last executing test programs: 1m6.972459973s ago: executing program 2 (id=421): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xfe, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 52.479307538s ago: executing program 2 (id=421): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xfe, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 43.160389138s ago: executing program 2 (id=421): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xfe, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 31.390020132s ago: executing program 2 (id=421): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xfe, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 16.162970789s ago: executing program 2 (id=421): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xfe, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 7.870731777s ago: executing program 4 (id=1830): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f00000006c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0xfe, 0x40, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @rand_addr=0x64010100}, "0536ebc91e5c624c"}}}}}, 0x0) 7.700399991s ago: executing program 4 (id=1833): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4041) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}], 0x1, 0x12141, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x4040c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x40084) 7.551734518s ago: executing program 4 (id=1834): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/181, 0x1a, 0xb5, 0x1, 0x10, 0x0, @void, @value}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x1d, 0x2, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$inet6(0xa, 0x806, 0xfffffffd) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000340)=0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000640)="d1343c11202069693e16349a1253aff284c78a562316ece0f85fbbda17d2e392807a6848cccb4834cdffa749810bb15fe7769a84bd7ed6909a6bf5d35b30892693246870d52d6941", 0x48) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) bind$802154_dgram(r1, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r8 = accept4(r7, 0x0, 0x0, 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa, 0x0, 0x0, @void, @value}, 0x28) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) accept(r8, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000100)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, 0x0, &(0x7f0000000040)) 7.113479174s ago: executing program 2 (id=421): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0xfe, &(0x7f0000001680)=""/54, &(0x7f0000000000)=0x36) 5.275445843s ago: executing program 4 (id=1845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffff01, 0xfffffff1, 0x5, 0xff, 0xfffffffe}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x4a020000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@can_newroute={0x1bc, 0x18, 0x10, 0x70bd2a, 0x25dfdbfb, {0x1d, 0x1, 0x5}, [@CGW_CS_CRC8={0x11e, 0x6, {0xc, 0x59, 0x4, 0x6, 0x6, "49a7906b6e43c25eebc2cfa5ae25543f25cc5588cce0e774d00a9acd8b7fd68ce0ced34ae48fbd721a7cc3a1df4edea630e9e97b11735130c85f2aec24057c2aef8318dd90a931c50c3c5336fea0b24ee9c4c960b85894ce64dfbf2aa0ef2e14704d4f38d3eed09f5983e276726c85fdbebc60a34d615e83225466c1e1afe113e1d2ec9ebe91d2839d6db1b52c52dedc9b8fa78497f24cd0e86239f7aa240e719db44e53e610c04b9e06b129eee1fe61651a2404835ee007c6239edeaefb5d30350a91fd90d499ad216ff67da3126ee48bd7da67671e49ecb2725e467fd823a2b09431aa85f2c7ecd242dc771f83c4733e1f39e099d39a948234d404302776a5", 0x1, "56bcb4e30bcb5e3c1a33d4f67595ec597f2b6ee4"}}, @CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x0, 0x2, 0x4}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "76519eb77ae4604d"}}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x3, 0x0, 0x0, 0x0, "e3b4a6a55f02648e"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "1148447812f2c0ab"}, 0x5}}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "d4ba25d73933f943"}, 0x4}}]}, 0x1bc}, 0x1, 0xba01, 0x0, 0x800}, 0x810) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffff01, 0xfffffff1, 0x5, 0xff, 0xfffffffe}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) unshare(0x4a020000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@can_newroute={0x1bc, 0x18, 0x10, 0x70bd2a, 0x25dfdbfb, {0x1d, 0x1, 0x5}, [@CGW_CS_CRC8={0x11e, 0x6, {0xc, 0x59, 0x4, 0x6, 0x6, "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", 0x1, "56bcb4e30bcb5e3c1a33d4f67595ec597f2b6ee4"}}, @CGW_CS_XOR={0x8, 0x5, {0xffffffffffffffff, 0x0, 0x2, 0x4}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "76519eb77ae4604d"}}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x3, 0x0, 0x0, 0x0, "e3b4a6a55f02648e"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "1148447812f2c0ab"}, 0x5}}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "d4ba25d73933f943"}, 0x4}}]}, 0x1bc}, 0x1, 0xba01, 0x0, 0x800}, 0x810) (async) 2.42879777s ago: executing program 1 (id=1854): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x178) 2.135921393s ago: executing program 1 (id=1856): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4041) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}], 0x1, 0x12141, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x40084) 2.135707898s ago: executing program 3 (id=1857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x24}], 0x1}, 0x0) 2.032240481s ago: executing program 3 (id=1858): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071115b00000000008510000002000000850000000000000095000000000000009500a50500000000249bd6f6fca4dee04aaa1aad0a4df15239"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000000101040000000000000000020000022400018014000180080001000000000008000200ac1414070c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e0000002080007400000000024000e80140001800800010000000280050001"], 0x88}}, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000002440)=""/4102, 0x1006}], 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x13}, 0x50) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/65, 0x41}], 0x1, 0x8001, 0x41ffffc) r6 = socket$kcm(0x29, 0x153e8d103fe8a0ef, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x328}}, 0x84) 2.012947574s ago: executing program 1 (id=1859): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000042c0"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000080)="4b97a4c480f2595209562d48ef71", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.828269153s ago: executing program 3 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x81, 0x7fffffff}, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r4, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x37) 1.828021069s ago: executing program 1 (id=1861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}}, 0x4044000) 1.495754123s ago: executing program 0 (id=1863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.426681093s ago: executing program 0 (id=1864): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 584.292904ms ago: executing program 1 (id=1865): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 549.081385ms ago: executing program 0 (id=1866): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xc, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000410007010000000027020000027c00000400fc80180001801400cf55ae35800f001b809be09cdb49ba6a71e539b400c9eb2e6c98135e1181c48186c1bd13e50921c617a7c5106f0bd4903bcddfd0daf47406cf9db3c01811f8"], 0x30}}, 0x4010) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB='-1'], 0x9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r8, @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f"], 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x44040) 548.609374ms ago: executing program 3 (id=1867): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 426.735136ms ago: executing program 1 (id=1868): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076864266ed78cb89e14f0", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x5, 0x20000000, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0xfffffffffffffd52, 0x0, @wg=@data={0x4, 0xfffffffe, 0xffffdd86}}}}}}}, 0x3e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff00000600000000080001"], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c00188008000240000000000800014000000000080003"], 0xa4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="d7fb1a33b7f392e65c0ff358dc4f", 0x0, 0x3, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000000380)="a4", 0x4}, 0x50) close(r1) r8 = socket(0x1d, 0x3, 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000004240), &(0x7f00000057c0)=0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) 336.218213ms ago: executing program 0 (id=1869): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4041) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}], 0x1, 0x12141, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x40084) 285.837144ms ago: executing program 3 (id=1870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="9e", 0x1}], 0x1, 0x0, 0x0, 0x4}, 0xc5b203a398fd81c) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002300)=[{0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x24004080) 258.449573ms ago: executing program 0 (id=1871): unshare(0x20000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0b00ff", 0x3}, {&(0x7f0000000000)="06", 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r3}) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="7e9000", 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x448a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000540)={0x34, r10, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}]]}, 0x34}}, 0x4000000) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c00)={0x1e8, r12, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x480d4}, 0x2400c880) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) pipe(&(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010122162df0000eaffffffffffffff00b26513f48de42f2b154ba6ac50e26763eda490604269458b51cb9e35fd815c38c988b236d9de2920edc6cebc08c8211587cb2dceb65b7dcc7f704cc6cd6b3c7feb54b9fa19eee130c037e92eb51826619e81340e2929622586378ab8f542a91cca49ac79cd5ea915c3d3f52dff401a9b117c9572c868ebf0d2dd01848771fdf2512f6d9033467f", @ANYRESHEX=r5, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617665000000001400058005000900000000000500080000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) 132.217113ms ago: executing program 4 (id=1872): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0c4) 130.717842ms ago: executing program 3 (id=1873): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wg2\x00', 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x3, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @datasec={0x2, 0x8, 0x0, 0xf, 0x1, [{0x5, 0x7fff, 0xff800}, {0x2, 0x7, 0x8000}, {0x2, 0x0, 0x5caa}, {0x1, 0x3, 0x9b8}, {0x1, 0x8, 0x81}, {0x1, 0x3af6, 0x101}, {0x5, 0x5, 0xc22a}, {0x1, 0x5, 0xc3}], "9a"}, @struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x7, [{0x9, 0x3, 0x4fdb}, {0x9, 0x0, 0xffffbedd}, {0x1, 0x5, 0x5}]}, @fwd={0xd}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x4}]}, {0x0, [0x61]}}, &(0x7f0000001200)=""/91, 0xe3, 0x5b, 0x1, 0x5, 0x10000, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001400), &(0x7f0000001440)='%ps \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x13, 0x8, 0xfff, 0x88000000, 0x20, 0xffffffffffffffff, 0x7f63, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)={0x1b, 0x0, 0x0, 0xffc00, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0xb, &(0x7f0000000000)=@raw=[@alu={0x7, 0x1, 0xb, 0x4, 0x6, 0xc, 0x8}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0xd4f0, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x10, '\x00', r0, 0x0, r1, 0x8, &(0x7f00000012c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001300)={0x3, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[r2, r3, 0x1, r4, r5], &(0x7f0000001600)=[{0x7, 0x4, 0x2, 0x5914395c101152e7}], 0x10, 0x6a, @void, @value}, 0x94) r7 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001700), 0x80000) getpeername$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001780)=0x14) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000017c0), 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000001800)={"1c4186fe9c97c632b33e72339daae17b", 0x0, 0x0, {0x8, 0x70000}, {0x8, 0x1}, 0x9, [0x3, 0xfffffffffffff000, 0x10000, 0xa2, 0x8, 0x4, 0x1, 0x4ce5, 0x0, 0x7, 0x0, 0xe, 0xd, 0x2, 0x10, 0xf]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000001900)={"de951961638bdd7b5b3868080db24482", r9, 0x0, {0x3, 0x3ff}, {0x3}, 0x4, [0x80000001, 0x9, 0x5, 0x2, 0x7fffffffffffffff, 0xf, 0x9, 0x6, 0x5, 0x8000000000000000, 0xffffffffffffffff, 0x8, 0x1, 0xffffffffffffffff, 0x7fffffffffffffff, 0x9]}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x200200, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001a40)={'pim6reg0\x00'}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r12, 0x29, 0x41, &(0x7f0000001a80)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000001b00)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, &(0x7f0000001b40)={{r2}, r10, 0x8, @unused=[0x31e3, 0x6, 0xe30, 0x9], @name="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"}) syz_genetlink_get_family_id$wireguard(&(0x7f0000002b40), r8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002b80)={r6, r3}, 0xc) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r13, 0x0, 0x20, &(0x7f0000002bc0)={@private, @multicast1}, &(0x7f0000002c00)=0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000002c40)=[@in={0x2, 0x4e23, @local}], 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002c80)) ioctl$sock_SIOCGPGRP(r13, 0x8904, &(0x7f0000002d00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000002d40)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000002e40)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000032c0)={&(0x7f0000002e80)={0x420, 0x23, 0x400, 0x70bd29, 0x25dfdbfb, {0x10}, [@nested={0x272, 0x121, 0x0, 0x1, [@generic="2dc9e4eebddf928c88244cb562209873fb8cfda6ee637eec5ec22677ec8b36806807f44c17131ed73bd99e318346b837e632dc5839245ca59e49399a5773da498060d201b2a2fa1e699021606621e974492301b4b05cbddd0b13a78d9d2187c6fdeb1eb5c28038a33b20dfe3d403637367d6d770f59c368c2feaf771ce10e468c98e90f893ccb1d9ee24e2db519b9a93b67625fecbb0cd37a4bd9297458411c0e5099bbee4363bc2cb7f5bbfc2ba39875df39c229e02bc7fc186d940b5965660b76ac7938ba7f2fb772afcc3b221fffc82c3a50c1ea425818f7cbef351d413b075b187a8", @generic="5f0419fb550dd4ec80cb5c2f3373fbcba542f05837fcb8d1e12c4140a1fc832bd711b1d7", @generic="092999c8f4201f1b425b1947aa39d4951dd0d98a00edb8fe6430a8042ea5825492fba8c2c15899d7de3d9ec508bd5c1995767eac8a47a9721b9102df54c5cb975845df3493fa10fc6aea3e2104496f77f17c881a15a794947a55c4c1fe9d573feb93e6e5aa8d5ac15f5bfddd523312b5d6adb51b155b80c3", @nested={0x4, 0x10}, @generic="b81549da70b839b76999fbd3fa2cc9bab5708c10a0d87755e0ffa2f480d1681207e12e3b9055b289e738050e3f0bc29fb071d58879f533420e3f8015ca0d5414ab274937d89cf25b976d7ee3d8528a412c15d9ce2d5d9897dfe6465bba57d2e12431c00263c171a6438e75b308d05d8a3be8a1aa0383e89ebb46a7096406fde187a59e13834a3824148b8b9710fd7ebb43bd1277d3b1c57b7ee2c9617c5c6ec1b9a4d35820", @typed={0x8, 0x125, 0x0, 0x0, @pid=r14}, @nested={0x4, 0xc9}, @generic="ea288dc0549bda32c1a078999b359c0fd57acbedbddf92734f80dd698698c56b005af8c2e776b6a802499fd77fd9fbd01e5ba1dee21fd4afdc"]}, @generic="2e7598dda7fc8e133594e84aaa1d4f1a742ab5ec5aa0dce5af015ed53da0c07feac4442777080ea5c2a121c684166d1ab4ee8df62a24f508d61e3b0f63b99760c4a31da9a0cb50f6783b081ce7fc405d22842ce0cbeb68502a6e5f47bba9288444397ff41bfd12d0f792a5d3821cc90f47fd5a23100e4e3d1d1c22e1c54c8e35c602998e2e587be9253c86e619a8ed5475e2b859abea4c5d0bce81d48951fc43553ca77c8af32d7f144d27ae7890379ed4c801ecf0164e", @nested={0xdd, 0x14d, 0x0, 0x1, [@nested={0x4, 0x17}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="37603e596bee0f416c696ad91dc19b6e6b66ec8a3797b33da11b09b0b9feb38a16a0de453f954c1d67fc347c4370a0cc573d9d5585b584718de238a08f5647a6a7faa14e87e08c9a10bcf14130c44624c9716967073dab3d5ab05e4c685a360f5f8626546b5826f1fd1f21d290d3ab9b745a6fd71a841c4c954b225e8b42ea4b228d960fab6b64e6d92a7412c91fd11c43221eb78647bf7530c81f240b3dcd1dbaf46501a294c8a2f3e6a1c75e4838bb9379ecce5e", @typed={0x8, 0x61, 0x0, 0x0, @uid=r15}, @nested={0x4, 0x34}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x10}, 0x4000014) 30.3384ms ago: executing program 4 (id=1874): unshare(0x22020400) r0 = socket$inet(0x2b, 0x801, 0x0) poll(&(0x7f0000000140)=[{r0, 0x68}], 0x1, 0x200) 0s ago: executing program 0 (id=1875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003b00)={'ipvlan0\x00', &(0x7f0000003ac0)=@ethtool_cmd={0x7, 0x7f, 0x101, 0x0, 0x5, 0x5, 0xc, 0x3, 0x0, 0x2, 0x6, 0x7, 0x49, 0x15, 0x73, 0x0, [0x8, 0x10]}}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000000a40)=[{{&(0x7f0000000400)={0xa, 0x4c23, 0x6c, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x5b0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@dstopts_2292={{0x108, 0x29, 0x4, {0x89, 0x1d, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0xc}, @generic={0x7, 0xb3, "b66140bbb5d4655a70f79ab09f00e76b283a4aba1534866b28ae5c210dc8820cb9ead866c7236a059ffccd630d96943ad3eebad4af18d5892567a28fac22f6113349170153e0839554f866d5483cc3ba8996481f037f530b1509b027ec9a5b28433760e86218eab6aecfbd2d3196de126f0df871f9cf2ecbbe6e9ae90142c2be6ba23bd53fd9ce1502dced772bde0e90f765665b43c8f849ef3ed13989bc8588803e2b0010d22a683210b4f57cac81d6f5af41"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x80, 0x9, [0x807]}}, @jumbo, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x108}}], 0x2, 0x44) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x4}, 0xfffffffffffffeec) r3 = socket$igmp6(0xa, 0x3, 0x2) unshare(0x20060400) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000000)=0x59, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="d7", 0x1, 0xb5bf4a4daf0616bf, 0x0, 0x0) kernel console output (not intermixed with test programs): 41][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 261.495553][T10102] Call Trace: [ 261.495561][T10102] [ 261.495570][T10102] dump_stack_lvl+0x189/0x250 [ 261.495601][T10102] ? __lock_acquire+0xaac/0xd20 [ 261.495632][T10102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.495660][T10102] ? __pfx__printk+0x10/0x10 [ 261.495680][T10102] ? __might_fault+0xb0/0x130 [ 261.495728][T10102] should_fail_ex+0x414/0x560 [ 261.495764][T10102] _copy_from_user+0x2d/0xb0 [ 261.495790][T10102] generic_map_update_batch+0x572/0x7f0 [ 261.495836][T10102] ? __pfx_generic_map_update_batch+0x10/0x10 [ 261.495868][T10102] ? __fget_files+0x2a/0x420 [ 261.495901][T10102] ? __pfx_generic_map_update_batch+0x10/0x10 [ 261.495932][T10102] bpf_map_do_batch+0x369/0x5f0 [ 261.495966][T10102] __sys_bpf+0x384/0x860 [ 261.495992][T10102] ? __pfx___sys_bpf+0x10/0x10 [ 261.496030][T10102] ? ksys_write+0x1f0/0x250 [ 261.496051][T10102] ? rcu_is_watching+0x15/0xb0 [ 261.496092][T10102] __x64_sys_bpf+0x7c/0x90 [ 261.496114][T10102] do_syscall_64+0xf6/0x210 [ 261.496142][T10102] ? clear_bhb_loop+0x45/0xa0 [ 261.496167][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.496186][T10102] RIP: 0033:0x7f68eff8e969 [ 261.496203][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.496220][T10102] RSP: 002b:00007f68f0e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.496241][T10102] RAX: ffffffffffffffda RBX: 00007f68f01b6080 RCX: 00007f68eff8e969 [ 261.496256][T10102] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 261.496269][T10102] RBP: 00007f68f0e0c090 R08: 0000000000000000 R09: 0000000000000000 [ 261.496281][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.496292][T10102] R13: 0000000000000000 R14: 00007f68f01b6080 R15: 00007ffcd5d04ee8 [ 261.496324][T10102] [ 261.719472][T10096] syzkaller0: entered promiscuous mode [ 261.726622][T10096] syzkaller0: entered allmulticast mode [ 261.740584][ T9899] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.973152][T10112] FAULT_INJECTION: forcing a failure. [ 261.973152][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 261.987572][T10112] CPU: 1 UID: 0 PID: 10112 Comm: syz.1.1304 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 261.987601][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 261.987613][T10112] Call Trace: [ 261.987627][T10112] [ 261.987636][T10112] dump_stack_lvl+0x189/0x250 [ 261.987672][T10112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.987700][T10112] ? __pfx__printk+0x10/0x10 [ 261.987725][T10112] ? __pfx___might_resched+0x10/0x10 [ 261.987742][T10112] ? fs_reclaim_acquire+0x7d/0x100 [ 261.987774][T10112] should_fail_ex+0x414/0x560 [ 261.987828][T10112] should_failslab+0xa8/0x100 [ 261.987864][T10112] __kmalloc_cache_noprof+0x70/0x3d0 [ 261.987889][T10112] ? genl_start+0x1c9/0x6c0 [ 261.987918][T10112] genl_start+0x1c9/0x6c0 [ 261.987940][T10112] ? netlink_lookup+0x30/0x200 [ 261.987977][T10112] __netlink_dump_start+0x466/0x7e0 [ 261.988018][T10112] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 261.988048][T10112] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 261.988081][T10112] ? rcu_is_watching+0x15/0xb0 [ 261.988110][T10112] ? __pfx_genl_start+0x10/0x10 [ 261.988131][T10112] ? __pfx_genl_dumpit+0x10/0x10 [ 261.988153][T10112] ? __pfx_genl_done+0x10/0x10 [ 261.988182][T10112] ? bpf_lsm_capable+0x9/0x20 [ 261.988209][T10112] ? security_capable+0x7e/0x2e0 [ 261.988237][T10112] genl_rcv_msg+0x5da/0x790 [ 261.988269][T10112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.988293][T10112] ? __pfx_batadv_tt_local_dump+0x10/0x10 [ 261.988318][T10112] ? ref_tracker_free+0x63a/0x7d0 [ 261.988337][T10112] ? __copy_skb_header+0xa7/0x550 [ 261.988371][T10112] netlink_rcv_skb+0x219/0x490 [ 261.988403][T10112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.988429][T10112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.988488][T10112] ? down_read+0x1ad/0x2e0 [ 261.988518][T10112] genl_rcv+0x28/0x40 [ 261.988541][T10112] netlink_unicast+0x758/0x8d0 [ 261.988582][T10112] netlink_sendmsg+0x805/0xb30 [ 261.988612][T10112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.988636][T10112] ? aa_sock_msg_perm+0x94/0x160 [ 261.988658][T10112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.988681][T10112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.988701][T10112] __sock_sendmsg+0x219/0x270 [ 261.988733][T10112] ____sys_sendmsg+0x505/0x830 [ 261.988761][T10112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.988795][T10112] ? import_iovec+0x74/0xa0 [ 261.988825][T10112] ___sys_sendmsg+0x21f/0x2a0 [ 261.988850][T10112] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.988921][T10112] ? __fget_files+0x2a/0x420 [ 261.988945][T10112] ? __fget_files+0x3a0/0x420 [ 261.988984][T10112] __x64_sys_sendmsg+0x19b/0x260 [ 261.989009][T10112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.989052][T10112] ? do_syscall_64+0xba/0x210 [ 261.989083][T10112] do_syscall_64+0xf6/0x210 [ 261.989110][T10112] ? clear_bhb_loop+0x45/0xa0 [ 261.989136][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.989156][T10112] RIP: 0033:0x7f68eff8e969 [ 261.989175][T10112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.989192][T10112] RSP: 002b:00007f68f0e2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.989213][T10112] RAX: ffffffffffffffda RBX: 00007f68f01b5fa0 RCX: 00007f68eff8e969 [ 261.989227][T10112] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 261.989239][T10112] RBP: 00007f68f0e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 261.989263][T10112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.989274][T10112] R13: 0000000000000000 R14: 00007f68f01b5fa0 R15: 00007ffcd5d04ee8 [ 261.989306][T10112] [ 262.345466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.515301][ T5138] Bluetooth: hci4: command tx timeout [ 262.555877][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1307'. [ 263.078004][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 263.405017][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.161978][ T9899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.220247][ T9899] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.273316][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.280579][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.365540][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.372725][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.445019][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.532308][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 264.764308][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1323'. [ 264.954315][ T9899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.954984][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 265.091329][ T9899] veth0_vlan: entered promiscuous mode [ 265.107359][ T9899] veth1_vlan: entered promiscuous mode [ 265.185071][T10179] block nbd20: server does not support multiple connections per device. [ 265.193756][T10179] block nbd20: shutting down sockets [ 265.225906][ T9899] veth0_macvtap: entered promiscuous mode [ 265.258139][ T9899] veth1_macvtap: entered promiscuous mode [ 265.354909][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.384679][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.406840][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 265.415813][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.415837][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.415848][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.415862][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.415874][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.415888][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.417811][ T9899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.462689][T10192] FAULT_INJECTION: forcing a failure. [ 265.462689][T10192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.485141][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.529581][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.545130][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.548820][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.1.1331 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 265.548850][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 265.548864][T10192] Call Trace: [ 265.548872][T10192] [ 265.548881][T10192] dump_stack_lvl+0x189/0x250 [ 265.548915][T10192] ? __lock_acquire+0xaac/0xd20 [ 265.548947][T10192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.548977][T10192] ? __pfx__printk+0x10/0x10 [ 265.549008][T10192] ? __might_fault+0xb0/0x130 [ 265.549044][T10192] should_fail_ex+0x414/0x560 [ 265.549080][T10192] _copy_from_user+0x2d/0xb0 [ 265.549106][T10192] ___sys_sendmsg+0x158/0x2a0 [ 265.549130][T10192] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.549189][T10192] ? __fget_files+0x2a/0x420 [ 265.549212][T10192] ? __fget_files+0x3a0/0x420 [ 265.549247][T10192] __x64_sys_sendmsg+0x19b/0x260 [ 265.549271][T10192] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.549309][T10192] ? do_syscall_64+0xba/0x210 [ 265.549339][T10192] do_syscall_64+0xf6/0x210 [ 265.549365][T10192] ? clear_bhb_loop+0x45/0xa0 [ 265.549389][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.549408][T10192] RIP: 0033:0x7f68eff8e969 [ 265.549426][T10192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.549443][T10192] RSP: 002b:00007f68f0e2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.549465][T10192] RAX: ffffffffffffffda RBX: 00007f68f01b5fa0 RCX: 00007f68eff8e969 [ 265.549479][T10192] RDX: 0000000020004810 RSI: 0000200000000500 RDI: 0000000000000004 [ 265.549492][T10192] RBP: 00007f68f0e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 265.549513][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.549525][T10192] R13: 0000000000000000 R14: 00007f68f01b5fa0 R15: 00007ffcd5d04ee8 [ 265.549554][T10192] [ 265.629951][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'. [ 265.637396][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.772667][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.782558][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.793816][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.804120][ T9899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.814701][ T9899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.826170][ T9899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.931185][ T9899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.955789][ T9899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.969017][ T9899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.978933][ T9899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.983594][T10203] FAULT_INJECTION: forcing a failure. [ 265.983594][T10203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.022325][T10203] CPU: 1 UID: 0 PID: 10203 Comm: syz.1.1334 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 266.022354][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 266.022366][T10203] Call Trace: [ 266.022374][T10203] [ 266.022383][T10203] dump_stack_lvl+0x189/0x250 [ 266.022414][T10203] ? __lock_acquire+0xaac/0xd20 [ 266.022445][T10203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.022472][T10203] ? __pfx__printk+0x10/0x10 [ 266.022492][T10203] ? __might_fault+0xb0/0x130 [ 266.022528][T10203] should_fail_ex+0x414/0x560 [ 266.022564][T10203] set_fd_set+0x3a/0xa0 [ 266.022587][T10203] core_sys_select+0x875/0x990 [ 266.022622][T10203] ? __pfx_core_sys_select+0x10/0x10 [ 266.022670][T10203] ? __pfx_set_user_sigmask+0x10/0x10 [ 266.022701][T10203] __se_sys_pselect6+0x27a/0x300 [ 266.022731][T10203] ? __pfx___se_sys_pselect6+0x10/0x10 [ 266.022762][T10203] ? __x64_sys_pselect6+0x21/0xf0 [ 266.022788][T10203] do_syscall_64+0xf6/0x210 [ 266.022815][T10203] ? clear_bhb_loop+0x45/0xa0 [ 266.022840][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.022858][T10203] RIP: 0033:0x7f68eff8e969 [ 266.022877][T10203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.022894][T10203] RSP: 002b:00007f68f0e2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 266.022914][T10203] RAX: ffffffffffffffda RBX: 00007f68f01b5fa0 RCX: 00007f68eff8e969 [ 266.022928][T10203] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 266.022940][T10203] RBP: 00007f68f0e2d090 R08: 0000200000000280 R09: 0000000000000000 [ 266.022952][T10203] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 266.022964][T10203] R13: 0000000000000000 R14: 00007f68f01b5fa0 R15: 00007ffcd5d04ee8 [ 266.022994][T10203] [ 266.294304][T10212] team0: entered allmulticast mode [ 266.355644][T10212] team_slave_0: entered allmulticast mode [ 266.361462][T10212] team_slave_1: entered allmulticast mode [ 266.422983][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.454725][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.515127][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.524276][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.548544][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.831238][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 266.885067][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1345'. [ 266.953934][T10245] netlink: 'syz.3.1343': attribute type 21 has an invalid length. [ 267.046456][T10245] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1343'. [ 267.144017][T10242] vxcan1 speed is unknown, defaulting to 1000 [ 267.236273][T10252] syzkaller1: entered promiscuous mode [ 267.244338][T10252] syzkaller1: entered allmulticast mode [ 267.318933][T10257] netlink: 'syz.1.1348': attribute type 7 has an invalid length. [ 267.544040][T10265] FAULT_INJECTION: forcing a failure. [ 267.544040][T10265] name failslab, interval 1, probability 0, space 0, times 0 [ 267.556845][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.564523][T10265] CPU: 1 UID: 0 PID: 10265 Comm: syz.4.1350 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 267.564553][T10265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 267.564565][T10265] Call Trace: [ 267.564573][T10265] [ 267.564581][T10265] dump_stack_lvl+0x189/0x250 [ 267.564618][T10265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.564647][T10265] ? __pfx__printk+0x10/0x10 [ 267.564673][T10265] ? __pfx___might_resched+0x10/0x10 [ 267.564691][T10265] ? fs_reclaim_acquire+0x7d/0x100 [ 267.564726][T10265] should_fail_ex+0x414/0x560 [ 267.564762][T10265] should_failslab+0xa8/0x100 [ 267.564790][T10265] __kmalloc_cache_noprof+0x70/0x3d0 [ 267.564815][T10265] ? nft_trans_elem_alloc+0x55/0x320 [ 267.564859][T10265] ? nft_set_elem_expr_setup+0xab/0x830 [ 267.564891][T10265] nft_trans_elem_alloc+0x55/0x320 [ 267.564917][T10265] ? nf_tables_newsetelem+0x24bc/0x4340 [ 267.564942][T10265] nf_tables_newsetelem+0x24db/0x4340 [ 267.565011][T10265] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 267.565035][T10265] ? __lock_acquire+0xaac/0xd20 [ 267.565085][T10265] ? nla_validate_array+0xfc/0x260 [ 267.565143][T10265] ? __pfx___nla_validate_parse+0x10/0x10 [ 267.565174][T10265] ? __lock_acquire+0xaac/0xd20 [ 267.565212][T10265] ? nfnl_pernet+0x23/0x240 [ 267.565248][T10265] ? __nla_parse+0x40/0x60 [ 267.565275][T10265] nfnetlink_rcv+0x113f/0x2530 [ 267.565344][T10265] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 267.565425][T10265] ? skb_clone+0x246/0x3a0 [ 267.565467][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.565497][T10265] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.565534][T10265] netlink_unicast+0x758/0x8d0 [ 267.565575][T10265] netlink_sendmsg+0x805/0xb30 [ 267.565605][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.565629][T10265] ? aa_sock_msg_perm+0x94/0x160 [ 267.565651][T10265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.565673][T10265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.565694][T10265] __sock_sendmsg+0x219/0x270 [ 267.565725][T10265] ____sys_sendmsg+0x505/0x830 [ 267.565754][T10265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.565787][T10265] ? import_iovec+0x74/0xa0 [ 267.565817][T10265] ___sys_sendmsg+0x21f/0x2a0 [ 267.565842][T10265] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.565906][T10265] ? __fget_files+0x2a/0x420 [ 267.565931][T10265] ? __fget_files+0x3a0/0x420 [ 267.565968][T10265] __x64_sys_sendmsg+0x19b/0x260 [ 267.565994][T10265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.566046][T10265] ? do_syscall_64+0xba/0x210 [ 267.566093][T10265] do_syscall_64+0xf6/0x210 [ 267.566118][T10265] ? clear_bhb_loop+0x45/0xa0 [ 267.566140][T10265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.566158][T10265] RIP: 0033:0x7fa7c778e969 [ 267.566174][T10265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.566190][T10265] RSP: 002b:00007fa7c8632038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.566209][T10265] RAX: ffffffffffffffda RBX: 00007fa7c79b5fa0 RCX: 00007fa7c778e969 [ 267.566222][T10265] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 267.566234][T10265] RBP: 00007fa7c8632090 R08: 0000000000000000 R09: 0000000000000000 [ 267.566245][T10265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.566255][T10265] R13: 0000000000000000 R14: 00007fa7c79b5fa0 R15: 00007ffc5e31ed58 [ 267.566285][T10265] [ 267.576215][T10266] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 267.699254][T10247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1344'. [ 268.381709][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'. [ 268.604752][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.691097][T10296] netlink: 'syz.3.1358': attribute type 10 has an invalid length. [ 269.040995][ T9880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.115234][ T9880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.188995][ T9880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.241135][ T9880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.367193][ T9880] bridge_slave_1: left allmulticast mode [ 269.372867][ T9880] bridge_slave_1: left promiscuous mode [ 269.378899][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.389170][ T9880] bridge_slave_0: left allmulticast mode [ 269.395328][ T9880] bridge_slave_0: left promiscuous mode [ 269.401031][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.634721][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.730534][ T9880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.742005][ T9880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.752042][ T9880] bond0 (unregistering): Released all slaves [ 270.061038][T10303] netlink: 'syz.3.1362': attribute type 39 has an invalid length. [ 270.332719][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 270.543656][ T9880] hsr_slave_0: left promiscuous mode [ 270.586824][ T9880] hsr_slave_1: left promiscuous mode [ 270.599661][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.625377][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.643248][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.653014][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.675268][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.711013][ T9880] veth1_macvtap: left promiscuous mode [ 270.717619][ T9880] veth0_macvtap: left promiscuous mode [ 270.723467][ T9880] veth1_vlan: left promiscuous mode [ 270.733228][ T9880] veth0_vlan: left promiscuous mode [ 270.760770][T10330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.824312][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.844014][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.853269][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.862676][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.872472][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.442793][ T5138] block nbd20: Receive control failed (result -32) [ 271.679624][ T9880] team0 (unregistering): Port device team_slave_1 removed [ 271.716267][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.727224][ T9880] team0 (unregistering): Port device team_slave_0 removed [ 272.140572][T10332] vxcan1 speed is unknown, defaulting to 1000 [ 272.449884][T10351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1374'. [ 272.493129][T10357] C: renamed from team_slave_0 (while UP) [ 272.512946][T10357] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1374'. [ 272.549561][T10357] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 272.764701][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.869165][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 272.888756][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 272.925003][ T5138] Bluetooth: hci4: command tx timeout [ 273.232440][T10401] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1387'. [ 273.535580][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1387'. [ 273.558424][T10401] netlink: 'syz.1.1387': attribute type 11 has an invalid length. [ 273.804676][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.834857][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.875155][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 274.891790][T10332] chnl_net:caif_netlink_parms(): no params data found [ 274.995709][ T5832] Bluetooth: hci4: command tx timeout [ 275.222606][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.235693][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.243334][T10332] bridge_slave_0: entered allmulticast mode [ 275.256106][T10332] bridge_slave_0: entered promiscuous mode [ 275.277938][T10441] syzkaller0: entered allmulticast mode [ 275.326144][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.333317][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.343103][T10332] bridge_slave_1: entered allmulticast mode [ 275.350910][T10332] bridge_slave_1: entered promiscuous mode [ 275.358284][ T5138] block nbd21: Receive control failed (result -32) [ 275.541901][T10458] netlink: 'syz.4.1403': attribute type 10 has an invalid length. [ 275.559669][T10458] openvswitch: netlink: Flow key attr not present in new flow. [ 275.668014][T10332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.682335][T10332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.771386][T10332] team0: Port device team_slave_0 added [ 275.783755][T10332] team0: Port device team_slave_1 added [ 275.874989][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.886464][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 276.018092][T10332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.036210][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.104769][T10332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.122746][T10332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.129968][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.158573][T10332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.420546][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 276.661005][T10332] hsr_slave_0: entered promiscuous mode [ 276.668723][T10332] hsr_slave_1: entered promiscuous mode [ 276.676001][T10332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.683698][T10332] Cannot create hsr debugfs directory [ 276.914998][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.972582][T10490] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 277.010385][T10490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1416'. [ 277.075068][ T5832] Bluetooth: hci4: command tx timeout [ 277.082855][T10495] FAULT_INJECTION: forcing a failure. [ 277.082855][T10495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.118609][T10495] CPU: 0 UID: 0 PID: 10495 Comm: syz.1.1418 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 277.118638][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 277.118650][T10495] Call Trace: [ 277.118657][T10495] [ 277.118685][T10495] dump_stack_lvl+0x189/0x250 [ 277.118717][T10495] ? __lock_acquire+0xaac/0xd20 [ 277.118748][T10495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.118776][T10495] ? __pfx__printk+0x10/0x10 [ 277.118797][T10495] ? __might_fault+0xb0/0x130 [ 277.118834][T10495] should_fail_ex+0x414/0x560 [ 277.118871][T10495] _copy_from_user+0x2d/0xb0 [ 277.118897][T10495] do_ip_vs_set_ctl+0x2d3/0xa60 [ 277.118927][T10495] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 277.118947][T10495] ? rcu_is_watching+0x15/0xb0 [ 277.118995][T10495] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 277.119029][T10495] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.119052][T10495] ? aa_sk_perm+0x81e/0x950 [ 277.119088][T10495] ? __pfx_aa_sk_perm+0x10/0x10 [ 277.119126][T10495] nf_setsockopt+0x26c/0x290 [ 277.119150][T10495] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 277.119187][T10495] do_sock_setsockopt+0x257/0x3e0 [ 277.119218][T10495] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 277.119237][T10495] ? __fget_files+0x2a/0x420 [ 277.119266][T10495] ? __fget_files+0x3a0/0x420 [ 277.119290][T10495] ? __fget_files+0x2a/0x420 [ 277.119325][T10495] __x64_sys_setsockopt+0x18b/0x220 [ 277.119352][T10495] do_syscall_64+0xf6/0x210 [ 277.119380][T10495] ? clear_bhb_loop+0x45/0xa0 [ 277.119406][T10495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.119425][T10495] RIP: 0033:0x7f68eff8e969 [ 277.119444][T10495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.119461][T10495] RSP: 002b:00007f68f0e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 277.119482][T10495] RAX: ffffffffffffffda RBX: 00007f68f01b5fa0 RCX: 00007f68eff8e969 [ 277.119497][T10495] RDX: 0000000000000489 RSI: 0000000000000000 RDI: 0000000000000003 [ 277.119509][T10495] RBP: 00007f68f0e2d090 R08: 0000000000000044 R09: 0000000000000000 [ 277.119521][T10495] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 277.119533][T10495] R13: 0000000000000000 R14: 00007f68f01b5fa0 R15: 00007ffcd5d04ee8 [ 277.119563][T10495] [ 277.672989][ T5138] block nbd22: Receive control failed (result -32) [ 277.769314][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 277.793824][ T12] smc: removing ib device syz2 [ 277.815783][ T5914] vxcan1 speed is unknown, defaulting to 1000 [ 277.821922][ T5914] syz2: Port: 1 Link DOWN [ 277.954997][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.090669][T10522] FAULT_INJECTION: forcing a failure. [ 278.090669][T10522] name failslab, interval 1, probability 0, space 0, times 0 [ 278.138898][T10522] CPU: 1 UID: 0 PID: 10522 Comm: syz.1.1427 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 278.138930][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 278.138943][T10522] Call Trace: [ 278.138951][T10522] [ 278.138960][T10522] dump_stack_lvl+0x189/0x250 [ 278.138998][T10522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.139038][T10522] ? __pfx__printk+0x10/0x10 [ 278.139082][T10522] ? __pfx___might_resched+0x10/0x10 [ 278.139107][T10522] should_fail_ex+0x414/0x560 [ 278.139144][T10522] should_failslab+0xa8/0x100 [ 278.139173][T10522] __kmalloc_cache_noprof+0x70/0x3d0 [ 278.139198][T10522] ? call_usermodehelper_setup+0x8e/0x270 [ 278.139226][T10522] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 278.139257][T10522] call_usermodehelper_setup+0x8e/0x270 [ 278.139286][T10522] ? __pfx_free_modprobe_argv+0x10/0x10 [ 278.139319][T10522] __request_module+0x39f/0x5e0 [ 278.139356][T10522] ? aa_get_newest_label+0xf7/0x5d0 [ 278.139377][T10522] ? __pfx___request_module+0x10/0x10 [ 278.139406][T10522] ? rcu_is_watching+0x15/0xb0 [ 278.139444][T10522] ? security_capable+0x7e/0x2e0 [ 278.139470][T10522] ? dev_load+0x21/0x1f0 [ 278.139497][T10522] dev_load+0x190/0x1f0 [ 278.139527][T10522] dev_ioctl+0x384/0x1150 [ 278.139560][T10522] sock_do_ioctl+0x22c/0x300 [ 278.139591][T10522] ? __pfx_sock_do_ioctl+0x10/0x10 [ 278.139636][T10522] sock_ioctl+0x576/0x790 [ 278.139664][T10522] ? __pfx_sock_ioctl+0x10/0x10 [ 278.139694][T10522] ? __fget_files+0x3a0/0x420 [ 278.139732][T10522] ? __fget_files+0x2a/0x420 [ 278.139760][T10522] ? bpf_lsm_file_ioctl+0x9/0x20 [ 278.139785][T10522] ? __pfx_sock_ioctl+0x10/0x10 [ 278.139809][T10522] __se_sys_ioctl+0xf9/0x170 [ 278.139831][T10522] do_syscall_64+0xf6/0x210 [ 278.139859][T10522] ? clear_bhb_loop+0x45/0xa0 [ 278.139883][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.139902][T10522] RIP: 0033:0x7f68eff8e969 [ 278.139919][T10522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.139937][T10522] RSP: 002b:00007f68f0e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.139958][T10522] RAX: ffffffffffffffda RBX: 00007f68f01b5fa0 RCX: 00007f68eff8e969 [ 278.139972][T10522] RDX: 0000200000000f80 RSI: 0000000000008946 RDI: 0000000000000003 [ 278.139984][T10522] RBP: 00007f68f0e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 278.139996][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.140007][T10522] R13: 0000000000000000 R14: 00007f68f01b5fa0 R15: 00007ffcd5d04ee8 [ 278.140038][T10522] [ 278.770417][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 278.817328][T10332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.919904][T10332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.971468][T10332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.994646][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.012449][T10332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.155653][ T5138] Bluetooth: hci4: command tx timeout [ 279.219903][T10554] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 279.420459][T10554] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.528605][T10556] bond3: (slave gretap3): making interface the new active one [ 279.549146][T10556] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 279.720751][T10556] syz.3.1439 (10556) used greatest stack depth: 20088 bytes left [ 279.766507][T10332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.792693][T10570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1443'. [ 279.869576][T10570] veth0: entered promiscuous mode [ 279.893257][T10570] veth0: left promiscuous mode [ 280.009688][T10332] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.035020][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.073519][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.080726][ T9880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.133954][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.141224][ T9880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.250519][T10332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.273268][T10332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.289411][T10584] openvswitch: netlink: Actions may not be safe on all matching packets [ 280.565959][T10593] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.654221][T10593] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.779006][T10593] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.829273][T10332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.858153][T10593] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.047455][T10593] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.066645][T10332] veth0_vlan: entered promiscuous mode [ 281.074795][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.099450][T10593] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.177193][T10619] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 281.187504][T10593] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.268118][T10593] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.306673][T10332] veth1_vlan: entered promiscuous mode [ 281.353304][T10332] veth0_macvtap: entered promiscuous mode [ 281.384092][T10332] veth1_macvtap: entered promiscuous mode [ 281.437515][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.466669][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.477387][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.488390][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.498727][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.509782][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.526058][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.539682][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.552328][T10332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.586862][ T5138] block nbd23: Receive control failed (result -32) [ 281.626953][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.638660][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.650005][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.661005][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.670868][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.681574][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.694129][T10332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.744792][T10332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.772594][T10332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.799645][T10647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1470'. [ 281.810055][T10332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.810121][T10332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.810149][T10332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.810175][T10332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.897226][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 281.911376][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 281.946893][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 281.962458][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 281.972804][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1471'. [ 282.081656][T10649] af_packet: tpacket_rcv: packet too big, clamped from 3940 to 3696. macoff=96 [ 282.114898][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.243466][T10652] macvtap3: entered promiscuous mode [ 282.254969][T10652] macvtap3: entered allmulticast mode [ 282.267320][T10652] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 282.410064][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.447859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.559839][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.582939][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.857880][T10678] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1481'. [ 282.867527][T10678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1481'. [ 282.872080][ T5138] block nbd24: Receive control failed (result -32) [ 283.101222][T10694] netlink: 'syz.0.1486': attribute type 1 has an invalid length. [ 283.117093][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.154998][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.279422][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.430547][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.515207][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.622441][ T54] bridge_slave_1: left allmulticast mode [ 283.628832][ T54] bridge_slave_1: left promiscuous mode [ 283.635136][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.645511][ T54] bridge_slave_0: left allmulticast mode [ 283.651192][ T54] bridge_slave_0: left promiscuous mode [ 283.657303][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.012932][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.024184][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.035030][ T54] bond0 (unregistering): Released all slaves [ 284.196978][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.281847][ T54] hsr_slave_0: left promiscuous mode [ 284.289298][ T54] hsr_slave_1: left promiscuous mode [ 284.296548][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.304213][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.314349][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.321832][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.341553][ T54] veth1_macvtap: left promiscuous mode [ 284.347405][ T54] veth0_macvtap: left promiscuous mode [ 284.353017][ T54] veth1_vlan: left promiscuous mode [ 284.358773][ T54] veth0_vlan: left promiscuous mode [ 284.659230][T10707] FAULT_INJECTION: forcing a failure. [ 284.659230][T10707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.697927][T10707] CPU: 1 UID: 0 PID: 10707 Comm: syz.3.1490 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 284.697959][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 284.697972][T10707] Call Trace: [ 284.697981][T10707] [ 284.697989][T10707] dump_stack_lvl+0x189/0x250 [ 284.698022][T10707] ? __lock_acquire+0xaac/0xd20 [ 284.698053][T10707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.698082][T10707] ? __pfx__printk+0x10/0x10 [ 284.698103][T10707] ? __might_fault+0xb0/0x130 [ 284.698141][T10707] should_fail_ex+0x414/0x560 [ 284.698179][T10707] _copy_from_iter+0x1db/0x15a0 [ 284.698211][T10707] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 284.698235][T10707] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 284.698262][T10707] ? __pfx__copy_from_iter+0x10/0x10 [ 284.698287][T10707] ? __build_skb_around+0x257/0x3e0 [ 284.698312][T10707] ? netlink_sendmsg+0x642/0xb30 [ 284.698330][T10707] ? skb_put+0x11b/0x210 [ 284.698354][T10707] netlink_sendmsg+0x6b2/0xb30 [ 284.698384][T10707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.698407][T10707] ? aa_sock_msg_perm+0x94/0x160 [ 284.698430][T10707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.698452][T10707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.698481][T10707] __sock_sendmsg+0x219/0x270 [ 284.698513][T10707] ____sys_sendmsg+0x505/0x830 [ 284.698542][T10707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.698575][T10707] ? import_iovec+0x74/0xa0 [ 284.698605][T10707] ___sys_sendmsg+0x21f/0x2a0 [ 284.698630][T10707] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.698693][T10707] ? __fget_files+0x2a/0x420 [ 284.698719][T10707] ? __fget_files+0x3a0/0x420 [ 284.698757][T10707] __x64_sys_sendmsg+0x19b/0x260 [ 284.698783][T10707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.698824][T10707] ? do_syscall_64+0xba/0x210 [ 284.698855][T10707] do_syscall_64+0xf6/0x210 [ 284.698883][T10707] ? clear_bhb_loop+0x45/0xa0 [ 284.698909][T10707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.698928][T10707] RIP: 0033:0x7fbb6998e969 [ 284.698946][T10707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.698963][T10707] RSP: 002b:00007fbb6a7b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.698985][T10707] RAX: ffffffffffffffda RBX: 00007fbb69bb5fa0 RCX: 00007fbb6998e969 [ 284.699000][T10707] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 284.699012][T10707] RBP: 00007fbb6a7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 284.699024][T10707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.699037][T10707] R13: 0000000000000000 R14: 00007fbb69bb5fa0 R15: 00007fff0a9f5668 [ 284.699069][T10707] [ 285.121586][T10713] __nla_validate_parse: 4 callbacks suppressed [ 285.121606][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 285.238726][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.247049][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.255766][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.268869][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.282276][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.290006][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.370842][ T54] team0 (unregistering): Port device team_slave_1 removed [ 285.416187][ T54] team0 (unregistering): Port device team_slave_0 removed [ 285.881543][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'. [ 286.275113][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.341596][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1500'. [ 286.360000][T10747] netlink: 'syz.4.1500': attribute type 1 has an invalid length. [ 286.368185][T10721] chnl_net:caif_netlink_parms(): no params data found [ 286.394834][T10747] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1500'. [ 286.570620][T10757] netlink: 460 bytes leftover after parsing attributes in process `syz.1.1504'. [ 286.580600][T10721] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.592271][T10757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1504'. [ 286.600008][T10721] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.603167][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 286.617976][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 286.621243][T10721] bridge_slave_0: entered allmulticast mode [ 286.627583][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1504'. [ 286.642248][T10757] netlink: 'syz.1.1504': attribute type 4 has an invalid length. [ 286.662573][T10721] bridge_slave_0: entered promiscuous mode [ 286.672790][T10757] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1504'. [ 286.683155][T10721] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.704723][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.711938][T10721] bridge_slave_1: entered allmulticast mode [ 286.719424][T10721] bridge_slave_1: entered promiscuous mode [ 286.770637][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.785734][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.860208][T10721] team0: Port device team_slave_0 added [ 286.871549][T10721] team0: Port device team_slave_1 added [ 286.906266][ T5914] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/1 [ 286.926299][ T5914] hid-generic 0005:16C0:05DF.0001: probe with driver hid-generic failed with error -22 [ 286.988654][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.012618][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.043284][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.073616][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.081956][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.114034][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.159431][T10775] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.314648][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.322441][T10721] hsr_slave_0: entered promiscuous mode [ 287.353740][T10721] hsr_slave_1: entered promiscuous mode [ 287.361042][T10721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.392105][T10721] Cannot create hsr debugfs directory [ 287.397894][ T5138] Bluetooth: hci4: command tx timeout [ 287.714243][T10798] veth13: entered promiscuous mode [ 287.733749][T10800] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 287.807395][T10800] team0: Port device batadv1 added [ 288.001553][T10812] netlink: 'syz.4.1523': attribute type 1 has an invalid length. [ 288.209292][T10818] FAULT_INJECTION: forcing a failure. [ 288.209292][T10818] name failslab, interval 1, probability 0, space 0, times 0 [ 288.228016][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.3.1526 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 288.228044][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 288.228056][T10818] Call Trace: [ 288.228063][T10818] [ 288.228071][T10818] dump_stack_lvl+0x189/0x250 [ 288.228105][T10818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.228131][T10818] ? __pfx__printk+0x10/0x10 [ 288.228154][T10818] ? __pfx___might_resched+0x10/0x10 [ 288.228175][T10818] should_fail_ex+0x414/0x560 [ 288.228206][T10818] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 288.228232][T10818] should_failslab+0xa8/0x100 [ 288.228257][T10818] __kvmalloc_node_noprof+0x168/0x5e0 [ 288.228283][T10818] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 288.228316][T10818] bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 288.228354][T10818] ? stack_trace_save+0x9c/0xe0 [ 288.228385][T10818] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 288.228411][T10818] ? kasan_save_track+0x4f/0x80 [ 288.228435][T10818] ? kasan_save_track+0x3e/0x80 [ 288.228452][T10818] ? __kasan_kmalloc+0x93/0xb0 [ 288.228471][T10818] ? __kmalloc_noprof+0x27a/0x4f0 [ 288.228491][T10818] ? bpf_test_init+0xc2/0x170 [ 288.228540][T10818] ? __lock_acquire+0xaac/0xd20 [ 288.228572][T10818] ? __might_fault+0xb0/0x130 [ 288.228601][T10818] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 288.228628][T10818] ? _copy_from_user+0x94/0xb0 [ 288.228654][T10818] ? bpf_test_init+0x133/0x170 [ 288.228678][T10818] ? xdp_convert_md_to_buff+0x5b/0x330 [ 288.228709][T10818] bpf_prog_test_run_xdp+0x713/0xf90 [ 288.228752][T10818] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 288.228786][T10818] ? __fget_files+0x2a/0x420 [ 288.228815][T10818] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 288.228844][T10818] bpf_prog_test_run+0x2a9/0x340 [ 288.228873][T10818] __sys_bpf+0x4a4/0x860 [ 288.228898][T10818] ? __pfx___sys_bpf+0x10/0x10 [ 288.228933][T10818] ? ksys_write+0x1f0/0x250 [ 288.228966][T10818] __x64_sys_bpf+0x7c/0x90 [ 288.228990][T10818] do_syscall_64+0xf6/0x210 [ 288.229016][T10818] ? clear_bhb_loop+0x45/0xa0 [ 288.229039][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.229056][T10818] RIP: 0033:0x7fbb6998e969 [ 288.229072][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.229087][T10818] RSP: 002b:00007fbb6a7b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.229106][T10818] RAX: ffffffffffffffda RBX: 00007fbb69bb5fa0 RCX: 00007fbb6998e969 [ 288.229119][T10818] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 288.229131][T10818] RBP: 00007fbb6a7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 288.229142][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.229152][T10818] R13: 0000000000000000 R14: 00007fbb69bb5fa0 R15: 00007fff0a9f5668 [ 288.229181][T10818] [ 288.514447][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.686679][T10830] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 288.694736][T10830] netlink: 'syz.0.1529': attribute type 2 has an invalid length. [ 288.703392][T10830] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 288.711638][T10830] netlink: 'syz.0.1529': attribute type 2 has an invalid length. [ 288.813435][T10721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.832950][T10721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.871015][T10721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.894947][T10721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.144115][T10721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.174978][T10843] C: renamed from team_slave_0 (while UP) [ 289.191247][T10843] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 289.238340][T10843] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 289.354247][T10721] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.409447][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.416717][ T6900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.476247][ T5138] Bluetooth: hci4: command tx timeout [ 289.516771][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.524014][ T6900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.554663][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.248831][T10721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.292141][T10866] pim6reg: entered allmulticast mode [ 290.385524][T10869] __nla_validate_parse: 14 callbacks suppressed [ 290.385544][T10869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1536'. [ 290.426412][T10721] veth0_vlan: entered promiscuous mode [ 290.448773][T10721] veth1_vlan: entered promiscuous mode [ 290.563338][T10721] veth0_macvtap: entered promiscuous mode [ 290.604866][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.606199][T10721] veth1_macvtap: entered promiscuous mode [ 290.657450][T10721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.675573][T10721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.694623][T10721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.729079][T10721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.745539][T10721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.765300][T10721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.776766][T10721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.787127][T10845] xt_bpf: check failed: parse error [ 290.792327][T10721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.806328][T10721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.845405][T10721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.864721][T10721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.874882][T10721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.885599][T10721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.895837][T10721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.906872][T10721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.922675][T10721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.933414][T10721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.952064][T10721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.975312][T10721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.988574][T10721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.010129][T10721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.028016][T10721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.177634][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.187056][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.242414][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.251602][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.513226][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 291.591721][T10888] tun0: tun_chr_ioctl cmd 1074025677 [ 291.614231][T10889] netlink: 'syz.4.1547': attribute type 6 has an invalid length. [ 291.624692][T10888] tun0: linktype set to 825 [ 291.635020][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.680021][T10892] nbd: must specify a device to reconfigure [ 291.937430][T10904] syzkaller1: entered promiscuous mode [ 291.943108][T10904] syzkaller1: entered allmulticast mode [ 292.271635][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 292.298933][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'. [ 292.378154][T10923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 292.647673][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.675153][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.780103][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.795030][ T5138] block nbd25: Receive control failed (result -32) [ 292.922415][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.021504][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.140236][ T54] bridge_slave_1: left allmulticast mode [ 293.146229][ T54] bridge_slave_1: left promiscuous mode [ 293.151926][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.161519][ T54] bridge_slave_0: left allmulticast mode [ 293.167971][ T54] bridge_slave_0: left promiscuous mode [ 293.173725][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.506228][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.520314][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.530433][ T54] bond0 (unregistering): Released all slaves [ 293.724623][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.750743][ T54] hsr_slave_0: left promiscuous mode [ 293.757548][ T54] hsr_slave_1: left promiscuous mode [ 293.763458][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.771318][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.779890][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.787555][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.810364][ T54] veth1_macvtap: left promiscuous mode [ 293.816208][ T54] veth0_macvtap: left promiscuous mode [ 293.821823][ T54] veth1_vlan: left promiscuous mode [ 293.827766][ T54] veth0_vlan: left promiscuous mode [ 293.949762][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 293.965415][T10940] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1562'. [ 294.370712][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.380374][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.390434][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.402920][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.425918][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.722725][ T54] team0 (unregistering): Port device team_slave_1 removed [ 294.758517][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.774324][ T54] team0 (unregistering): Port device team_slave_0 removed [ 295.603497][T10943] chnl_net:caif_netlink_parms(): no params data found [ 295.760409][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1575'. [ 295.804634][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.951865][ T5138] block nbd26: Receive control failed (result -32) [ 296.035233][T10987] FAULT_INJECTION: forcing a failure. [ 296.035233][T10987] name failslab, interval 1, probability 0, space 0, times 0 [ 296.048045][T10943] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.048164][T10943] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.048386][T10943] bridge_slave_0: entered allmulticast mode [ 296.055813][T10987] CPU: 0 UID: 0 PID: 10987 Comm: syz.0.1579 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 296.055843][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 296.055857][T10987] Call Trace: [ 296.055866][T10987] [ 296.055876][T10987] dump_stack_lvl+0x189/0x250 [ 296.055916][T10987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.055947][T10987] ? __pfx__printk+0x10/0x10 [ 296.055976][T10987] ? __pfx___might_resched+0x10/0x10 [ 296.055996][T10987] ? fs_reclaim_acquire+0x7d/0x100 [ 296.056035][T10987] should_fail_ex+0x414/0x560 [ 296.056072][T10987] should_failslab+0xa8/0x100 [ 296.056103][T10987] __kmalloc_cache_noprof+0x70/0x3d0 [ 296.056129][T10987] ? genl_start+0x1c9/0x6c0 [ 296.056161][T10987] genl_start+0x1c9/0x6c0 [ 296.056185][T10987] ? netlink_lookup+0x30/0x200 [ 296.056225][T10987] __netlink_dump_start+0x466/0x7e0 [ 296.056268][T10987] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 296.056300][T10987] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 296.056334][T10987] ? rcu_is_watching+0x15/0xb0 [ 296.056365][T10987] ? __pfx_genl_start+0x10/0x10 [ 296.056388][T10987] ? __pfx_genl_dumpit+0x10/0x10 [ 296.056411][T10987] ? __pfx_genl_done+0x10/0x10 [ 296.056442][T10987] ? bpf_lsm_capable+0x9/0x20 [ 296.056470][T10987] ? security_capable+0x7e/0x2e0 [ 296.056508][T10987] genl_rcv_msg+0x5da/0x790 [ 296.056543][T10987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.056568][T10987] ? __pfx_batadv_tt_local_dump+0x10/0x10 [ 296.056594][T10987] ? ref_tracker_free+0x63a/0x7d0 [ 296.056614][T10987] ? __copy_skb_header+0xa7/0x550 [ 296.056651][T10987] netlink_rcv_skb+0x219/0x490 [ 296.056684][T10987] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.056713][T10987] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.056775][T10987] ? down_read+0x1ad/0x2e0 [ 296.056808][T10987] genl_rcv+0x28/0x40 [ 296.056831][T10987] netlink_unicast+0x758/0x8d0 [ 296.056876][T10987] netlink_sendmsg+0x805/0xb30 [ 296.056908][T10987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.056934][T10987] ? aa_sock_msg_perm+0x94/0x160 [ 296.056958][T10987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.056982][T10987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.057005][T10987] __sock_sendmsg+0x219/0x270 [ 296.057040][T10987] ____sys_sendmsg+0x505/0x830 [ 296.057071][T10987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.057106][T10987] ? import_iovec+0x74/0xa0 [ 296.057139][T10987] ___sys_sendmsg+0x21f/0x2a0 [ 296.057166][T10987] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.057236][T10987] ? __fget_files+0x2a/0x420 [ 296.057263][T10987] ? __fget_files+0x3a0/0x420 [ 296.057303][T10987] __x64_sys_sendmsg+0x19b/0x260 [ 296.057331][T10987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.057377][T10987] ? do_syscall_64+0xba/0x210 [ 296.057410][T10987] do_syscall_64+0xf6/0x210 [ 296.057440][T10987] ? clear_bhb_loop+0x45/0xa0 [ 296.057466][T10987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.057495][T10987] RIP: 0033:0x7f9bc058e969 [ 296.057514][T10987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.057534][T10987] RSP: 002b:00007f9bc132a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.057557][T10987] RAX: ffffffffffffffda RBX: 00007f9bc07b5fa0 RCX: 00007f9bc058e969 [ 296.057573][T10987] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 296.057587][T10987] RBP: 00007f9bc132a090 R08: 0000000000000000 R09: 0000000000000000 [ 296.057600][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.057613][T10987] R13: 0000000000000000 R14: 00007f9bc07b5fa0 R15: 00007ffd58ba2338 [ 296.057649][T10987] [ 296.080832][T10985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 296.112406][T10943] bridge_slave_0: entered promiscuous mode [ 296.208780][T10991] FAULT_INJECTION: forcing a failure. [ 296.208780][T10991] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 296.242844][T10943] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.289031][T10991] CPU: 0 UID: 0 PID: 10991 Comm: syz.4.1580 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 296.289065][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 296.289079][T10991] Call Trace: [ 296.289088][T10991] [ 296.289097][T10991] dump_stack_lvl+0x189/0x250 [ 296.289139][T10991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.289170][T10991] ? __pfx__printk+0x10/0x10 [ 296.289194][T10991] ? fs_reclaim_acquire+0x7d/0x100 [ 296.289236][T10991] should_fail_ex+0x414/0x560 [ 296.289275][T10991] prepare_alloc_pages+0x213/0x610 [ 296.289316][T10991] __alloc_frozen_pages_noprof+0x123/0x370 [ 296.289354][T10991] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 296.289399][T10991] ? policy_nodemask+0x27c/0x720 [ 296.289434][T10991] alloc_pages_mpol+0x232/0x4a0 [ 296.289475][T10991] alloc_pages_noprof+0xa9/0x190 [ 296.289506][T10991] get_free_pages_noprof+0xc/0x30 [ 296.289537][T10991] kasan_populate_vmalloc_pte+0x3a/0x100 [ 296.289565][T10991] __apply_to_page_range+0x7cb/0xd20 [ 296.289598][T10991] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 296.289627][T10991] ? __pfx___apply_to_page_range+0x10/0x10 [ 296.289653][T10991] ? do_raw_spin_unlock+0x122/0x240 [ 296.289683][T10991] alloc_vmap_area+0x1e09/0x24d0 [ 296.289736][T10991] ? __pfx_alloc_vmap_area+0x10/0x10 [ 296.289764][T10991] ? __kasan_kmalloc+0x93/0xb0 [ 296.289791][T10991] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 296.289818][T10991] ? __x64_sys_bpf+0x7c/0x90 [ 296.289839][T10991] ? __get_vm_area_node+0x131/0x2d0 [ 296.289870][T10991] __get_vm_area_node+0x1c5/0x2d0 [ 296.289905][T10991] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 296.289936][T10991] ? dev_map_alloc+0x146/0x540 [ 296.289997][T10991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 296.290025][T10991] ? rcu_is_watching+0x15/0xb0 [ 296.290059][T10991] ? __kmalloc_node_noprof+0x293/0x4e0 [ 296.290085][T10991] ? bpf_map_area_alloc+0x5e/0x120 [ 296.290117][T10991] bpf_map_area_alloc+0xf1/0x120 [ 296.290145][T10991] ? dev_map_alloc+0x146/0x540 [ 296.290173][T10991] dev_map_alloc+0x146/0x540 [ 296.290206][T10991] map_create+0x900/0x1150 [ 296.290236][T10991] ? security_bpf+0x7e/0x300 [ 296.290271][T10991] __sys_bpf+0x67e/0x860 [ 296.290300][T10991] ? __pfx___sys_bpf+0x10/0x10 [ 296.290344][T10991] ? ksys_write+0x1f0/0x250 [ 296.290382][T10991] __x64_sys_bpf+0x7c/0x90 [ 296.290406][T10991] do_syscall_64+0xf6/0x210 [ 296.290436][T10991] ? clear_bhb_loop+0x45/0xa0 [ 296.290469][T10991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.290491][T10991] RIP: 0033:0x7fa7c778e969 [ 296.290510][T10991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.290530][T10991] RSP: 002b:00007fa7c8632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.290552][T10991] RAX: ffffffffffffffda RBX: 00007fa7c79b5fa0 RCX: 00007fa7c778e969 [ 296.290567][T10991] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 296.290582][T10991] RBP: 00007fa7c8632090 R08: 0000000000000000 R09: 0000000000000000 [ 296.290596][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.290609][T10991] R13: 0000000000000001 R14: 00007fa7c79b5fa0 R15: 00007ffc5e31ed58 [ 296.290642][T10991] [ 296.515671][ T5138] Bluetooth: hci4: command tx timeout [ 296.519693][T10943] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.809908][T10943] bridge_slave_1: entered allmulticast mode [ 296.827149][T10943] bridge_slave_1: entered promiscuous mode [ 296.834757][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.989406][T10943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.008175][T10943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.115044][T11018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1590'. [ 297.151922][T10943] team0: Port device team_slave_0 added [ 297.300369][T10943] team0: Port device team_slave_1 added [ 297.458607][ T5138] block nbd27: Receive control failed (result -32) [ 297.461564][T10943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.522920][T11042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1597'. [ 297.539102][T10943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.596940][T10943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.619120][T10943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.637377][T10943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.701443][T10943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.874646][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.933230][T10943] hsr_slave_0: entered promiscuous mode [ 297.976922][T10943] hsr_slave_1: entered promiscuous mode [ 298.009425][T10943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.052749][T10943] Cannot create hsr debugfs directory [ 298.315856][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 298.344720][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1604'. [ 298.502814][T11073] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1607'. [ 298.577368][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1606'. [ 298.601138][ T5138] Bluetooth: hci4: command tx timeout [ 298.914898][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.108573][T11091] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 299.131321][T10943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.204117][T10943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.278366][T10943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.338013][T10943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.361051][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 299.478540][T11092] FAULT_INJECTION: forcing a failure. [ 299.478540][T11092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.509141][T11092] CPU: 0 UID: 0 PID: 11092 Comm: syz.1.1613 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 299.509174][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 299.509187][T11092] Call Trace: [ 299.509195][T11092] [ 299.509204][T11092] dump_stack_lvl+0x189/0x250 [ 299.509243][T11092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.509273][T11092] ? __pfx__printk+0x10/0x10 [ 299.509308][T11092] should_fail_ex+0x414/0x560 [ 299.509345][T11092] _copy_to_user+0x31/0xb0 [ 299.509374][T11092] hidp_get_connlist+0x11e/0x2b0 [ 299.509404][T11092] ? __pfx_hidp_get_connlist+0x10/0x10 [ 299.509462][T11092] hidp_sock_ioctl+0x2e6/0x560 [ 299.509493][T11092] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 299.509572][T11092] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 299.509602][T11092] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 299.509646][T11092] sock_do_ioctl+0xd9/0x300 [ 299.509676][T11092] ? __pfx_sock_do_ioctl+0x10/0x10 [ 299.509704][T11092] ? __lock_acquire+0xaac/0xd20 [ 299.509746][T11092] sock_ioctl+0x576/0x790 [ 299.509775][T11092] ? __pfx_sock_ioctl+0x10/0x10 [ 299.509823][T11092] ? __fget_files+0x3a0/0x420 [ 299.509847][T11092] ? __fget_files+0x2a/0x420 [ 299.509875][T11092] ? bpf_lsm_file_ioctl+0x9/0x20 [ 299.509900][T11092] ? __pfx_sock_ioctl+0x10/0x10 [ 299.509924][T11092] __se_sys_ioctl+0xf9/0x170 [ 299.509947][T11092] do_syscall_64+0xf6/0x210 [ 299.509974][T11092] ? clear_bhb_loop+0x45/0xa0 [ 299.509998][T11092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.510017][T11092] RIP: 0033:0x7f68eff8e969 [ 299.510034][T11092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.510050][T11092] RSP: 002b:00007f68f0e0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.510072][T11092] RAX: ffffffffffffffda RBX: 00007f68f01b6080 RCX: 00007f68eff8e969 [ 299.510086][T11092] RDX: 0000200000000b40 RSI: 00000000800448d2 RDI: 0000000000000005 [ 299.510099][T11092] RBP: 00007f68f0e0c090 R08: 0000000000000000 R09: 0000000000000000 [ 299.510111][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.510134][T11092] R13: 0000000000000001 R14: 00007f68f01b6080 R15: 00007ffcd5d04ee8 [ 299.510166][T11092] [ 299.954711][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.976914][ T5138] block nbd28: Receive control failed (result -32) [ 300.201902][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1620'. [ 300.224705][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1620'. [ 300.258479][T11120] geneve2: entered allmulticast mode [ 300.435596][ T6900] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 300.536440][T10943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.559028][T11137] FAULT_INJECTION: forcing a failure. [ 300.559028][T11137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.589273][T11137] CPU: 0 UID: 0 PID: 11137 Comm: syz.3.1624 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 300.589304][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 300.589317][T11137] Call Trace: [ 300.589325][T11137] [ 300.589334][T11137] dump_stack_lvl+0x189/0x250 [ 300.589372][T11137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.589401][T11137] ? __pfx__printk+0x10/0x10 [ 300.589435][T11137] should_fail_ex+0x414/0x560 [ 300.589472][T11137] _copy_to_user+0x31/0xb0 [ 300.589501][T11137] simple_read_from_buffer+0xe1/0x170 [ 300.589531][T11137] proc_fail_nth_read+0x1df/0x250 [ 300.589563][T11137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.589594][T11137] ? rw_verify_area+0x258/0x650 [ 300.589616][T11137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.589645][T11137] vfs_read+0x1fd/0x980 [ 300.589673][T11137] ? __pfx___mutex_lock+0x10/0x10 [ 300.589700][T11137] ? __pfx_vfs_read+0x10/0x10 [ 300.589724][T11137] ? __fget_files+0x2a/0x420 [ 300.589755][T11137] ? __fget_files+0x3a0/0x420 [ 300.589779][T11137] ? __fget_files+0x2a/0x420 [ 300.589814][T11137] ksys_read+0x145/0x250 [ 300.589835][T11137] ? rcu_is_watching+0x15/0xb0 [ 300.589867][T11137] ? __pfx_ksys_read+0x10/0x10 [ 300.589894][T11137] ? do_syscall_64+0xba/0x210 [ 300.589924][T11137] do_syscall_64+0xf6/0x210 [ 300.589950][T11137] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.589970][T11137] ? clear_bhb_loop+0x45/0xa0 [ 300.589994][T11137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.590013][T11137] RIP: 0033:0x7fbb6998d37c [ 300.590031][T11137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 300.590047][T11137] RSP: 002b:00007fbb6a7b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.590068][T11137] RAX: ffffffffffffffda RBX: 00007fbb69bb5fa0 RCX: 00007fbb6998d37c [ 300.590083][T11137] RDX: 000000000000000f RSI: 00007fbb6a7b50a0 RDI: 0000000000000006 [ 300.590095][T11137] RBP: 00007fbb6a7b5090 R08: 0000000000000000 R09: 0000000000000000 [ 300.590106][T11137] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 300.590118][T11137] R13: 0000000000000000 R14: 00007fbb69bb5fa0 R15: 00007fff0a9f5668 [ 300.590149][T11137] [ 300.829173][ T5138] Bluetooth: hci4: command tx timeout [ 300.940327][T10943] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.976830][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.984060][ T9880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.002375][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.004813][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.009567][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.395395][T11158] __nla_validate_parse: 1 callbacks suppressed [ 301.395415][T11158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1631'. [ 301.627037][T10943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.729029][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 301.741507][T10943] veth0_vlan: entered promiscuous mode [ 301.769455][T10943] veth1_vlan: entered promiscuous mode [ 301.910144][T10943] veth0_macvtap: entered promiscuous mode [ 301.923304][T10943] veth1_macvtap: entered promiscuous mode [ 302.034750][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.043008][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.064973][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.080460][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.103495][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.113888][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.131910][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.142212][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.157638][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.174073][T10943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.268053][T11182] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.320008][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.333402][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.345713][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.357091][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.367603][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.391533][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.401659][T10943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.413183][T10943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.444472][T10943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.550371][T11182] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.572135][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1644'. [ 302.596786][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1644'. [ 302.610620][T11193] netlink: 'syz.0.1644': attribute type 4 has an invalid length. [ 302.657989][T11182] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.699006][T10943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.711197][T10943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.720773][T10943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.737915][T10943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.887394][T11182] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.915245][ T5138] Bluetooth: hci4: command tx timeout [ 302.989688][T11204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.033281][T11210] bond3: (slave veth15): Enslaving as an active interface with an up link [ 303.075038][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.106126][T11212] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 303.189863][T11182] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.210221][T11182] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.230962][T11182] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.280829][T11182] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.402468][ T9880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.435017][ T5138] block nbd29: Receive control failed (result -32) [ 303.437030][ T9880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.515842][ T9880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.550073][ T9880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.606893][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 304.114863][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.184361][ T9880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.282242][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 304.338315][ T9880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.460446][ T9880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.572215][ T9880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.789775][ T9880] bridge_slave_1: left allmulticast mode [ 304.805696][ T9880] bridge_slave_1: left promiscuous mode [ 304.811728][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.824495][ T9880] bridge_slave_0: left allmulticast mode [ 304.838515][ T9880] bridge_slave_0: left promiscuous mode [ 304.851107][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.154754][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.510917][ T9880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.522435][ T9880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.533992][ T9880] bond0 (unregistering): Released all slaves [ 305.824166][ T9880] hsr_slave_0: left promiscuous mode [ 305.831247][ T9880] hsr_slave_1: left promiscuous mode [ 305.837558][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.848295][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.859755][ T9880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.870706][ T9880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.911720][ T9880] veth1_macvtap: left promiscuous mode [ 305.955634][ T9880] veth0_macvtap: left promiscuous mode [ 305.961370][ T9880] veth1_vlan: left promiscuous mode [ 305.979441][ T9880] veth0_vlan: left promiscuous mode [ 305.999956][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1669'. [ 306.194729][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.197208][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 306.660360][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.670672][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.681044][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.692308][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.707877][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.803576][ T5138] block nbd30: Receive control failed (result -32) [ 306.920491][ T9880] team0 (unregistering): Port device team_slave_1 removed [ 306.957921][ T9880] team0 (unregistering): Port device team_slave_0 removed [ 307.244673][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.563124][T11292] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.850701][T11283] chnl_net:caif_netlink_parms(): no params data found [ 308.071463][T11305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.274632][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.764674][ T5138] Bluetooth: hci4: command tx timeout [ 308.831091][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'. [ 308.873924][T11322] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1683'. [ 309.324692][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.420907][T11327] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1684'. [ 309.469155][T11283] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.486923][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.494488][T11283] bridge_slave_0: entered allmulticast mode [ 309.509595][T11283] bridge_slave_0: entered promiscuous mode [ 309.534515][T11283] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.542598][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.560203][T11283] bridge_slave_1: entered allmulticast mode [ 309.572206][T11283] bridge_slave_1: entered promiscuous mode [ 309.702575][T11283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.901128][T11283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.917408][ T5832] block nbd31: Receive control failed (result -32) [ 310.045114][ T9880] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 310.109141][T11283] team0: Port device team_slave_0 added [ 310.133296][T11283] team0: Port device team_slave_1 added [ 310.218122][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1689'. [ 310.228289][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1689'. [ 310.263998][T11283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.284579][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.326962][T11283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.347563][T11283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.358175][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.364653][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.390407][T11283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.572844][T11356] 8021q: adding VLAN 0 to HW filter on device bond4 [ 310.613270][T11283] hsr_slave_0: entered promiscuous mode [ 310.622940][T11283] hsr_slave_1: entered promiscuous mode [ 310.635873][T11283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.643699][T11283] Cannot create hsr debugfs directory [ 310.709197][T11358] bond4: (slave veth9): Enslaving as an active interface with an up link [ 310.759131][T11356] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 310.838656][ T5832] Bluetooth: hci4: command tx timeout [ 311.056626][T11367] xt_nfacct: accounting object `syz1' does not exists [ 311.083041][T11367] @ÿ: renamed from bond_slave_0 (while UP) [ 311.107922][T11367] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1694'. [ 311.169567][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 311.394659][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.590237][ T5832] block nbd32: Receive control failed (result -32) [ 311.703299][T11399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.843657][T11283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.894684][T11404] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 311.902625][T11404] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1706'. [ 311.959983][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 312.029850][T11399] bond5: (slave veth11): Enslaving as an active interface with an up link [ 312.067583][T11283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.089379][T11407] bond4: (slave dummy0): Releasing backup interface [ 312.102050][T11407] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 312.118763][T11283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.271097][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1708'. [ 312.309061][T11283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.431010][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 312.444629][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.510269][T11421] netlink: 'syz.0.1711': attribute type 20 has an invalid length. [ 312.549059][T11417] syzkaller0: entered promiscuous mode [ 312.556193][T11417] syzkaller0: entered allmulticast mode [ 312.799953][T11425] netlink: 'syz.1.1714': attribute type 39 has an invalid length. [ 312.915269][ T5138] Bluetooth: hci4: command tx timeout [ 313.484773][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.520778][ T5832] block nbd33: Receive control failed (result -32) [ 313.962261][T11437] xt_socket: unknown flags 0xd0 [ 314.518651][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.935691][T11283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.995100][ T5832] Bluetooth: hci4: command tx timeout [ 315.012249][T11451] __nla_validate_parse: 3 callbacks suppressed [ 315.012269][T11451] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1722'. [ 315.045593][T11445] nbd: socks must be embedded in a SOCK_ITEM attr [ 315.055202][T11445] block nbd34: shutting down sockets [ 315.065247][T11446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.143250][T11452] bond3: (slave veth15): Enslaving as an active interface with an up link [ 315.168577][T11283] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.234472][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.241730][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.288342][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 315.326458][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.333673][ T6900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.554649][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.783016][T11283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.796374][ T9880] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 315.943244][ T5832] block nbd34: Receive control failed (result -32) [ 315.978202][T11491] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.993481][T11491] team0: Port device bond6 added [ 316.098884][T11503] netlink: 'syz.4.1737': attribute type 1 has an invalid length. [ 316.111406][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 316.245286][T11503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 316.301134][T11283] veth0_vlan: entered promiscuous mode [ 316.376819][T11507] bond4: (slave veth17): Enslaving as an active interface with an up link [ 316.418367][T11510] bond3: (slave dummy0): Releasing backup interface [ 316.476471][T11510] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 316.550194][T11519] FAULT_INJECTION: forcing a failure. [ 316.550194][T11519] name failslab, interval 1, probability 0, space 0, times 0 [ 316.569840][T11283] veth1_vlan: entered promiscuous mode [ 316.594781][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.613882][T11519] CPU: 1 UID: 0 PID: 11519 Comm: syz.0.1742 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 316.613913][T11519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 316.613930][T11519] Call Trace: [ 316.613942][T11519] [ 316.613951][T11519] dump_stack_lvl+0x189/0x250 [ 316.613990][T11519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.614019][T11519] ? __pfx__printk+0x10/0x10 [ 316.614047][T11519] ? __pfx___might_resched+0x10/0x10 [ 316.614071][T11519] should_fail_ex+0x414/0x560 [ 316.614107][T11519] should_failslab+0xa8/0x100 [ 316.614135][T11519] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 316.614161][T11519] ? __alloc_skb+0x112/0x2d0 [ 316.614185][T11519] __alloc_skb+0x112/0x2d0 [ 316.614209][T11519] netlink_dump+0x245/0xe70 [ 316.614250][T11519] ? __nla_parse+0x40/0x60 [ 316.614273][T11519] ? __pfx_netlink_dump+0x10/0x10 [ 316.614324][T11519] ? netlink_lookup+0x30/0x200 [ 316.614353][T11519] ? netlink_lookup+0x30/0x200 [ 316.614379][T11519] ? netlink_lookup+0x30/0x200 [ 316.614414][T11519] __netlink_dump_start+0x5cb/0x7e0 [ 316.614454][T11519] ip_set_dump+0x13e/0x1c0 [ 316.614478][T11519] ? __pfx_ip_set_dump+0x10/0x10 [ 316.614501][T11519] ? __pfx_ip_set_dump_start+0x10/0x10 [ 316.614528][T11519] ? __pfx_ip_set_dump_do+0x10/0x10 [ 316.614550][T11519] ? __pfx_ip_set_dump_done+0x10/0x10 [ 316.614600][T11519] nfnetlink_rcv_msg+0xb4a/0x1130 [ 316.614623][T11519] ? unwind_get_return_address+0x4d/0x90 [ 316.614648][T11519] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 316.614669][T11519] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 316.614715][T11519] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 316.614737][T11519] ? stack_depot_save_flags+0x40/0x910 [ 316.614824][T11519] netlink_rcv_skb+0x219/0x490 [ 316.614856][T11519] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 316.614883][T11519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.614910][T11519] ? kasan_quarantine_put+0xdd/0x220 [ 316.614948][T11519] ? apparmor_capable+0x137/0x1b0 [ 316.614976][T11519] ? bpf_lsm_capable+0x9/0x20 [ 316.615004][T11519] ? security_capable+0x7e/0x2e0 [ 316.615032][T11519] nfnetlink_rcv+0x273/0x2530 [ 316.615061][T11519] ? __dev_queue_xmit+0x27e/0x3a70 [ 316.615085][T11519] ? __dev_queue_xmit+0x27e/0x3a70 [ 316.615105][T11519] ? __dev_queue_xmit+0x27e/0x3a70 [ 316.615129][T11519] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 316.615160][T11519] ? __dev_queue_xmit+0x27e/0x3a70 [ 316.615184][T11519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.615208][T11519] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 316.615239][T11519] ? __pfx___dev_queue_xmit+0x10/0x10 [ 316.615279][T11519] ? ref_tracker_free+0x63a/0x7d0 [ 316.615297][T11519] ? __copy_skb_header+0xa7/0x550 [ 316.615322][T11519] ? __pfx_ref_tracker_free+0x10/0x10 [ 316.615341][T11519] ? __skb_clone+0x63/0x7a0 [ 316.615369][T11519] ? __skb_clone+0x483/0x7a0 [ 316.615400][T11519] ? skb_clone+0x246/0x3a0 [ 316.615428][T11519] ? __netlink_deliver_tap+0x807/0x850 [ 316.615458][T11519] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.615497][T11519] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.615528][T11519] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.615600][T11519] netlink_unicast+0x758/0x8d0 [ 316.615643][T11519] netlink_sendmsg+0x805/0xb30 [ 316.615674][T11519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.615699][T11519] ? aa_sock_msg_perm+0x94/0x160 [ 316.615721][T11519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.615743][T11519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.615764][T11519] __sock_sendmsg+0x219/0x270 [ 316.615795][T11519] ____sys_sendmsg+0x505/0x830 [ 316.615825][T11519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.615859][T11519] ? import_iovec+0x74/0xa0 [ 316.615889][T11519] ___sys_sendmsg+0x21f/0x2a0 [ 316.615914][T11519] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.615980][T11519] ? __fget_files+0x2a/0x420 [ 316.616005][T11519] ? __fget_files+0x3a0/0x420 [ 316.616043][T11519] __x64_sys_sendmsg+0x19b/0x260 [ 316.616069][T11519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.616112][T11519] ? do_syscall_64+0xba/0x210 [ 316.616143][T11519] do_syscall_64+0xf6/0x210 [ 316.616171][T11519] ? clear_bhb_loop+0x45/0xa0 [ 316.616196][T11519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.616216][T11519] RIP: 0033:0x7f9bc058e969 [ 316.616235][T11519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.616252][T11519] RSP: 002b:00007f9bc132a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.616274][T11519] RAX: ffffffffffffffda RBX: 00007f9bc07b5fa0 RCX: 00007f9bc058e969 [ 316.616289][T11519] RDX: 0000000000000000 RSI: 0000200000001b40 RDI: 0000000000000003 [ 316.616301][T11519] RBP: 00007f9bc132a090 R08: 0000000000000000 R09: 0000000000000000 [ 316.616314][T11519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.616326][T11519] R13: 0000000000000000 R14: 00007f9bc07b5fa0 R15: 00007ffd58ba2338 [ 316.616359][T11519] [ 317.118286][T11283] veth0_macvtap: entered promiscuous mode [ 317.129274][T11283] veth1_macvtap: entered promiscuous mode [ 317.148329][T11283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.159288][T11283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.169165][T11283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.179878][T11283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.189780][T11283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.196077][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.200268][T11283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.216610][T11283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.227088][T11283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.238617][T11283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.310316][T11283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.321361][T11283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.331268][T11283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.341779][T11283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.351717][T11283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.362202][T11283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.375363][T11283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.388548][T11283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.399910][T11283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.475570][T11535] FAULT_INJECTION: forcing a failure. [ 317.475570][T11535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.489100][T11535] CPU: 1 UID: 0 PID: 11535 Comm: syz.4.1748 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 317.489128][T11535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 317.489140][T11535] Call Trace: [ 317.489148][T11535] [ 317.489156][T11535] dump_stack_lvl+0x189/0x250 [ 317.489188][T11535] ? __lock_acquire+0xaac/0xd20 [ 317.489219][T11535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.489246][T11535] ? __pfx__printk+0x10/0x10 [ 317.489266][T11535] ? __might_fault+0xb0/0x130 [ 317.489303][T11535] should_fail_ex+0x414/0x560 [ 317.489338][T11535] _copy_from_iter+0x1db/0x15a0 [ 317.489368][T11535] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 317.489389][T11535] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 317.489415][T11535] ? __pfx__copy_from_iter+0x10/0x10 [ 317.489440][T11535] ? __build_skb_around+0x257/0x3e0 [ 317.489471][T11535] ? netlink_sendmsg+0x642/0xb30 [ 317.489488][T11535] ? skb_put+0x11b/0x210 [ 317.489511][T11535] netlink_sendmsg+0x6b2/0xb30 [ 317.489540][T11535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.489562][T11535] ? aa_sock_msg_perm+0x94/0x160 [ 317.489584][T11535] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.489607][T11535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.489626][T11535] __sock_sendmsg+0x219/0x270 [ 317.489657][T11535] ____sys_sendmsg+0x505/0x830 [ 317.489684][T11535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.489716][T11535] ? import_iovec+0x74/0xa0 [ 317.489745][T11535] ___sys_sendmsg+0x21f/0x2a0 [ 317.489769][T11535] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.489827][T11535] ? __fget_files+0x2a/0x420 [ 317.489851][T11535] ? __fget_files+0x3a0/0x420 [ 317.489887][T11535] __x64_sys_sendmsg+0x19b/0x260 [ 317.489929][T11535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.489970][T11535] ? do_syscall_64+0xba/0x210 [ 317.490002][T11535] do_syscall_64+0xf6/0x210 [ 317.490029][T11535] ? clear_bhb_loop+0x45/0xa0 [ 317.490054][T11535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.490074][T11535] RIP: 0033:0x7fa7c778e969 [ 317.490090][T11535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.490107][T11535] RSP: 002b:00007fa7c8632038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.490128][T11535] RAX: ffffffffffffffda RBX: 00007fa7c79b5fa0 RCX: 00007fa7c778e969 [ 317.490143][T11535] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 317.490156][T11535] RBP: 00007fa7c8632090 R08: 0000000000000000 R09: 0000000000000000 [ 317.490167][T11535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.490179][T11535] R13: 0000000000000000 R14: 00007fa7c79b5fa0 R15: 00007ffc5e31ed58 [ 317.490211][T11535] [ 317.757050][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.761036][T11283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.777526][ T2128] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 317.795326][T11283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.804075][T11283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.819911][T11283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.950371][T11536] netlink: 'syz.0.1746': attribute type 1 has an invalid length. [ 317.963047][T11536] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1746'. [ 318.050304][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1752'. [ 318.140283][T11536] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1746'. [ 318.338959][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.373962][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.433559][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.458497][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.594324][T11571] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.844679][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.157433][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1765'. [ 319.388836][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.739487][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.869824][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.880314][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.920195][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.016991][ T36] bridge_slave_1: left allmulticast mode [ 320.022722][ T36] bridge_slave_1: left promiscuous mode [ 320.028542][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.040025][ T36] bridge_slave_0: left allmulticast mode [ 320.046438][ T36] bridge_slave_0: left promiscuous mode [ 320.052148][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.373216][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.387721][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.398985][ T36] bond0 (unregistering): Released all slaves [ 320.620659][ T36] hsr_slave_0: left promiscuous mode [ 320.627004][ T36] hsr_slave_1: left promiscuous mode [ 320.632832][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.640685][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.648766][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.657273][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.676530][ T36] veth1_macvtap: left promiscuous mode [ 320.682162][ T36] veth0_macvtap: left promiscuous mode [ 320.687759][ T36] veth1_vlan: left promiscuous mode [ 320.693034][ T36] veth0_vlan: left promiscuous mode [ 320.835634][ T13] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 320.915530][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.109401][ T36] team0 (unregistering): Port device team_slave_1 removed [ 321.242743][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 321.271312][ T36] team0 (unregistering): Port device team_slave_0 removed [ 321.429319][T11612] sctp: [Deprecated]: syz.3.1772 (pid 11612) Use of int in max_burst socket option. [ 321.429319][T11612] Use struct sctp_assoc_value instead [ 321.701085][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.714338][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.724445][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.753611][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.764122][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.791980][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 321.960313][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.083043][T11606] FAULT_INJECTION: forcing a failure. [ 322.083043][T11606] name failslab, interval 1, probability 0, space 0, times 0 [ 322.095882][T11610] batadv1: entered promiscuous mode [ 322.102070][T11606] CPU: 1 UID: 0 PID: 11606 Comm: syz.4.1770 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 322.102092][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 322.102101][T11606] Call Trace: [ 322.102107][T11606] [ 322.102114][T11606] dump_stack_lvl+0x189/0x250 [ 322.102148][T11606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.102170][T11606] ? __pfx__printk+0x10/0x10 [ 322.102182][T11606] ? __lock_acquire+0xaac/0xd20 [ 322.102214][T11606] should_fail_ex+0x414/0x560 [ 322.102241][T11606] should_failslab+0xa8/0x100 [ 322.102262][T11606] kmem_cache_alloc_noprof+0x73/0x3c0 [ 322.102280][T11606] ? skb_clone+0x212/0x3a0 [ 322.102301][T11606] skb_clone+0x212/0x3a0 [ 322.102321][T11606] __netlink_deliver_tap+0x404/0x850 [ 322.102363][T11606] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.102396][T11606] netlink_deliver_tap+0x19c/0x1b0 [ 322.102429][T11606] netlink_sendskb+0x68/0x140 [ 322.102457][T11606] netlink_rcv_skb+0x2a0/0x490 [ 322.102480][T11606] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.102504][T11606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.102557][T11606] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.102588][T11606] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.102625][T11606] netlink_unicast+0x758/0x8d0 [ 322.102655][T11606] netlink_sendmsg+0x805/0xb30 [ 322.102676][T11606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.102692][T11606] ? aa_sock_msg_perm+0x94/0x160 [ 322.102709][T11606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.102725][T11606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.102739][T11606] __sock_sendmsg+0x219/0x270 [ 322.102762][T11606] ____sys_sendmsg+0x505/0x830 [ 322.102782][T11606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.102805][T11606] ? import_iovec+0x74/0xa0 [ 322.102827][T11606] ___sys_sendmsg+0x21f/0x2a0 [ 322.102845][T11606] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.102889][T11606] ? __fget_files+0x2a/0x420 [ 322.102907][T11606] ? __fget_files+0x3a0/0x420 [ 322.102934][T11606] __x64_sys_sendmsg+0x19b/0x260 [ 322.102952][T11606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.102981][T11606] ? do_syscall_64+0xba/0x210 [ 322.103004][T11606] do_syscall_64+0xf6/0x210 [ 322.103024][T11606] ? clear_bhb_loop+0x45/0xa0 [ 322.103042][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.103056][T11606] RIP: 0033:0x7fa7c778e969 [ 322.103070][T11606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.103087][T11606] RSP: 002b:00007fa7c8632038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.103103][T11606] RAX: ffffffffffffffda RBX: 00007fa7c79b5fa0 RCX: 00007fa7c778e969 [ 322.103113][T11606] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 322.103122][T11606] RBP: 00007fa7c8632090 R08: 0000000000000000 R09: 0000000000000000 [ 322.103136][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.103145][T11606] R13: 0000000000000000 R14: 00007fa7c79b5fa0 R15: 00007ffc5e31ed58 [ 322.103168][T11606] [ 322.422083][T11626] ªªªªªª: renamed from vlan0 (while UP) [ 322.562677][T11632] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 322.624512][T11635] bond_slave_0: entered promiscuous mode [ 322.630283][T11635] bond_slave_1: entered promiscuous mode [ 322.641996][T11635] vlan0: entered promiscuous mode [ 322.649392][T11635] bond0: entered promiscuous mode [ 322.712106][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 323.001990][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.025121][T11621] chnl_net:caif_netlink_parms(): no params data found [ 323.366646][T11621] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.377663][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1787'. [ 323.387999][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.400151][T11621] bridge_slave_0: entered allmulticast mode [ 323.401126][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 323.421841][T11621] bridge_slave_0: entered promiscuous mode [ 323.436059][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 323.445504][T11662] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1789'. [ 323.451543][T11621] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.474815][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.483390][T11621] bridge_slave_1: entered allmulticast mode [ 323.490843][ T36] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 323.500468][T11621] bridge_slave_1: entered promiscuous mode [ 323.512729][ T2128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.527448][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.582135][T11667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.658533][T11621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.679928][T11621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.775584][T11621] team0: Port device team_slave_0 added [ 323.777036][T11678] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1792'. [ 323.786896][T11621] team0: Port device team_slave_1 added [ 323.796964][ T5138] Bluetooth: hci4: command tx timeout [ 323.805387][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1793'. [ 323.844439][T11680] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1793'. [ 323.855913][T11621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.862973][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.889817][T11621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.905064][T11621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.912175][T11621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.963096][T11621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.999536][T11684] netlink: 'syz.4.1792': attribute type 13 has an invalid length. [ 324.034752][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.150915][T11621] hsr_slave_0: entered promiscuous mode [ 324.166310][T11621] hsr_slave_1: entered promiscuous mode [ 324.183003][T11621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.192907][T11621] Cannot create hsr debugfs directory [ 324.230652][T11690] 8021q: VLANs not supported on ip_vti0 [ 324.374404][T11698] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 324.542740][T11698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.633085][T11704] bond5: (slave veth19): Enslaving as an active interface with an up link [ 324.659693][ T5138] block nbd35: Receive control failed (result -32) [ 324.670193][T11707] bond4: (slave dummy0): Releasing backup interface [ 324.693340][T11707] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 325.074738][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.363098][T11621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.392728][T11621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.432676][T11621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.481194][T11621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.764474][T11621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.839699][T11757] tun0: tun_chr_ioctl cmd 1074812117 [ 325.869794][T11621] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.877429][ T5138] Bluetooth: hci4: command tx timeout [ 325.896703][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.903889][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.974561][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.981775][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.045278][ T6900] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 326.114929][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.248350][T11777] __nla_validate_parse: 8 callbacks suppressed [ 326.248369][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 326.338967][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'. [ 326.396973][T11621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.477447][T11621] veth0_vlan: entered promiscuous mode [ 326.499763][T11621] veth1_vlan: entered promiscuous mode [ 326.558167][T11621] veth0_macvtap: entered promiscuous mode [ 326.575933][T11621] veth1_macvtap: entered promiscuous mode [ 326.623437][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.643305][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.653597][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.667131][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.678063][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.688723][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.699690][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.710414][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.723256][T11621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.747279][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.758731][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.768838][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.779701][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.789784][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.803477][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.820710][T11621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.831597][T11621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.848133][T11621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.864172][T11621] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.877904][T11621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.888572][T11621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.901001][T11621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.039655][ T746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.069522][ T746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.118525][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.132122][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.154864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.713155][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 327.805973][T11809] bridge0: entered promiscuous mode [ 327.814895][T11809] macvtap1: entered promiscuous mode [ 327.831449][T11809] macvtap1: entered allmulticast mode [ 327.837766][T11809] bridge0: entered allmulticast mode [ 327.853378][T11813] bridge0: left allmulticast mode [ 327.860883][T11813] bridge0: left promiscuous mode [ 328.194929][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.244829][T11828] xt_CT: No such helper "snmp" [ 328.323884][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1839'. [ 328.471522][ T6900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.234926][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.727469][ T6900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.799719][ T6900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.860463][ T6900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.972170][ T6900] bridge_slave_1: left allmulticast mode [ 329.979131][ T6900] bridge_slave_1: left promiscuous mode [ 329.985088][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.994790][ T6900] bridge_slave_0: left allmulticast mode [ 330.000462][ T6900] bridge_slave_0: left promiscuous mode [ 330.006683][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.274652][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.510884][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 330.623546][ T6900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.647731][ T6900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.676790][ T6900] bond0 (unregistering): Released all slaves [ 330.747940][T11864] bridge0: entered promiscuous mode [ 330.753579][T11864] macvtap2: entered promiscuous mode [ 330.784960][T11864] macvtap2: entered allmulticast mode [ 330.812583][T11864] bridge0: entered allmulticast mode [ 330.873601][T11865] bridge0: left allmulticast mode [ 330.900295][T11865] bridge0: left promiscuous mode [ 330.906071][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.916353][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.924388][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.937308][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.948154][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.076341][ T2128] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 331.213288][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1849'. [ 331.233687][T11872] syzkaller0: entered promiscuous mode [ 331.239589][T11872] syzkaller0: entered allmulticast mode [ 331.299291][T11881] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 331.314766][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.332597][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1851'. [ 332.357035][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.884150][T11881] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.920010][T11884] bond4: (slave veth17): Enslaving as an active interface with an up link [ 332.994987][ T5832] Bluetooth: hci4: command tx timeout [ 333.077158][ T12] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 333.318099][ T6900] hsr_slave_0: left promiscuous mode [ 333.348643][ T6900] hsr_slave_1: left promiscuous mode [ 333.356014][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.363480][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.388395][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.404598][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.404878][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.501942][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 333.523453][ T6900] veth1_macvtap: left promiscuous mode [ 333.531470][T11901] netlink: 'syz.3.1858': attribute type 1 has an invalid length. [ 333.541254][ T6900] veth0_macvtap: left promiscuous mode [ 333.548835][ T6900] veth1_vlan: left promiscuous mode [ 333.562054][ T6900] veth0_vlan: left promiscuous mode [ 334.089856][T11918] netlink: 'syz.0.1864': attribute type 1 has an invalid length. [ 334.240461][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 334.293707][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 334.438265][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.783240][T11918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.810041][T11919] bond7: (slave veth13): Enslaving as an active interface with an up link [ 334.829916][T11920] bond5: (slave dummy0): Releasing backup interface [ 334.849827][T11920] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 335.031288][T11928] netlink: zone id is out of range [ 335.037472][T11928] netlink: del zone limit has 8 unknown bytes [ 335.074842][ T5832] Bluetooth: hci4: command tx timeout [ 335.143883][T11869] chnl_net:caif_netlink_parms(): no params data found [ 335.378587][T11946] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.443705][T11939] can: request_module (can-proto-3) failed. [ 335.474621][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.577570][T11869] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.580327][ C1] ------------[ cut here ]------------ [ 335.590354][ C1] UBSAN: array-index-out-of-bounds in net/ipv6/route.c:1095:9 [ 335.594801][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.597847][ C1] index 241 is out of range for type 'const int[12]' [ 335.597868][ C1] CPU: 1 UID: 0 PID: 11957 Comm: syz.0.1875 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 335.597896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 335.597909][ C1] Call Trace: [ 335.597917][ C1] [ 335.597928][ C1] dump_stack_lvl+0x189/0x250 [ 335.597970][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.598002][ C1] ? __pfx__printk+0x10/0x10 [ 335.598019][ C1] ? ip6_dst_lookup_tail+0x299/0x1510 [ 335.598044][ C1] ? ip6_protocol_deliver_rcu+0xd07/0x15c0 [ 335.598066][ C1] ? NF_HOOK+0x309/0x3a0 [ 335.598086][ C1] ? ip6_input+0x16a/0x270 [ 335.598106][ C1] ? NF_HOOK+0x309/0x3a0 [ 335.598136][ C1] ubsan_epilogue+0xa/0x40 [ 335.598157][ C1] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 335.598191][ C1] ip6_rt_copy_init+0x8e7/0x970 [ 335.598225][ C1] ip6_pol_route+0xbac/0x1180 [ 335.598254][ C1] ? ip6_pol_route+0x162/0x1180 [ 335.598290][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 335.598326][ C1] ? fib6_get_table+0x39/0x270 [ 335.598356][ C1] ? fib6_get_table+0x39/0x270 [ 335.598387][ C1] ? fib6_get_table+0x251/0x270 [ 335.598418][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 335.598447][ C1] fib6_rule_action+0x206/0x7d0 [ 335.598479][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 335.598512][ C1] fib_rules_lookup+0x767/0xe90 [ 335.598544][ C1] ? fib_rules_lookup+0x96/0xe90 [ 335.598565][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 335.598586][ C1] ? l3mdev_update_flow+0x29/0x640 [ 335.598616][ C1] ? l3mdev_update_flow+0x4d1/0x640 [ 335.598646][ C1] ? l3mdev_update_flow+0x29/0x640 [ 335.598679][ C1] fib6_rule_lookup+0x18e/0x6f0 [ 335.598711][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 335.598742][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 335.598775][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 335.598813][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 335.598851][ C1] ? dev_get_by_index_rcu+0xf4/0x110 [ 335.598887][ C1] ip6_route_output_flags+0x364/0x5d0 [ 335.598918][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 335.598952][ C1] ip6_dst_lookup_tail+0x299/0x1510 [ 335.598978][ C1] ? bpf_lsm_xfrm_decode_session+0x9/0x20 [ 335.599006][ C1] ? security_xfrm_decode_session+0x76/0x2c0 [ 335.599046][ C1] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 335.599069][ C1] ? __pfx___xfrm_decode_session+0x10/0x10 [ 335.599123][ C1] icmpv6_route_lookup+0x387/0x590 [ 335.599161][ C1] ? __pfx_icmpv6_route_lookup+0x10/0x10 [ 335.599190][ C1] ? ipv6_dev_get_saddr+0x143/0xb70 [ 335.599215][ C1] ? icmpv6_xrlim_allow+0x213/0x600 [ 335.599260][ C1] ? ipcm6_init_sk+0x18b/0x400 [ 335.599290][ C1] icmp6_send+0x1001/0x1940 [ 335.599317][ C1] ? icmp6_send+0x1e9/0x1940 [ 335.599368][ C1] ? __pfx_icmp6_send+0x10/0x10 [ 335.599403][ C1] ? __udp6_lib_lookup+0x8eb/0xa30 [ 335.599450][ C1] ? raw6_local_deliver+0x15d/0xa50 [ 335.599487][ C1] ? udp_lib_checksum_complete+0x15a/0x2b0 [ 335.599523][ C1] __udp6_lib_rcv+0xcbf/0x1770 [ 335.599574][ C1] ? __pfx_udpv6_rcv+0x10/0x10 [ 335.599593][ C1] ip6_protocol_deliver_rcu+0xd07/0x15c0 [ 335.599651][ C1] ip6_input_finish+0xde/0x190 [ 335.599680][ C1] NF_HOOK+0x309/0x3a0 [ 335.599706][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 335.599728][ C1] ? NF_HOOK+0x9a/0x3a0 [ 335.599749][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 335.599775][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 335.599819][ C1] ip6_input+0x16a/0x270 [ 335.599840][ C1] ? ip6_input+0x23/0x270 [ 335.599867][ C1] NF_HOOK+0x309/0x3a0 [ 335.599888][ C1] ? skb_orphan+0xaf/0xd0 [ 335.599913][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 335.599934][ C1] ? NF_HOOK+0x9a/0x3a0 [ 335.599957][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 335.599982][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 335.600019][ C1] __netif_receive_skb+0xd3/0x380 [ 335.600052][ C1] ? process_backlog+0x2d5/0x14f0 [ 335.600086][ C1] process_backlog+0x60e/0x14f0 [ 335.600137][ C1] ? __pfx_process_backlog+0x10/0x10 [ 335.600166][ C1] ? do_raw_spin_lock+0x121/0x290 [ 335.600201][ C1] __napi_poll+0xc4/0x480 [ 335.600227][ C1] ? net_rx_action+0x447/0xdf0 [ 335.600262][ C1] net_rx_action+0x6ea/0xdf0 [ 335.600313][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 335.600341][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 335.600371][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 335.600409][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 335.600461][ C1] handle_softirqs+0x283/0x870 [ 335.600498][ C1] ? do_softirq+0xec/0x180 [ 335.600536][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 335.600575][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.600602][ C1] do_softirq+0xec/0x180 [ 335.600632][ C1] [ 335.600639][ C1] [ 335.600649][ C1] ? __pfx_do_softirq+0x10/0x10 [ 335.600679][ C1] ? pie_qdisc_dequeue+0x274/0x350 [ 335.600716][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 335.600747][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 335.600781][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.600823][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.600847][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.600869][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.600895][ C1] __dev_queue_xmit+0x1cd7/0x3a70 [ 335.600935][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.600979][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 335.601006][ C1] ? read_seqbegin+0x122/0x250 [ 335.601032][ C1] ? neigh_resolve_output+0x438/0x750 [ 335.601062][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.601089][ C1] ? read_seqbegin+0x1ac/0x250 [ 335.601128][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 335.601153][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.601181][ C1] ? eth_header+0x11b/0x200 [ 335.601203][ C1] ? __asan_memcpy+0x40/0x70 [ 335.601224][ C1] ? eth_header+0x11b/0x200 [ 335.601265][ C1] ? __pfx_eth_header+0x10/0x10 [ 335.601284][ C1] ? neigh_resolve_output+0x624/0x750 [ 335.601335][ C1] ip6_finish_output2+0x11fb/0x16a0 [ 335.601363][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 335.601394][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 335.601421][ C1] ? ip6_mtu+0x7d/0x3f0 [ 335.601443][ C1] ? ip6_mtu+0x7d/0x3f0 [ 335.601465][ C1] ip6_finish_output+0x234/0x7d0 [ 335.601497][ C1] ? ip6_send_skb+0x10f/0x390 [ 335.601521][ C1] ip6_send_skb+0x1d5/0x390 [ 335.601547][ C1] udp_v6_send_skb+0xc17/0x1830 [ 335.601591][ C1] udpv6_sendmsg+0x1c42/0x2700 [ 335.601611][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.601649][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 335.601679][ C1] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 335.601732][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.601763][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.601809][ C1] ? inet_send_prepare+0x1b9/0x270 [ 335.601839][ C1] ? inet_send_prepare+0x1b9/0x270 [ 335.601870][ C1] ? inet6_sendmsg+0xe4/0x120 [ 335.601901][ C1] __sock_sendmsg+0xe5/0x270 [ 335.601934][ C1] ____sys_sendmsg+0x52d/0x830 [ 335.601965][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.601999][ C1] ? import_iovec+0x74/0xa0 [ 335.602031][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 335.602057][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.602128][ C1] ? __fget_files+0x2a/0x420 [ 335.602155][ C1] ? __fget_files+0x3a0/0x420 [ 335.602196][ C1] __sys_sendmmsg+0x227/0x430 [ 335.602228][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 335.602263][ C1] ? __pfx_do_futex+0x10/0x10 [ 335.602309][ C1] ? rcu_is_watching+0x15/0xb0 [ 335.602352][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 335.602379][ C1] do_syscall_64+0xf6/0x210 [ 335.602407][ C1] ? clear_bhb_loop+0x45/0xa0 [ 335.602434][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.602454][ C1] RIP: 0033:0x7f9bc058e969 [ 335.602473][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.602491][ C1] RSP: 002b:00007f9bc132a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.602513][ C1] RAX: ffffffffffffffda RBX: 00007f9bc07b5fa0 RCX: 00007f9bc058e969 [ 335.602529][ C1] RDX: 0000000000000002 RSI: 0000200000000a40 RDI: 0000000000000005 [ 335.602543][ C1] RBP: 00007f9bc0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 335.602556][ C1] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000000 [ 335.602570][ C1] R13: 0000000000000000 R14: 00007f9bc07b5fa0 R15: 00007ffd58ba2338 [ 335.602606][ C1] [ 335.602614][ C1] ---[ end trace ]--- [ 335.617346][T11869] bridge_slave_0: entered allmulticast mode [ 335.623773][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 335.623797][ C1] CPU: 1 UID: 0 PID: 11957 Comm: syz.0.1875 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 335.623827][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 335.623843][ C1] Call Trace: [ 335.623853][ C1] [ 335.623864][ C1] dump_stack_lvl+0x99/0x250 [ 335.623903][ C1] ? __asan_memcpy+0x40/0x70 [ 335.623928][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.623962][ C1] ? __pfx__printk+0x10/0x10 [ 335.624004][ C1] panic+0x2db/0x790 [ 335.624061][ C1] ? __pfx_panic+0x10/0x10 [ 335.624091][ C1] ? _printk+0xcf/0x120 [ 335.624119][ C1] ? __pfx__printk+0x10/0x10 [ 335.624140][ C1] ? ip6_dst_lookup_tail+0x299/0x1510 [ 335.624166][ C1] ? ip6_protocol_deliver_rcu+0xd07/0x15c0 [ 335.624194][ C1] ? NF_HOOK+0x309/0x3a0 [ 335.624216][ C1] ? ip6_input+0x16a/0x270 [ 335.624240][ C1] ? NF_HOOK+0x309/0x3a0 [ 335.624270][ C1] check_panic_on_warn+0x89/0xb0 [ 335.624303][ C1] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 335.624341][ C1] ip6_rt_copy_init+0x8e7/0x970 [ 335.624380][ C1] ip6_pol_route+0xbac/0x1180 [ 335.624413][ C1] ? ip6_pol_route+0x162/0x1180 [ 335.624451][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 335.624492][ C1] ? fib6_get_table+0x39/0x270 [ 335.624531][ C1] ? fib6_get_table+0x39/0x270 [ 335.624566][ C1] ? fib6_get_table+0x251/0x270 [ 335.624599][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 335.624633][ C1] fib6_rule_action+0x206/0x7d0 [ 335.624669][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 335.624705][ C1] fib_rules_lookup+0x767/0xe90 [ 335.624742][ C1] ? fib_rules_lookup+0x96/0xe90 [ 335.624765][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 335.624788][ C1] ? l3mdev_update_flow+0x29/0x640 [ 335.624826][ C1] ? l3mdev_update_flow+0x4d1/0x640 [ 335.624860][ C1] ? l3mdev_update_flow+0x29/0x640 [ 335.624915][ C1] fib6_rule_lookup+0x18e/0x6f0 [ 335.624952][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 335.624988][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 335.625027][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 335.625071][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 335.625115][ C1] ? dev_get_by_index_rcu+0xf4/0x110 [ 335.625157][ C1] ip6_route_output_flags+0x364/0x5d0 [ 335.625193][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 335.625234][ C1] ip6_dst_lookup_tail+0x299/0x1510 [ 335.625263][ C1] ? bpf_lsm_xfrm_decode_session+0x9/0x20 [ 335.625295][ C1] ? security_xfrm_decode_session+0x76/0x2c0 [ 335.625342][ C1] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 335.625368][ C1] ? __pfx___xfrm_decode_session+0x10/0x10 [ 335.625430][ C1] icmpv6_route_lookup+0x387/0x590 [ 335.625472][ C1] ? __pfx_icmpv6_route_lookup+0x10/0x10 [ 335.625513][ C1] ? ipv6_dev_get_saddr+0x143/0xb70 [ 335.625543][ C1] ? icmpv6_xrlim_allow+0x213/0x600 [ 335.625594][ C1] ? ipcm6_init_sk+0x18b/0x400 [ 335.625629][ C1] icmp6_send+0x1001/0x1940 [ 335.625660][ C1] ? icmp6_send+0x1e9/0x1940 [ 335.625716][ C1] ? __pfx_icmp6_send+0x10/0x10 [ 335.625754][ C1] ? __udp6_lib_lookup+0x8eb/0xa30 [ 335.625807][ C1] ? raw6_local_deliver+0x15d/0xa50 [ 335.625849][ C1] ? udp_lib_checksum_complete+0x15a/0x2b0 [ 335.625892][ C1] __udp6_lib_rcv+0xcbf/0x1770 [ 335.625950][ C1] ? __pfx_udpv6_rcv+0x10/0x10 [ 335.625972][ C1] ip6_protocol_deliver_rcu+0xd07/0x15c0 [ 335.626037][ C1] ip6_input_finish+0xde/0x190 [ 335.626089][ C1] NF_HOOK+0x309/0x3a0 [ 335.626117][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 335.626144][ C1] ? NF_HOOK+0x9a/0x3a0 [ 335.626168][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 335.626197][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 335.626239][ C1] ip6_input+0x16a/0x270 [ 335.626263][ C1] ? ip6_input+0x23/0x270 [ 335.626292][ C1] NF_HOOK+0x309/0x3a0 [ 335.626315][ C1] ? skb_orphan+0xaf/0xd0 [ 335.626343][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 335.626367][ C1] ? NF_HOOK+0x9a/0x3a0 [ 335.626391][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 335.626420][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 335.626460][ C1] __netif_receive_skb+0xd3/0x380 [ 335.626497][ C1] ? process_backlog+0x2d5/0x14f0 [ 335.626534][ C1] process_backlog+0x60e/0x14f0 [ 335.626590][ C1] ? __pfx_process_backlog+0x10/0x10 [ 335.626635][ C1] ? do_raw_spin_lock+0x121/0x290 [ 335.626672][ C1] __napi_poll+0xc4/0x480 [ 335.626699][ C1] ? net_rx_action+0x447/0xdf0 [ 335.626735][ C1] net_rx_action+0x6ea/0xdf0 [ 335.626786][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 335.626815][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 335.626844][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 335.626883][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 335.626935][ C1] handle_softirqs+0x283/0x870 [ 335.626973][ C1] ? do_softirq+0xec/0x180 [ 335.627013][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 335.627058][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.627086][ C1] do_softirq+0xec/0x180 [ 335.627116][ C1] [ 335.627125][ C1] [ 335.627135][ C1] ? __pfx_do_softirq+0x10/0x10 [ 335.627166][ C1] ? pie_qdisc_dequeue+0x274/0x350 [ 335.627203][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 335.627235][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 335.627268][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.627307][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.627332][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.627356][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.627383][ C1] __dev_queue_xmit+0x1cd7/0x3a70 [ 335.627423][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.627468][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 335.627496][ C1] ? read_seqbegin+0x122/0x250 [ 335.627524][ C1] ? neigh_resolve_output+0x438/0x750 [ 335.627553][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.627581][ C1] ? read_seqbegin+0x1ac/0x250 [ 335.627611][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 335.627638][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.627670][ C1] ? eth_header+0x11b/0x200 [ 335.627695][ C1] ? __asan_memcpy+0x40/0x70 [ 335.627718][ C1] ? eth_header+0x11b/0x200 [ 335.627744][ C1] ? __pfx_eth_header+0x10/0x10 [ 335.627765][ C1] ? neigh_resolve_output+0x624/0x750 [ 335.627815][ C1] ip6_finish_output2+0x11fb/0x16a0 [ 335.627844][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 335.627877][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 335.627905][ C1] ? ip6_mtu+0x7d/0x3f0 [ 335.627928][ C1] ? ip6_mtu+0x7d/0x3f0 [ 335.627952][ C1] ip6_finish_output+0x234/0x7d0 [ 335.627985][ C1] ? ip6_send_skb+0x10f/0x390 [ 335.628012][ C1] ip6_send_skb+0x1d5/0x390 [ 335.628039][ C1] udp_v6_send_skb+0xc17/0x1830 [ 335.628089][ C1] udpv6_sendmsg+0x1c42/0x2700 [ 335.628109][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.628148][ C1] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 335.628179][ C1] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 335.628233][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.628265][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.628308][ C1] ? inet_send_prepare+0x1b9/0x270 [ 335.628343][ C1] ? inet_send_prepare+0x1b9/0x270 [ 335.628376][ C1] ? inet6_sendmsg+0xe4/0x120 [ 335.628408][ C1] __sock_sendmsg+0xe5/0x270 [ 335.628442][ C1] ____sys_sendmsg+0x52d/0x830 [ 335.628473][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.628509][ C1] ? import_iovec+0x74/0xa0 [ 335.628543][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 335.628570][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.628639][ C1] ? __fget_files+0x2a/0x420 [ 335.628666][ C1] ? __fget_files+0x3a0/0x420 [ 335.628708][ C1] __sys_sendmmsg+0x227/0x430 [ 335.628739][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 335.628776][ C1] ? __pfx_do_futex+0x10/0x10 [ 335.628822][ C1] ? rcu_is_watching+0x15/0xb0 [ 335.628867][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 335.628893][ C1] do_syscall_64+0xf6/0x210 [ 335.628923][ C1] ? clear_bhb_loop+0x45/0xa0 [ 335.628951][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.628972][ C1] RIP: 0033:0x7f9bc058e969 [ 335.628993][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.629013][ C1] RSP: 002b:00007f9bc132a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.629038][ C1] RAX: ffffffffffffffda RBX: 00007f9bc07b5fa0 RCX: 00007f9bc058e969 [ 335.629061][ C1] RDX: 0000000000000002 RSI: 0000200000000a40 RDI: 0000000000000005 [ 335.629076][ C1] RBP: 00007f9bc0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 335.629090][ C1] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000000 [ 335.629104][ C1] R13: 0000000000000000 R14: 00007f9bc07b5fa0 R15: 00007ffd58ba2338 [ 335.629158][ C1] [ 335.634119][ C1] Kernel Offset: disabled