949dbc7d11b0b4b0416efa86d442d7bdb64ac8f35dac5578ac2e1fe30371a1593bfb8b30c41f07e99fa9bfddb8410b15f6ebff4cea46c218313022cfe61498cf2a70912d5d9f7464c741cd5988bec0d745ab3c2b2d9e7b053dfb8500e8eaa612abf3b8468ba8d2b5473cd67e512cfb300f2c7b433c9b25b56e620629f98cf19f823e786f5524c249c0764ec093676e9b7afe502b4f9ec4c6c8c39746669dabcb82676b992074e0822d0cc7803298ec6f7ca85276d1aaaa568f43528c5d542cbf7595cca7abab8c8c0c21e0a35590ff99be7e2b730d962f695bcb40d71c247985b387498cb56850c5d19677a7ca0efa2076f290dcd1bc4a9048f3e9f4b2bc677cc7fe89e953f883d4247b907346232252b02bf5d3a1cfdc8042d5c75a6aefb8e8085a8b9b60c3383eb8382ab9677d2aac6f19cf4e9004dbfb589988ffa86011fd667c4311150710467904712e9563fb4bbce7c897b0875bd5cf95b0be27d4554782a599c6b630f8a6c7fa61b694ba0ca052ef95a4874d21a49444a7c5c06c3b30014ba4a2e5a0c831dc9b7929d9070b638995fbb6b492d40d2608e240cd13ef5639a573f85ac45aa1380da3277d3446fd12bc4bc6e8a981c42129ffd1369a6f27dfc63684a0512ffe853edc90a5ecdc6a38e59abcf7714c1e5407d6b0eea30867d3105c8672268baf105a2bc380139cebdd6e2ebfad185d844eb44258a49872a0876b4fbcc6bbc0c389586bc7d72b30f38e06450cc8c876678d0e1b09ac43110e26ec8ffa01bb7b326ea5495b3dfd9469d2d1b8d1e3d712a7a7556a6a2f57806900fb2cd2fb4362f430a95b60426e38bad9b103fc84853a3b6f1715c24a5aeb8fd97954ea5865379d44ca2c85010f821b924b98e7631ba994c4d7dd65383613389bee1069c38f26c14e44226016db72322c00888ee9b7b90971ff5b5f4e61c625e41ac3595639079b4ef3526aff9deb350175d09196d5d9989cbd1e8c021356f2f0caf2c76fcb5ec8f0f79840fe31da6e444b09631fc6068e509b68c61d978c6e98b144ffe1b9cb1c94a2d86a185d4e7356333b9c1546fd4462a79082513bef2f5348f74f249daa8a81163474e19107ff58d9d2115761124016ebd4b91c03daa6894aadf0b8454482896db1709a9beccf8c426f9d903124d6fdaf7c658fb77347e11c6e6e3a349cf43e1efd34792977f75ba1c7fe9f45e3bbf82a9e1e1cb9eb00a963aa67e508695eb70f8a5bf57cad9bbbdf4cf6ba24f58a731c249774b9f79a661de6f9aaab4a61dcff9134d262d272526b2cb06e9f7a7f5ad733cac038c8d8ae6f119d8609fe321df32df0b339bd831dbcb273d0a20ed730ffa18a3f54e56dda9b3c96d28f8c9182fe73a3461ec3b9d2967f8a04917fe31da8cd68ad3961eba9e8fdff03e807d329c9b531cd290b06049477f982b5b6e11576e3a57e07a37828ca3b96607fe8255215cf0dc6a838f1db9f0fefe8b651cbb480e77b1f50b8d7c58f5e8272775f978ee38c8a95f86e138c2407a561f463a89a602ea023a2f3cfefd8c8e1c42bd0352119630c791ca350a61fdc0b7697b8eba87077a1ccfbda0f62ab5e9eaa50196d1453e275394dbd6906fe6063206b7fe66cc21926af167ac4883bc94eb23557542fcc7752850913ca6c2eefcad0cd42f1b73759c09c62cbe37d7f3e27f3c193bb18b637863908e3a289a25ba612b0456d4923b5785b9ec986fc62a70ae9184f43915d84a289c16077b96372afa28c2441796063abe959575f97f2f033192b52ce373008d4442f6b9dec2277e7a6ccf179d2852903a3935eff20c7edce228a5105e477e1e333693cb4fe096bc26c3a1884d26091d1211d9b29ccde667fab477f52c34cc1d5ace9bf0d22dee27e588905b022e7a99a22125706c4c113e95f2d01084b62ca36fd622659f31b74ee28b17042dcc1abc448683bf699ad5f00a921224a01ecf56932c4eb32d944cca5ffbc902058e91d0e7903e436b3b4ef28b874ee09542e42a3c29be60716e7d9697fe70c5503ac21f71a085104e6ca8d2a0f7db18110b46bd2ea145a1785456dcd6dd78d8be5b6c4443014099d06340a40be7c1efc6cc38fbae5093a75564969613fdea2b26fb5e5096c815bd695a06d2d5aecedf1410a95360ecbdba9bac4a35ed293aabd956afad91d1cf809fcfdbffde1a4ff0f7cf085dc4d51166cabe34bce703151820595f2214818d707403a904e51e8db9b835613e7efe4d77db03c586b112b3a8cfb80b57f0f1ec568f610cdf666606c3f89e82966c33d285b9b3cca969f161e267f3f08483ea0ea5f242ea1d55e10d6c2589bdf626c715a1795a98d37b6faecd6cae95804b9fbaca0b237c73f2d5f542f03e573a2f6d727705abb5a511d1c1d786972ce6656c65bc5efdfc99d85501c3d7e76a8ab13bd68f714b2d603c1b8696a01886638cec413bcc2d3d4181d874491efc82bfd91fd8d109b76973abc2e627bce75fa2ec16fcdb2b12f882ba69732d27ed7187a02704bc7f5856b4dfaadeea5389adb2198caaf4928e8eca720764ec363dcf133d1f0bf81bc58a3d2ae370238332268d17b06e812df52fe34e6bf74f2ef8a488be2b890807ac2ea32ca763a550bf6f20d4137446f60a07f619673e961cd0464f9ae6aaca19b6e0874b367ea3eb4a2ebcd0a122c592388faed20f02bf2ae61224ba16b55e8588ff10e1f66a5b932fa6d0080079b26e5fc29388f265db0239ccf04fe68f8cf7fa4a62fb8230f7706bd8fa5c54dddec316e94b98e2e2468eb23a9cbd88d105ed164cdf25ef5a2f8ff1a4af1034fb4029463b38f24e4026b46f6e1a8fdb9f6ed018f79c3d4bda7ad8afcc6a501862430d57a9f4fbf9a37b6aa0129ccbaa776e4aa8a890802a2fc467ea0ce22825375228282bf6abbbc3eff69a47db545f2e2348e86a65a8eadf2247a28213147db9db5b5c6a9525ebd237efbb2ed5ddaa58c3e5c38b42e138971d4a8d483a50d4e8f3620e7e0352fa8777b6f912d00d92ce0ff2413ff41f541217edcb7dd72069674a9af5b5bfa19a277573f3a8f392e107ec83c7f477b1e8282219890826a547872a612e8de42f6eb02290f56e25cf557755b634e673a53b9b35930d91bde13b3d1fee04dab1c802452996f302442d2fda97928fc0533dfac5493a7e36be86cc2dc447d833a1c0335c7fb94ce8ca7626d6749ac11ab7a7a11bacd54af0b9b949a5ab914c8bea72328dcbb82feafcd7c28f68eec2fdbbc6bdd12912968778083167d56b464281e582ee06acd274bd1efeb5a99e56896712315163087cfdd3c8959bfa50862aec3d1d33fe1fca625b32ed4fc292c5d015580b138f1e4f5e1aebda8684d6de4646ac5465bf0bbc14e9615590684bb9c25eae30e5da0163ac2c5db886609e800cb2fb84404855bddfbaf72c62820f2532e0a212beaaa89a81bfa4006334e2b2aa43e2a937561bbd12c7512f508ed68fd1b98b931400e100154239439c6e5fbd2affdae3d2b705d95d2ba48c0656d5ce8b25e746a53173c5afd2e54ff46ccf223e93633fbaef304ca2f1d53c2ab24d47e914982a8ef0af5f1df1cbefd845d45c54a2a90d7d1de6a13a40a049d69da6dcaf876ca22afe3790294750b5a1527fd80e969da8035fdc4d324500da3655ebb82667703fb17df8508185f2193fdeefda8e7cb6525706d376978dae68036b134822673718980badec34b27394305c1a3cbacb0efc877d3031eb29c56248d02c7f6ec770db19cca9179f3d0f99a8b99076b06e19711fdb75483f008c8bdbcf4909e6b49cdba788ebd7d0f438b007bedf7abb58cc7549ad66d66f5f6afcc448f86ef58b7b79c782e364f7639b3a22b39d559324b4120acafaf4d023d507538eb09fb24a54ecfbbf8382b07e950bd6a14c8b8e2dc00ebc19251bb842b4ec3c7834c499f07b8b62d379387248395c668be0da2b1983484d1fe51d85ec4742458e79bad0fade4542102b775f1c7cde68c5a2808e7789b2cbc0f139d556762a4c33e23f2c4c9063f23ddd130bb9112d9e7e2d1f59e69acdbf6acae01af7abc98dd9a00a91361dd1ff2d51c43051d7541395b89e339499c5e3513b98e80b7502fc1f1f17f78088e0259914b7a9f45b2c38b4176f0053495ee1c59f1ed5bd3cc44246101adec29f6bd52858721c079528862c5574f523d2cfdac6524d3202e187739a84af8f1363e00468fcc4f05b3af1809a263fb4a1e0e139d23ef84d59b92ca36d6c5fb3425599ed0c2da7212edb5c68f10fbc51adce9435507c623da7aaf88ee6c67e6c303f7eb964b3a6db5c4217211e2bde077b9ab2e27d908cffc47789eb3d1bb293b6ac97492f20fb60be2fe3b1a54ca4baaaddb0fd47ea88a303a882353e942ea675be2fe33f86a10bbaa66b971b5521d28f8b4a5322898004e0f63bdfebc51734f11129bd6ecae7d2e5e7840e6136f5ad3a439befe5ce8c04d19aadf2ba7267269f37c4c31ae265df39c117557cf72dae95298c3f02e747fda9ce9281246c3dd77193fbdcd91520a3c8d67ba332219e969414f772a99eefffca709994997578db2d3b6adb88b38600a69711e48dd63e7a9d0feb5d3499e8edb6bd83c1ad199506257dfaaee2eadd365cf361e634e41ccecdb4757562546da7aeb9b62bb2faf570ee89751c20284d567558b2b66d6081d738a6892c1f3a2306465906601a8c206a82f56135c6e187ef9bfe9a3c8893afd648c9b6624424f11f35c682726144feee0e97d97080ca9b07380e7f2481c9225b67847a48085a3fe3c0a7e2e3cbdfee114d1bee1dcc5bfcc83d3d5dc7c0c6f130b73a5e49a38c4fd319282c12881c07ef8b8086ab1b5d2da880b00372943b00dfb0520385b554b7bc56630d4a38bb247a3ef81cc91d15f3000fd76d11af43c624713e5265a7ba30184e916455433cb2d5b4661424c36dcf40d61f842f4d38a80d75f21fbb16209b9276a9943003a5cebf037e358572ec43dc49e2f637d81d1ae84f835ebf4d00bf9b722135a8f64ec2df6d38899dcdd471753dd740e38126f01943bd633c6f6e5b4f38fdcb4d3a1def953b19aaf129e32b7e4037daa1875941c24b632e3473bf2e", @generic="a107a9e847f22be2b6c390eb461ffa912e74821d96acbda2cd29ede30743b1309d66ea0036529be53ddefcaf359b25d7c8010faae66aab00fd6bae585ac040c7289ae37259a7dc4f848e699fed0e03fddad15f2cd6b2cd3c7dcd95a300315103e54106c2e2759ddf35420b565f7162c2fb29a05a8eb406894b3f539e1ad3f64ab659d6c677b8359bfcc1308e8d1600d2a0c58c39e9ec194f56f9f34f72a1db84113ea1b45e48453ab63a9d7b00d4538dff1028315363e88fbd386cb9eaedaadb641aa416f48b7c", @nested={0x147, 0xcf, 0x0, 0x1, [@typed={0xc, 0x106, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x47}, @generic="01e749e1582479988da52677df8b11d1e13cc3f987bb1c5f663f4511111e51f58bd40aadd5ecc6b614a6a0571818fd92f4d9b1bde16f778e843533bfed513a3a7d9b64e70bc66cd76ff824115c191fb67cf52c38e28e2f1569600d35c34c3648f5beda03b02e9349a27193b1c8b2", @nested={0x4}, @generic="3940d128660b281e49f918283e9d4a3a1f1844a6c6088f6bdccff4a6189a4f6758115312761fc8f72ff394e49f4e8062a73f2ce528e19328756d9ffa715721f8f351def7a67aa1940f9a48bf6b8e5437563861d737cc4dab925b0559db4d5fb9f9c418ec145d6b3a66cacfb007f30686f219d54308a57b6a98be08896ea00bfdab5a6906b9120107780f7569af0c8b88e4aa7b7ae5fef2389b0bdbabe9cbcfed1ac432fbd1a4d505aeea9e", @generic="deec68ad0ab2a324afa5244d303e25ed8972", @nested={0x4, 0x115}]}, @generic="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", @generic="025d7134724e4f91c1ffec876346e3a195dd9b34fb1ed697efef4f50a13db687c3ff0788dc2478c9", @nested={0x44, 0x6a, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @typed={0x8, 0x3e, 0x0, 0x0, @fd}, @nested={0x4, 0x75}, @typed={0x8, 0x87, 0x0, 0x0, @uid}, @typed={0x7, 0x112, 0x0, 0x0, @binary="6a8fcd"}, @nested={0x4, 0x114}, @nested={0x4}, @nested={0x4}, @nested={0x4, 0x115}]}, @typed={0x8, 0x118, 0x0, 0x0, @fd}]}]}]}, 0x23f4}], 0x1, 0x0, 0x0, 0x801}, 0x0) preadv(r11, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/95, 0x5f}], 0x1, 0x12001, 0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"14b68b067a6ee905825232e37e14f1db", 0x0, 0x0, {0x200, 0x2}, {0x7, 0x7fffffff}, 0xfff, [0x800, 0x9, 0x7, 0x6, 0x1, 0x7, 0x1000, 0x4, 0x0, 0x6, 0xd6b, 0x4, 0x200000000000, 0x634, 0x8, 0x2]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001300)={{r4}, r13, 0xa, @unused=[0x5, 0x0, 0x7, 0xd7], @subvolid}) r14 = openat$cgroup_procs(r0, &(0x7f0000002a40)='cgroup.procs\x00', 0x2, 0x0) pread64(r14, &(0x7f0000000040)=""/75, 0x4b, 0x3) sendfile(r11, r11, 0x0, 0x401) socket$nl_xfrm(0x10, 0x3, 0x6) 666.150651ms ago: executing program 4 (id=936): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) (fail_nth: 1) 632.72617ms ago: executing program 0 (id=937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000f87b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 395.113797ms ago: executing program 0 (id=938): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r4}, 0x42) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x4, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x851) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="11000000000000001f"], 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 74.771003ms ago: executing program 1 (id=939): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x308, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x460, 0x20a, 0x278, 0x460, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x0, 0x2c0, 0x308, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@multicast1}, {@ipv6=@private1, [], @ipv6=@dev, [0x0, 0x0, 0xff]}, {@ipv4=@private, [], @ipv4=@empty}, {@ipv4=@dev, [], @ipv6=@mcast2}], 0xf}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, 'bridge_slave_0\x00', {0xfffffffffffffffd}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x80ff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 74.174218ms ago: executing program 4 (id=940): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, &(0x7f00000002c0)=0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000180)="8c374dc1b38a5d9552fd6418c7290497324b3d270dbff6cc40d5a9f8a3d176bc7774d2") ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x3}}, 0x3, 0x8003}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x3}}, 0x3, 0x8003}, 0x90) 0s ago: executing program 2 (id=941): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x4, 0x0, 0x1}, 0x10) listen(r1, 0xfffffff7) r2 = accept4(r1, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x80800) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x144, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x144}, 0x1, 0x0, 0x0, 0x20}, 0x20000004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x17c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xce5c4bf56a955d2d}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24000080}, 0x24040010) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000640)=0xa0, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) listen(r5, 0x8001) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000700)=""/10, &(0x7f0000000740)=0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000780)='veth1_virt_wifi\x00', 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xded, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r8, &(0x7f0000000840)="aeb353008d45847e1b68864952aaca716de1bd157819154eef737b27c0f25457db56a36dcc6dcd5778d5790b35d89c8d06f15c5c79149ecae37f6a0d5acb8c00e962b26a081e459e1ea6a28d663362c11041806b9451af0ddf79c0d4d3f7034761cae607919ce98034779c78cbe97b99743be910d8330dddaddedb", &(0x7f00000008c0)=@tcp=r2, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x400, 0xa}, &(0x7f0000000a00)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000a40)={r9, 0xc, 0x30}, &(0x7f0000000a80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000ac0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000b00)={0x1d, r10, 0x0, {0x1, 0x1, 0x4}, 0xfd}, 0x18) getsockopt$sock_buf(r6, 0x1, 0x3d, &(0x7f0000000b40)=""/60, &(0x7f0000000b80)=0x3c) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x34c0d984deaa9195, r2, 0x601a5000) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000c40), 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000d40)={0xffffffffffffffff, r1, 0x9, 0x5f, &(0x7f0000000cc0)="126b83fbc69a5a330b1f3d071bc6475b2fee1d9fa3a4069ebadbc7aa3c48fdf129810983e008a6755741f1ed55eb5c371c9976c1e708cdf4517e893eba3c6e9c38d719aa1a1dec0e003918d31369438d9d0267770e290bdbb5306d4716de89", 0xf1, 0x6, 0x7, 0x100, 0x4, 0x0, 0xffffffff, 'syz1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 82.125905][ T5825] cgroup: Unknown subsys name 'net' [ 82.234027][ T5825] cgroup: Unknown subsys name 'cpuset' [ 82.243822][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.918121][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.513922][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.521735][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.530640][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.539407][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.547146][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.554571][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.563096][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.570385][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.571648][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.586148][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.589063][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.594418][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.601899][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.615663][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.616402][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.624776][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.637268][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.638936][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.655114][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.664386][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.685577][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.693502][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.701223][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.729636][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.740364][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.168431][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.430869][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.438590][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.446570][ T5837] bridge_slave_0: entered allmulticast mode [ 87.453913][ T5837] bridge_slave_0: entered promiscuous mode [ 87.533371][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.540700][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.547856][ T5837] bridge_slave_1: entered allmulticast mode [ 87.555716][ T5837] bridge_slave_1: entered promiscuous mode [ 87.695857][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.710121][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.728212][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.773911][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.793287][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.839871][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 87.874615][ T5837] team0: Port device team_slave_0 added [ 87.933316][ T5837] team0: Port device team_slave_1 added [ 88.075550][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.082647][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.108624][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.122171][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.129296][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.155231][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.234479][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.241759][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.249208][ T5840] bridge_slave_0: entered allmulticast mode [ 88.256410][ T5840] bridge_slave_0: entered promiscuous mode [ 88.291909][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.299149][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.306326][ T5852] bridge_slave_0: entered allmulticast mode [ 88.313876][ T5852] bridge_slave_0: entered promiscuous mode [ 88.336590][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.344569][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.352413][ T5836] bridge_slave_0: entered allmulticast mode [ 88.360435][ T5836] bridge_slave_0: entered promiscuous mode [ 88.368131][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.375504][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.383063][ T5840] bridge_slave_1: entered allmulticast mode [ 88.391421][ T5840] bridge_slave_1: entered promiscuous mode [ 88.413432][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.420660][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.427851][ T5852] bridge_slave_1: entered allmulticast mode [ 88.435826][ T5852] bridge_slave_1: entered promiscuous mode [ 88.472895][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.480289][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.487584][ T5836] bridge_slave_1: entered allmulticast mode [ 88.495701][ T5836] bridge_slave_1: entered promiscuous mode [ 88.516734][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.524337][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.532081][ T5835] bridge_slave_0: entered allmulticast mode [ 88.539655][ T5835] bridge_slave_0: entered promiscuous mode [ 88.611502][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.618735][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.626599][ T5835] bridge_slave_1: entered allmulticast mode [ 88.633992][ T5835] bridge_slave_1: entered promiscuous mode [ 88.643883][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.653746][ T5846] Bluetooth: hci0: command tx timeout [ 88.660668][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.675326][ T5837] hsr_slave_0: entered promiscuous mode [ 88.682878][ T5837] hsr_slave_1: entered promiscuous mode [ 88.692611][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.705118][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.718202][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.733405][ T5844] Bluetooth: hci2: command tx timeout [ 88.739353][ T55] Bluetooth: hci3: command tx timeout [ 88.744407][ T5846] Bluetooth: hci1: command tx timeout [ 88.783655][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.810300][ T5846] Bluetooth: hci4: command tx timeout [ 88.841173][ T5852] team0: Port device team_slave_0 added [ 88.890308][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.902416][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.921244][ T5852] team0: Port device team_slave_1 added [ 88.930374][ T5836] team0: Port device team_slave_0 added [ 88.939439][ T5840] team0: Port device team_slave_0 added [ 88.994488][ T5836] team0: Port device team_slave_1 added [ 89.002502][ T5840] team0: Port device team_slave_1 added [ 89.062113][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.069199][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.096231][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.136445][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.143782][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.169753][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.184926][ T5835] team0: Port device team_slave_0 added [ 89.197224][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.204640][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.231234][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.263730][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.270921][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.297825][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.318045][ T5835] team0: Port device team_slave_1 added [ 89.355736][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.362971][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.393737][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.477929][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.485771][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.511836][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.546564][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.553720][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.579734][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.592551][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.599593][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.625576][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.649328][ T5852] hsr_slave_0: entered promiscuous mode [ 89.655698][ T5852] hsr_slave_1: entered promiscuous mode [ 89.665801][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.673695][ T5852] Cannot create hsr debugfs directory [ 89.716108][ T5836] hsr_slave_0: entered promiscuous mode [ 89.722978][ T5836] hsr_slave_1: entered promiscuous mode [ 89.729155][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.736742][ T5836] Cannot create hsr debugfs directory [ 89.787844][ T5840] hsr_slave_0: entered promiscuous mode [ 89.794388][ T5840] hsr_slave_1: entered promiscuous mode [ 89.801366][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.808950][ T5840] Cannot create hsr debugfs directory [ 89.947502][ T5835] hsr_slave_0: entered promiscuous mode [ 89.953985][ T5835] hsr_slave_1: entered promiscuous mode [ 89.960842][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.968421][ T5835] Cannot create hsr debugfs directory [ 90.153145][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.222306][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.263773][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.305812][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.498685][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.513568][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.526316][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.549912][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.624377][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.641472][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.657782][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.683474][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.729947][ T5846] Bluetooth: hci0: command tx timeout [ 90.758775][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.809949][ T5846] Bluetooth: hci2: command tx timeout [ 90.810338][ T5844] Bluetooth: hci3: command tx timeout [ 90.815392][ T5846] Bluetooth: hci1: command tx timeout [ 90.856984][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.868210][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.882933][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.890250][ T5846] Bluetooth: hci4: command tx timeout [ 90.902646][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.926638][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.957380][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.964676][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.975933][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.983500][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.068224][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.079812][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.121403][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.135577][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.184341][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.203850][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.228901][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.291744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.298924][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.312108][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.333171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.340770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.369962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.377237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.422054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.429280][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.578304][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.615676][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.653034][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.708661][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.736359][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.803227][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.810456][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.834224][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.841445][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.922424][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.938754][ T5837] veth0_vlan: entered promiscuous mode [ 91.986242][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.993506][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.013776][ T974] cfg80211: failed to load regulatory.db [ 92.072501][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.079736][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.093476][ T5837] veth1_vlan: entered promiscuous mode [ 92.116319][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.164674][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.247262][ T5837] veth0_macvtap: entered promiscuous mode [ 92.287808][ T5837] veth1_macvtap: entered promiscuous mode [ 92.346326][ T5836] veth0_vlan: entered promiscuous mode [ 92.372806][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.386609][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.432321][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.443582][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.454570][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.464061][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.486040][ T5836] veth1_vlan: entered promiscuous mode [ 92.527069][ T5852] veth0_vlan: entered promiscuous mode [ 92.589460][ T5852] veth1_vlan: entered promiscuous mode [ 92.623766][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.728372][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.739538][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.777756][ T5852] veth0_macvtap: entered promiscuous mode [ 92.785550][ T5836] veth0_macvtap: entered promiscuous mode [ 92.810720][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.821642][ T5836] veth1_macvtap: entered promiscuous mode [ 92.829356][ T5846] Bluetooth: hci0: command tx timeout [ 92.863847][ T5852] veth1_macvtap: entered promiscuous mode [ 92.890575][ T5846] Bluetooth: hci3: command tx timeout [ 92.890580][ T5844] Bluetooth: hci2: command tx timeout [ 92.901511][ T5844] Bluetooth: hci1: command tx timeout [ 92.911197][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.921002][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.947272][ T5840] veth0_vlan: entered promiscuous mode [ 92.971254][ T5846] Bluetooth: hci4: command tx timeout [ 92.997970][ T5840] veth1_vlan: entered promiscuous mode [ 93.015272][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.030878][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.051542][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.064001][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.077806][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.085403][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.112693][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.124007][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.135955][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.172344][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.200289][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.241003][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.252974][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.277269][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.297515][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.308726][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.324814][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.355469][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.365228][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.381776][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.398502][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.412919][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.464650][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484693][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.486218][ T5925] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 93.506249][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.519449][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.651626][ T5840] veth0_macvtap: entered promiscuous mode [ 93.726107][ T5840] veth1_macvtap: entered promiscuous mode [ 93.745099][ T5835] veth0_vlan: entered promiscuous mode [ 93.876496][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.900245][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.910952][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.929556][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.949569][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.960333][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.972395][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.983551][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.007592][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.038236][ T5835] veth1_vlan: entered promiscuous mode [ 94.052629][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.063777][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.085531][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.115935][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.129358][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.141567][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.151854][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.162922][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.175346][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.224640][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.239691][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.248463][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.258284][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.278707][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.296645][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.323984][ T5835] veth0_macvtap: entered promiscuous mode [ 94.371099][ T5835] veth1_macvtap: entered promiscuous mode [ 94.383664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.409937][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.497820][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.522936][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.532949][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.543850][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.553826][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.569040][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.601019][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.629933][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.644849][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.674865][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.702345][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.716841][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.728312][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.739751][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.750247][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.760898][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.770777][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.781666][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.793280][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.819319][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.828759][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.833071][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.845732][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.855384][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.864470][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.889172][ T5846] Bluetooth: hci0: command tx timeout [ 94.969238][ T5846] Bluetooth: hci3: command tx timeout [ 94.969694][ T55] Bluetooth: hci2: command tx timeout [ 94.980251][ T5844] Bluetooth: hci1: command tx timeout [ 95.009990][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.017868][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.060071][ T55] Bluetooth: hci4: command tx timeout [ 95.109211][ T5936] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 95.133193][ T5934] bridge_slave_0: left allmulticast mode [ 95.139322][ T5934] bridge_slave_0: left promiscuous mode [ 95.145778][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.192239][ T5934] bridge_slave_1: left allmulticast mode [ 95.217756][ T5934] bridge_slave_1: left promiscuous mode [ 95.228465][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.256336][ T5934] bond0: (slave bond_slave_0): Releasing backup interface [ 95.272123][ T5934] bond0: (slave bond_slave_1): Releasing backup interface [ 95.298270][ T5934] team0: Port device team_slave_0 removed [ 95.313244][ T5934] team0: Port device team_slave_1 removed [ 95.320674][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.328367][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.344014][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.374344][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.559865][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.600811][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.653344][ T5948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'. [ 95.665336][ T5945] xt_CT: No such helper "syz1" [ 95.673649][ T5948] netlink: 'syz.2.9': attribute type 32 has an invalid length. [ 95.752217][ T5951] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 95.872144][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.885382][ T5948] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 95.897974][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.122834][ T5959] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 96.149572][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.770793][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 96.790003][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 96.794975][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 96.798781][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 96.901099][ T5989] batadv0: entered promiscuous mode [ 96.910956][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 96.928119][ T5989] vlan2: entered promiscuous mode [ 96.955618][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 97.766567][ T5999] netlink: 'syz.1.18': attribute type 3 has an invalid length. [ 97.889063][ T5993] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.972706][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 98.124236][ T6006] x_tables: duplicate underflow at hook 4 [ 98.136124][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 98.214878][ T6014] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.234081][ T6016] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 98.550063][ T6015] Zero length message leads to an empty skb [ 98.811889][ T6022] syz.4.24 uses obsolete (PF_INET,SOCK_PACKET) [ 98.843456][ T6023] netlink: 'syz.0.25': attribute type 4 has an invalid length. [ 100.200224][ T6056] syzkaller1: entered promiscuous mode [ 100.239147][ T6056] syzkaller1: entered allmulticast mode [ 100.618592][ T6069] sctp: [Deprecated]: syz.0.35 (pid 6069) Use of int in max_burst socket option deprecated. [ 100.618592][ T6069] Use struct sctp_assoc_value instead [ 100.683578][ T6070] batadv0: entered promiscuous mode [ 100.690088][ T6070] vlan2: entered promiscuous mode [ 100.899957][ T6077] __nla_validate_parse: 57 callbacks suppressed [ 100.899977][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 101.383562][ T6095] Cannot find add_set index 0 as target [ 101.623780][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 101.749909][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 101.899767][ T6112] netlink: 'syz.2.46': attribute type 12 has an invalid length. [ 101.930729][ T6112] netlink: 'syz.2.46': attribute type 29 has an invalid length. [ 101.959982][ T6112] netlink: 148 bytes leftover after parsing attributes in process `syz.2.46'. [ 101.995806][ T6112] netlink: 59 bytes leftover after parsing attributes in process `syz.2.46'. [ 102.201670][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.210225][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.347462][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.375234][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.515910][ T6114] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.525118][ T6114] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.534744][ T6114] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.543842][ T6114] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.604958][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 102.638422][ T6125] vlan2: entered promiscuous mode [ 102.717290][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.3.52'. [ 102.769503][ T6132] tipc: Invalid UDP bearer configuration [ 102.769580][ T6132] tipc: Enabling of bearer rejected, failed to enable media [ 102.798672][ T6138] netem: incorrect gi model size [ 102.840517][ T6138] netem: change failed [ 102.861821][ T6142] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 102.971940][ T5906] IPVS: starting estimator thread 0... [ 103.079271][ T6148] IPVS: using max 29 ests per chain, 69600 per kthread [ 103.105052][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.57'. [ 103.665998][ T6173] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 103.896412][ T6181] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 104.138266][ T6191] netlink: 'syz.0.67': attribute type 12 has an invalid length. [ 104.180860][ T6191] netlink: 'syz.0.67': attribute type 29 has an invalid length. [ 104.203822][ T6191] netlink: 148 bytes leftover after parsing attributes in process `syz.0.67'. [ 104.508607][ T6203] netlink: 'syz.3.73': attribute type 12 has an invalid length. [ 104.536076][ T6203] netlink: 'syz.3.73': attribute type 29 has an invalid length. [ 104.568761][ T6203] netlink: 148 bytes leftover after parsing attributes in process `syz.3.73'. [ 104.594648][ T6206] netlink: 'syz.3.73': attribute type 12 has an invalid length. [ 104.609966][ T6206] netlink: 'syz.3.73': attribute type 29 has an invalid length. [ 104.847277][ T6217] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 105.208951][ T6230] netlink: 'syz.3.82': attribute type 12 has an invalid length. [ 105.217400][ T6230] netlink: 'syz.3.82': attribute type 29 has an invalid length. [ 105.503673][ T6241] FAULT_INJECTION: forcing a failure. [ 105.503673][ T6241] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.517241][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.3.85 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 105.517282][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.517305][ T6241] Call Trace: [ 105.517314][ T6241] [ 105.517323][ T6241] dump_stack_lvl+0x189/0x250 [ 105.517367][ T6241] ? __lock_acquire+0xaac/0xd20 [ 105.517400][ T6241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.517431][ T6241] ? __pfx__printk+0x10/0x10 [ 105.517453][ T6241] ? __might_fault+0xb0/0x130 [ 105.517492][ T6241] should_fail_ex+0x414/0x560 [ 105.517532][ T6241] _copy_from_user+0x2d/0xb0 [ 105.517561][ T6241] ___sys_sendmsg+0x158/0x2a0 [ 105.517588][ T6241] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.517650][ T6241] ? __fget_files+0x2a/0x420 [ 105.517677][ T6241] ? __fget_files+0x3a0/0x420 [ 105.517716][ T6241] __sys_sendmmsg+0x227/0x430 [ 105.517745][ T6241] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.517777][ T6241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 105.517824][ T6241] ? ksys_write+0x1f0/0x250 [ 105.517847][ T6241] ? rcu_is_watching+0x15/0xb0 [ 105.517890][ T6241] __x64_sys_sendmmsg+0xa0/0xc0 [ 105.517916][ T6241] do_syscall_64+0xf6/0x210 [ 105.517944][ T6241] ? clear_bhb_loop+0x45/0xa0 [ 105.517971][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.517991][ T6241] RIP: 0033:0x7fd245d8e969 [ 105.518017][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.518034][ T6241] RSP: 002b:00007fd246c0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.518060][ T6241] RAX: ffffffffffffffda RBX: 00007fd245fb5fa0 RCX: 00007fd245d8e969 [ 105.518075][ T6241] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 105.518089][ T6241] RBP: 00007fd246c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 105.518101][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.518113][ T6241] R13: 0000000000000000 R14: 00007fd245fb5fa0 R15: 00007ffc9069cc98 [ 105.518145][ T6241] [ 106.188650][ T6263] __nla_validate_parse: 7 callbacks suppressed [ 106.188670][ T6263] netlink: 148 bytes leftover after parsing attributes in process `syz.2.94'. [ 106.259563][ T6265] netlink: 148 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.304349][ T6265] netlink: 148 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.478157][ T6279] FAULT_INJECTION: forcing a failure. [ 106.478157][ T6279] name failslab, interval 1, probability 0, space 0, times 1 [ 106.539476][ T6279] CPU: 1 UID: 0 PID: 6279 Comm: syz.2.98 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 106.539506][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.539519][ T6279] Call Trace: [ 106.539527][ T6279] [ 106.539536][ T6279] dump_stack_lvl+0x189/0x250 [ 106.539574][ T6279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.539604][ T6279] ? __pfx__printk+0x10/0x10 [ 106.539631][ T6279] ? __pfx___might_resched+0x10/0x10 [ 106.539655][ T6279] should_fail_ex+0x414/0x560 [ 106.539692][ T6279] should_failslab+0xa8/0x100 [ 106.539721][ T6279] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 106.539747][ T6279] ? __alloc_skb+0x112/0x2d0 [ 106.539782][ T6279] __alloc_skb+0x112/0x2d0 [ 106.539817][ T6279] netlink_sendmsg+0x5c6/0xb30 [ 106.539858][ T6279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.539892][ T6279] ? aa_sock_msg_perm+0x94/0x160 [ 106.539914][ T6279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.539937][ T6279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.539968][ T6279] __sock_sendmsg+0x219/0x270 [ 106.539998][ T6279] ____sys_sendmsg+0x52d/0x830 [ 106.540025][ T6279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.540056][ T6279] ? import_iovec+0x74/0xa0 [ 106.540085][ T6279] ___sys_sendmsg+0x21f/0x2a0 [ 106.540109][ T6279] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.540168][ T6279] ? __fget_files+0x2a/0x420 [ 106.540192][ T6279] ? __fget_files+0x3a0/0x420 [ 106.540228][ T6279] __sys_sendmmsg+0x227/0x430 [ 106.540255][ T6279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 106.540286][ T6279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.540331][ T6279] ? ksys_write+0x1f0/0x250 [ 106.540351][ T6279] ? rcu_is_watching+0x15/0xb0 [ 106.540392][ T6279] __x64_sys_sendmmsg+0xa0/0xc0 [ 106.540422][ T6279] do_syscall_64+0xf6/0x210 [ 106.540449][ T6279] ? clear_bhb_loop+0x45/0xa0 [ 106.540474][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.540493][ T6279] RIP: 0033:0x7f7f4878e969 [ 106.540511][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.540527][ T6279] RSP: 002b:00007f7f49632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 106.540549][ T6279] RAX: ffffffffffffffda RBX: 00007f7f489b5fa0 RCX: 00007f7f4878e969 [ 106.540563][ T6279] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 106.540576][ T6279] RBP: 00007f7f49632090 R08: 0000000000000000 R09: 0000000000000000 [ 106.540588][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.540600][ T6279] R13: 0000000000000000 R14: 00007f7f489b5fa0 R15: 00007ffea46fa818 [ 106.540631][ T6279] [ 107.488741][ T6312] !: renamed from dummy0 (while UP) [ 107.547723][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 107.828688][ T6325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.887206][ T6332] bond1: (slave veth3): Enslaving as an active interface with a down link [ 108.234564][ T6325] bond1: (slave veth0_to_bond): making interface the new active one [ 108.260687][ T6325] veth0_to_bond: entered promiscuous mode [ 108.267135][ T6325] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 108.450535][ T6347] netlink: 148 bytes leftover after parsing attributes in process `syz.0.122'. [ 108.494417][ T6347] netlink: 39 bytes leftover after parsing attributes in process `syz.0.122'. [ 108.511977][ T30] audit: type=1800 audit(1745569786.011:2): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.125" name="memory.events" dev="tmpfs" ino=100 res=0 errno=0 [ 108.562838][ T6351] vlan2: entered promiscuous mode [ 108.605591][ T30] audit: type=1804 audit(1745569786.111:3): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.125" name="memory.events" dev="tmpfs" ino=100 res=1 errno=0 [ 108.676064][ T6356] netlink: 148 bytes leftover after parsing attributes in process `syz.3.126'. [ 108.709933][ T6356] netlink: 148 bytes leftover after parsing attributes in process `syz.3.126'. [ 108.944520][ T6365] openvswitch: netlink: IPv4 tun info is not correct [ 109.175799][ T6378] validate_nla: 25 callbacks suppressed [ 109.175818][ T6378] netlink: 'syz.3.133': attribute type 12 has an invalid length. [ 109.210049][ T6378] netlink: 'syz.3.133': attribute type 29 has an invalid length. [ 109.243062][ T6378] netlink: 148 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.275381][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.304682][ T6374] batadv_slave_1: entered promiscuous mode [ 109.523977][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 109.617055][ T6390] netlink: 'syz.0.140': attribute type 4 has an invalid length. [ 109.653162][ T6394] batadv0: entered promiscuous mode [ 109.658518][ T6394] vlan2: entered promiscuous mode [ 109.997534][ T6414] netlink: 'syz.0.148': attribute type 12 has an invalid length. [ 110.016988][ T6414] netlink: 'syz.0.148': attribute type 29 has an invalid length. [ 110.311948][ T6431] netlink: 'syz.4.154': attribute type 12 has an invalid length. [ 110.320600][ T6431] netlink: 'syz.4.154': attribute type 29 has an invalid length. [ 110.331984][ T6431] netlink: 'syz.4.154': attribute type 12 has an invalid length. [ 110.354901][ T6431] netlink: 'syz.4.154': attribute type 29 has an invalid length. [ 110.758861][ T6443] netlink: 'syz.3.158': attribute type 12 has an invalid length. [ 111.273410][ T6451] vlan2: entered promiscuous mode [ 111.281578][ T6451] batadv0: entered promiscuous mode [ 111.450996][ T6457] __nla_validate_parse: 10 callbacks suppressed [ 111.451032][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'. [ 111.502821][ T6462] netlink: 148 bytes leftover after parsing attributes in process `syz.2.166'. [ 111.524455][ T6462] netlink: 148 bytes leftover after parsing attributes in process `syz.2.166'. [ 111.929720][ T6483] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.171'. [ 112.338320][ T6494] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 112.490310][ T6498] batadv0: entered promiscuous mode [ 112.498526][ T6498] vlan2: entered promiscuous mode [ 112.700620][ T6502] bridge_slave_0: default FDB implementation only supports local addresses [ 112.756610][ T6511] veth1_macvtap: left promiscuous mode [ 112.776224][ T6511] macsec0: entered promiscuous mode [ 112.802171][ T6511] macsec0: entered allmulticast mode [ 112.912742][ T6514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.974058][ T6515] veth1_macvtap: entered promiscuous mode [ 112.998950][ T6515] veth1_macvtap: entered allmulticast mode [ 113.019366][ T6515] macsec0: left promiscuous mode [ 113.024554][ T6515] macsec0: left allmulticast mode [ 113.036080][ T6515] veth1_macvtap: left allmulticast mode [ 113.086572][ T6519] bond2: (slave veth5): Enslaving as an active interface with a down link [ 113.103089][ T6522] bond1: (slave veth0_to_bond): Releasing active interface [ 113.116351][ T6522] veth0_to_bond: left promiscuous mode [ 113.131223][ T6522] bond2: (slave veth0_to_bond): making interface the new active one [ 113.140707][ T6522] veth0_to_bond: entered promiscuous mode [ 113.146933][ T6522] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 113.380195][ T6535] netlink: 148 bytes leftover after parsing attributes in process `syz.0.188'. [ 113.432319][ T6535] netlink: 148 bytes leftover after parsing attributes in process `syz.0.188'. [ 113.575141][ T6540] veth1_macvtap: left promiscuous mode [ 113.623540][ T6543] netlink: 148 bytes leftover after parsing attributes in process `syz.4.193'. [ 113.670523][ T6546] netlink: 148 bytes leftover after parsing attributes in process `syz.4.193'. [ 113.774075][ T6545] vlan2: entered promiscuous mode [ 113.838374][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 113.889735][ T6553] netlink: 148 bytes leftover after parsing attributes in process `syz.3.197'. [ 114.248757][ T6570] validate_nla: 27 callbacks suppressed [ 114.248778][ T6570] netlink: 'syz.4.204': attribute type 12 has an invalid length. [ 114.293182][ T6570] netlink: 'syz.4.204': attribute type 29 has an invalid length. [ 114.313070][ T6574] netlink: 'syz.4.204': attribute type 12 has an invalid length. [ 114.332487][ T6574] netlink: 'syz.4.204': attribute type 29 has an invalid length. [ 114.504271][ T6582] netlink: 'syz.0.208': attribute type 12 has an invalid length. [ 114.536220][ T6582] netlink: 'syz.0.208': attribute type 29 has an invalid length. [ 114.568112][ T6582] netlink: 'syz.0.208': attribute type 12 has an invalid length. [ 114.580798][ T6582] netlink: 'syz.0.208': attribute type 29 has an invalid length. [ 115.134607][ T6599] pim6reg1: entered promiscuous mode [ 115.140379][ T6599] pim6reg1: entered allmulticast mode [ 115.355279][ T6605] netlink: 'syz.0.219': attribute type 12 has an invalid length. [ 115.373835][ T6605] netlink: 'syz.0.219': attribute type 29 has an invalid length. [ 116.477047][ T6662] __nla_validate_parse: 15 callbacks suppressed [ 116.477066][ T6662] netlink: 148 bytes leftover after parsing attributes in process `syz.3.239'. [ 117.032550][ T6693] netlink: 148 bytes leftover after parsing attributes in process `syz.4.248'. [ 117.089360][ T6692] netlink: 148 bytes leftover after parsing attributes in process `syz.3.247'. [ 117.157471][ T6693] netlink: 148 bytes leftover after parsing attributes in process `syz.4.248'. [ 117.189127][ T6699] netlink: 148 bytes leftover after parsing attributes in process `syz.3.247'. [ 117.545973][ T6714] netlink: 148 bytes leftover after parsing attributes in process `syz.3.255'. [ 117.656242][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 117.737735][ T6721] bond1: entered promiscuous mode [ 117.764205][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.862072][ T6724] veth3: entered promiscuous mode [ 117.881645][ T6724] bond1: (slave veth3): Enslaving as an active interface with an up link [ 118.026872][ T6729] syzkaller1: entered promiscuous mode [ 118.033720][ T6729] syzkaller1: entered allmulticast mode [ 118.143685][ T6740] netlink: 148 bytes leftover after parsing attributes in process `syz.4.262'. [ 118.163920][ T6740] netlink: 148 bytes leftover after parsing attributes in process `syz.4.262'. [ 118.348078][ T6746] netlink: 148 bytes leftover after parsing attributes in process `syz.4.265'. [ 118.464016][ T6751] tipc: Started in network mode [ 118.479318][ T6751] tipc: Node identity 823aa6d20ed2, cluster identity 4711 [ 118.507413][ T6751] tipc: Enabled bearer , priority 0 [ 118.732891][ T6751] tipc: Disabling bearer [ 119.044717][ T6775] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.470895][ T6802] validate_nla: 48 callbacks suppressed [ 119.470914][ T6802] netlink: 'syz.0.283': attribute type 12 has an invalid length. [ 119.525451][ T6802] netlink: 'syz.0.283': attribute type 29 has an invalid length. [ 119.896513][ T6823] netlink: 'syz.0.290': attribute type 12 has an invalid length. [ 119.924993][ T6823] netlink: 'syz.0.290': attribute type 29 has an invalid length. [ 119.950038][ T6823] netlink: 'syz.0.290': attribute type 12 has an invalid length. [ 119.972429][ T6823] netlink: 'syz.0.290': attribute type 29 has an invalid length. [ 120.282968][ T6838] xt_cgroup: invalid path, errno=-2 [ 120.505574][ T6844] netlink: 'syz.4.295': attribute type 12 has an invalid length. [ 120.530664][ T6844] netlink: 'syz.4.295': attribute type 29 has an invalid length. [ 120.580518][ T6844] netlink: 'syz.4.295': attribute type 12 has an invalid length. [ 120.588341][ T6844] netlink: 'syz.4.295': attribute type 29 has an invalid length. [ 121.264388][ T6867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.412692][ T6869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.499682][ T6872] bond1: (slave veth3): Enslaving as an active interface with a down link [ 121.534631][ T6876] bond1: (slave veth0_to_bond): making interface the new active one [ 121.544645][ T6876] veth0_to_bond: entered promiscuous mode [ 121.562420][ T6876] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 121.615622][ T6878] bond2: (slave veth5): Enslaving as an active interface with a down link [ 121.642715][ T6880] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 121.833600][ T6893] __nla_validate_parse: 16 callbacks suppressed [ 121.833618][ T6893] netlink: 148 bytes leftover after parsing attributes in process `syz.0.308'. [ 121.867954][ T6893] netlink: 39 bytes leftover after parsing attributes in process `syz.0.308'. [ 121.881786][ T6898] netlink: 148 bytes leftover after parsing attributes in process `syz.0.308'. [ 121.910171][ T6898] netlink: 39 bytes leftover after parsing attributes in process `syz.0.308'. [ 122.244414][ T6909] netlink: 148 bytes leftover after parsing attributes in process `syz.3.312'. [ 122.266940][ T6913] netlink: 592 bytes leftover after parsing attributes in process `syz.2.314'. [ 122.283116][ T6914] netlink: 148 bytes leftover after parsing attributes in process `syz.0.313'. [ 122.320483][ T6915] netlink: 592 bytes leftover after parsing attributes in process `syz.2.314'. [ 122.330660][ T6914] netlink: 148 bytes leftover after parsing attributes in process `syz.0.313'. [ 122.634104][ T6927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.680017][ T6927] bond3: (slave veth7): Enslaving as an active interface with a down link [ 122.760962][ T6927] bond2: (slave veth0_to_bond): Releasing active interface [ 122.791435][ T6927] veth0_to_bond: left promiscuous mode [ 122.801968][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'. [ 122.877492][ T6927] bond3: (slave veth0_to_bond): making interface the new active one [ 122.925185][ T6927] veth0_to_bond: entered promiscuous mode [ 122.961183][ T6927] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 123.057132][ T6943] vlan2: entered allmulticast mode [ 123.095279][ T6943] syz_tun: entered allmulticast mode [ 124.337179][ T7007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.403792][ T7011] bond2: (slave veth5): Enslaving as an active interface with a down link [ 124.421686][ T7015] bond1: (slave veth0_to_bond): Releasing active interface [ 124.429614][ T7015] veth0_to_bond: left promiscuous mode [ 124.444534][ T7015] bond2: (slave veth0_to_bond): making interface the new active one [ 124.454349][ T7015] veth0_to_bond: entered promiscuous mode [ 124.460651][ T7015] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 124.713126][ T7035] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 124.775658][ T7033] validate_nla: 25 callbacks suppressed [ 124.775679][ T7033] netlink: 'syz.2.338': attribute type 12 has an invalid length. [ 124.801584][ T7033] netlink: 'syz.2.338': attribute type 29 has an invalid length. [ 125.119835][ T7048] batadv1: entered promiscuous mode [ 125.557038][ T7066] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 125.648383][ T7062] vlan2: entered promiscuous mode [ 125.824476][ T7066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.981528][ T7069] bond1: (slave veth3): Enslaving as an active interface with a down link [ 126.026275][ T7073] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 126.241690][ T7094] netlink: 'syz.0.352': attribute type 12 has an invalid length. [ 126.281860][ T7094] netlink: 'syz.0.352': attribute type 29 has an invalid length. [ 127.236287][ T7120] syzkaller0: entered promiscuous mode [ 127.255943][ T7120] syzkaller0: entered allmulticast mode [ 127.306250][ T7141] vlan2: entered promiscuous mode [ 127.434351][ T7148] __nla_validate_parse: 13 callbacks suppressed [ 127.434372][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.366'. [ 127.448594][ T7150] netlink: 'syz.4.367': attribute type 12 has an invalid length. [ 127.498432][ T7150] netlink: 'syz.4.367': attribute type 29 has an invalid length. [ 127.507128][ T7150] netlink: 148 bytes leftover after parsing attributes in process `syz.4.367'. [ 127.611869][ T7148] bond1: entered promiscuous mode [ 127.622465][ T7148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.555490][ T7198] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 130.210105][ T7236] vlan3: entered promiscuous mode [ 130.481952][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 130.783885][ T7269] netlink: 'syz.3.394': attribute type 10 has an invalid length. [ 130.799141][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.394'. [ 130.822413][ T7267] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 130.863134][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 131.024748][ T7269] team0: Port device geneve0 added [ 131.679459][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.400'. [ 131.683881][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 131.710434][ T7301] vlan2: entered promiscuous mode [ 131.725556][ T7305] netlink: 32 bytes leftover after parsing attributes in process `syz.3.404'. [ 131.966044][ T7305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.504423][ T7305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.783937][ T7307] xt_hashlimit: size too large, truncated to 1048576 [ 132.885658][ T7305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.973534][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980411][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.335618][ T7305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.710838][ T7305] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.809620][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 133.839506][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.416'. [ 133.877415][ T7305] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.953712][ T7305] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.997409][ T7362] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 134.033857][ T7305] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.063216][ T7364] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 134.106971][ T7362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.157573][ T7365] bond3: (slave veth9): Enslaving as an active interface with a down link [ 134.235842][ T7364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.328713][ T7368] bond2: (slave veth5): Enslaving as an active interface with a down link [ 134.390395][ T7367] bond2: (slave veth0_to_bond): Releasing active interface [ 134.410727][ T7367] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 134.475862][ T7370] bond1: (slave veth0_to_bond): Releasing active interface [ 134.496206][ T7370] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 134.579363][ T7373] vlan2: entered promiscuous mode [ 134.793431][ T7222] veth0_to_bond: left promiscuous mode [ 134.813639][ T7379] netlink: 200 bytes leftover after parsing attributes in process `syz.4.421'. [ 135.099375][ T7390] netlink: 277 bytes leftover after parsing attributes in process `syz.1.425'. [ 135.180619][ T7390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.425'. [ 135.735062][ T7416] vlan3: entered promiscuous mode [ 135.791864][ T13] veth0_to_bond: left promiscuous mode [ 135.871956][ T7421] SET target dimension over the limit! [ 136.041278][ T7429] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 136.170969][ T7429] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.210085][ T7428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.356320][ T7440] netlink: 'syz.4.443': attribute type 12 has an invalid length. [ 136.373064][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 136.373122][ T7440] netlink: 'syz.4.443': attribute type 29 has an invalid length. [ 136.395631][ T7440] netlink: 148 bytes leftover after parsing attributes in process `syz.4.443'. [ 136.429807][ T7444] netlink: 'syz.4.443': attribute type 12 has an invalid length. [ 136.465313][ T7444] netlink: 'syz.4.443': attribute type 29 has an invalid length. [ 136.488864][ T7444] netlink: 148 bytes leftover after parsing attributes in process `syz.4.443'. [ 136.514369][ T7446] vlan2: entered promiscuous mode [ 136.535682][ T7448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.543329][ T7448] IPv6: NLM_F_CREATE should be set when creating new route [ 136.550753][ T7448] IPv6: NLM_F_CREATE should be set when creating new route [ 136.799445][ T7457] netlink: 'syz.0.450': attribute type 10 has an invalid length. [ 136.863416][ T7457] team0: Device veth1_macvtap failed to register rx_handler [ 137.053112][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 137.095210][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 137.149253][ T7474] netlink: 'syz.3.455': attribute type 12 has an invalid length. [ 137.171575][ T7474] netlink: 'syz.3.455': attribute type 29 has an invalid length. [ 137.188223][ T7474] netlink: 'syz.3.455': attribute type 12 has an invalid length. [ 137.198384][ T7474] netlink: 'syz.3.455': attribute type 29 has an invalid length. [ 137.706016][ T7492] vlan2: entered promiscuous mode [ 137.800560][ T7494] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 138.004417][ T7506] skbuff: bad partial csum: csum=65506/2 headroom=66 headlen=65526 [ 138.027665][ T62] tipc: Subscription rejected, illegal request [ 138.054412][ T7507] skbuff: bad partial csum: csum=65506/2 headroom=66 headlen=65526 [ 138.766223][ T7550] vlan2: entered promiscuous mode [ 139.284250][ T7571] veth1_to_team: entered promiscuous mode [ 139.302447][ T7571] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 139.567637][ T7583] __nla_validate_parse: 10 callbacks suppressed [ 139.567656][ T7583] netlink: 148 bytes leftover after parsing attributes in process `syz.0.486'. [ 139.866168][ T7596] vlan2: entered promiscuous mode [ 140.002819][ T7604] pimreg3: entered allmulticast mode [ 140.337217][ T7625] netlink: 148 bytes leftover after parsing attributes in process `syz.4.498'. [ 140.379419][ T7625] netlink: 148 bytes leftover after parsing attributes in process `syz.4.498'. [ 140.638548][ T7638] netlink: 148 bytes leftover after parsing attributes in process `syz.4.500'. [ 140.657584][ T7638] netlink: 148 bytes leftover after parsing attributes in process `syz.4.500'. [ 140.686470][ T7630] Only authenc() type AEADs are supported by ESSIV [ 140.813300][ T7644] netlink: 148 bytes leftover after parsing attributes in process `syz.4.502'. [ 140.836119][ T7644] FAULT_INJECTION: forcing a failure. [ 140.836119][ T7644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.852994][ T7644] CPU: 1 UID: 0 PID: 7644 Comm: syz.4.502 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 140.853024][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.853036][ T7644] Call Trace: [ 140.853044][ T7644] [ 140.853052][ T7644] dump_stack_lvl+0x189/0x250 [ 140.853084][ T7644] ? __lock_acquire+0xaac/0xd20 [ 140.853116][ T7644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.853145][ T7644] ? __pfx__printk+0x10/0x10 [ 140.853165][ T7644] ? __might_fault+0xb0/0x130 [ 140.853203][ T7644] should_fail_ex+0x414/0x560 [ 140.853241][ T7644] _copy_from_user+0x2d/0xb0 [ 140.853268][ T7644] ___sys_sendmsg+0x158/0x2a0 [ 140.853293][ T7644] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.853353][ T7644] ? __fget_files+0x2a/0x420 [ 140.853379][ T7644] ? __fget_files+0x3a0/0x420 [ 140.853423][ T7644] __sys_sendmmsg+0x227/0x430 [ 140.853450][ T7644] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.853482][ T7644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.853525][ T7644] ? ksys_write+0x1f0/0x250 [ 140.853546][ T7644] ? rcu_is_watching+0x15/0xb0 [ 140.853585][ T7644] __x64_sys_sendmmsg+0xa0/0xc0 [ 140.853609][ T7644] do_syscall_64+0xf6/0x210 [ 140.853634][ T7644] ? clear_bhb_loop+0x45/0xa0 [ 140.853658][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.853676][ T7644] RIP: 0033:0x7f365378e969 [ 140.853694][ T7644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.853711][ T7644] RSP: 002b:00007f365469b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.853731][ T7644] RAX: ffffffffffffffda RBX: 00007f36539b5fa0 RCX: 00007f365378e969 [ 140.853744][ T7644] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 140.853758][ T7644] RBP: 00007f365469b090 R08: 0000000000000000 R09: 0000000000000000 [ 140.853769][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.853780][ T7644] R13: 0000000000000000 R14: 00007f36539b5fa0 R15: 00007ffe7ac84808 [ 140.853807][ T7644] [ 141.066383][ T7649] validate_nla: 25 callbacks suppressed [ 141.066401][ T7649] netlink: 'syz.3.504': attribute type 12 has an invalid length. [ 141.116593][ T7649] netlink: 'syz.3.504': attribute type 29 has an invalid length. [ 141.152700][ T7649] netlink: 148 bytes leftover after parsing attributes in process `syz.3.504'. [ 141.219557][ T7650] netlink: 'syz.3.504': attribute type 12 has an invalid length. [ 141.235114][ T7650] netlink: 'syz.3.504': attribute type 29 has an invalid length. [ 141.246810][ T7650] netlink: 148 bytes leftover after parsing attributes in process `syz.3.504'. [ 141.352995][ T7658] netlink: 'syz.3.510': attribute type 12 has an invalid length. [ 141.379322][ T7658] netlink: 'syz.3.510': attribute type 29 has an invalid length. [ 141.388874][ T7658] netlink: 148 bytes leftover after parsing attributes in process `syz.3.510'. [ 141.412079][ T7661] vlan2: entered promiscuous mode [ 141.429043][ T7665] netlink: 830 bytes leftover after parsing attributes in process `syz.0.511'. [ 141.443150][ T7658] netlink: 'syz.3.510': attribute type 12 has an invalid length. [ 141.456575][ T7658] netlink: 'syz.3.510': attribute type 29 has an invalid length. [ 141.635360][ T7674] netlink: 'syz.3.515': attribute type 12 has an invalid length. [ 141.664857][ T7674] netlink: 'syz.3.515': attribute type 29 has an invalid length. [ 141.696240][ T7684] FAULT_INJECTION: forcing a failure. [ 141.696240][ T7684] name failslab, interval 1, probability 0, space 0, times 0 [ 141.718047][ T7684] CPU: 1 UID: 0 PID: 7684 Comm: syz.3.515 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 141.718077][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.718089][ T7684] Call Trace: [ 141.718097][ T7684] [ 141.718105][ T7684] dump_stack_lvl+0x189/0x250 [ 141.718143][ T7684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.718173][ T7684] ? __pfx__printk+0x10/0x10 [ 141.718199][ T7684] ? __pfx___might_resched+0x10/0x10 [ 141.718222][ T7684] should_fail_ex+0x414/0x560 [ 141.718258][ T7684] should_failslab+0xa8/0x100 [ 141.718294][ T7684] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 141.718320][ T7684] ? __alloc_skb+0x112/0x2d0 [ 141.718355][ T7684] __alloc_skb+0x112/0x2d0 [ 141.718389][ T7684] netlink_sendmsg+0x5c6/0xb30 [ 141.718430][ T7684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.718463][ T7684] ? aa_sock_msg_perm+0x94/0x160 [ 141.718486][ T7684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.718508][ T7684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.718539][ T7684] __sock_sendmsg+0x219/0x270 [ 141.718568][ T7684] ____sys_sendmsg+0x52d/0x830 [ 141.718595][ T7684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.718625][ T7684] ? import_iovec+0x74/0xa0 [ 141.718655][ T7684] ___sys_sendmsg+0x21f/0x2a0 [ 141.718679][ T7684] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.718737][ T7684] ? __fget_files+0x2a/0x420 [ 141.718762][ T7684] ? __fget_files+0x3a0/0x420 [ 141.718798][ T7684] __sys_sendmmsg+0x227/0x430 [ 141.718825][ T7684] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.718856][ T7684] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.718900][ T7684] ? ksys_write+0x1f0/0x250 [ 141.718942][ T7684] __x64_sys_sendmmsg+0xa0/0xc0 [ 141.718969][ T7684] do_syscall_64+0xf6/0x210 [ 141.719010][ T7684] ? clear_bhb_loop+0x45/0xa0 [ 141.719035][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.719054][ T7684] RIP: 0033:0x7fd245d8e969 [ 141.719072][ T7684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.719089][ T7684] RSP: 002b:00007fd246beb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.719110][ T7684] RAX: ffffffffffffffda RBX: 00007fd245fb6080 RCX: 00007fd245d8e969 [ 141.719124][ T7684] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.719138][ T7684] RBP: 00007fd246beb090 R08: 0000000000000000 R09: 0000000000000000 [ 141.719150][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.719168][ T7684] R13: 0000000000000001 R14: 00007fd245fb6080 R15: 00007ffc9069cc98 [ 141.719210][ T7684] [ 142.162427][ T7696] sctp: [Deprecated]: syz.4.518 (pid 7696) Use of int in max_burst socket option. [ 142.162427][ T7696] Use struct sctp_assoc_value instead [ 142.294603][ T7704] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 142.715225][ T7718] vlan2: entered promiscuous mode [ 143.591632][ T7768] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 143.613397][ T7768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.794530][ T7771] vlan3: entered promiscuous mode [ 143.869431][ T7773] syz.4.543 (7773) used greatest stack depth: 20232 bytes left [ 144.196870][ T7790] FAULT_INJECTION: forcing a failure. [ 144.196870][ T7790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.228369][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.1.548 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 144.228398][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.228411][ T7790] Call Trace: [ 144.228419][ T7790] [ 144.228428][ T7790] dump_stack_lvl+0x189/0x250 [ 144.228461][ T7790] ? __lock_acquire+0xaac/0xd20 [ 144.228491][ T7790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.228520][ T7790] ? __pfx__printk+0x10/0x10 [ 144.228540][ T7790] ? __might_fault+0xb0/0x130 [ 144.228577][ T7790] should_fail_ex+0x414/0x560 [ 144.228614][ T7790] _copy_from_iter+0x1db/0x15a0 [ 144.228645][ T7790] ? trace_kmalloc+0x1f/0xd0 [ 144.228667][ T7790] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 144.228696][ T7790] ? __pfx__copy_from_iter+0x10/0x10 [ 144.228720][ T7790] ? __build_skb_around+0x257/0x3e0 [ 144.228755][ T7790] ? netlink_sendmsg+0x642/0xb30 [ 144.228784][ T7790] ? skb_put+0x11b/0x210 [ 144.228813][ T7790] netlink_sendmsg+0x6b2/0xb30 [ 144.228854][ T7790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.228887][ T7790] ? aa_sock_msg_perm+0x94/0x160 [ 144.228910][ T7790] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.228933][ T7790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.228967][ T7790] __sock_sendmsg+0x219/0x270 [ 144.228996][ T7790] ____sys_sendmsg+0x52d/0x830 [ 144.229022][ T7790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.229053][ T7790] ? import_iovec+0x74/0xa0 [ 144.229082][ T7790] ___sys_sendmsg+0x21f/0x2a0 [ 144.229106][ T7790] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.229164][ T7790] ? __fget_files+0x2a/0x420 [ 144.229190][ T7790] ? __fget_files+0x3a0/0x420 [ 144.229227][ T7790] __sys_sendmmsg+0x227/0x430 [ 144.229254][ T7790] ? __pfx___sys_sendmmsg+0x10/0x10 [ 144.229285][ T7790] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.229329][ T7790] ? ksys_write+0x1f0/0x250 [ 144.229351][ T7790] ? rcu_is_watching+0x15/0xb0 [ 144.229391][ T7790] __x64_sys_sendmmsg+0xa0/0xc0 [ 144.229415][ T7790] do_syscall_64+0xf6/0x210 [ 144.229448][ T7790] ? clear_bhb_loop+0x45/0xa0 [ 144.229473][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.229492][ T7790] RIP: 0033:0x7fbd0178e969 [ 144.229510][ T7790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.229526][ T7790] RSP: 002b:00007fbd026ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.229547][ T7790] RAX: ffffffffffffffda RBX: 00007fbd019b5fa0 RCX: 00007fbd0178e969 [ 144.229562][ T7790] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.229575][ T7790] RBP: 00007fbd026ac090 R08: 0000000000000000 R09: 0000000000000000 [ 144.229587][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.229598][ T7790] R13: 0000000000000000 R14: 00007fbd019b5fa0 R15: 00007ffc8705fc48 [ 144.229628][ T7790] [ 144.718084][ T7801] __nla_validate_parse: 13 callbacks suppressed [ 144.718102][ T7801] netlink: 148 bytes leftover after parsing attributes in process `syz.4.554'. [ 144.739706][ T7801] netlink: 148 bytes leftover after parsing attributes in process `syz.4.554'. [ 144.815556][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 144.837623][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 144.848077][ T7810] netlink: 52 bytes leftover after parsing attributes in process `syz.1.555'. [ 144.892756][ T7809] vlan2: entered promiscuous mode [ 145.046713][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.558'. [ 145.736845][ T7842] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.747088][ T7850] netlink: 148 bytes leftover after parsing attributes in process `syz.3.571'. [ 145.892346][ T7846] bond4: (slave veth9): Enslaving as an active interface with a down link [ 145.936740][ T7853] bond3: (slave veth0_to_bond): Releasing active interface [ 145.988112][ T7853] bond4: (slave veth0_to_bond): making interface the new active one [ 146.014735][ T7853] veth0_to_bond: entered promiscuous mode [ 146.022310][ T7853] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 146.048127][ T7854] syzkaller1: entered promiscuous mode [ 146.064877][ T7854] syzkaller1: entered allmulticast mode [ 146.208957][ T7868] validate_nla: 23 callbacks suppressed [ 146.243584][ T7868] netlink: 'syz.4.575': attribute type 12 has an invalid length. [ 146.254234][ T7868] netlink: 'syz.4.575': attribute type 29 has an invalid length. [ 146.263553][ T7868] netlink: 148 bytes leftover after parsing attributes in process `syz.4.575'. [ 146.273286][ T7872] netlink: 'syz.4.575': attribute type 12 has an invalid length. [ 146.292027][ T7872] netlink: 'syz.4.575': attribute type 29 has an invalid length. [ 146.315995][ T7872] netlink: 148 bytes leftover after parsing attributes in process `syz.4.575'. [ 146.344391][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 146.484886][ T7885] netlink: 'syz.0.583': attribute type 12 has an invalid length. [ 146.493135][ T7885] netlink: 'syz.0.583': attribute type 29 has an invalid length. [ 146.733748][ T7898] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 146.793331][ T7898] netlink: 'syz.4.586': attribute type 10 has an invalid length. [ 146.803705][ T7898] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.814055][ T7898] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.822513][ T7898] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.832234][ T7898] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.844389][ T7902] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 146.857541][ T7898] team0: Port device geneve0 added [ 146.902862][ T7902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.935437][ T7905] bond3: (slave veth7): Enslaving as an active interface with a down link [ 147.031158][ T7902] bond2: (slave veth0_to_bond): Releasing active interface [ 147.088187][ T7902] bond3: (slave veth0_to_bond): making interface the new active one [ 147.106856][ T7902] veth0_to_bond: entered promiscuous mode [ 147.114572][ T7902] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.255912][ T7914] netlink: 'syz.4.592': attribute type 12 has an invalid length. [ 147.299152][ T7914] netlink: 'syz.4.592': attribute type 29 has an invalid length. [ 147.396914][ T7916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.522454][ T7919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.590660][ T7922] bond4: (slave veth11): Enslaving as an active interface with a down link [ 147.642623][ T7925] bond4: (slave veth9): Enslaving as an active interface with a down link [ 147.656658][ T7916] bond3: (slave veth0_to_bond): Releasing active interface [ 147.671389][ T7916] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 147.684365][ T7928] bond3: (slave veth0_to_bond): Releasing active interface [ 147.692317][ T7928] veth0_to_bond: left promiscuous mode [ 147.712068][ T7928] bond4: (slave veth0_to_bond): making interface the new active one [ 147.724490][ T7928] veth0_to_bond: entered promiscuous mode [ 147.733480][ T7928] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.937790][ T7936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.072058][ T7937] bond5: (slave veth11): Enslaving as an active interface with a down link [ 148.150094][ T7954] xt_CT: No such helper "syz1" [ 148.242473][ T7938] bond4: (slave veth0_to_bond): Releasing active interface [ 148.253780][ T7938] veth0_to_bond: left promiscuous mode [ 148.287646][ T7938] bond5: (slave veth0_to_bond): making interface the new active one [ 148.299460][ T7938] veth0_to_bond: entered promiscuous mode [ 148.305707][ T7938] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 148.601287][ T7964] x_tables: duplicate underflow at hook 4 [ 148.686491][ T7970] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 149.476838][ T7992] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.596110][ T8002] bond5: (slave veth13): Enslaving as an active interface with a down link [ 149.714408][ T7992] bond4: (slave veth0_to_bond): Releasing active interface [ 149.728712][ T8012] __nla_validate_parse: 22 callbacks suppressed [ 149.728733][ T8012] netlink: 592 bytes leftover after parsing attributes in process `syz.4.623'. [ 149.784994][ T7992] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 149.823997][ T8017] FAULT_INJECTION: forcing a failure. [ 149.823997][ T8017] name failslab, interval 1, probability 0, space 0, times 0 [ 149.848149][ T8019] netlink: 592 bytes leftover after parsing attributes in process `syz.3.628'. [ 149.857698][ T8014] netlink: 148 bytes leftover after parsing attributes in process `syz.0.625'. [ 149.867050][ T8017] CPU: 1 UID: 0 PID: 8017 Comm: syz.0.625 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 149.867075][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.867087][ T8017] Call Trace: [ 149.867095][ T8017] [ 149.867104][ T8017] dump_stack_lvl+0x189/0x250 [ 149.867141][ T8017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.867170][ T8017] ? __pfx__printk+0x10/0x10 [ 149.867198][ T8017] ? ref_tracker_alloc+0x318/0x460 [ 149.867221][ T8017] should_fail_ex+0x414/0x560 [ 149.867258][ T8017] should_failslab+0xa8/0x100 [ 149.867287][ T8017] kmem_cache_alloc_noprof+0x73/0x3c0 [ 149.867312][ T8017] ? skb_clone+0x212/0x3a0 [ 149.867339][ T8017] skb_clone+0x212/0x3a0 [ 149.867365][ T8017] __netlink_deliver_tap+0x404/0x850 [ 149.867409][ T8017] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.867440][ T8017] netlink_deliver_tap+0x19c/0x1b0 [ 149.867471][ T8017] netlink_unicast+0x72f/0x8d0 [ 149.867509][ T8017] netlink_sendmsg+0x805/0xb30 [ 149.867560][ T8017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.867595][ T8017] ? aa_sock_msg_perm+0x94/0x160 [ 149.867617][ T8017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.867639][ T8017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.867669][ T8017] __sock_sendmsg+0x219/0x270 [ 149.867698][ T8017] ____sys_sendmsg+0x52d/0x830 [ 149.867725][ T8017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.867755][ T8017] ? import_iovec+0x74/0xa0 [ 149.867785][ T8017] ___sys_sendmsg+0x21f/0x2a0 [ 149.867810][ T8017] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.867867][ T8017] ? __fget_files+0x2a/0x420 [ 149.867892][ T8017] ? __fget_files+0x3a0/0x420 [ 149.867928][ T8017] __sys_sendmmsg+0x227/0x430 [ 149.867954][ T8017] ? __pfx___sys_sendmmsg+0x10/0x10 [ 149.867983][ T8017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.868026][ T8017] ? ksys_write+0x1f0/0x250 [ 149.868061][ T8017] __x64_sys_sendmmsg+0xa0/0xc0 [ 149.868084][ T8017] do_syscall_64+0xf6/0x210 [ 149.868109][ T8017] ? clear_bhb_loop+0x45/0xa0 [ 149.868133][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.868147][ T8017] RIP: 0033:0x7f0e8958e969 [ 149.868160][ T8017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.868172][ T8017] RSP: 002b:00007f0e8a37b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 149.868187][ T8017] RAX: ffffffffffffffda RBX: 00007f0e897b6080 RCX: 00007f0e8958e969 [ 149.868198][ T8017] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 149.868207][ T8017] RBP: 00007f0e8a37b090 R08: 0000000000000000 R09: 0000000000000000 [ 149.868216][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.868224][ T8017] R13: 0000000000000001 R14: 00007f0e897b6080 R15: 00007ffcb4eaa1a8 [ 149.868245][ T8017] [ 150.148239][ T8022] netlink: 592 bytes leftover after parsing attributes in process `syz.3.628'. [ 150.170641][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 150.204164][ T8017] netlink: 148 bytes leftover after parsing attributes in process `syz.0.625'. [ 150.415686][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 150.513771][ T8032] netlink: 148 bytes leftover after parsing attributes in process `syz.4.634'. [ 150.524850][ T8034] netlink: 592 bytes leftover after parsing attributes in process `syz.0.635'. [ 150.568556][ T8038] netlink: 148 bytes leftover after parsing attributes in process `syz.4.634'. [ 150.627059][ T8041] netlink: zone id is out of range [ 150.633064][ T8041] netlink: get zone limit has 8 unknown bytes [ 150.764417][ T8035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.085820][ T8035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.195803][ T8035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.387779][ T8035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.500402][ T8077] validate_nla: 26 callbacks suppressed [ 151.500425][ T8077] netlink: 'syz.4.649': attribute type 12 has an invalid length. [ 151.559167][ T8077] netlink: 'syz.4.649': attribute type 29 has an invalid length. [ 151.673391][ T8035] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.735891][ T8035] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.779507][ T8085] netlink: 'syz.4.654': attribute type 12 has an invalid length. [ 151.801563][ T8085] netlink: 'syz.4.654': attribute type 29 has an invalid length. [ 151.837975][ T8035] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.857587][ T8091] netlink: 'syz.4.654': attribute type 12 has an invalid length. [ 151.877620][ T8091] netlink: 'syz.4.654': attribute type 29 has an invalid length. [ 151.896891][ T8035] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.563192][ T8123] netlink: 'syz.0.664': attribute type 12 has an invalid length. [ 152.598732][ T8123] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 152.631777][ T8131] netlink: 'syz.3.667': attribute type 5 has an invalid length. [ 153.314849][ T8164] netlink: 'syz.3.680': attribute type 12 has an invalid length. [ 153.514326][ T8167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 153.587645][ T8174] bond6: (slave veth15): Enslaving as an active interface with a down link [ 153.606175][ T8177] bond5: (slave veth0_to_bond): Releasing active interface [ 153.630752][ T8177] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 153.977588][ T8201] FAULT_INJECTION: forcing a failure. [ 153.977588][ T8201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.024957][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.4.692 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 154.024986][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.024998][ T8201] Call Trace: [ 154.025007][ T8201] [ 154.025016][ T8201] dump_stack_lvl+0x189/0x250 [ 154.025054][ T8201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.025083][ T8201] ? __pfx__printk+0x10/0x10 [ 154.025118][ T8201] should_fail_ex+0x414/0x560 [ 154.025155][ T8201] _copy_from_user+0x2d/0xb0 [ 154.025182][ T8201] __copy_msghdr+0x3c5/0x5b0 [ 154.025214][ T8201] ___sys_sendmsg+0x1a5/0x2a0 [ 154.025237][ T8201] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.025305][ T8201] ? __might_fault+0xb0/0x130 [ 154.025334][ T8201] __sys_sendmmsg+0x227/0x430 [ 154.025361][ T8201] ? __pfx___sys_sendmmsg+0x10/0x10 [ 154.025392][ T8201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.025437][ T8201] ? ksys_write+0x1f0/0x250 [ 154.025458][ T8201] ? rcu_is_watching+0x15/0xb0 [ 154.025500][ T8201] __x64_sys_sendmmsg+0xa0/0xc0 [ 154.025523][ T8201] do_syscall_64+0xf6/0x210 [ 154.025549][ T8201] ? clear_bhb_loop+0x45/0xa0 [ 154.025574][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.025593][ T8201] RIP: 0033:0x7f365378e969 [ 154.025612][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.025628][ T8201] RSP: 002b:00007f365469b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.025649][ T8201] RAX: ffffffffffffffda RBX: 00007f36539b5fa0 RCX: 00007f365378e969 [ 154.025663][ T8201] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 154.025677][ T8201] RBP: 00007f365469b090 R08: 0000000000000000 R09: 0000000000000000 [ 154.025688][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.025700][ T8201] R13: 0000000000000000 R14: 00007f36539b5fa0 R15: 00007ffe7ac84808 [ 154.025732][ T8201] [ 154.758876][ T8229] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.847947][ T8232] bond6: (slave veth13): Enslaving as an active interface with a down link [ 154.880762][ T8229] bond5: (slave veth0_to_bond): Releasing active interface [ 154.890135][ T8229] veth0_to_bond: left promiscuous mode [ 154.940990][ T8229] bond6: (slave veth0_to_bond): making interface the new active one [ 154.975468][ T8229] veth0_to_bond: entered promiscuous mode [ 154.982426][ T8229] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.000182][ T8238] vlan2: entered promiscuous mode [ 155.056571][ T8229] syz.2.701 (8229) used greatest stack depth: 20064 bytes left [ 155.087838][ T8244] __nla_validate_parse: 26 callbacks suppressed [ 155.087858][ T8244] netlink: 148 bytes leftover after parsing attributes in process `syz.0.707'. [ 155.514221][ T8258] bond3: entered promiscuous mode [ 155.522431][ T8258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.657942][ T8263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.729911][ T8263] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 155.746066][ T8263] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 155.778372][ T8263] bond3: (slave ip6gre1): making interface the new active one [ 155.800592][ T8263] ip6gre1: entered promiscuous mode [ 155.820434][ T8263] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 156.378656][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 156.476277][ T8283] netlink: 148 bytes leftover after parsing attributes in process `syz.3.719'. [ 156.536562][ T8289] vlan3: entered promiscuous mode [ 156.911078][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 156.980354][ T8297] veth0: entered promiscuous mode [ 158.411572][ T8352] validate_nla: 12 callbacks suppressed [ 158.411596][ T8352] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 158.535461][ T8352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 158.736277][ T8358] bond7: (slave veth17): Enslaving as an active interface with a down link [ 158.898475][ T8363] bond6: (slave veth0_to_bond): Releasing active interface [ 158.911810][ T8363] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 158.927899][ T8370] netlink: 'syz.4.751': attribute type 12 has an invalid length. [ 158.939340][ T8370] netlink: 'syz.4.751': attribute type 29 has an invalid length. [ 158.947134][ T8370] netlink: 148 bytes leftover after parsing attributes in process `syz.4.751'. [ 158.973923][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 159.081682][ T8378] netlink: 'syz.2.749': attribute type 21 has an invalid length. [ 159.109394][ T8378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.749'. [ 159.135562][ T8374] netlink: 96 bytes leftover after parsing attributes in process `syz.3.748'. [ 159.293747][ T8383] netlink: 44 bytes leftover after parsing attributes in process `syz.0.754'. [ 159.403301][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 159.461492][ T53] veth0_to_bond: left promiscuous mode [ 159.568902][ T8399] netlink: 'syz.4.761': attribute type 21 has an invalid length. [ 159.597315][ T8404] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 159.658355][ T8399] netlink: 'syz.4.761': attribute type 21 has an invalid length. [ 159.692404][ T8404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.742129][ T8399] netlink: 'syz.4.761': attribute type 21 has an invalid length. [ 159.764934][ T8408] bond5: (slave veth11): Enslaving as an active interface with a down link [ 159.777260][ T8404] bond4: (slave veth0_to_bond): Releasing active interface [ 159.828904][ T8399] netlink: 'syz.4.761': attribute type 21 has an invalid length. [ 159.846651][ T8404] bond5: (slave veth0_to_bond): making interface the new active one [ 159.865913][ T8404] veth0_to_bond: entered promiscuous mode [ 159.872337][ T8404] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 159.906152][ T8399] netlink: 'syz.4.761': attribute type 21 has an invalid length. [ 160.193176][ T8430] __nla_validate_parse: 1 callbacks suppressed [ 160.193196][ T8430] netlink: 148 bytes leftover after parsing attributes in process `syz.0.769'. [ 160.242011][ T8430] netlink: 39 bytes leftover after parsing attributes in process `syz.0.769'. [ 160.324525][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 160.387015][ T8435] No such timeout policy "syz0" [ 160.444730][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 160.487581][ T8433] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 160.723543][ T8449] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.772087][ T8457] bond6: (slave veth13): Enslaving as an active interface with a down link [ 160.804929][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 161.122384][ T8449] bond5: (slave veth0_to_bond): Releasing active interface [ 161.131595][ T8449] veth0_to_bond: left promiscuous mode [ 161.154717][ T8449] bond6: (slave veth0_to_bond): making interface the new active one [ 161.175712][ T8449] veth0_to_bond: entered promiscuous mode [ 161.183104][ T8449] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 161.235619][ T8478] netlink: 148 bytes leftover after parsing attributes in process `syz.4.783'. [ 161.263478][ T8478] netlink: 39 bytes leftover after parsing attributes in process `syz.4.783'. [ 161.465500][ T8487] netlink: 148 bytes leftover after parsing attributes in process `syz.4.787'. [ 161.504910][ T8487] netlink: 47 bytes leftover after parsing attributes in process `syz.4.787'. [ 161.566430][ T8497] FAULT_INJECTION: forcing a failure. [ 161.566430][ T8497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.594402][ T8497] CPU: 1 UID: 0 PID: 8497 Comm: syz.3.789 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 161.594433][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.594445][ T8497] Call Trace: [ 161.594452][ T8497] [ 161.594460][ T8497] dump_stack_lvl+0x189/0x250 [ 161.594500][ T8497] ? __lock_acquire+0xaac/0xd20 [ 161.594532][ T8497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.594561][ T8497] ? __pfx__printk+0x10/0x10 [ 161.594581][ T8497] ? __might_fault+0xb0/0x130 [ 161.594619][ T8497] should_fail_ex+0x414/0x560 [ 161.594657][ T8497] _copy_from_user+0x2d/0xb0 [ 161.594684][ T8497] ___sys_sendmsg+0x158/0x2a0 [ 161.594709][ T8497] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.594768][ T8497] ? __fget_files+0x2a/0x420 [ 161.594793][ T8497] ? __fget_files+0x3a0/0x420 [ 161.594830][ T8497] __x64_sys_sendmsg+0x19b/0x260 [ 161.594853][ T8497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.594893][ T8497] ? do_syscall_64+0xba/0x210 [ 161.594921][ T8497] do_syscall_64+0xf6/0x210 [ 161.594946][ T8497] ? clear_bhb_loop+0x45/0xa0 [ 161.594971][ T8497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.594990][ T8497] RIP: 0033:0x7fd245d8e969 [ 161.595008][ T8497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.595024][ T8497] RSP: 002b:00007fd246beb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.595045][ T8497] RAX: ffffffffffffffda RBX: 00007fd245fb6080 RCX: 00007fd245d8e969 [ 161.595058][ T8497] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 161.595070][ T8497] RBP: 00007fd246beb090 R08: 0000000000000000 R09: 0000000000000000 [ 161.595083][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.595094][ T8497] R13: 0000000000000001 R14: 00007fd245fb6080 R15: 00007ffc9069cc98 [ 161.595125][ T8497] [ 161.608997][ T8492] can: request_module (can-proto-0) failed. [ 161.719335][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 161.920917][ T8508] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.976170][ T8559] FAULT_INJECTION: forcing a failure. [ 162.976170][ T8559] name failslab, interval 1, probability 0, space 0, times 0 [ 163.001468][ T8559] CPU: 1 UID: 0 PID: 8559 Comm: syz.0.808 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 163.001499][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.001512][ T8559] Call Trace: [ 163.001520][ T8559] [ 163.001529][ T8559] dump_stack_lvl+0x189/0x250 [ 163.001572][ T8559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.001602][ T8559] ? __pfx__printk+0x10/0x10 [ 163.001629][ T8559] ? __pfx___might_resched+0x10/0x10 [ 163.001653][ T8559] should_fail_ex+0x414/0x560 [ 163.001691][ T8559] should_failslab+0xa8/0x100 [ 163.001719][ T8559] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 163.001746][ T8559] ? __alloc_skb+0x112/0x2d0 [ 163.001781][ T8559] __alloc_skb+0x112/0x2d0 [ 163.001816][ T8559] netlink_sendmsg+0x5c6/0xb30 [ 163.001855][ T8559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.001888][ T8559] ? aa_sock_msg_perm+0x94/0x160 [ 163.001909][ T8559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.001931][ T8559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.001962][ T8559] __sock_sendmsg+0x219/0x270 [ 163.001992][ T8559] ____sys_sendmsg+0x505/0x830 [ 163.002019][ T8559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.002049][ T8559] ? import_iovec+0x74/0xa0 [ 163.002080][ T8559] ___sys_sendmsg+0x21f/0x2a0 [ 163.002104][ T8559] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.002163][ T8559] ? __fget_files+0x2a/0x420 [ 163.002188][ T8559] ? __fget_files+0x3a0/0x420 [ 163.002224][ T8559] __x64_sys_sendmsg+0x19b/0x260 [ 163.002249][ T8559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.002288][ T8559] ? do_syscall_64+0xba/0x210 [ 163.002318][ T8559] do_syscall_64+0xf6/0x210 [ 163.002344][ T8559] ? clear_bhb_loop+0x45/0xa0 [ 163.002378][ T8559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.002397][ T8559] RIP: 0033:0x7f0e8958e969 [ 163.002415][ T8559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.002431][ T8559] RSP: 002b:00007f0e8a39c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.002452][ T8559] RAX: ffffffffffffffda RBX: 00007f0e897b5fa0 RCX: 00007f0e8958e969 [ 163.002467][ T8559] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 163.002479][ T8559] RBP: 00007f0e8a39c090 R08: 0000000000000000 R09: 0000000000000000 [ 163.002491][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.002502][ T8559] R13: 0000000000000000 R14: 00007f0e897b5fa0 R15: 00007ffcb4eaa1a8 [ 163.002534][ T8559] [ 163.766186][ T8581] Cannot find del_set index 1 as target [ 163.806566][ T8586] FAULT_INJECTION: forcing a failure. [ 163.806566][ T8586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.869293][ T8580] validate_nla: 22 callbacks suppressed [ 163.869313][ T8580] netlink: 'syz.0.819': attribute type 12 has an invalid length. [ 163.898734][ T8586] CPU: 1 UID: 0 PID: 8586 Comm: syz.0.819 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 163.898762][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.898774][ T8586] Call Trace: [ 163.898782][ T8586] [ 163.898791][ T8586] dump_stack_lvl+0x189/0x250 [ 163.898823][ T8586] ? __lock_acquire+0xaac/0xd20 [ 163.898852][ T8586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.898880][ T8586] ? __pfx__printk+0x10/0x10 [ 163.898899][ T8586] ? __might_fault+0xb0/0x130 [ 163.898935][ T8586] should_fail_ex+0x414/0x560 [ 163.898975][ T8586] _copy_from_user+0x2d/0xb0 [ 163.899010][ T8586] ___sys_sendmsg+0x158/0x2a0 [ 163.899035][ T8586] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.899092][ T8586] ? __fget_files+0x2a/0x420 [ 163.899116][ T8586] ? __fget_files+0x3a0/0x420 [ 163.899153][ T8586] __sys_sendmmsg+0x227/0x430 [ 163.899179][ T8586] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.899210][ T8586] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.899254][ T8586] ? ksys_write+0x1f0/0x250 [ 163.899288][ T8586] __x64_sys_sendmmsg+0xa0/0xc0 [ 163.899311][ T8586] do_syscall_64+0xf6/0x210 [ 163.899338][ T8586] ? clear_bhb_loop+0x45/0xa0 [ 163.899362][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.899381][ T8586] RIP: 0033:0x7f0e8958e969 [ 163.899399][ T8586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.899416][ T8586] RSP: 002b:00007f0e8a37b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.899436][ T8586] RAX: ffffffffffffffda RBX: 00007f0e897b6080 RCX: 00007f0e8958e969 [ 163.899451][ T8586] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 163.899464][ T8586] RBP: 00007f0e8a37b090 R08: 0000000000000000 R09: 0000000000000000 [ 163.899476][ T8586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.899488][ T8586] R13: 0000000000000001 R14: 00007f0e897b6080 R15: 00007ffcb4eaa1a8 [ 163.899519][ T8586] [ 163.953161][ T8580] netlink: 'syz.0.819': attribute type 29 has an invalid length. [ 164.121429][ T8580] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 164.149019][ T8580] netlink: 'syz.0.819': attribute type 2 has an invalid length. [ 164.875308][ T8636] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.053137][ T8636] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.109022][ T30] audit: type=1800 audit(1745569842.601:4): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.835" name="xffffffffffffffff00000000000000000000007" dev="tmpfs" ino=846 res=0 errno=0 [ 165.168621][ T8650] vlan3: entered promiscuous mode [ 165.281434][ T8647] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.310057][ T8636] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.333682][ T8662] netlink: 'syz.4.839': attribute type 6 has an invalid length. [ 165.383877][ T8647] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.448396][ T8636] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.517157][ T8647] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.563546][ T8662] __nla_validate_parse: 10 callbacks suppressed [ 165.563568][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.839'. [ 165.640441][ T8647] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.693140][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 165.757076][ T8636] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.843115][ T8636] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.863041][ T8684] FAULT_INJECTION: forcing a failure. [ 165.863041][ T8684] name failslab, interval 1, probability 0, space 0, times 0 [ 165.909715][ T8684] CPU: 1 UID: 0 PID: 8684 Comm: syz.1.846 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 165.909744][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.909756][ T8684] Call Trace: [ 165.909763][ T8684] [ 165.909772][ T8684] dump_stack_lvl+0x189/0x250 [ 165.909810][ T8684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.909839][ T8684] ? __pfx__printk+0x10/0x10 [ 165.909876][ T8684] ? __pfx___might_resched+0x10/0x10 [ 165.909900][ T8684] should_fail_ex+0x414/0x560 [ 165.909937][ T8684] should_failslab+0xa8/0x100 [ 165.909965][ T8684] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 165.909991][ T8684] ? __alloc_skb+0x112/0x2d0 [ 165.910025][ T8684] __alloc_skb+0x112/0x2d0 [ 165.910059][ T8684] netlink_sendmsg+0x5c6/0xb30 [ 165.910100][ T8684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.910134][ T8684] ? aa_sock_msg_perm+0x94/0x160 [ 165.910156][ T8684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.910178][ T8684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.910209][ T8684] __sock_sendmsg+0x219/0x270 [ 165.910238][ T8684] ____sys_sendmsg+0x52d/0x830 [ 165.910264][ T8684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.910295][ T8684] ? import_iovec+0x74/0xa0 [ 165.910325][ T8684] ___sys_sendmsg+0x21f/0x2a0 [ 165.910348][ T8684] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.910406][ T8684] ? __fget_files+0x2a/0x420 [ 165.910431][ T8684] ? __fget_files+0x3a0/0x420 [ 165.910467][ T8684] __sys_sendmmsg+0x227/0x430 [ 165.910494][ T8684] ? __pfx___sys_sendmmsg+0x10/0x10 [ 165.910525][ T8684] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.910569][ T8684] ? ksys_write+0x1f0/0x250 [ 165.910590][ T8684] ? rcu_is_watching+0x15/0xb0 [ 165.910630][ T8684] __x64_sys_sendmmsg+0xa0/0xc0 [ 165.910653][ T8684] do_syscall_64+0xf6/0x210 [ 165.910680][ T8684] ? clear_bhb_loop+0x45/0xa0 [ 165.910705][ T8684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.910723][ T8684] RIP: 0033:0x7fbd0178e969 [ 165.910741][ T8684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.910757][ T8684] RSP: 002b:00007fbd026ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.910778][ T8684] RAX: ffffffffffffffda RBX: 00007fbd019b5fa0 RCX: 00007fbd0178e969 [ 165.910793][ T8684] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 165.910805][ T8684] RBP: 00007fbd026ac090 R08: 0000000000000000 R09: 0000000000000000 [ 165.910817][ T8684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.910828][ T8684] R13: 0000000000000000 R14: 00007fbd019b5fa0 R15: 00007ffc8705fc48 [ 165.910863][ T8684] [ 165.932586][ T8636] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.116224][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 166.137832][ T8689] netlink: 'syz.0.847': attribute type 12 has an invalid length. [ 166.211662][ T8689] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 166.222505][ T8689] netlink: 148 bytes leftover after parsing attributes in process `syz.0.847'. [ 166.232812][ T8689] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 166.241113][ T8689] netlink: 47 bytes leftover after parsing attributes in process `syz.0.847'. [ 166.308701][ T8647] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.326738][ T8691] netlink: 'syz.0.847': attribute type 12 has an invalid length. [ 166.334710][ T8691] netlink: 'syz.0.847': attribute type 29 has an invalid length. [ 166.347802][ T8691] netlink: 148 bytes leftover after parsing attributes in process `syz.0.847'. [ 166.357621][ T8691] netlink: 47 bytes leftover after parsing attributes in process `syz.0.847'. [ 166.377272][ T8636] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.427464][ T8647] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.493662][ T8647] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.565698][ T8647] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.588042][ T8699] netlink: 148 bytes leftover after parsing attributes in process `syz.4.852'. [ 166.602907][ T8699] netlink: 47 bytes leftover after parsing attributes in process `syz.4.852'. [ 166.775336][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 166.979639][ T8713] 8021q: adding VLAN 0 to HW filter on device bond7 [ 167.054888][ T8717] bond7: (slave veth1): Enslaving as an active interface with a down link [ 167.102080][ T8719] bond6: (slave veth0_to_bond): Releasing active interface [ 167.120880][ T8719] veth0_to_bond: left promiscuous mode [ 167.144777][ T8719] bond7: (slave veth0_to_bond): making interface the new active one [ 167.232422][ T8719] veth0_to_bond: entered promiscuous mode [ 167.238865][ T8719] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 167.269622][ T8721] vlan2: entered promiscuous mode [ 167.726005][ T8754] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.759246][ T8754] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 168.165957][ T8771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.507831][ T8787] FAULT_INJECTION: forcing a failure. [ 168.507831][ T8787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.529625][ T8787] CPU: 0 UID: 0 PID: 8787 Comm: syz.1.879 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 168.529655][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.529667][ T8787] Call Trace: [ 168.529675][ T8787] [ 168.529683][ T8787] dump_stack_lvl+0x189/0x250 [ 168.529716][ T8787] ? __lock_acquire+0xaac/0xd20 [ 168.529747][ T8787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.529776][ T8787] ? __pfx__printk+0x10/0x10 [ 168.529797][ T8787] ? __might_fault+0xb0/0x130 [ 168.529834][ T8787] should_fail_ex+0x414/0x560 [ 168.529871][ T8787] _copy_from_iter+0x1db/0x15a0 [ 168.529902][ T8787] ? trace_kmalloc+0x1f/0xd0 [ 168.529923][ T8787] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 168.529951][ T8787] ? __pfx__copy_from_iter+0x10/0x10 [ 168.529976][ T8787] ? __build_skb_around+0x257/0x3e0 [ 168.530011][ T8787] ? netlink_sendmsg+0x642/0xb30 [ 168.530040][ T8787] ? skb_put+0x11b/0x210 [ 168.530062][ T8787] netlink_sendmsg+0x6b2/0xb30 [ 168.530102][ T8787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.530136][ T8787] ? aa_sock_msg_perm+0x94/0x160 [ 168.530158][ T8787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.530180][ T8787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.530211][ T8787] __sock_sendmsg+0x219/0x270 [ 168.530240][ T8787] ____sys_sendmsg+0x52d/0x830 [ 168.530266][ T8787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.530297][ T8787] ? import_iovec+0x74/0xa0 [ 168.530325][ T8787] ___sys_sendmsg+0x21f/0x2a0 [ 168.530347][ T8787] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.530402][ T8787] ? __fget_files+0x2a/0x420 [ 168.530426][ T8787] ? __fget_files+0x3a0/0x420 [ 168.530462][ T8787] __sys_sendmmsg+0x227/0x430 [ 168.530488][ T8787] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.530518][ T8787] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.530560][ T8787] ? ksys_write+0x1f0/0x250 [ 168.530581][ T8787] ? rcu_is_watching+0x15/0xb0 [ 168.530629][ T8787] __x64_sys_sendmmsg+0xa0/0xc0 [ 168.530651][ T8787] do_syscall_64+0xf6/0x210 [ 168.530678][ T8787] ? clear_bhb_loop+0x45/0xa0 [ 168.530703][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.530722][ T8787] RIP: 0033:0x7fbd0178e969 [ 168.530740][ T8787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.530756][ T8787] RSP: 002b:00007fbd026ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.530777][ T8787] RAX: ffffffffffffffda RBX: 00007fbd019b5fa0 RCX: 00007fbd0178e969 [ 168.530791][ T8787] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 168.530804][ T8787] RBP: 00007fbd026ac090 R08: 0000000000000000 R09: 0000000000000000 [ 168.530816][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.530827][ T8787] R13: 0000000000000000 R14: 00007fbd019b5fa0 R15: 00007ffc8705fc48 [ 168.530858][ T8787] [ 168.830667][ T8798] FAULT_INJECTION: forcing a failure. [ 168.830667][ T8798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.857985][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.2.883 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 168.858016][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.858029][ T8798] Call Trace: [ 168.858037][ T8798] [ 168.858046][ T8798] dump_stack_lvl+0x189/0x250 [ 168.858080][ T8798] ? __lock_acquire+0xaac/0xd20 [ 168.858111][ T8798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.858140][ T8798] ? __pfx__printk+0x10/0x10 [ 168.858160][ T8798] ? __might_fault+0xb0/0x130 [ 168.858200][ T8798] should_fail_ex+0x414/0x560 [ 168.858236][ T8798] _copy_from_iter+0x1db/0x15a0 [ 168.858265][ T8798] ? trace_kmalloc+0x1f/0xd0 [ 168.858287][ T8798] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 168.858314][ T8798] ? __pfx__copy_from_iter+0x10/0x10 [ 168.858338][ T8798] ? __build_skb_around+0x257/0x3e0 [ 168.858373][ T8798] ? netlink_sendmsg+0x642/0xb30 [ 168.858399][ T8798] ? skb_put+0x11b/0x210 [ 168.858421][ T8798] netlink_sendmsg+0x6b2/0xb30 [ 168.858459][ T8798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.858491][ T8798] ? aa_sock_msg_perm+0x94/0x160 [ 168.858514][ T8798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.858535][ T8798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.858564][ T8798] __sock_sendmsg+0x219/0x270 [ 168.858593][ T8798] ____sys_sendmsg+0x52d/0x830 [ 168.858620][ T8798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.858651][ T8798] ? import_iovec+0x74/0xa0 [ 168.858680][ T8798] ___sys_sendmsg+0x21f/0x2a0 [ 168.858704][ T8798] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.858763][ T8798] ? __fget_files+0x2a/0x420 [ 168.858787][ T8798] ? __fget_files+0x3a0/0x420 [ 168.858824][ T8798] __sys_sendmmsg+0x227/0x430 [ 168.858851][ T8798] ? __pfx___sys_sendmmsg+0x10/0x10 [ 168.858890][ T8798] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.858935][ T8798] ? ksys_write+0x1f0/0x250 [ 168.858956][ T8798] ? rcu_is_watching+0x15/0xb0 [ 168.858994][ T8798] __x64_sys_sendmmsg+0xa0/0xc0 [ 168.859017][ T8798] do_syscall_64+0xf6/0x210 [ 168.859043][ T8798] ? clear_bhb_loop+0x45/0xa0 [ 168.859067][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.859086][ T8798] RIP: 0033:0x7f7f4878e969 [ 168.859105][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.859121][ T8798] RSP: 002b:00007f7f49611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.859142][ T8798] RAX: ffffffffffffffda RBX: 00007f7f489b6080 RCX: 00007f7f4878e969 [ 168.859157][ T8798] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 168.859170][ T8798] RBP: 00007f7f49611090 R08: 0000000000000000 R09: 0000000000000000 [ 168.859182][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.859194][ T8798] R13: 0000000000000000 R14: 00007f7f489b6080 R15: 00007ffea46fa818 [ 168.859224][ T8798] [ 169.294435][ T8807] FAULT_INJECTION: forcing a failure. [ 169.294435][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 169.308350][ T8807] CPU: 1 UID: 0 PID: 8807 Comm: syz.1.885 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 169.308379][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.308391][ T8807] Call Trace: [ 169.308399][ T8807] [ 169.308407][ T8807] dump_stack_lvl+0x189/0x250 [ 169.308445][ T8807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.308474][ T8807] ? __pfx__printk+0x10/0x10 [ 169.308501][ T8807] ? __pfx___might_resched+0x10/0x10 [ 169.308518][ T8807] ? fs_reclaim_acquire+0x7d/0x100 [ 169.308553][ T8807] should_fail_ex+0x414/0x560 [ 169.308590][ T8807] should_failslab+0xa8/0x100 [ 169.308618][ T8807] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 169.308644][ T8807] ? __alloc_skb+0x112/0x2d0 [ 169.308680][ T8807] __alloc_skb+0x112/0x2d0 [ 169.308714][ T8807] netlink_ack+0x146/0xa50 [ 169.308741][ T8807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.308774][ T8807] ? ref_tracker_free+0x63a/0x7d0 [ 169.308792][ T8807] ? __copy_skb_header+0xa7/0x550 [ 169.308823][ T8807] netlink_rcv_skb+0x2a0/0x490 [ 169.308867][ T8807] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.308897][ T8807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.308950][ T8807] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.308978][ T8807] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.309014][ T8807] netlink_unicast+0x758/0x8d0 [ 169.309052][ T8807] netlink_sendmsg+0x805/0xb30 [ 169.309090][ T8807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.309124][ T8807] ? aa_sock_msg_perm+0x94/0x160 [ 169.309146][ T8807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.309168][ T8807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.309199][ T8807] __sock_sendmsg+0x219/0x270 [ 169.309228][ T8807] ____sys_sendmsg+0x505/0x830 [ 169.309254][ T8807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.309285][ T8807] ? import_iovec+0x74/0xa0 [ 169.309315][ T8807] ___sys_sendmsg+0x21f/0x2a0 [ 169.309338][ T8807] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.309396][ T8807] ? __fget_files+0x2a/0x420 [ 169.309421][ T8807] ? __fget_files+0x3a0/0x420 [ 169.309462][ T8807] __x64_sys_sendmsg+0x19b/0x260 [ 169.309487][ T8807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.309525][ T8807] ? do_syscall_64+0xba/0x210 [ 169.309555][ T8807] do_syscall_64+0xf6/0x210 [ 169.309581][ T8807] ? clear_bhb_loop+0x45/0xa0 [ 169.309605][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.309624][ T8807] RIP: 0033:0x7fbd0178e969 [ 169.309642][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.309658][ T8807] RSP: 002b:00007fbd026ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.309679][ T8807] RAX: ffffffffffffffda RBX: 00007fbd019b5fa0 RCX: 00007fbd0178e969 [ 169.309693][ T8807] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.309705][ T8807] RBP: 00007fbd026ac090 R08: 0000000000000000 R09: 0000000000000000 [ 169.309718][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.309729][ T8807] R13: 0000000000000000 R14: 00007fbd019b5fa0 R15: 00007ffc8705fc48 [ 169.309759][ T8807] [ 170.425251][ T8854] validate_nla: 13 callbacks suppressed [ 170.425270][ T8854] netlink: 'syz.4.900': attribute type 12 has an invalid length. [ 170.477087][ T8854] netlink: 'syz.4.900': attribute type 29 has an invalid length. [ 170.504770][ T8854] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 170.539609][ T8854] FAULT_INJECTION: forcing a failure. [ 170.539609][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 170.599607][ T8854] CPU: 0 UID: 0 PID: 8854 Comm: syz.4.900 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 170.599637][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.599650][ T8854] Call Trace: [ 170.599658][ T8854] [ 170.599666][ T8854] dump_stack_lvl+0x189/0x250 [ 170.599714][ T8854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.599743][ T8854] ? __pfx__printk+0x10/0x10 [ 170.599769][ T8854] ? __pfx___might_resched+0x10/0x10 [ 170.599787][ T8854] ? fs_reclaim_acquire+0x7d/0x100 [ 170.599821][ T8854] should_fail_ex+0x414/0x560 [ 170.599858][ T8854] should_failslab+0xa8/0x100 [ 170.599886][ T8854] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 170.599912][ T8854] ? __alloc_skb+0x112/0x2d0 [ 170.599947][ T8854] __alloc_skb+0x112/0x2d0 [ 170.599982][ T8854] netlink_ack+0x146/0xa50 [ 170.600008][ T8854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.600037][ T8854] ? __lock_acquire+0xaac/0xd20 [ 170.600079][ T8854] netlink_rcv_skb+0x2a0/0x490 [ 170.600109][ T8854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.600140][ T8854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.600189][ T8854] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.600218][ T8854] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.600252][ T8854] netlink_unicast+0x758/0x8d0 [ 170.600291][ T8854] netlink_sendmsg+0x805/0xb30 [ 170.600331][ T8854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.600365][ T8854] ? aa_sock_msg_perm+0x94/0x160 [ 170.600387][ T8854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.600409][ T8854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.600440][ T8854] __sock_sendmsg+0x219/0x270 [ 170.600470][ T8854] ____sys_sendmsg+0x505/0x830 [ 170.600497][ T8854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.600528][ T8854] ? import_iovec+0x74/0xa0 [ 170.600558][ T8854] ___sys_sendmsg+0x21f/0x2a0 [ 170.600582][ T8854] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.600641][ T8854] ? __fget_files+0x2a/0x420 [ 170.600665][ T8854] ? __fget_files+0x3a0/0x420 [ 170.600707][ T8854] __x64_sys_sendmsg+0x19b/0x260 [ 170.600732][ T8854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.600770][ T8854] ? do_syscall_64+0xba/0x210 [ 170.600800][ T8854] do_syscall_64+0xf6/0x210 [ 170.600826][ T8854] ? clear_bhb_loop+0x45/0xa0 [ 170.600850][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.600868][ T8854] RIP: 0033:0x7f365378e969 [ 170.600887][ T8854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.600903][ T8854] RSP: 002b:00007f365469b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.600923][ T8854] RAX: ffffffffffffffda RBX: 00007f36539b5fa0 RCX: 00007f365378e969 [ 170.600937][ T8854] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 170.600949][ T8854] RBP: 00007f365469b090 R08: 0000000000000000 R09: 0000000000000000 [ 170.600961][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.600973][ T8854] R13: 0000000000000000 R14: 00007f36539b5fa0 R15: 00007ffe7ac84808 [ 170.601004][ T8854] [ 171.183903][ T8885] netlink: 'syz.4.911': attribute type 3 has an invalid length. [ 171.195501][ T8885] __nla_validate_parse: 11 callbacks suppressed [ 171.195520][ T8885] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.911'. [ 171.404675][ T8895] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 171.440246][ T8893] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 171.513016][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 171.556814][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'. [ 171.836129][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.920'. [ 171.861530][ T8914] Cannot find del_set index 1 as target [ 171.898144][ T8924] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 171.933304][ T8924] bond8: entered promiscuous mode [ 171.940117][ T8924] 8021q: adding VLAN 0 to HW filter on device bond8 [ 172.066169][ T8928] FAULT_INJECTION: forcing a failure. [ 172.066169][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 172.109200][ T8928] CPU: 1 UID: 0 PID: 8928 Comm: syz.3.921 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 172.109230][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.109243][ T8928] Call Trace: [ 172.109251][ T8928] [ 172.109259][ T8928] dump_stack_lvl+0x189/0x250 [ 172.109307][ T8928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.109336][ T8928] ? __pfx__printk+0x10/0x10 [ 172.109353][ T8928] ? __lock_acquire+0xaac/0xd20 [ 172.109397][ T8928] should_fail_ex+0x414/0x560 [ 172.109438][ T8928] should_failslab+0xa8/0x100 [ 172.109467][ T8928] kmem_cache_alloc_noprof+0x73/0x3c0 [ 172.109493][ T8928] ? skb_clone+0x212/0x3a0 [ 172.109520][ T8928] skb_clone+0x212/0x3a0 [ 172.109545][ T8928] __netlink_deliver_tap+0x404/0x850 [ 172.109590][ T8928] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.109622][ T8928] netlink_deliver_tap+0x19c/0x1b0 [ 172.109653][ T8928] netlink_sendskb+0x68/0x140 [ 172.109682][ T8928] netlink_rcv_skb+0x2a0/0x490 [ 172.109712][ T8928] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.109743][ T8928] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.109794][ T8928] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.109822][ T8928] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.109858][ T8928] netlink_unicast+0x758/0x8d0 [ 172.109897][ T8928] netlink_sendmsg+0x805/0xb30 [ 172.109938][ T8928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.109972][ T8928] ? aa_sock_msg_perm+0x94/0x160 [ 172.109995][ T8928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.110018][ T8928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.110049][ T8928] __sock_sendmsg+0x219/0x270 [ 172.110079][ T8928] ____sys_sendmsg+0x505/0x830 [ 172.110106][ T8928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.110137][ T8928] ? import_iovec+0x74/0xa0 [ 172.110167][ T8928] ___sys_sendmsg+0x21f/0x2a0 [ 172.110191][ T8928] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.110256][ T8928] ? __fget_files+0x2a/0x420 [ 172.110281][ T8928] ? __fget_files+0x3a0/0x420 [ 172.110326][ T8928] __x64_sys_sendmsg+0x19b/0x260 [ 172.110350][ T8928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.110390][ T8928] ? do_syscall_64+0xba/0x210 [ 172.110420][ T8928] do_syscall_64+0xf6/0x210 [ 172.110446][ T8928] ? clear_bhb_loop+0x45/0xa0 [ 172.110472][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.110491][ T8928] RIP: 0033:0x7fd245d8e969 [ 172.110509][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.110525][ T8928] RSP: 002b:00007fd246beb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.110547][ T8928] RAX: ffffffffffffffda RBX: 00007fd245fb6080 RCX: 00007fd245d8e969 [ 172.110562][ T8928] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 172.110574][ T8928] RBP: 00007fd246beb090 R08: 0000000000000000 R09: 0000000000000000 [ 172.110586][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.110597][ T8928] R13: 0000000000000001 R14: 00007fd245fb6080 R15: 00007ffc9069cc98 [ 172.110629][ T8928] [ 172.126068][ T8937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.924'. [ 172.395609][ T8948] netlink: 'syz.2.926': attribute type 12 has an invalid length. [ 172.415738][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 172.448479][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 172.816569][ T8959] netlink: 'syz.4.931': attribute type 15 has an invalid length. [ 172.828174][ T8959] netlink: 248 bytes leftover after parsing attributes in process `syz.4.931'. [ 172.944352][ T8965] IPv6: NLM_F_REPLACE set, but no existing node found! [ 173.021661][ T8966] tap0: tun_chr_ioctl cmd 1074812118 [ 173.195745][ T8980] FAULT_INJECTION: forcing a failure. [ 173.195745][ T8980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.253918][ T8980] CPU: 1 UID: 0 PID: 8980 Comm: syz.4.936 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 173.253951][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.253964][ T8980] Call Trace: [ 173.253973][ T8980] [ 173.253983][ T8980] dump_stack_lvl+0x189/0x250 [ 173.254015][ T8980] ? __lock_acquire+0xaac/0xd20 [ 173.254048][ T8980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.254077][ T8980] ? __pfx__printk+0x10/0x10 [ 173.254097][ T8980] ? __might_fault+0xb0/0x130 [ 173.254135][ T8980] should_fail_ex+0x414/0x560 [ 173.254179][ T8980] _copy_from_user+0x2d/0xb0 [ 173.254207][ T8980] ___sys_sendmsg+0x158/0x2a0 [ 173.254231][ T8980] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.254291][ T8980] ? __fget_files+0x2a/0x420 [ 173.254316][ T8980] ? __fget_files+0x3a0/0x420 [ 173.254352][ T8980] __x64_sys_sendmsg+0x19b/0x260 [ 173.254376][ T8980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.254416][ T8980] ? do_syscall_64+0xba/0x210 [ 173.254446][ T8980] do_syscall_64+0xf6/0x210 [ 173.254472][ T8980] ? clear_bhb_loop+0x45/0xa0 [ 173.254496][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.254515][ T8980] RIP: 0033:0x7f365378e969 [ 173.254534][ T8980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.254552][ T8980] RSP: 002b:00007f365469b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.254573][ T8980] RAX: ffffffffffffffda RBX: 00007f36539b5fa0 RCX: 00007f365378e969 [ 173.254589][ T8980] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 173.254601][ T8980] RBP: 00007f365469b090 R08: 0000000000000000 R09: 0000000000000000 [ 173.254614][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.254626][ T8980] R13: 0000000000000000 R14: 00007f36539b5fa0 R15: 00007ffe7ac84808 [ 173.254658][ T8980] [ 173.477345][ T8982] netlink: 248 bytes leftover after parsing attributes in process `syz.0.938'. [ 173.670266][ T53] veth0_to_bond: left promiscuous mode [ 173.776044][ T8989] ------------[ cut here ]------------ [ 173.781930][ T8989] UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9 [ 173.790004][ T8989] index 21 is out of range for type 'const int[12]' [ 173.796633][ T8989] CPU: 0 UID: 0 PID: 8989 Comm: syz.4.940 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 173.796661][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.796674][ T8989] Call Trace: [ 173.796682][ T8989] [ 173.796691][ T8989] dump_stack_lvl+0x189/0x250 [ 173.796729][ T8989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.796759][ T8989] ? __pfx__printk+0x10/0x10 [ 173.796776][ T8989] ? sctp_v6_get_dst+0x7cc/0x1bc0 [ 173.796802][ T8989] ? __sctp_connect+0x5ba/0xd50 [ 173.796815][ T8989] ? sctp_getsockopt+0x98a/0xb60 [ 173.796839][ T8989] ? do_sock_getsockopt+0x35d/0x650 [ 173.796853][ T8989] ? __x64_sys_getsockopt+0x1a5/0x250 [ 173.796874][ T8989] ubsan_epilogue+0xa/0x40 [ 173.796890][ T8989] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 173.796916][ T8989] ip6_rt_copy_init+0x8e7/0x970 [ 173.796941][ T8989] ip6_pol_route+0xbac/0x1180 [ 173.796963][ T8989] ? ip6_pol_route+0x162/0x1180 [ 173.796989][ T8989] ? __pfx_ip6_pol_route+0x10/0x10 [ 173.797018][ T8989] ? chacha_permute+0x4e6/0xf00 [ 173.797041][ T8989] fib6_rule_lookup+0x348/0x6f0 [ 173.797064][ T8989] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 173.797087][ T8989] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 173.797122][ T8989] ? ip6_route_output_flags+0x2e/0x5d0 [ 173.797158][ T8989] ip6_route_output_flags+0x364/0x5d0 [ 173.797181][ T8989] ? ip6_route_output_flags+0x2e/0x5d0 [ 173.797206][ T8989] ip6_dst_lookup_tail+0x1ae/0x1510 [ 173.797233][ T8989] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 173.797247][ T8989] ? __lock_acquire+0xaac/0xd20 [ 173.797286][ T8989] ip6_dst_lookup_flow+0x47/0xe0 [ 173.797303][ T8989] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 173.797325][ T8989] sctp_v6_get_dst+0x7cc/0x1bc0 [ 173.797348][ T8989] ? crng_make_state+0x13a/0x700 [ 173.797370][ T8989] ? __pfx_crng_make_state+0x10/0x10 [ 173.797398][ T8989] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 173.797418][ T8989] ? __asan_memset+0x22/0x50 [ 173.797454][ T8989] ? dst_release+0x72/0x1b0 [ 173.797475][ T8989] sctp_transport_route+0x115/0x2f0 [ 173.797499][ T8989] sctp_assoc_add_peer+0x657/0x13b0 [ 173.797525][ T8989] sctp_connect_new_asoc+0x30a/0x690 [ 173.797544][ T8989] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 173.797561][ T8989] ? __ipv6_addr_type+0x247/0x2f0 [ 173.797583][ T8989] ? sctp_inet6_send_verify+0x6e/0x300 [ 173.797603][ T8989] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 173.797631][ T8989] __sctp_connect+0x5ba/0xd50 [ 173.797656][ T8989] ? __pfx___sctp_connect+0x10/0x10 [ 173.797675][ T8989] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 173.797694][ T8989] ? security_sctp_bind_connect+0x7e/0x2e0 [ 173.797721][ T8989] sctp_getsockopt_connectx3+0x2c4/0x440 [ 173.797745][ T8989] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 173.797768][ T8989] ? __local_bh_enable_ip+0x12d/0x1c0 [ 173.797783][ T8989] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 173.797807][ T8989] sctp_getsockopt+0x98a/0xb60 [ 173.797835][ T8989] do_sock_getsockopt+0x35d/0x650 [ 173.797854][ T8989] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 173.797869][ T8989] ? do_syscall_64+0x40/0x210 [ 173.797889][ T8989] ? __fget_files+0x2a/0x420 [ 173.797909][ T8989] ? __fget_files+0x3a0/0x420 [ 173.797928][ T8989] ? __fget_files+0x2a/0x420 [ 173.797955][ T8989] __x64_sys_getsockopt+0x1a5/0x250 [ 173.797970][ T8989] ? do_syscall_64+0x40/0x210 [ 173.797991][ T8989] ? do_syscall_64+0x40/0x210 [ 173.798014][ T8989] do_syscall_64+0xf6/0x210 [ 173.798035][ T8989] ? clear_bhb_loop+0x45/0xa0 [ 173.798055][ T8989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.798070][ T8989] RIP: 0033:0x7f365378e969 [ 173.798086][ T8989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.798099][ T8989] RSP: 002b:00007f365469b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 173.798123][ T8989] RAX: ffffffffffffffda RBX: 00007f36539b5fa0 RCX: 00007f365378e969 [ 173.798135][ T8989] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 173.798145][ T8989] RBP: 00007f3653810ab1 R08: 00002000000002c0 R09: 0000000000000000 [ 173.798155][ T8989] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 173.798165][ T8989] R13: 0000000000000000 R14: 00007f36539b5fa0 R15: 00007ffe7ac84808 [ 173.798191][ T8989] [ 173.798202][ T8989] ---[ end trace ]--- [ 174.215562][ T8989] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 174.222789][ T8989] CPU: 0 UID: 0 PID: 8989 Comm: syz.4.940 Not tainted 6.15.0-rc3-syzkaller-00557-g5565acd1e6c4 #0 PREEMPT(full) [ 174.234719][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.244816][ T8989] Call Trace: [ 174.248134][ T8989] [ 174.251097][ T8989] dump_stack_lvl+0x99/0x250 [ 174.255744][ T8989] ? __asan_memcpy+0x40/0x70 [ 174.260376][ T8989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.265620][ T8989] ? __pfx__printk+0x10/0x10 [ 174.270264][ T8989] panic+0x2db/0x790 [ 174.274218][ T8989] ? __pfx_panic+0x10/0x10 [ 174.278676][ T8989] ? _printk+0xcf/0x120 [ 174.282913][ T8989] ? __pfx__printk+0x10/0x10 [ 174.287538][ T8989] ? sctp_v6_get_dst+0x7cc/0x1bc0 [ 174.292609][ T8989] ? __sctp_connect+0x5ba/0xd50 [ 174.297502][ T8989] ? sctp_getsockopt+0x98a/0xb60 [ 174.302486][ T8989] ? do_sock_getsockopt+0x35d/0x650 [ 174.307718][ T8989] ? __x64_sys_getsockopt+0x1a5/0x250 [ 174.313141][ T8989] check_panic_on_warn+0x89/0xb0 [ 174.318138][ T8989] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 174.323914][ T8989] ip6_rt_copy_init+0x8e7/0x970 [ 174.328814][ T8989] ip6_pol_route+0xbac/0x1180 [ 174.333540][ T8989] ? ip6_pol_route+0x162/0x1180 [ 174.338445][ T8989] ? __pfx_ip6_pol_route+0x10/0x10 [ 174.343706][ T8989] ? chacha_permute+0x4e6/0xf00 [ 174.348606][ T8989] fib6_rule_lookup+0x348/0x6f0 [ 174.353525][ T8989] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 174.359295][ T8989] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 174.364726][ T8989] ? ip6_route_output_flags+0x2e/0x5d0 [ 174.370252][ T8989] ip6_route_output_flags+0x364/0x5d0 [ 174.375679][ T8989] ? ip6_route_output_flags+0x2e/0x5d0 [ 174.381185][ T8989] ip6_dst_lookup_tail+0x1ae/0x1510 [ 174.386410][ T8989] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 174.392054][ T8989] ? __lock_acquire+0xaac/0xd20 [ 174.396970][ T8989] ip6_dst_lookup_flow+0x47/0xe0 [ 174.401950][ T8989] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 174.407027][ T8989] sctp_v6_get_dst+0x7cc/0x1bc0 [ 174.411908][ T8989] ? crng_make_state+0x13a/0x700 [ 174.416864][ T8989] ? __pfx_crng_make_state+0x10/0x10 [ 174.422173][ T8989] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 174.427469][ T8989] ? __asan_memset+0x22/0x50 [ 174.432088][ T8989] ? dst_release+0x72/0x1b0 [ 174.436692][ T8989] sctp_transport_route+0x115/0x2f0 [ 174.441909][ T8989] sctp_assoc_add_peer+0x657/0x13b0 [ 174.447157][ T8989] sctp_connect_new_asoc+0x30a/0x690 [ 174.452513][ T8989] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 174.458433][ T8989] ? __ipv6_addr_type+0x247/0x2f0 [ 174.463474][ T8989] ? sctp_inet6_send_verify+0x6e/0x300 [ 174.469050][ T8989] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 174.474875][ T8989] __sctp_connect+0x5ba/0xd50 [ 174.479570][ T8989] ? __pfx___sctp_connect+0x10/0x10 [ 174.484782][ T8989] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 174.490348][ T8989] ? security_sctp_bind_connect+0x7e/0x2e0 [ 174.496234][ T8989] sctp_getsockopt_connectx3+0x2c4/0x440 [ 174.501988][ T8989] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 174.508174][ T8989] ? __local_bh_enable_ip+0x12d/0x1c0 [ 174.513642][ T8989] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 174.519405][ T8989] sctp_getsockopt+0x98a/0xb60 [ 174.524227][ T8989] do_sock_getsockopt+0x35d/0x650 [ 174.529351][ T8989] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 174.534905][ T8989] ? do_syscall_64+0x40/0x210 [ 174.539619][ T8989] ? __fget_files+0x2a/0x420 [ 174.544222][ T8989] ? __fget_files+0x3a0/0x420 [ 174.548920][ T8989] ? __fget_files+0x2a/0x420 [ 174.553703][ T8989] __x64_sys_getsockopt+0x1a5/0x250 [ 174.558913][ T8989] ? do_syscall_64+0x40/0x210 [ 174.563606][ T8989] ? do_syscall_64+0x40/0x210 [ 174.568300][ T8989] do_syscall_64+0xf6/0x210 [ 174.572816][ T8989] ? clear_bhb_loop+0x45/0xa0 [ 174.577505][ T8989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.583409][ T8989] RIP: 0033:0x7f365378e969 [ 174.587835][ T8989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.607482][ T8989] RSP: 002b:00007f365469b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 174.616097][ T8989] RAX: ffffffffffffffda RBX: 00007f36539b5fa0 RCX: 00007f365378e969 [ 174.624080][ T8989] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 174.632061][ T8989] RBP: 00007f3653810ab1 R08: 00002000000002c0 R09: 0000000000000000 [ 174.640160][ T8989] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 174.648138][ T8989] R13: 0000000000000000 R14: 00007f36539b5fa0 R15: 00007ffe7ac84808 [ 174.656167][ T8989] [ 174.659515][ T8989] Kernel Offset: disabled [ 174.663922][ T8989] Rebooting in 86400 seconds..