last executing test programs: 1m22.144251124s ago: executing program 1 (id=163): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000"], 0x74}}, 0x0) 1m8.734553436s ago: executing program 1 (id=163): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000"], 0x74}}, 0x0) 54.420974541s ago: executing program 1 (id=163): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000"], 0x74}}, 0x0) 39.712103295s ago: executing program 1 (id=163): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000"], 0x74}}, 0x0) 24.028582298s ago: executing program 1 (id=163): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000"], 0x74}}, 0x0) 10.063529967s ago: executing program 1 (id=163): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000"], 0x74}}, 0x0) 6.86582051s ago: executing program 3 (id=1731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000fffffffd0008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6.502893464s ago: executing program 3 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newnexthop={0x50, 0x68, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x2c}, [@NHA_RES_GROUP={0x24, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7ff}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0xe5}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x50}}, 0x40000) r1 = socket(0x840000000002, 0x3, 0xfa) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x410, 0x108, 0x0, 0x108, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@multicast2, @private=0xa010102, 0x0, 0x4f7d3a5e3bcbb9a3, 0xfe, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x8, 0x6, 0x228, 0xdf48, 0x0, 0x1, 'geneve0\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x6b4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x5}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3e}, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @local, @empty, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}}, 0x0) 6.20580635s ago: executing program 3 (id=1736): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="a48c353171354199c6", 0x9}, {&(0x7f0000001400)="4ed7dca15bfbededc205f1c6", 0xc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="cbeb97cac7448425a29c", 0xa}, {&(0x7f00000001c0)="066400234f0cc2a499122120a846e872329e1fe0d4c826d970d368df470251e2210d765377da803452a66194712c", 0x2e}, {&(0x7f0000000200)="3ede77d9751fb470c0d6d4dff993888b14f002511de7fc546ce34864a0374cc12212c55f55a22cc88d1561c64208e867ece0e93195eb3430352ef172e162bd8bd4a45d8ab6e9b9379bf064826950754dfb6f68d212552d3794122fd881861168f2d9bbc6bdf5bf1b428529fa734aef85d299fbbf672fc6b62e63ac58304b9eb26494db80e1d538f2920e1f", 0x8b}, {&(0x7f00000002c0)="e8a21c8341c3b2fb51d04c9a724da20e772f0f1e358f2da486b839cd6aef43c309081e616bbdf663a1a386d6e9e54316ec38da055743dd2a114e8c49e9318735310b889a6a62b5332cd7274a3565ee0d087a44e8aaed37d43fd5bf5c94b98676f5cc628e4077c33861b21ebb3d8ce5ab4c80e164c5d985f129", 0x79}, {&(0x7f00000003c0)="bf6154bbf89df70d581aa35930ec0d090a2bd04e4cfdd9d60aa51497d3061d9c0cc6696aa3e3a35eb4898ee2d17886c37754c20567de878a02d0b80efa2c09cfa23d308801594e8106ba4fe7c0e400ac6dd53a6ec8ff5240feecfbc4b8002e9f94faea77814ff7eb73dc9106fc119446826c45574ea69596612ba3107583acd32054ad97f5912a11ebcd8f8727476863cf0785f0ca76cf27a1b55352ca5a9afb0385617643b04e5049139da740ac9da630912cef2ffc0f9c53c9f4386c4678e51be574d1a2125d2df2f5b90356ec223c18349db227ab7456f37700e5b534be08e300ae9b602806c4e787d470b5707d10f362b06a9eb935", 0xf7}, {&(0x7f00000004c0)="c00937b479b6fc9e52b437133f0d3de6e2d02d3827d1d13580092cb974cbed51ae2be445dd0f5a2712cca2b8e021", 0x2e}, {&(0x7f0000000500)="6158f519e2fb6168963331f80524f692774abd5870f50c3ff6359d0c79fce4327699ced1665a5927e9c09d4ab304700ac535bb53687e802a68a55c11821880730d2dabd9ea6552f0aa93c4d520e5e726808cceab8f05e99b0c0e7c0a42ee927742c3da188853012ae68a879f49a5e48f772a43caaa278202d6c11710417544c3cb81da79d08b3029e72e7d7db93f8dd7a7b05e0d096326f4cd93b6d2f98196e0e070464bcf28f90f86202e5c465f7a2bea0fde878d9fce68c9894ff6aabce185085ff91c69f51bd4ee701f859b7d6dfdca3c17ffbe88b69a111cbc75", 0xdc}, {&(0x7f0000000600)="d90d8919183e8f828f7cac3eb2925f880d0be89f65c4a3bc18a858e00f1a8ea4007ee9c9d9d1fb51ee29b246f7210e392daebf8914b36c8c8f4e62a86324744a0c3979ac421c4275f1add4ae69c60a4d862cbff3c691c7af152086b7aba2", 0x5e}], 0x8, &(0x7f0000002680)}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="a74d2ff333aa47b0b931636d329e4022bdb738a598fb270a4e05a78af8ad4416e6d253462396e2e5f77c2ceb47c3f656098515b92e873c0b0bc371a260251a889ccd91616714cfaeefaa7564d0f89b55bfc4516ced6df78072f483c673f866bf044834e735f7a5a2720d", 0x6a}], 0x1}}], 0x4, 0x28048005) 5.992931697s ago: executing program 3 (id=1737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000c100"/29], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1000000}, 0x38) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0xfffffedf, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x2000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@private0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000400)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f00000001c0), 0x0, 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800e8dd89df07f379210f802b550323c65360597f7b4dc186fd4c0a544c9c72488abda22a55ebd43193b2b2ab41fcac0edcfe1bd4acffa9fcfa4d9bc4f62281ca3a18ec6de0428863a05bcc783f265f2aba19d5314097ae813470e8044c1a59d869432148c1db2b52da4d350e2bcd15927de87f9d701fe0e31c16c075c65c", @ANYRES16=r9, @ANYBLOB="df4800000000000000000c0000000c00038008000200ffff0000180001801400020064756d6d793000"/50], 0x38}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r12, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000025000000000001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB="2cff4fa986eedc095bafa226e4606194488ba27fbdee247a75d2df4fe097758428817b6c16f424dce9da3ba41b2ee270b813c9b5c73b4818aac122b95f9a551f243e49087fec6e3ef1e9abea4899d64bb2615b361784f3c6"], 0x3c}}, 0x0) getuid() getgid() 2.868176835s ago: executing program 3 (id=1751): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x20, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x19, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x7, 0x1, 0x84, 0x4, @private=0xa010102, @local}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85, 0x21}, 0x3c) 2.867666114s ago: executing program 0 (id=1752): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800200000140003006d6163736563300000000000000000000a000100aaaaaaaaaa2e000009002400729ed35e760000002c002b800800"], 0x78}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c01462917d5534b706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0xffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x44) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffbcca}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd0}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETLINK(r5, 0x400454cd, 0x305) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x9}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.681964427s ago: executing program 4 (id=1754): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079100000000000007f0af8ff000000009500740000000000dbc544939d23dfa99f647aab8f1a5f3936bf9f09675a601a34bb02f3ff43d4ebae3599757a72ef33bebcf7e8f73b9777b4e57275b523efe51b23961fa006fb5e0e627c75ec47ddf2fe00baa027c00f369fec67a34bc6207910274dc48abc7fe5823e9f1cdc33b3bb89ab6b4adc957f73735113a6ccc7d5bf3b00000000e449461bf248bb07d8f7ec7a466d61540304559f44cb2072199b44ca613da3dac2f56abf672f273c9a729c98a904785334c3e562b684bf32c39db8c234027f07fe6161fe4232aab89e65115e08b7"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) r4 = getgid() r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.current\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000500)=0x41, 0x4) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="ad4308a803a93ae832cfe6d5ef23337e0f698efa258fa9d3bc1c9df29b8749c5ffd0074397d4b10c19ca158b9169fc747e0ce81800f6ab54701b60db0d358f0341b17544b7edabe88d90fc5a63b52a5eee75baf1278b9c106f3c728d86482d41a1b38f52ef3ad9e716e77953d785625a2279cf4fd6266ccaba213de2e35c65a01968cf04d00a1ca520baf750b816fafde164d33bfafb0fee4aae07b55527d4d61deda8a79a1be0238b8309d25f34019a61f0363bd8bdf6bae02edd9d34b01b8157e510898a6e7d7217224d331981b5c2bb14d88bdc317c7a88eb04c5ef7be4021f8dbbf25c65b82d0f787de0c0b87c2d51c21e948c9c8f8077e0341b04c4ff0c0f3e7a48fae5ca15222bc350f59307d42d0670f91610d4dec94cfbbbe3b383decd29515965a3059d4b2cbed6a77948d374d320ef04b9fd74c87eef26125b3e3418aca9bd8e98db179d57611d0f85528116cae7b18393dd78c7528c45e7a8d64db9adb31bb95564d75ff0dc06fb71fc52ee5c02779cb166d93180cbd74ab3fb7e19b3509381c4e2b6e9cb7953347d0993c3d7445d201aa1e11c8eace70bc364fb0572af4c00f9c53d1a8fa4702a792ff9a83eef082e90a18dadd9dcbbc808b8887be9f1b74d8bd5de8adfbcd46b7ab3df6ea858bff5a1b4b5d5f85a6df2e90f370f67e9b7b9e9e02f7b5cb615a86297b112bd735d61d66e25624c465d5a87bfc7f7ec3daac70d4abc99c7a12cc79a14e9a7618a86a295c0fd5cbd9f716ad49a35b152828c3a16bdd4b649d0bf6a1c80a500cdde4627b13751d91cb67fd9003ba3a91891f240be702f978e4e55354de192406defe3d84917f02e27855d6611d8ffc41f73ea5abd7b0f48ad277b691a27e5b747a7d8aa632920f3fce2788d4437fc23f59f9a4b4dbe7fa3460c5c4047277a8b02cb508a2c1853d14aa78689c4814b44391bfc4acc022e7119e9109d35225271c063d6d89d09347a8c1d2ab958bad1ac3890de420877b875272db3402a63da014a38c8ddb9568f00c7c29f31d11bcd473dac29c91247d570cc491384ece7f19ce3a3e4b2c8d72bde83120c3c7d38b49fbb640d7842f9f9a86b1ea6915b2121b72e281667bec82aeb7665d5dde31c6bceb7eb14f41f08d71faaf1b8f31f96564a8add5fbdb69045bfba0fbf3a4e1ea032bbbf3babe0de46ca56fd7738562e8c65c7ad1e8ecf3fe810cca9521a345af1d1bab6eac8a35e391bf1787bf16ee6050635188afa2f9b455c44690b2fecf9f40f08a10c7caf00744db2d389f2d618abcf44e5a45348c186fe926d1eb87f7b402735c05ae96544b5ab3367b60bdb4598152cea9f8f2844ca81fd5fd0b87383db0024db1d2b3c7469245793199cb5aba92dafaf2c90a9e1a93841ff78663ca97d8d51deba8cc06f3f5b7a1af71d3b65dfa48c9acd436bf364641db455d6e8e8ed644b30a4dd7806f1ba82f33c856c76e1f28ec3939e1ad0a7d38426e7af4ae49c0aa9e575a13d9d520aa84bd15090c28a142777e0b6a9d5ddd07918e3a20257a6be334196489ee60ba275d0b821d1ff315da51921111905409311b457fef71d2679a271752cd98cd9b0b1f871ec2e1e02525b41587f88a0bbf7bb63e34f8ca3975789c252a0b803518f2c03d327af92f9c2ed4ec9beb301da910331ad8a2d79c2c461362662c47859154ce8a26c9a12bcae161899a4005572dd3191cec8e4db0ab78816455c0a388c78a979c8ebe0593b23a7fd8681555d686507cf215dd4b1ce9ecd49fb7a4e2884f0449e40bf8eb6347f59a268e7a51441890200a4bb9e86aa18c088e5994699657d4d2d518bf83b59adc8220841e7ad807ed7adad95403d2319836d069b15d245ce013867121224e5e74371c32ff8cd9d19cc477ca36b5e0ac7c15041f2fe7f46a91a8c9cd089f4f38a6118f45f1fc9c48eb4820d355a869fecc2b391630b13aeacb2b745b22018d554a2b8d833f404784f1687d554089aedba3d7036788860bf66e8735603e6e2ed2235e8800931fdc30c9eec3d224650c5b58229faaa9cfacc31", 0x5a9}], 0x1}, 0x0) sendmsg$tipc(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x0, 0x1}, 0x10) 2.327424966s ago: executing program 3 (id=1756): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d53300"], 0x23c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x30}}], 0x2, 0x20004874) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10820, 0x400}}, 0x20}}, 0x4084) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdffeffffff0100000000000000000000000001945d4a49179493c80902dc1de1cebf0f0c8add358c9bec3370df646e4005bd599bba638c74ef48ef2c3c05f3a7ea2a66a1babb370cd5c1873814cfc3ca8f21e4c02a154752844463bb63b5d5ffa5060000000000000035d6a6539a225acde92f1ddf81a87372b7b524d93c9c95ec574b1bab1cc388b7954929741967e3dca0bc52af8a7f", @ANYRES32, @ANYBLOB="0c0002005500000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r8}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000fc02000000000000000000000000000100000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000a3e01000000000000000000000000000200000000000800000000000000000000000000fcb80a16a92cf619000000000000000000000000fe0500ffffe64d40ef00000010f925dd0be60bb4"], 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0x1}}}, 0x24}}, 0x4014) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r10, &(0x7f0000000240)}, 0x20) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) r13 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8) close(r13) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 2.21580921s ago: executing program 4 (id=1757): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000040), 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000580)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @rand_addr=0x64010100}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000600)="7057db461afd7e8a9901aa4177e041e859a2d92f668a7c6bbafb41bb613f188b3439df221a49eebd6db691f32fa6e5f41dc048ac46ae228280cf3095eb161296a8e0e2c7d7af422a7d9cfbd0369adb224c2fb9fa084f3fb4416023e9fcb3bcafc23f3d15c83d511ab204a98950c9b5abaf90fef3e79b2ff0902a3651d9bbe623a240d38cf575cb22cbc293a3dc3a994bf19f887bf9fce70f40649d520479c74a775ff7d20feac2299fbfd5d1ed076b0f25b28ac2ebcbea89d13906501c6be6eab328a4e20512ea8d3b871a08f760c2f22d4592d3308d02fd9324d249ea9c11335e914b7512acc08cc195ff69ca051f5cb0b4807a7614", 0xf6}, {&(0x7f0000000700)="ea3948b96209302db84b726e49396227a382b8d9031c5653413a8f0cc25b9bf37f13e33b5e522d5357db6976ed27028310a74dc5c171241053f7e936a261c93b8571009ac33cc0d7c3dad48012b5f6c5022de34ae9c00bf8b4fc5f92d5721f4262b9d6ffc8d163cc87d9996d5b27814b9f217cf7db3887ba29bea0b8eb7d39977988f2719c40dee7", 0x88}, {&(0x7f0000000400)="574c21566eb523a7ad8d74b936d74636a25a11416052f813fa3898e3dbbcdfc9bfa96871c987d0a59abcba58d3c54d9f3cfa2ee461c5be4719e18d86f9dc2d38c3b4e8dcd3a0731a9b7494", 0x4b}, {&(0x7f00000004c0)="39e225ba41d39123a0649f18e883457731e28b39676882f0f642c0fa896efcd691f0df1c79da0a5467deb8c1793e4e99363f4aa23902d5e6bc5d2a11523a408e5469557c3b57b2391ef968fdab188c2d50f7ac", 0x53}, {&(0x7f00000007c0)="e659d59cf28d60e7e88570630e7f4b3607a11eda01297b78184f11394b1e73d3b2883dd6ae6896bf31741492ae79f37ddacdc88700c2e03163d4fb175c115f0c21eda430b740b02b06a6b64023e9c6e27d8d5a82bc0f676cc19a4bd8eaa7a9ebf0286cb79956905e9f30c441fa79cea1259e4a0fbdc0231d99199f1ee6e4848ede5c232eadd65be41394b6e719fe5da9d2ec71cd58566c7c9810db16dd8e14e1e90a4f0f11cf8c3c16f7cf14d3f3a579070af24dd681973692e3e02e57f1dc0c9525c77c9f3964d922cdf22bde7349a7cd1f42fabc874400cef3a8a0dba2", 0xde}, {&(0x7f00000008c0)="df2554e624d09ff1d85c220b342c0b3bdc36d9c810fb0662e4705a7b400a77decd42155a2befd85e1f008084ae92cb03b9a3bf3803c0bf7834fa820fcf0c0dcc060ae9e020862c2c98ca884e9973fcbdebd0f738b799c3787ce683dbe8dc1b215c86a28b1c1933729e6408d9b7ac538c34d1e08f0a6e0482e20f2d2d4bec4af324da20442e3478c0b983827a4c70e4716128067bd51667217a", 0x99}], 0x6, &(0x7f0000000a00)=[{0x88, 0x116, 0xb04e, "32f35903c7f1973322f77f39276bed2e24424180a948f36968a990de26a556b194015bc7ac5a71fdc1ab52ae745511432660f44a132e2bb1a0da4b3bcd0ed81a828869333d5f8d38c1b5371c40960197b2d446e4122f9dc4ddb776e018c61b93e59b0986a7df57273e3574aaca7b1e1020d6f31100acaff7"}, {0x28, 0x119, 0x7ff, "9c9b7f31e12e42ae355090018bbaec1715bbfa"}, {0x58, 0x111, 0x1000, "e27a49fa098bf2d952cde63cff17408e543f56ee9f3635a560c395109d119693ac61d1c46deff15789f2451eac7982f3eb11ffdb49c0a64cc8d2f2cfa0ed1f236cae37d66f119547"}, {0x80, 0xff, 0x2, "db8257d9af2ff1cdadd443536524b595c8ea63a8aa3fce222d520e0924fd36a376257810fda0c1f12e9b3caa46b8d4c72996173cb04da519523d9f2f9670b2793a6f60fe68d4e6adf701670df7119982bce598111c2fd44de8b1b032f0b6fea06a1c3324f27829a2317173b0ea"}, {0x48, 0x113, 0x9, "e4137c6d180a9efccd53e493f3f03aca1e88f0c9a9c162fbd11a931cd00242bbdfff0393e434fef4b7ebffc340b13eaa007ce5"}, {0x68, 0x10b, 0x9, "ac2285e2495793d8241853110b049155bec227627c0a8e1e5b9655b0198f0f94c561441abf30dc9a4c50210ac72eaf6a8b847555eeb9864efaf6fbdffccfecd3e5925a416913e9dd0e3da5708e08d50dc4"}, {0x20, 0x118, 0x5, "669e700d21cd55d6878cf0a6f25986"}, {0x70, 0x115, 0x1, "9dfa53172111c3bb54ac89be594573a9e7ad8fb819fccea46b2ea4d2c7aa5fa6ec0ec33ac3340e33ed2c1b3b6b5edfea5a6bd4e9a9cca4b364d138881c03712bf331db39aa680913ad124b98ceda3733cc3b5c45e0aff0138abc37"}], 0x2c8}}], 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020400) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000140)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x1, 0x60000000, 0xc}, {@rand_addr=0x64010100, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000001d00)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x5}]}, 0x24}}, 0x800) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r8, &(0x7f0000000200)="26ff7248f3851ae9b67aae00c91cf24acf3a134b57296b269f113e43b42fe803e71949962187c05249eb4fb809d965845dd1707610ed5d", &(0x7f0000000240)=""/255}, 0x20) r9 = socket$packet(0x11, 0x3, 0x300) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="05002dbd70000000000029000000180001801400020069703667726530"], 0x2c}, 0x1, 0xa60d000000000000}, 0x0) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d0e0004", @ANYRES32, @ANYBLOB="140006"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.610135803s ago: executing program 4 (id=1761): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private0, @in=@rand_addr=0x64010102, 0x4e22, 0xfff9, 0x4e20, 0x101, 0xa, 0x80, 0xb0, 0x3c, 0x0, 0xee00}, {0x7, 0x1, 0x1, 0x7fff, 0x2ec, 0x8, 0x9, 0xb5}, {0xfffffffffffffff6, 0x5, 0x8, 0x9}, 0x8001, 0x6e6bb5, 0x2, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d3, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x0, 0x0, 0x2, 0x3, 0x8, 0x4, 0x7}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.472218945s ago: executing program 0 (id=1762): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) connect$x25(r1, &(0x7f0000000a80), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20110000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000fc02000000000000000000000000000100000000000000000a00200000000000", @ANYRES32=0x0, @ANYBLOB="2564208e0113a2b25c8ec79c52aae17de1f76194f6cc634911345f7fcf0cf9e6ec2ea4fc51978d15834fefa0ef23fad560ec5464d9b367b401136365635179094109600f72b093f709e44adb57fac0e24ae09c6ca2f51562b7fdb61d3e596c7aff719499", @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000a3e01000000000000000000000000000200000000000800000000000000000000000000fcb80a16a92cf619000000000000000000000000fe0500ffffe64d40ef00000010f925dd0be60bb4"], 0xb8}}, 0x0) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) 1.471400099s ago: executing program 2 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4c8d0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "b3e259f51104a9b7", "08b007c5a4bb0e3a7fbec36608289db0", "af3b9059", "99d8f2bd572cad27"}, 0x28) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f00000001c0)=0x20000eb4, 0x4) 1.412386668s ago: executing program 4 (id=1764): r0 = socket$inet(0x2, 0x2, 0x1) recvfrom$inet(r0, &(0x7f0000000140)=""/17, 0x11, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) 1.314986689s ago: executing program 2 (id=1765): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x300, 0x0, 0x4008010}, 0x0) 1.204001951s ago: executing program 0 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1c, 0x3}}) 1.090232509s ago: executing program 2 (id=1767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB="e87cf4d1910900480424"], 0x20) (async, rerun: 64) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r9) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r10, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x30, r8, 0x101, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "8605adf9363f259da08f111e6d3ba8db"}]}, 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x4004000) (async) r13 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r14, 0x0, 0x23, 0x0, &(0x7f0000000000)="243c42e8680d85ffff03762f080071127b58425eb19207079cdc0cd52f30da188d9aeb", 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bind$alg(r13, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) r15 = accept4(r13, 0x0, 0x0, 0x0) (async) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14}}, 0xcc}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c0) (async) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x1}, 0x18) (async) sendmsg$can_j1939(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (rerun: 32) 839.293079ms ago: executing program 0 (id=1768): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140), 0x4) r5 = socket(0x10, 0x3, 0x0) bind$phonet(r5, &(0x7f00000001c0)={0x23, 0x6a, 0x8, 0x9}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="1ec86e88bf4ba4466ecffff7edad", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40d48, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5, 0x6, 0x4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt(r1, 0x200, 0x4, &(0x7f00000000c0)=""/111, &(0x7f0000000180)=0x6f) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e61, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)}}], 0x1, 0x20004000) shutdown(r0, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="180700000000000400a286d90180000018170000", @ANYRES32=0x1, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000007000b00dc000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x8, 0x8, 0x1}, 0x10, 0x2888, 0xffffffffffffffff, 0xa, 0x0, &(0x7f00000002c0)=[{0x5, 0x2, 0x6, 0xd}, {0x4, 0x5, 0x2, 0x9}, {0x1, 0x3, 0xa, 0x7}, {0x0, 0x1, 0xd, 0x9}, {0x4, 0x2, 0xa, 0x2}, {0x1, 0x2, 0xa, 0x4}, {0x2, 0x3, 0x0, 0x3}, {0x5, 0x1, 0x1, 0x8}, {0x3, 0x4, 0x6, 0x6}, {0x5, 0x1, 0x3, 0xb}], 0x10, 0x4, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\"'}]}], {0x14}}, 0x8c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0xb1, 0xfc, &(0x7f0000000440)="587cded8abced831e234557ce261fdb9ff09c556e644d8c5fdbc73a5f74a5faed70353a8b1282da6cb88916f82b8fbcb82df7b1f1514eeb02392b6d85ec9a70bdae3dbe1fe50a25b259123a56696a15d5c69eea2906b3a4349b085c028a5788c31ff1c041e3b73c282dabb86a2e414833bd37a0000f279b7360a00009b13fc5b06a3ed3ca64b6b608fae3268e14b10d0c8aab5cbebba203acc1fae2357b87c93636ec44e516d8cb62ace1b796fd3d70883", &(0x7f0000000500)=""/252, 0xb, 0x0, 0x9d, 0x23, &(0x7f0000000600)="4d41e32acf3de5967f980d92b70a6fa71c775bcb0279b71523896036ef2a5afd6ed1a548991eba800ad8b2ee4542b33feb7b1d5aea15c200c7355653d39c953a233af2a69d04eda0b21cca34a5cd3aea849dffa28a8884f67793a7ddefb11fbe8e989e2f4ad00f5f4806c1cc1ba7916500463cc1c38770ceafaab9853ac2dba4bc142a23d9eef2af0fc8ff142c4ca6cf503ffa1f9ae6fec5dddbe018dd", &(0x7f0000000240)="5ca18c09c9c1229927f772bfb8c813a81f897c5ea3609d107467a9080724208bc68ea6", 0x4, 0x0, 0x1000}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) pipe(&(0x7f0000000740)) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 540.201248ms ago: executing program 2 (id=1769): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="780000000000000017010000c60000187a22ec104b065cf506de8cdc08a6d0fddc0d72778aece33162e224760128908354ebe677afaf0fba4d209101c48a04692828bd124430ce0542ec901330cfd17ecda3ea1ff3d715545d42da58b55978fbbd3cf28bf72800000000000000170100000200000014000008d240a5aaf782aa7e74e12faa551a3e8899099e1542f8ed4490000000000000000000"], 0xa0, 0x200040d4}], 0x1, 0x20008852) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a061"], 0x0, 0x45, 0x0, 0x1, 0x80000001, 0x0, @void, @value}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r8) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ff01000061c5120c63d85d00000000007e0000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 510.368826ms ago: executing program 0 (id=1770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x27) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) pwritev(r6, &(0x7f0000000140)=[{&(0x7f00000003c0)="bddf6875d9562193997baab942920ebe5fed701e8e147e2023df60949fd654d0704bbc8e1f7cc5c43c74059f7ee318e1c4b11d0020d482d193079ef4dc3b283591f13e1570c76386596c27f10f7f9e8c12792469f9e58c820f9407837982b9df075cb51efebd3e8130a44e47f2c151878b3c75ab86aaaef9d5858fb64878c790360c2ff4433d71cfdea9c4ce0252c58b4254f3d57ba61bae6ccc545b996aaf95f32f19e015d01d92577335fb457a75756c6c08ad3ac701e1374de4250139c7c145295d4b0f2c178669", 0xc9}, {&(0x7f0000000100)="14e61693659b0f2533a6723156409f26a88b", 0x12}, {&(0x7f00000004c0)="511d285f79c3f24670150a8b98fed267da4cf2c7788b2b281584d4129ea48e351c3be09040cd7541d22f575fb78e21f09f2beab879e2292f9ea6eb72912e6eb1bc2f23285444fa73ed39be00a229a592ee7e2c9c351dab8586491afdeb824d8545cb7e77cce64a649fa897bb894ad5d53fcf2c48078e499c370cd61878cc60356e70cf59110f471980d35109fb2a5c91a1c3f3d30b8107a9c823e141dcdc600a3c8459261acddc511e8a00b0378a288a5ff0", 0xb2}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="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", 0x1000}], 0x5, 0xfff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES64], 0x4c}}, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) 446.852985ms ago: executing program 4 (id=1771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102fffffff500000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) 184.257496ms ago: executing program 4 (id=1772): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe05"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffeb8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x48, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x6, r6}, 0x38) r7 = socket(0x840000000002, 0x3, 0x80fe) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r9, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000001010488ffffffffffffff02001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c001080080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r2, 0xe07, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r12, 0x0, 0x0) 183.978087ms ago: executing program 2 (id=1773): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800030325bd7000000000000a00000000000000060007000800000008000500", @ANYRES32=0x0, @ANYBLOB="2a9ac3cea334c2bd00e9e19da431d8e3da893f79d63cbb2e0aba3d1f7bf63b575c64f24389627bc806bec0ff583983b4f231e0af946bc0aeb420b59a74696e69d3ac"], 0x28}}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x0, 0x2d, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) 154.312466ms ago: executing program 0 (id=1774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000180)="61df7100c80400d572e12423b680", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @mcast1, 0x3, 0x6, 0x82, 0x500, 0x8, 0x40043}) 0s ago: executing program 2 (id=1775): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xc9, "6be95cfea5966e23aef6a9356f026698a0b2e6e51af29937b44b0b5cfac4a4ae1a534becd02bae07e8aa6762ef369e738b4ca45e65bac775d42f43a6863b5a06c9eb901aa2a6beacd4530086c64ca37be11414cce8e53e81279cd4d5f1e92371bb28c17a96701450eb9a926bf54d27724dc5d0c848c7a57b8975a628e5a4a4787b56aa60855a649fbeff0f1c41a22939f44377dd9da6c2d4cc4738adfb72baa99cd181d6770f960507292c7efc5ca0c1721eb72eaad49e8c8765ff24e82800"/201}, &(0x7f0000000280)=0xd1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x4e21, 0x6, @private0, 0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000184000000020000000a0004002800000002000000", @ANYRES32=r4], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000004c0)={r1, 0x4, 0xfffffe3b, 0x8d26, 0x0, 0x9, 0x3, 0x3, {r4, @in6={{0xa, 0x4e20, 0x4, @private1, 0x3}}, 0x7fff, 0x5, 0x79, 0x0, 0x1002}}, &(0x7f00000002c0)=0xb0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x80000002}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r6, 0x1ad72f7) r8 = accept4$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x5, 0x80000) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000100)={0x2, 0xc, 0x5}, 0x8) accept4$netrom(r7, 0x0, 0x0, 0x0) r9 = accept4(r6, 0x0, 0x0, 0x80800) r10 = socket$inet(0xa, 0x4, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0x8) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3e, &(0x7f0000000080)=0x9, 0x4) accept4(r10, 0x0, 0x0, 0x80000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYRES16=r10], 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d1752a}, 0x4890) recvfrom$l2tp(r9, 0x0, 0x0, 0x100, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) kernel console output (not intermixed with test programs): tes in process `syz.3.1095'. [ 226.068992][ T202] hsr_slave_0: left promiscuous mode [ 226.076068][ T9917] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1094'. [ 226.090731][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.103411][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.113489][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.132745][ T202] hsr_slave_1: left promiscuous mode [ 226.138918][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.151564][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.161783][ T202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.175365][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.206060][ T202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.233391][ T202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.290285][ T202] veth1_macvtap: left promiscuous mode [ 226.290442][ T9929] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 226.313370][ T202] veth0_macvtap: left promiscuous mode [ 226.319454][ T202] veth1_vlan: left promiscuous mode [ 226.326942][ T202] veth0_vlan: left promiscuous mode [ 226.995572][ T202] team0 (unregistering): Port device team_slave_1 removed [ 227.035769][ T202] team0 (unregistering): Port device team_slave_0 removed [ 227.052783][ C0] net_ratelimit: 401 callbacks suppressed [ 227.052801][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.571440][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 227.755723][ T9921] lo speed is unknown, defaulting to 1000 [ 227.783043][ T9921] hsr0 speed is unknown, defaulting to 1000 [ 228.091255][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.262372][ T5842] Bluetooth: hci2: command tx timeout [ 228.417196][ T9978] geneve1: entered promiscuous mode [ 228.444670][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 228.453637][ T9978] geneve1: entered allmulticast mode [ 228.708505][ T9921] chnl_net:caif_netlink_parms(): no params data found [ 228.733874][T10003] netlink: 'syz.0.1113': attribute type 10 has an invalid length. [ 228.789997][T10003] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.797945][T10003] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.886526][T10001] lo speed is unknown, defaulting to 1000 [ 228.933976][T10001] hsr0 speed is unknown, defaulting to 1000 [ 229.118020][ T9921] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.127348][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.134763][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.144257][ T9921] bridge_slave_0: entered allmulticast mode [ 229.152520][ T9921] bridge_slave_0: entered promiscuous mode [ 229.164247][ T9921] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.177441][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.193055][ T9921] bridge_slave_1: entered allmulticast mode [ 229.234259][ T9921] bridge_slave_1: entered promiscuous mode [ 229.465857][ T9921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.548612][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 229.575089][ T9921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.591272][T10036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1122'. [ 229.714482][T10036] geneve1: entered promiscuous mode [ 229.722359][T10036] geneve1: entered allmulticast mode [ 229.809040][ T9921] team0: Port device team_slave_0 added [ 229.834268][ T9921] team0: Port device team_slave_1 added [ 230.020888][ T9921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.061213][ T9921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.073107][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1127'. [ 230.151116][ T9921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.171262][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.207555][ T9921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.248155][ T9921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.314241][ T9921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.341865][ T5842] Bluetooth: hci2: command tx timeout [ 230.569687][ T9921] hsr_slave_0: entered promiscuous mode [ 230.602545][ T9921] hsr_slave_1: entered promiscuous mode [ 230.609056][ T9921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.618880][ T9921] Cannot create hsr debugfs directory [ 230.730415][T10092] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1135'. [ 230.789867][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 230.827554][T10093] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1135'. [ 230.846127][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 231.085785][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'. [ 231.095541][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'. [ 231.162951][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 231.211232][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.366590][T10107] hsr_slave_1 (unregistering): left promiscuous mode [ 231.475907][T10125] siw: device registration error -23 [ 231.694575][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1146'. [ 231.710587][T10137] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 231.978389][T10149] syzkaller0: entered allmulticast mode [ 232.251416][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.411595][ T5842] Bluetooth: hci2: command tx timeout [ 232.625521][T10169] siw: device registration error -23 [ 232.855436][T10173] netlink: 'syz.3.1159': attribute type 39 has an invalid length. [ 232.911717][T10179] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 232.920142][T10179] macsec1: entered promiscuous mode [ 232.927228][T10179] macsec1: entered allmulticast mode [ 232.956789][T10179] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 233.071370][T10173] syz_tun (unregistering): left allmulticast mode [ 233.173123][T10193] tipc: Enabling of bearer rejected, already enabled [ 233.222420][T10196] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1164'. [ 233.240802][T10192] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1164'. [ 233.289783][ T9921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.296990][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.375526][ T9921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.433340][ T9921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.482462][ T9921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.235491][ T9921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.308425][ T9921] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.331259][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.360001][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.367397][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.419170][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.426600][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.491784][ T5842] Bluetooth: hci2: command tx timeout [ 235.126750][ T9921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.185385][T10276] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 235.330213][ T9921] veth0_vlan: entered promiscuous mode [ 235.356170][ T9921] veth1_vlan: entered promiscuous mode [ 235.371528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.485144][ T9921] veth0_macvtap: entered promiscuous mode [ 235.516911][ T9921] veth1_macvtap: entered promiscuous mode [ 235.543053][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.558057][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.581893][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.625730][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.650070][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.681013][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.728508][ T9921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.830721][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.856903][T10301] netlink: 'syz.2.1193': attribute type 12 has an invalid length. [ 235.866328][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.898579][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.901313][T10301] __nla_validate_parse: 4 callbacks suppressed [ 235.901333][T10301] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1193'. [ 235.928510][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.958100][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.962909][T10307] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1196'. [ 235.969207][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.995776][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.007655][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.024873][ T9921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.042190][T10300] geneve2: entered promiscuous mode [ 236.072282][T10300] geneve2: entered allmulticast mode [ 236.212782][ T9921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.232520][ T9921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.251108][ T9921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.270199][ T9921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.293002][T10315] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 236.411342][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.647095][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.676742][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.750446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.779746][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 236.793228][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.043490][T10347] tipc: Started in network mode [ 237.065610][T10347] tipc: Node identity fe80000000020000000000000000001, cluster identity 4711 [ 237.092614][T10347] tipc: Enabling of bearer rejected, failed to enable media [ 237.425319][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.451381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.475197][T10362] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 237.616315][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.890855][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.047516][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.234506][ T12] bridge_slave_1: left allmulticast mode [ 238.240580][ T12] bridge_slave_1: left promiscuous mode [ 238.247092][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.262743][ T12] bridge_slave_0: left allmulticast mode [ 238.268696][ T12] bridge_slave_0: left promiscuous mode [ 238.274579][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.491373][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.576992][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.588291][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.599162][ T12] bond0 (unregistering): Released all slaves [ 238.782333][T10396] sctp: [Deprecated]: syz.3.1215 (pid 10396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.782333][T10396] Use struct sctp_sack_info instead [ 239.433655][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.444306][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.458379][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.467458][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.477150][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.527150][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 239.536398][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.544583][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 240.125576][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1228'. [ 240.207399][T10448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1230'. [ 240.239036][T10424] lo speed is unknown, defaulting to 1000 [ 240.246219][T10450] netlink: 'syz.0.1231': attribute type 10 has an invalid length. [ 240.455826][T10448] team0 (unregistering): Port device team_slave_0 removed [ 240.468676][T10448] team0 (unregistering): Port device team_slave_1 removed [ 240.503819][T10424] hsr0 speed is unknown, defaulting to 1000 [ 240.530302][ T12] hsr_slave_0: left promiscuous mode [ 240.544266][ T12] hsr_slave_1: left promiscuous mode [ 240.559453][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.571325][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.578468][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.588545][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.600557][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.639549][ T12] veth1_macvtap: left promiscuous mode [ 240.645773][ T12] veth0_macvtap: left promiscuous mode [ 240.663837][ T12] veth1_vlan: left promiscuous mode [ 240.669515][ T12] veth0_vlan: left promiscuous mode [ 241.318774][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.368850][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.533795][ T5842] Bluetooth: hci2: command tx timeout [ 241.611278][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.078596][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 242.450346][T10424] chnl_net:caif_netlink_parms(): no params data found [ 242.506308][T10500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'. [ 242.651598][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.042804][T10531] xt_hashlimit: max too large, truncated to 1048576 [ 243.058455][T10424] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.083394][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.107842][T10535] xt_hashlimit: size too large, truncated to 1048576 [ 243.108832][T10424] bridge_slave_0: entered allmulticast mode [ 243.149283][T10424] bridge_slave_0: entered promiscuous mode [ 243.180614][T10529] netlink: 'syz.2.1248': attribute type 2 has an invalid length. [ 243.255416][T10529] netlink: 'syz.2.1248': attribute type 6 has an invalid length. [ 243.255485][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'. [ 243.358104][T10538] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1252'. [ 243.428775][T10538] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 243.471872][T10424] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.519633][T10424] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.528449][T10424] bridge_slave_1: entered allmulticast mode [ 243.537003][T10424] bridge_slave_1: entered promiscuous mode [ 243.611377][ T5842] Bluetooth: hci2: command tx timeout [ 243.694003][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.950502][T10424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.973622][T10424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.147890][T10424] team0: Port device team_slave_0 added [ 244.184091][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 244.194897][T10577] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1261'. [ 244.203887][T10424] team0: Port device team_slave_1 added [ 244.314095][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1262'. [ 244.361253][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1262'. [ 244.492241][T10424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.499284][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.563736][T10424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.625384][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 244.656526][T10424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.686560][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.731372][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.803385][T10424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.059829][T10424] hsr_slave_0: entered promiscuous mode [ 245.108937][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 245.112546][T10424] hsr_slave_1: entered promiscuous mode [ 245.150145][T10424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.180257][T10424] Cannot create hsr debugfs directory [ 245.522692][T10642] netlink: 'syz.3.1277': attribute type 11 has an invalid length. [ 245.572314][T10642] netlink: 'syz.3.1277': attribute type 4 has an invalid length. [ 245.702006][ T5842] Bluetooth: hci2: command tx timeout [ 245.771395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.779426][T10649] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 245.847190][T10654] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 246.310618][T10641] lo speed is unknown, defaulting to 1000 [ 246.327229][T10641] hsr0 speed is unknown, defaulting to 1000 [ 246.789802][T10677] siw: device registration error -23 [ 246.811387][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.487622][T10424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.517765][T10694] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 247.550160][T10697] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 247.572177][T10424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.585723][T10424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.630762][T10424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.777651][ T5842] Bluetooth: hci2: command tx timeout [ 247.851351][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.915580][T10424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.949323][T10713] sctp: [Deprecated]: syz.4.1295 (pid 10713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.949323][T10713] Use struct sctp_sack_info instead [ 247.986989][T10424] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.082806][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.090114][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.109908][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.117306][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.131934][T10707] lo speed is unknown, defaulting to 1000 [ 248.171343][T10707] hsr0 speed is unknown, defaulting to 1000 [ 248.290969][T10724] netlink: 'syz.3.1300': attribute type 10 has an invalid length. [ 248.292738][T10714] __nla_validate_parse: 1 callbacks suppressed [ 248.292757][T10714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1295'. [ 248.356061][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.363711][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.652300][T10734] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1303'. [ 248.807698][T10741] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1305'. [ 248.891411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.898242][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 249.039347][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 249.076093][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 249.224110][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 249.288434][T10424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.297576][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 249.362155][T10760] netlink: 'syz.2.1308': attribute type 33 has an invalid length. [ 249.370097][T10760] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1308'. [ 249.453837][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 249.538217][T10424] veth0_vlan: entered promiscuous mode [ 249.617682][T10771] bridge0: port 3(dummy0) entered disabled state [ 249.680615][T10771] dummy0 (unregistering): left allmulticast mode [ 249.694206][T10771] bridge0: port 3(dummy0) entered disabled state [ 249.764252][T10424] veth1_vlan: entered promiscuous mode [ 249.913704][T10424] veth0_macvtap: entered promiscuous mode [ 249.931217][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.960194][T10424] veth1_macvtap: entered promiscuous mode [ 250.030779][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.077533][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.116043][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.136342][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.146805][T10800] netlink: 'syz.0.1319': attribute type 1 has an invalid length. [ 250.156560][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.169580][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.181690][T10424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.203587][T10806] syz_tun: entered allmulticast mode [ 250.209724][T10800] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 250.236544][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.281246][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.301262][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.325027][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.363317][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.389051][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.403736][T10424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.417770][T10424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.444765][T10424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.485254][T10424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.502463][T10424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.514433][T10424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.525057][T10424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.549389][T10797] syz_tun: left allmulticast mode [ 250.690473][T10821] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 250.716821][T10821] netlink: 'syz.0.1322': attribute type 2 has an invalid length. [ 250.836141][T10823] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.896427][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.934423][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.971672][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.034469][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.075569][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.185310][T10841] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 251.797576][ T1162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.995137][ T1162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.011263][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.548043][ T1162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.629233][ T1162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.808265][ T1162] bridge_slave_1: left allmulticast mode [ 252.819910][ T1162] bridge_slave_1: left promiscuous mode [ 252.826512][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.842571][ T1162] bridge_slave_0: left allmulticast mode [ 252.848369][ T1162] bridge_slave_0: left promiscuous mode [ 252.858007][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.054667][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.174404][T10907] xt_hashlimit: max too large, truncated to 1048576 [ 253.544782][T10920] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 253.775764][T10929] __nla_validate_parse: 2 callbacks suppressed [ 253.775783][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 253.804608][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.829205][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.830731][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.851412][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.856306][ T1162] bond0 (unregistering): Released all slaves [ 253.866096][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.877189][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.886206][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.094320][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.291387][T10930] lo speed is unknown, defaulting to 1000 [ 254.298907][T10930] hsr0 speed is unknown, defaulting to 1000 [ 254.428994][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1348'. [ 254.456455][ T1162] hsr_slave_0: left promiscuous mode [ 254.476063][ T1162] hsr_slave_1: left promiscuous mode [ 254.486870][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.510528][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.538776][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.569414][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.618276][ T1162] veth1_macvtap: left promiscuous mode [ 254.624533][ T1162] veth0_macvtap: left promiscuous mode [ 254.630227][ T1162] veth1_vlan: left promiscuous mode [ 254.636249][ T1162] veth0_vlan: left promiscuous mode [ 255.136011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.257457][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 255.303747][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 255.847929][T10957] bridge0: port 3(batadv0) entered disabled state [ 255.855128][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.863030][T10957] bridge0: port 1(1¾x9ÿ) entered disabled state [ 255.931698][ T5842] Bluetooth: hci2: command tx timeout [ 255.990621][T10957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.006166][T10957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.054775][T10957] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.063488][T10957] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.072544][T10957] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.081276][T10957] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.117931][T10957] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.126657][T10957] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.135535][T10957] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.144330][T10957] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.178444][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.186495][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.200854][T10957] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 256.250235][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.267471][T10960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.460823][T10985] siw: device registration error -23 [ 256.734772][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 256.882116][T10930] chnl_net:caif_netlink_parms(): no params data found [ 257.211428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.463594][T11021] lo speed is unknown, defaulting to 1000 [ 257.471425][T10930] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.495694][T10930] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.515808][T10930] bridge_slave_0: entered allmulticast mode [ 257.530710][T10930] bridge_slave_0: entered promiscuous mode [ 257.546784][T11033] FAULT_INJECTION: forcing a failure. [ 257.546784][T11033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.548036][T10930] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.571827][T10930] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.580059][T10930] bridge_slave_1: entered allmulticast mode [ 257.586415][T11033] CPU: 0 UID: 0 PID: 11033 Comm: syz.4.1368 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 257.586442][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 257.586468][T11033] Call Trace: [ 257.586477][T11033] [ 257.586485][T11033] dump_stack_lvl+0x189/0x250 [ 257.586528][T11033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.586556][T11033] ? __pfx__printk+0x10/0x10 [ 257.586589][T11033] should_fail_ex+0x414/0x560 [ 257.586636][T11033] _copy_to_user+0x31/0xb0 [ 257.586665][T11033] simple_read_from_buffer+0xe1/0x170 [ 257.586697][T11033] proc_fail_nth_read+0x1df/0x250 [ 257.586728][T11033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.586758][T11033] ? rw_verify_area+0x258/0x650 [ 257.586779][T11033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.586806][T11033] vfs_read+0x1fd/0x980 [ 257.586832][T11033] ? __pfx___mutex_lock+0x10/0x10 [ 257.586860][T11033] ? __pfx_vfs_read+0x10/0x10 [ 257.586906][T11033] ? __fget_files+0x2a/0x420 [ 257.586938][T11033] ? __fget_files+0x3a0/0x420 [ 257.586962][T11033] ? __fget_files+0x2a/0x420 [ 257.586997][T11033] ksys_read+0x145/0x250 [ 257.587017][T11033] ? rcu_is_watching+0x15/0xb0 [ 257.587049][T11033] ? __pfx_ksys_read+0x10/0x10 [ 257.587075][T11033] ? do_syscall_64+0xba/0x210 [ 257.587107][T11033] do_syscall_64+0xf6/0x210 [ 257.587135][T11033] ? clear_bhb_loop+0x45/0xa0 [ 257.587160][T11033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.587180][T11033] RIP: 0033:0x7f886f78d37c [ 257.587198][T11033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.587215][T11033] RSP: 002b:00007f887060f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.587236][T11033] RAX: ffffffffffffffda RBX: 00007f886f9b5fa0 RCX: 00007f886f78d37c [ 257.587251][T11033] RDX: 000000000000000f RSI: 00007f887060f0a0 RDI: 0000000000000003 [ 257.587263][T11033] RBP: 00007f887060f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.587275][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.587287][T11033] R13: 0000000000000000 R14: 00007f886f9b5fa0 R15: 00007ffc6d144388 [ 257.587320][T11033] [ 257.593497][T10930] bridge_slave_1: entered promiscuous mode [ 257.744145][T11037] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1369'. [ 257.844701][T11037] netlink: 'syz.3.1369': attribute type 32 has an invalid length. [ 257.857670][T11021] hsr0 speed is unknown, defaulting to 1000 [ 257.959987][T11037] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 258.012082][ T5842] Bluetooth: hci2: command tx timeout [ 258.040599][T10930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.129156][T10930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.139018][T11054] netlink: 548 bytes leftover after parsing attributes in process `syz.4.1374'. [ 258.158556][T11052] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 258.167656][T11052] netlink: 'syz.0.1376': attribute type 2 has an invalid length. [ 258.251241][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.306364][T11060] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1377'. [ 258.341101][T10930] team0: Port device team_slave_0 added [ 258.355980][T10930] team0: Port device team_slave_1 added [ 258.587805][T10930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.598977][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.638932][T10930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.690731][T10930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.713051][T10930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.767844][T10930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.826330][T11081] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.839111][T11081] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.857422][T11081] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.867868][T11081] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.879642][T11081] geneve2: entered promiscuous mode [ 258.889124][T11081] geneve2: entered allmulticast mode [ 258.906012][T11081] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.918804][T11081] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.931001][T11081] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.940894][T11081] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.167438][T10930] hsr_slave_0: entered promiscuous mode [ 259.189922][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'. [ 259.212018][T10930] hsr_slave_1: entered promiscuous mode [ 259.218410][T10930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.221689][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 259.261900][T10930] Cannot create hsr debugfs directory [ 259.291368][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.400466][T11107] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1391'. [ 259.454655][T11112] xt_hashlimit: max too large, truncated to 1048576 [ 259.611371][T11118] netlink: 'syz.2.1394': attribute type 10 has an invalid length. [ 259.695077][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.704344][T11118] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.091820][ T5842] Bluetooth: hci2: command tx timeout [ 260.140843][T11144] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1402'. [ 260.170630][T11144] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 260.331277][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.857234][T11178] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1411'. [ 260.868226][T11177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1412'. [ 260.882228][T11178] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1411'. [ 260.956758][T10930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.987785][T10930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.019773][T10930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.048713][T10930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.108461][T11187] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 261.323679][T10930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.371272][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.425041][T10930] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.492183][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.499593][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.564259][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.571555][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.853324][T11223] netlink: 'syz.0.1425': attribute type 6 has an invalid length. [ 261.881309][T11223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1425'. [ 261.890420][T11223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1425'. [ 262.178232][ T5842] Bluetooth: hci2: command tx timeout [ 262.359857][T11239] geneve2: entered promiscuous mode [ 262.368189][T11239] geneve2: entered allmulticast mode [ 262.411254][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.498888][T11247] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1433'. [ 262.630986][T10930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.778734][T11254] netlink: 'syz.4.1436': attribute type 10 has an invalid length. [ 262.785479][T10930] veth0_vlan: entered promiscuous mode [ 262.798388][T11256] siw: device registration error -23 [ 262.857939][T10930] veth1_vlan: entered promiscuous mode [ 263.029964][T11265] siw: device registration error -23 [ 263.035725][T10930] veth0_macvtap: entered promiscuous mode [ 263.078153][T10930] veth1_macvtap: entered promiscuous mode [ 263.191638][T10930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.231147][T10930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.253639][T11277] FAULT_INJECTION: forcing a failure. [ 263.253639][T11277] name failslab, interval 1, probability 0, space 0, times 0 [ 263.256872][T10930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.321279][T10930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.353501][T10930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.354576][T11277] CPU: 1 UID: 0 PID: 11277 Comm: syz.3.1444 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 263.354611][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 263.354626][T11277] Call Trace: [ 263.354635][T11277] [ 263.354644][T11277] dump_stack_lvl+0x189/0x250 [ 263.354689][T11277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.354721][T11277] ? __pfx__printk+0x10/0x10 [ 263.354760][T11277] should_fail_ex+0x414/0x560 [ 263.354801][T11277] should_failslab+0xa8/0x100 [ 263.354832][T11277] __kmalloc_cache_noprof+0x70/0x3d0 [ 263.354860][T11277] ? sctp_add_bind_addr+0x8c/0x370 [ 263.354897][T11277] sctp_add_bind_addr+0x8c/0x370 [ 263.354939][T11277] sctp_copy_local_addr_list+0x30b/0x4e0 [ 263.354973][T11277] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 263.355002][T11277] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 263.355030][T11277] ? sctp_v6_is_any+0x64/0x80 [ 263.355067][T11277] ? sctp_copy_one_addr+0x93/0x360 [ 263.355101][T11277] sctp_bind_addr_copy+0xb3/0x3c0 [ 263.355132][T11277] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 263.355163][T11277] sctp_connect_new_asoc+0x2e0/0x690 [ 263.355188][T11277] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 263.355209][T11277] ? __local_bh_enable_ip+0x12d/0x1c0 [ 263.355251][T11277] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 263.355278][T11277] ? security_sctp_bind_connect+0x7e/0x2e0 [ 263.355313][T11277] sctp_sendmsg+0x155c/0x2810 [ 263.355349][T11277] ? __pfx_sctp_sendmsg+0x10/0x10 [ 263.355374][T11277] ? aa_sk_perm+0x81e/0x950 [ 263.355414][T11277] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.355450][T11277] ? sock_rps_record_flow+0x19/0x410 [ 263.355483][T11277] ? inet_sendmsg+0x2f4/0x370 [ 263.355515][T11277] __sock_sendmsg+0x19c/0x270 [ 263.355551][T11277] ____sys_sendmsg+0x52d/0x830 [ 263.355581][T11277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.355617][T11277] ? import_iovec+0x74/0xa0 [ 263.355650][T11277] ___sys_sendmsg+0x21f/0x2a0 [ 263.355676][T11277] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.355744][T11277] ? __fget_files+0x2a/0x420 [ 263.355771][T11277] ? __fget_files+0x3a0/0x420 [ 263.355812][T11277] __sys_sendmmsg+0x227/0x430 [ 263.355843][T11277] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.355879][T11277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.355935][T11277] ? ksys_write+0x1f0/0x250 [ 263.355972][T11277] __x64_sys_sendmmsg+0xa0/0xc0 [ 263.356000][T11277] do_syscall_64+0xf6/0x210 [ 263.356030][T11277] ? clear_bhb_loop+0x45/0xa0 [ 263.356058][T11277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.356079][T11277] RIP: 0033:0x7f273cb8e969 [ 263.356099][T11277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.356119][T11277] RSP: 002b:00007f273da2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.356143][T11277] RAX: ffffffffffffffda RBX: 00007f273cdb5fa0 RCX: 00007f273cb8e969 [ 263.356160][T11277] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 263.356171][T11277] RBP: 00007f273da2e090 R08: 0000000000000000 R09: 0000000000000000 [ 263.356185][T11277] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000002 [ 263.356199][T11277] R13: 0000000000000000 R14: 00007f273cdb5fa0 R15: 00007fffda5313a8 [ 263.356234][T11277] [ 263.454633][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.956630][T11296] bridge0: port 3(veth1_to_bridge) entered blocking state [ 263.964892][T11296] bridge0: port 3(veth1_to_bridge) entered disabled state [ 263.972524][T11296] veth1_to_bridge: entered allmulticast mode [ 263.980799][T11296] veth1_to_bridge: entered promiscuous mode [ 264.065955][T10930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.096827][T10930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.125434][T10930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.166720][T10930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.197371][T10930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.224198][T10930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.239379][T10930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.266120][T11278] lo speed is unknown, defaulting to 1000 [ 264.315697][T10930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.342249][T10930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.357243][T10930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.380695][T10930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.394210][T11316] __nla_validate_parse: 3 callbacks suppressed [ 264.394233][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 264.418279][T11278] hsr0 speed is unknown, defaulting to 1000 [ 264.491295][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.509518][T11312] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1451'. [ 264.741420][T11331] netlink: 'syz.3.1454': attribute type 1 has an invalid length. [ 264.827920][T11335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1456'. [ 264.862432][T11335] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1456'. [ 265.027499][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.049828][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.166153][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.191799][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.346328][T11356] netlink: 'syz.2.1462': attribute type 5 has an invalid length. [ 265.498970][T11360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.531191][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.620354][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 265.709241][T11366] FAULT_INJECTION: forcing a failure. [ 265.709241][T11366] name failslab, interval 1, probability 0, space 0, times 0 [ 265.730298][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1466'. [ 265.740027][T11366] CPU: 1 UID: 0 PID: 11366 Comm: syz.0.1465 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 265.740063][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 265.740077][T11366] Call Trace: [ 265.740085][T11366] [ 265.740094][T11366] dump_stack_lvl+0x189/0x250 [ 265.740136][T11366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.740166][T11366] ? __pfx__printk+0x10/0x10 [ 265.740194][T11366] ? __pfx___might_resched+0x10/0x10 [ 265.740212][T11366] ? fs_reclaim_acquire+0x7d/0x100 [ 265.740248][T11366] should_fail_ex+0x414/0x560 [ 265.740287][T11366] should_failslab+0xa8/0x100 [ 265.740316][T11366] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 265.740343][T11366] ? __alloc_skb+0x112/0x2d0 [ 265.740369][T11366] __alloc_skb+0x112/0x2d0 [ 265.740394][T11366] nl80211_send_scan_start+0x2f/0x170 [ 265.740429][T11366] nl80211_trigger_scan+0x1cf0/0x2170 [ 265.740477][T11366] genl_family_rcv_msg_doit+0x212/0x300 [ 265.740512][T11366] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 265.740553][T11366] ? bpf_lsm_capable+0x9/0x20 [ 265.740581][T11366] ? security_capable+0x7e/0x2e0 [ 265.740609][T11366] genl_rcv_msg+0x60e/0x790 [ 265.740642][T11366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.740665][T11366] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 265.740686][T11366] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 265.740712][T11366] ? __pfx_nl80211_post_doit+0x10/0x10 [ 265.740737][T11366] ? ref_tracker_free+0x63a/0x7d0 [ 265.740756][T11366] ? __copy_skb_header+0xa7/0x550 [ 265.740790][T11366] netlink_rcv_skb+0x219/0x490 [ 265.740823][T11366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.740850][T11366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.740909][T11366] ? down_read+0x1ad/0x2e0 [ 265.740941][T11366] genl_rcv+0x28/0x40 [ 265.740963][T11366] netlink_unicast+0x758/0x8d0 [ 265.741005][T11366] netlink_sendmsg+0x805/0xb30 [ 265.741039][T11366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.741069][T11366] ? aa_sock_msg_perm+0x94/0x160 [ 265.741093][T11366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.741115][T11366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.741135][T11366] __sock_sendmsg+0x219/0x270 [ 265.741166][T11366] ____sys_sendmsg+0x505/0x830 [ 265.741196][T11366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.741230][T11366] ? import_iovec+0x74/0xa0 [ 265.741261][T11366] ___sys_sendmsg+0x21f/0x2a0 [ 265.741287][T11366] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.741353][T11366] ? __fget_files+0x2a/0x420 [ 265.741379][T11366] ? __fget_files+0x3a0/0x420 [ 265.741417][T11366] __x64_sys_sendmsg+0x19b/0x260 [ 265.741444][T11366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.741487][T11366] ? do_syscall_64+0xba/0x210 [ 265.741520][T11366] do_syscall_64+0xf6/0x210 [ 265.741547][T11366] ? clear_bhb_loop+0x45/0xa0 [ 265.741574][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.741594][T11366] RIP: 0033:0x7fac3238e969 [ 265.741613][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.741631][T11366] RSP: 002b:00007fac331aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.741653][T11366] RAX: ffffffffffffffda RBX: 00007fac325b5fa0 RCX: 00007fac3238e969 [ 265.741668][T11366] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 265.741680][T11366] RBP: 00007fac331aa090 R08: 0000000000000000 R09: 0000000000000000 [ 265.741693][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.741705][T11366] R13: 0000000000000000 R14: 00007fac325b5fa0 R15: 00007ffe6ec505c8 [ 265.741738][T11366] [ 266.549112][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.571176][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.637907][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.764466][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.851775][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.045889][ T53] bridge_slave_1: left allmulticast mode [ 267.054103][ T53] bridge_slave_1: left promiscuous mode [ 267.060029][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.069982][ T53] bridge_slave_0: left allmulticast mode [ 267.078108][ T53] bridge_slave_0: left promiscuous mode [ 267.084534][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.430303][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.446459][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.457327][ T53] bond0 (unregistering): Released all slaves [ 267.611170][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.678763][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 267.688032][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1474'. [ 267.696194][T11413] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 267.839536][T11413] veth1_macvtap: left promiscuous mode [ 268.027062][T11428] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1477'. [ 268.340639][T11439] xt_hashlimit: max too large, truncated to 1048576 [ 268.387703][ T53] hsr_slave_0: left promiscuous mode [ 268.414743][ T53] hsr_slave_1: left promiscuous mode [ 268.423087][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.462606][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.497492][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.522777][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.576028][ T53] veth1_macvtap: left promiscuous mode [ 268.589664][ T53] veth0_macvtap: left promiscuous mode [ 268.599707][ T53] veth1_vlan: left promiscuous mode [ 268.608103][ T53] veth0_vlan: left promiscuous mode [ 268.619118][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.631123][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.639876][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.649169][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.656290][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.667525][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.166926][ T53] team0 (unregistering): Port device team_slave_1 removed [ 269.218588][ T53] team0 (unregistering): Port device team_slave_0 removed [ 269.650229][T11444] vlan0: entered promiscuous mode [ 269.691147][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.794663][T11455] FAULT_INJECTION: forcing a failure. [ 269.794663][T11455] name failslab, interval 1, probability 0, space 0, times 0 [ 269.817877][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.4.1485 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 269.817908][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 269.817922][T11455] Call Trace: [ 269.817930][T11455] [ 269.817939][T11455] dump_stack_lvl+0x189/0x250 [ 269.817977][T11455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.818007][T11455] ? __pfx__printk+0x10/0x10 [ 269.818034][T11455] ? __pfx___might_resched+0x10/0x10 [ 269.818058][T11455] should_fail_ex+0x414/0x560 [ 269.818095][T11455] should_failslab+0xa8/0x100 [ 269.818124][T11455] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 269.818150][T11455] ? __alloc_skb+0x112/0x2d0 [ 269.818175][T11455] __alloc_skb+0x112/0x2d0 [ 269.818198][T11455] netlink_sendmsg+0x5c6/0xb30 [ 269.818228][T11455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.818251][T11455] ? aa_sock_msg_perm+0x94/0x160 [ 269.818273][T11455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.818296][T11455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.818316][T11455] __sock_sendmsg+0x219/0x270 [ 269.818348][T11455] ____sys_sendmsg+0x505/0x830 [ 269.818376][T11455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.818409][T11455] ? import_iovec+0x74/0xa0 [ 269.818439][T11455] ___sys_sendmsg+0x21f/0x2a0 [ 269.818471][T11455] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.818533][T11455] ? __fget_files+0x2a/0x420 [ 269.818558][T11455] ? __fget_files+0x3a0/0x420 [ 269.818595][T11455] __x64_sys_sendmsg+0x19b/0x260 [ 269.818620][T11455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.818661][T11455] ? do_syscall_64+0xba/0x210 [ 269.818693][T11455] do_syscall_64+0xf6/0x210 [ 269.818720][T11455] ? clear_bhb_loop+0x45/0xa0 [ 269.818744][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.818764][T11455] RIP: 0033:0x7f886f78e969 [ 269.818782][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.818800][T11455] RSP: 002b:00007f887060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.818822][T11455] RAX: ffffffffffffffda RBX: 00007f886f9b5fa0 RCX: 00007f886f78e969 [ 269.818836][T11455] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 269.818849][T11455] RBP: 00007f887060f090 R08: 0000000000000000 R09: 0000000000000000 [ 269.818861][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.818873][T11455] R13: 0000000000000000 R14: 00007f886f9b5fa0 R15: 00007ffc6d144388 [ 269.818905][T11455] [ 270.083363][T11452] lo speed is unknown, defaulting to 1000 [ 270.090863][T11452] hsr0 speed is unknown, defaulting to 1000 [ 270.274361][T11458] No such timeout policy "syz0" [ 270.441558][T11470] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 270.507371][T11452] chnl_net:caif_netlink_parms(): no params data found [ 270.731151][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.742255][ T5842] Bluetooth: hci2: command tx timeout [ 270.840989][T11494] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1497'. [ 271.186780][T11513] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 271.199659][T11513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1500'. [ 271.276594][T11452] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.284261][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.298448][T11452] bridge_slave_0: entered allmulticast mode [ 271.343741][T11452] bridge_slave_0: entered promiscuous mode [ 271.369249][T11452] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.388849][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.414869][T11452] bridge_slave_1: entered allmulticast mode [ 271.425356][T11522] FAULT_INJECTION: forcing a failure. [ 271.425356][T11522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.443903][T11452] bridge_slave_1: entered promiscuous mode [ 271.465830][T11513] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 271.471330][T11522] CPU: 1 UID: 0 PID: 11522 Comm: syz.0.1502 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 271.471370][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 271.471385][T11522] Call Trace: [ 271.471399][T11522] [ 271.471408][T11522] dump_stack_lvl+0x189/0x250 [ 271.471448][T11522] ? __lock_acquire+0xaac/0xd20 [ 271.471489][T11522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.471526][T11522] ? __pfx__printk+0x10/0x10 [ 271.471549][T11522] ? __might_fault+0xb0/0x130 [ 271.471594][T11522] should_fail_ex+0x414/0x560 [ 271.471635][T11522] _copy_from_iter+0x1db/0x15a0 [ 271.471670][T11522] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 271.471695][T11522] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 271.471725][T11522] ? __pfx__copy_from_iter+0x10/0x10 [ 271.471751][T11522] ? __build_skb_around+0x257/0x3e0 [ 271.471778][T11522] ? netlink_sendmsg+0x642/0xb30 [ 271.471797][T11522] ? skb_put+0x11b/0x210 [ 271.471823][T11522] netlink_sendmsg+0x6b2/0xb30 [ 271.471854][T11522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.471879][T11522] ? aa_sock_msg_perm+0x94/0x160 [ 271.471902][T11522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.471927][T11522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.471955][T11522] __sock_sendmsg+0x219/0x270 [ 271.471989][T11522] ____sys_sendmsg+0x52d/0x830 [ 271.472020][T11522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.472054][T11522] ? import_iovec+0x74/0xa0 [ 271.472086][T11522] ___sys_sendmsg+0x21f/0x2a0 [ 271.472114][T11522] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.472179][T11522] ? __fget_files+0x2a/0x420 [ 271.472206][T11522] ? __fget_files+0x3a0/0x420 [ 271.472245][T11522] __sys_sendmmsg+0x227/0x430 [ 271.472275][T11522] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.472309][T11522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.472359][T11522] ? ksys_write+0x1f0/0x250 [ 271.472382][T11522] ? rcu_is_watching+0x15/0xb0 [ 271.472425][T11522] __x64_sys_sendmmsg+0xa0/0xc0 [ 271.472452][T11522] do_syscall_64+0xf6/0x210 [ 271.472484][T11522] ? clear_bhb_loop+0x45/0xa0 [ 271.472525][T11522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.472546][T11522] RIP: 0033:0x7fac3238e969 [ 271.472566][T11522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.472586][T11522] RSP: 002b:00007fac331aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.472622][T11522] RAX: ffffffffffffffda RBX: 00007fac325b5fa0 RCX: 00007fac3238e969 [ 271.472637][T11522] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 271.472652][T11522] RBP: 00007fac331aa090 R08: 0000000000000000 R09: 0000000000000000 [ 271.472666][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.472678][T11522] R13: 0000000000000000 R14: 00007fac325b5fa0 R15: 00007ffe6ec505c8 [ 271.472713][T11522] [ 271.763622][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 271.771248][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.807974][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 271.862083][T11519] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1503'. [ 271.889726][T11519] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1503'. [ 271.934801][T11519] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1503'. [ 271.961998][T11526] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14) [ 272.267339][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.324913][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.625300][T11452] team0: Port device team_slave_0 added [ 272.648955][T11452] team0: Port device team_slave_1 added [ 272.760813][T11540] lo speed is unknown, defaulting to 1000 [ 272.811199][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.811276][ T5842] Bluetooth: hci2: command tx timeout [ 272.833658][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.847778][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.889784][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.911976][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.918977][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.965765][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.971315][T11540] hsr0 speed is unknown, defaulting to 1000 [ 273.093144][T11579] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 273.349930][T11583] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 273.385323][T11583] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 273.403648][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 273.419146][T11583] bond2: (slave vcan0): making interface the new active one [ 273.438140][T11583] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 273.465746][T11579] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 273.511013][T11579] bond2: (slave vcan1): Enslaving as a backup interface with an up link [ 273.552651][T11452] hsr_slave_0: entered promiscuous mode [ 273.569678][T11452] hsr_slave_1: entered promiscuous mode [ 273.586548][T11452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.594475][T11452] Cannot create hsr debugfs directory [ 273.851304][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.920118][T11608] pim6reg1: entered promiscuous mode [ 273.952945][T11608] pim6reg1: entered allmulticast mode [ 274.115504][T11616] geneve3: entered promiscuous mode [ 274.120809][T11616] geneve3: entered allmulticast mode [ 274.528513][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 274.592470][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1531'. [ 274.605428][T11640] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 274.740275][T11645] siw: device registration error -23 [ 274.891249][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.898453][ T5842] Bluetooth: hci2: command tx timeout [ 275.266912][T11673] FAULT_INJECTION: forcing a failure. [ 275.266912][T11673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.282760][T11674] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.336121][T11673] CPU: 1 UID: 0 PID: 11673 Comm: syz.4.1540 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 275.336156][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 275.336170][T11673] Call Trace: [ 275.336178][T11673] [ 275.336188][T11673] dump_stack_lvl+0x189/0x250 [ 275.336231][T11673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.336261][T11673] ? __pfx__printk+0x10/0x10 [ 275.336295][T11673] should_fail_ex+0x414/0x560 [ 275.336333][T11673] _copy_to_user+0x31/0xb0 [ 275.336363][T11673] simple_read_from_buffer+0xe1/0x170 [ 275.336395][T11673] proc_fail_nth_read+0x1df/0x250 [ 275.336427][T11673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.336458][T11673] ? rw_verify_area+0x258/0x650 [ 275.336479][T11673] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.336509][T11673] vfs_read+0x1fd/0x980 [ 275.336537][T11673] ? __pfx___mutex_lock+0x10/0x10 [ 275.336565][T11673] ? __pfx_vfs_read+0x10/0x10 [ 275.336590][T11673] ? __fget_files+0x2a/0x420 [ 275.336621][T11673] ? __fget_files+0x3a0/0x420 [ 275.336645][T11673] ? __fget_files+0x2a/0x420 [ 275.336680][T11673] ksys_read+0x145/0x250 [ 275.336705][T11673] ? __pfx_ksys_read+0x10/0x10 [ 275.336731][T11673] ? do_syscall_64+0xba/0x210 [ 275.336763][T11673] do_syscall_64+0xf6/0x210 [ 275.336790][T11673] ? clear_bhb_loop+0x45/0xa0 [ 275.336815][T11673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.336835][T11673] RIP: 0033:0x7f886f78d37c [ 275.336853][T11673] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 275.336871][T11673] RSP: 002b:00007f887060f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.336893][T11673] RAX: ffffffffffffffda RBX: 00007f886f9b5fa0 RCX: 00007f886f78d37c [ 275.336908][T11673] RDX: 000000000000000f RSI: 00007f887060f0a0 RDI: 0000000000000004 [ 275.336920][T11673] RBP: 00007f887060f090 R08: 0000000000000000 R09: 0000000000000000 [ 275.337080][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.337098][T11673] R13: 0000000000000000 R14: 00007f886f9b5fa0 R15: 00007ffc6d144388 [ 275.337137][T11673] [ 275.598169][T11452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 275.659149][T11452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 275.672563][T11452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 275.689530][T11452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.820604][T11679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.931133][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.083460][T11679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.105965][T11704] FAULT_INJECTION: forcing a failure. [ 276.105965][T11704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.121852][T11704] CPU: 1 UID: 0 PID: 11704 Comm: syz.4.1545 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 276.121886][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 276.121898][T11704] Call Trace: [ 276.121915][T11704] [ 276.121924][T11704] dump_stack_lvl+0x189/0x250 [ 276.121961][T11704] ? __lock_acquire+0xaac/0xd20 [ 276.121993][T11704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.122022][T11704] ? __pfx__printk+0x10/0x10 [ 276.122042][T11704] ? __might_fault+0xb0/0x130 [ 276.122081][T11704] should_fail_ex+0x414/0x560 [ 276.122118][T11704] _copy_from_user+0x2d/0xb0 [ 276.122145][T11704] ___sys_sendmsg+0x158/0x2a0 [ 276.122172][T11704] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.122231][T11704] ? __fget_files+0x2a/0x420 [ 276.122258][T11704] ? __fget_files+0x3a0/0x420 [ 276.122295][T11704] __x64_sys_sendmsg+0x19b/0x260 [ 276.122320][T11704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.122361][T11704] ? do_syscall_64+0xba/0x210 [ 276.122393][T11704] do_syscall_64+0xf6/0x210 [ 276.122420][T11704] ? clear_bhb_loop+0x45/0xa0 [ 276.122445][T11704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.122465][T11704] RIP: 0033:0x7f886f78e969 [ 276.122484][T11704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.122502][T11704] RSP: 002b:00007f887060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.122524][T11704] RAX: ffffffffffffffda RBX: 00007f886f9b5fa0 RCX: 00007f886f78e969 [ 276.122539][T11704] RDX: 0000000000008000 RSI: 0000200000000340 RDI: 0000000000000003 [ 276.122562][T11704] RBP: 00007f887060f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.122574][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.122586][T11704] R13: 0000000000000000 R14: 00007f886f9b5fa0 R15: 00007ffc6d144388 [ 276.122619][T11704] [ 276.452459][T11706] __nla_validate_parse: 3 callbacks suppressed [ 276.452486][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 276.472861][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 276.484550][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 276.542061][T11679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.612766][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1547'. [ 276.622259][T11686] xt_hashlimit: size too large, truncated to 1048576 [ 276.633137][T11709] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1547'. [ 276.857068][T11679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.901666][T11718] xt_hashlimit: max too large, truncated to 1048576 [ 276.937646][T11720] netlink: 'syz.4.1550': attribute type 10 has an invalid length. [ 276.971171][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.972184][ T5842] Bluetooth: hci2: command tx timeout [ 277.068768][T11720] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 277.079543][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1551'. [ 277.090351][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1551'. [ 277.104751][T11720] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 277.120371][T11720] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 277.463748][T11452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.519118][T11679] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.593001][T11679] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.656326][T11452] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.689910][T11679] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.716849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.724112][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.826646][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.834136][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.880995][T11679] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.011139][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.230723][T11775] FAULT_INJECTION: forcing a failure. [ 278.230723][T11775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.272295][T11775] CPU: 1 UID: 0 PID: 11775 Comm: syz.4.1562 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 278.272332][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 278.272344][T11775] Call Trace: [ 278.272352][T11775] [ 278.272361][T11775] dump_stack_lvl+0x189/0x250 [ 278.272398][T11775] ? __lock_acquire+0xaac/0xd20 [ 278.272427][T11775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.272454][T11775] ? __pfx__printk+0x10/0x10 [ 278.272474][T11775] ? __might_fault+0xb0/0x130 [ 278.272511][T11775] should_fail_ex+0x414/0x560 [ 278.272550][T11775] _copy_from_iter+0x1db/0x15a0 [ 278.272582][T11775] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 278.272605][T11775] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 278.272632][T11775] ? __pfx__copy_from_iter+0x10/0x10 [ 278.272657][T11775] ? __build_skb_around+0x257/0x3e0 [ 278.272682][T11775] ? netlink_sendmsg+0x642/0xb30 [ 278.272700][T11775] ? skb_put+0x11b/0x210 [ 278.272724][T11775] netlink_sendmsg+0x6b2/0xb30 [ 278.272763][T11775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.272786][T11775] ? aa_sock_msg_perm+0x94/0x160 [ 278.272809][T11775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.272833][T11775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.272853][T11775] __sock_sendmsg+0x219/0x270 [ 278.272885][T11775] ____sys_sendmsg+0x505/0x830 [ 278.272913][T11775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.272945][T11775] ? import_iovec+0x74/0xa0 [ 278.272974][T11775] ___sys_sendmsg+0x21f/0x2a0 [ 278.272997][T11775] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.273056][T11775] ? __fget_files+0x2a/0x420 [ 278.273081][T11775] ? __fget_files+0x3a0/0x420 [ 278.273117][T11775] __x64_sys_sendmsg+0x19b/0x260 [ 278.273142][T11775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.273183][T11775] ? do_syscall_64+0xba/0x210 [ 278.273214][T11775] do_syscall_64+0xf6/0x210 [ 278.273241][T11775] ? clear_bhb_loop+0x45/0xa0 [ 278.273266][T11775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.273286][T11775] RIP: 0033:0x7f886f78e969 [ 278.273304][T11775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.273322][T11775] RSP: 002b:00007f887060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.273344][T11775] RAX: ffffffffffffffda RBX: 00007f886f9b5fa0 RCX: 00007f886f78e969 [ 278.273360][T11775] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 278.273372][T11775] RBP: 00007f887060f090 R08: 0000000000000000 R09: 0000000000000000 [ 278.273383][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.273395][T11775] R13: 0000000000000000 R14: 00007f886f9b5fa0 R15: 00007ffc6d144388 [ 278.273427][T11775] [ 278.652448][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1565'. [ 278.868196][T11452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.051148][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.080868][T11452] veth0_vlan: entered promiscuous mode [ 279.124040][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 279.147937][T11806] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1567'. [ 279.297577][T11804] vlan0: entered allmulticast mode [ 279.303056][T11804] erspan0: entered allmulticast mode [ 279.334775][T11452] veth1_vlan: entered promiscuous mode [ 279.460182][T11452] veth0_macvtap: entered promiscuous mode [ 279.514625][T11452] veth1_macvtap: entered promiscuous mode [ 279.588082][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.617372][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.643799][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.690967][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.722644][T11452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.747297][T11836] veth1_to_bond: entered allmulticast mode [ 279.780811][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.813923][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.848280][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.875703][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.886566][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.899469][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.925145][T11452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.933024][T11836] veth1_to_bond: entered promiscuous mode [ 279.987193][T11844] veth1_to_bond: left promiscuous mode [ 280.007943][T11844] veth1_to_bond: left allmulticast mode [ 280.027973][T11452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.071306][T11452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.080161][T11452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.091270][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.126032][T11452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.130812][T11854] FAULT_INJECTION: forcing a failure. [ 280.130812][T11854] name failslab, interval 1, probability 0, space 0, times 0 [ 280.202492][T11861] netlink: 'syz.3.1581': attribute type 3 has an invalid length. [ 280.323077][T11854] CPU: 0 UID: 0 PID: 11854 Comm: syz.4.1580 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 280.323110][T11854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 280.323123][T11854] Call Trace: [ 280.323131][T11854] [ 280.323140][T11854] dump_stack_lvl+0x189/0x250 [ 280.323179][T11854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.323209][T11854] ? __pfx__printk+0x10/0x10 [ 280.323236][T11854] ? __pfx___might_resched+0x10/0x10 [ 280.323260][T11854] should_fail_ex+0x414/0x560 [ 280.323298][T11854] should_failslab+0xa8/0x100 [ 280.323327][T11854] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 280.323354][T11854] ? __alloc_skb+0x112/0x2d0 [ 280.323379][T11854] __alloc_skb+0x112/0x2d0 [ 280.323403][T11854] netlink_sendmsg+0x5c6/0xb30 [ 280.323434][T11854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.323457][T11854] ? aa_sock_msg_perm+0x94/0x160 [ 280.323480][T11854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.323504][T11854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.323524][T11854] __sock_sendmsg+0x219/0x270 [ 280.323556][T11854] ____sys_sendmsg+0x505/0x830 [ 280.323585][T11854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.323617][T11854] ? import_iovec+0x74/0xa0 [ 280.323647][T11854] ___sys_sendmsg+0x21f/0x2a0 [ 280.323671][T11854] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.323740][T11854] ? __fget_files+0x2a/0x420 [ 280.323765][T11854] ? __fget_files+0x3a0/0x420 [ 280.323800][T11854] __x64_sys_sendmsg+0x19b/0x260 [ 280.323825][T11854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.323864][T11854] ? do_syscall_64+0xba/0x210 [ 280.323894][T11854] do_syscall_64+0xf6/0x210 [ 280.323921][T11854] ? clear_bhb_loop+0x45/0xa0 [ 280.323946][T11854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.323965][T11854] RIP: 0033:0x7f886f78e969 [ 280.323982][T11854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.323999][T11854] RSP: 002b:00007f887060f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.324021][T11854] RAX: ffffffffffffffda RBX: 00007f886f9b5fa0 RCX: 00007f886f78e969 [ 280.324035][T11854] RDX: 0000000000008000 RSI: 0000200000000340 RDI: 0000000000000003 [ 280.324048][T11854] RBP: 00007f887060f090 R08: 0000000000000000 R09: 0000000000000000 [ 280.324060][T11854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.324071][T11854] R13: 0000000000000000 R14: 00007f886f9b5fa0 R15: 00007ffc6d144388 [ 280.324102][T11854] [ 280.602063][T11864] netlink: 'syz.2.1584': attribute type 64 has an invalid length. [ 280.623366][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.631332][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.638961][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.647076][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.790263][T11871] siw: device registration error -23 [ 280.809074][T11873] FAULT_INJECTION: forcing a failure. [ 280.809074][T11873] name failslab, interval 1, probability 0, space 0, times 0 [ 280.824466][T11873] CPU: 0 UID: 0 PID: 11873 Comm: syz.2.1589 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 280.824495][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 280.824508][T11873] Call Trace: [ 280.824515][T11873] [ 280.824524][T11873] dump_stack_lvl+0x189/0x250 [ 280.824561][T11873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.824589][T11873] ? __pfx__printk+0x10/0x10 [ 280.824622][T11873] should_fail_ex+0x414/0x560 [ 280.824660][T11873] should_failslab+0xa8/0x100 [ 280.824700][T11873] __kmalloc_cache_noprof+0x70/0x3d0 [ 280.824726][T11873] ? sctp_add_bind_addr+0x8c/0x370 [ 280.824758][T11873] sctp_add_bind_addr+0x8c/0x370 [ 280.824790][T11873] sctp_copy_local_addr_list+0x30b/0x4e0 [ 280.824822][T11873] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 280.824849][T11873] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 280.824878][T11873] ? sctp_v6_is_any+0x64/0x80 [ 280.824912][T11873] ? sctp_copy_one_addr+0x93/0x360 [ 280.824943][T11873] sctp_bind_addr_copy+0xb3/0x3c0 [ 280.824972][T11873] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 280.825000][T11873] sctp_connect_new_asoc+0x2e0/0x690 [ 280.825025][T11873] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 280.825044][T11873] ? __local_bh_enable_ip+0x12d/0x1c0 [ 280.825084][T11873] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 280.825108][T11873] ? security_sctp_bind_connect+0x7e/0x2e0 [ 280.825137][T11873] sctp_sendmsg+0x155c/0x2810 [ 280.825168][T11873] ? __pfx_sctp_sendmsg+0x10/0x10 [ 280.825190][T11873] ? aa_sk_perm+0x81e/0x950 [ 280.825228][T11873] ? __pfx_aa_sk_perm+0x10/0x10 [ 280.825263][T11873] ? sock_rps_record_flow+0x19/0x410 [ 280.825293][T11873] ? inet_sendmsg+0x2f4/0x370 [ 280.825323][T11873] __sock_sendmsg+0x19c/0x270 [ 280.825355][T11873] ____sys_sendmsg+0x52d/0x830 [ 280.825384][T11873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.825417][T11873] ? import_iovec+0x74/0xa0 [ 280.825448][T11873] ___sys_sendmsg+0x21f/0x2a0 [ 280.825473][T11873] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.825538][T11873] ? __fget_files+0x2a/0x420 [ 280.825563][T11873] ? __fget_files+0x3a0/0x420 [ 280.825599][T11873] __sys_sendmmsg+0x227/0x430 [ 280.825628][T11873] ? __pfx___sys_sendmmsg+0x10/0x10 [ 280.825669][T11873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.825717][T11873] ? ksys_write+0x1f0/0x250 [ 280.825739][T11873] ? rcu_is_watching+0x15/0xb0 [ 280.825781][T11873] __x64_sys_sendmmsg+0xa0/0xc0 [ 280.825807][T11873] do_syscall_64+0xf6/0x210 [ 280.825836][T11873] ? clear_bhb_loop+0x45/0xa0 [ 280.825861][T11873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.825880][T11873] RIP: 0033:0x7f37e9f8e969 [ 280.825899][T11873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.825916][T11873] RSP: 002b:00007f37eadf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.825939][T11873] RAX: ffffffffffffffda RBX: 00007f37ea1b5fa0 RCX: 00007f37e9f8e969 [ 280.825954][T11873] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 280.825966][T11873] RBP: 00007f37eadf0090 R08: 0000000000000000 R09: 0000000000000000 [ 280.825978][T11873] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000002 [ 280.825990][T11873] R13: 0000000000000000 R14: 00007f37ea1b5fa0 R15: 00007ffeab4c5f68 [ 280.826023][T11873] [ 281.155818][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.488748][T11894] geneve2: entered promiscuous mode [ 281.498081][T11894] geneve2: entered allmulticast mode [ 281.609370][T11899] __nla_validate_parse: 8 callbacks suppressed [ 281.609392][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 281.637373][T11899] macvlan2: entered promiscuous mode [ 281.657275][T11905] FAULT_INJECTION: forcing a failure. [ 281.657275][T11905] name failslab, interval 1, probability 0, space 0, times 0 [ 281.672166][T11905] CPU: 0 UID: 0 PID: 11905 Comm: syz.3.1598 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 281.672199][T11905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 281.672213][T11905] Call Trace: [ 281.672221][T11905] [ 281.672231][T11905] dump_stack_lvl+0x189/0x250 [ 281.672270][T11905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.672300][T11905] ? __pfx__printk+0x10/0x10 [ 281.672328][T11905] ? ref_tracker_alloc+0x318/0x460 [ 281.672353][T11905] should_fail_ex+0x414/0x560 [ 281.672390][T11905] should_failslab+0xa8/0x100 [ 281.672419][T11905] kmem_cache_alloc_noprof+0x73/0x3c0 [ 281.672444][T11905] ? skb_clone+0x212/0x3a0 [ 281.672473][T11905] skb_clone+0x212/0x3a0 [ 281.672501][T11905] __netlink_deliver_tap+0x404/0x850 [ 281.672558][T11905] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.672590][T11905] netlink_deliver_tap+0x19c/0x1b0 [ 281.672623][T11905] netlink_unicast+0x72f/0x8d0 [ 281.672664][T11905] netlink_sendmsg+0x805/0xb30 [ 281.672693][T11905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.672717][T11905] ? aa_sock_msg_perm+0x94/0x160 [ 281.672740][T11905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.672770][T11905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.672790][T11905] __sock_sendmsg+0x219/0x270 [ 281.672821][T11905] ____sys_sendmsg+0x505/0x830 [ 281.672850][T11905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.672882][T11905] ? import_iovec+0x74/0xa0 [ 281.672912][T11905] ___sys_sendmsg+0x21f/0x2a0 [ 281.672938][T11905] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.673000][T11905] ? __fget_files+0x2a/0x420 [ 281.673026][T11905] ? __fget_files+0x3a0/0x420 [ 281.673063][T11905] __x64_sys_sendmsg+0x19b/0x260 [ 281.673089][T11905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.673130][T11905] ? do_syscall_64+0xba/0x210 [ 281.673162][T11905] do_syscall_64+0xf6/0x210 [ 281.673189][T11905] ? clear_bhb_loop+0x45/0xa0 [ 281.673214][T11905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.673234][T11905] RIP: 0033:0x7f273cb8e969 [ 281.673253][T11905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.673271][T11905] RSP: 002b:00007f273da2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.673293][T11905] RAX: ffffffffffffffda RBX: 00007f273cdb5fa0 RCX: 00007f273cb8e969 [ 281.673308][T11905] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 281.673321][T11905] RBP: 00007f273da2e090 R08: 0000000000000000 R09: 0000000000000000 [ 281.673333][T11905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.673345][T11905] R13: 0000000000000000 R14: 00007f273cdb5fa0 R15: 00007fffda5313a8 [ 281.673377][T11905] [ 281.673938][T11899] macvlan2: entered allmulticast mode [ 281.970551][T11899] vlan2: entered allmulticast mode [ 281.984986][T11899] batadv0: entered allmulticast mode [ 282.158334][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.171129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.325496][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.502429][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.567435][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.688000][ T13] bridge_slave_1: left allmulticast mode [ 282.694356][ T13] bridge_slave_1: left promiscuous mode [ 282.700154][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.712165][ T13] bridge_slave_0: left allmulticast mode [ 282.717877][ T13] bridge_slave_0: left promiscuous mode [ 282.723824][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.045942][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.058702][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.070001][ T13] bond0 (unregistering): Released all slaves [ 283.211252][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.353294][ T13] hsr_slave_0: left promiscuous mode [ 283.359642][ T13] hsr_slave_1: left promiscuous mode [ 283.377502][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.387391][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.399233][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.408538][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.440507][ T13] veth1_macvtap: left promiscuous mode [ 283.447710][ T13] veth0_macvtap: left promiscuous mode [ 283.457522][ T13] veth1_vlan: left promiscuous mode [ 283.471638][ T13] veth0_vlan: left promiscuous mode [ 284.251115][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.365830][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.374807][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.390678][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.407549][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.415852][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.729283][ T13] team0 (unregistering): Port device team_slave_1 removed [ 284.770121][ T13] team0 (unregistering): Port device team_slave_0 removed [ 285.183513][T11934] netlink: 'syz.0.1601': attribute type 12 has an invalid length. [ 285.197717][T11934] netlink: 'syz.0.1601': attribute type 29 has an invalid length. [ 285.216584][T11934] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1601'. [ 285.236808][T11934] netlink: 'syz.0.1601': attribute type 1 has an invalid length. [ 285.245129][T11934] netlink: 'syz.0.1601': attribute type 2 has an invalid length. [ 285.253168][T11934] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1601'. [ 285.285232][T11971] xt_cluster: node mask cannot exceed total number of nodes [ 285.291169][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.396395][T11966] lo speed is unknown, defaulting to 1000 [ 285.436651][T11966] hsr0 speed is unknown, defaulting to 1000 [ 285.440391][T11975] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1613'. [ 285.460957][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 285.713916][T11985] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 285.761462][T11986] xt_hashlimit: max too large, truncated to 1048576 [ 285.933289][T11995] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 286.036648][T11966] chnl_net:caif_netlink_parms(): no params data found [ 286.085789][T12000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1620'. [ 286.123563][T12000] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1620'. [ 286.331166][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.336167][T12014] vlan1: entered promiscuous mode [ 286.414654][T12020] FAULT_INJECTION: forcing a failure. [ 286.414654][T12020] name failslab, interval 1, probability 0, space 0, times 0 [ 286.441185][T12020] CPU: 1 UID: 0 PID: 12020 Comm: syz.0.1626 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 286.441217][T12020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 286.441232][T12020] Call Trace: [ 286.441241][T12020] [ 286.441250][T12020] dump_stack_lvl+0x189/0x250 [ 286.441290][T12020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.441319][T12020] ? __pfx__printk+0x10/0x10 [ 286.441342][T12020] ? __pfx___might_resched+0x10/0x10 [ 286.441362][T12020] ? fs_reclaim_acquire+0x7d/0x100 [ 286.441407][T12020] should_fail_ex+0x414/0x560 [ 286.441445][T12020] should_failslab+0xa8/0x100 [ 286.441475][T12020] __kmalloc_noprof+0xcb/0x4f0 [ 286.441499][T12020] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.441524][T12020] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 286.441559][T12020] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 286.441595][T12020] genl_family_rcv_msg_doit+0xb8/0x300 [ 286.441629][T12020] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.441657][T12020] ? rcu_is_watching+0x15/0xb0 [ 286.441690][T12020] ? apparmor_capable+0x137/0x1b0 [ 286.441718][T12020] ? bpf_lsm_capable+0x9/0x20 [ 286.441744][T12020] ? security_capable+0x7e/0x2e0 [ 286.441771][T12020] genl_rcv_msg+0x60e/0x790 [ 286.441803][T12020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.441825][T12020] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 286.441848][T12020] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 286.441876][T12020] ? __pfx_nl80211_post_doit+0x10/0x10 [ 286.441900][T12020] ? ref_tracker_free+0x63a/0x7d0 [ 286.441918][T12020] ? __copy_skb_header+0xa7/0x550 [ 286.441958][T12020] netlink_rcv_skb+0x219/0x490 [ 286.441991][T12020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.442017][T12020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.442075][T12020] ? down_read+0x1ad/0x2e0 [ 286.442105][T12020] genl_rcv+0x28/0x40 [ 286.442133][T12020] netlink_unicast+0x758/0x8d0 [ 286.442173][T12020] netlink_sendmsg+0x805/0xb30 [ 286.442203][T12020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.442227][T12020] ? aa_sock_msg_perm+0x94/0x160 [ 286.442249][T12020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.442271][T12020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.442292][T12020] __sock_sendmsg+0x219/0x270 [ 286.442324][T12020] ____sys_sendmsg+0x505/0x830 [ 286.442353][T12020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.442394][T12020] ? import_iovec+0x74/0xa0 [ 286.442424][T12020] ___sys_sendmsg+0x21f/0x2a0 [ 286.442449][T12020] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.442511][T12020] ? __fget_files+0x2a/0x420 [ 286.442535][T12020] ? __fget_files+0x3a0/0x420 [ 286.442567][T12020] __x64_sys_sendmsg+0x19b/0x260 [ 286.442591][T12020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.442629][T12020] ? do_syscall_64+0xba/0x210 [ 286.442659][T12020] do_syscall_64+0xf6/0x210 [ 286.442685][T12020] ? clear_bhb_loop+0x45/0xa0 [ 286.442710][T12020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.442729][T12020] RIP: 0033:0x7fac3238e969 [ 286.442746][T12020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.442762][T12020] RSP: 002b:00007fac331aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.442783][T12020] RAX: ffffffffffffffda RBX: 00007fac325b5fa0 RCX: 00007fac3238e969 [ 286.442796][T12020] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 286.442808][T12020] RBP: 00007fac331aa090 R08: 0000000000000000 R09: 0000000000000000 [ 286.442820][T12020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.442832][T12020] R13: 0000000000000000 R14: 00007fac325b5fa0 R15: 00007ffe6ec505c8 [ 286.442864][T12020] [ 286.805605][ T5834] Bluetooth: hci2: command tx timeout [ 286.946855][T12028] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1629'. [ 287.000306][T11966] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.037348][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.067805][T11966] bridge_slave_0: entered allmulticast mode [ 287.096059][T11966] bridge_slave_0: entered promiscuous mode [ 287.119081][T11966] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.143953][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.171444][T11966] bridge_slave_1: entered allmulticast mode [ 287.197224][T11966] bridge_slave_1: entered promiscuous mode [ 287.216662][T12044] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 287.371266][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.445353][T11966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.489891][T12048] IPv6: sit1: Disabled Multicast RS [ 287.526883][T11966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.707707][T11966] team0: Port device team_slave_0 added [ 287.752507][T11966] team0: Port device team_slave_1 added [ 287.830560][T12070] siw: device registration error -23 [ 287.943495][T11966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.952836][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.996296][T12078] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1643'. [ 288.009334][T11966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.028463][T12082] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 288.082733][T11966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.089856][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.151767][T11966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.411382][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.433629][T11966] hsr_slave_0: entered promiscuous mode [ 288.456273][T11966] hsr_slave_1: entered promiscuous mode [ 288.474242][T11966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.493299][T11966] Cannot create hsr debugfs directory [ 288.508178][T12095] lo speed is unknown, defaulting to 1000 [ 288.588493][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1649'. [ 288.764801][T12095] hsr0 speed is unknown, defaulting to 1000 [ 288.860200][T12116] netlink: 'syz.2.1652': attribute type 3 has an invalid length. [ 288.891345][ T5834] Bluetooth: hci2: command tx timeout [ 289.040696][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1655'. [ 289.068298][T12130] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1655'. [ 289.088391][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'. [ 289.451150][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.484376][T12144] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 289.546349][T12147] syz_tun: entered allmulticast mode [ 289.587727][T12141] syz_tun: left allmulticast mode [ 289.750445][T12155] Cannot find add_set index 0 as target [ 289.830651][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1663'. [ 289.843785][T12153] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 290.212652][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1665'. [ 290.384603][T12159] IPVS: length: 78 != 8 [ 290.491238][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.971624][ T5834] Bluetooth: hci2: command tx timeout [ 291.058043][T11966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.116212][T11966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.158680][T11966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.210702][T12203] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 291.211356][T12207] siw: device registration error -23 [ 291.262682][T11966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.294518][T12209] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1675'. [ 291.378865][T12214] FAULT_INJECTION: forcing a failure. [ 291.378865][T12214] name failslab, interval 1, probability 0, space 0, times 0 [ 291.469097][T12214] CPU: 1 UID: 0 PID: 12214 Comm: syz.3.1677 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 291.469132][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 291.469145][T12214] Call Trace: [ 291.469154][T12214] [ 291.469164][T12214] dump_stack_lvl+0x189/0x250 [ 291.469205][T12214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.469235][T12214] ? __pfx__printk+0x10/0x10 [ 291.469271][T12214] should_fail_ex+0x414/0x560 [ 291.469310][T12214] should_failslab+0xa8/0x100 [ 291.469340][T12214] __kmalloc_cache_noprof+0x70/0x3d0 [ 291.469366][T12214] ? sctp_add_bind_addr+0x8c/0x370 [ 291.469400][T12214] sctp_add_bind_addr+0x8c/0x370 [ 291.469432][T12214] sctp_copy_local_addr_list+0x30b/0x4e0 [ 291.469465][T12214] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 291.469492][T12214] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 291.469521][T12214] ? sctp_v6_is_any+0x64/0x80 [ 291.469553][T12214] ? sctp_copy_one_addr+0x93/0x360 [ 291.469585][T12214] sctp_bind_addr_copy+0xb3/0x3c0 [ 291.469614][T12214] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 291.469642][T12214] sctp_connect_new_asoc+0x2e0/0x690 [ 291.469668][T12214] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 291.469686][T12214] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.469726][T12214] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 291.469751][T12214] ? security_sctp_bind_connect+0x7e/0x2e0 [ 291.469784][T12214] sctp_sendmsg+0x155c/0x2810 [ 291.469829][T12214] ? __pfx_sctp_sendmsg+0x10/0x10 [ 291.469854][T12214] ? aa_sk_perm+0x81e/0x950 [ 291.469891][T12214] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.469926][T12214] ? sock_rps_record_flow+0x19/0x410 [ 291.469956][T12214] ? inet_sendmsg+0x2f4/0x370 [ 291.469986][T12214] __sock_sendmsg+0x19c/0x270 [ 291.470019][T12214] ____sys_sendmsg+0x52d/0x830 [ 291.470049][T12214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.470090][T12214] ? import_iovec+0x74/0xa0 [ 291.470121][T12214] ___sys_sendmsg+0x21f/0x2a0 [ 291.470146][T12214] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.470211][T12214] ? __fget_files+0x2a/0x420 [ 291.470237][T12214] ? __fget_files+0x3a0/0x420 [ 291.470275][T12214] __sys_sendmmsg+0x227/0x430 [ 291.470305][T12214] ? __pfx___sys_sendmmsg+0x10/0x10 [ 291.470338][T12214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.470382][T12214] ? ksys_write+0x1f0/0x250 [ 291.470403][T12214] ? rcu_is_watching+0x15/0xb0 [ 291.470445][T12214] __x64_sys_sendmmsg+0xa0/0xc0 [ 291.470469][T12214] do_syscall_64+0xf6/0x210 [ 291.470497][T12214] ? clear_bhb_loop+0x45/0xa0 [ 291.470522][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.470542][T12214] RIP: 0033:0x7f273cb8e969 [ 291.470562][T12214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.470580][T12214] RSP: 002b:00007f273da2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 291.470602][T12214] RAX: ffffffffffffffda RBX: 00007f273cdb5fa0 RCX: 00007f273cb8e969 [ 291.470616][T12214] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 291.470627][T12214] RBP: 00007f273da2e090 R08: 0000000000000000 R09: 0000000000000000 [ 291.470639][T12214] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000002 [ 291.470652][T12214] R13: 0000000000000000 R14: 00007f273cdb5fa0 R15: 00007fffda5313a8 [ 291.470683][T12214] [ 291.531182][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.688885][T11966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.074337][T11966] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.159877][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.167152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.207670][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.214950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.404815][T12257] xt_hashlimit: max too large, truncated to 1048576 [ 292.530944][T11966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.571131][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.659149][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 292.694601][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 293.051641][ T5834] Bluetooth: hci2: command tx timeout [ 293.119723][T11966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.255985][T11966] veth0_vlan: entered promiscuous mode [ 293.427076][T11966] veth1_vlan: entered promiscuous mode [ 293.544041][T11966] veth0_macvtap: entered promiscuous mode [ 293.586776][T11966] veth1_macvtap: entered promiscuous mode [ 293.611241][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.660207][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.701198][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.738368][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.761357][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.803066][T11966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.847334][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.874391][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.904701][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.945047][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.971714][T11966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.990803][T11966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.015884][T11966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.083138][T11966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.118999][T11966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.133912][T11966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.149679][T12322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1709'. [ 294.159013][T11966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.168045][T12322] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1709'. [ 294.401937][T12330] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1710'. [ 294.552800][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.560786][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.651136][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.689490][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.749610][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.838971][T12345] FAULT_INJECTION: forcing a failure. [ 294.838971][T12345] name failslab, interval 1, probability 0, space 0, times 0 [ 294.863616][T12343] lo speed is unknown, defaulting to 1000 [ 294.901237][T12345] CPU: 1 UID: 0 PID: 12345 Comm: syz.4.1715 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 294.901271][T12345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 294.901284][T12345] Call Trace: [ 294.901293][T12345] [ 294.901303][T12345] dump_stack_lvl+0x189/0x250 [ 294.901343][T12345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.901370][T12345] ? __pfx__printk+0x10/0x10 [ 294.901406][T12345] should_fail_ex+0x414/0x560 [ 294.901444][T12345] should_failslab+0xa8/0x100 [ 294.901474][T12345] __kmalloc_cache_noprof+0x70/0x3d0 [ 294.901501][T12345] ? sctp_add_bind_addr+0x8c/0x370 [ 294.901534][T12345] sctp_add_bind_addr+0x8c/0x370 [ 294.901566][T12345] sctp_copy_local_addr_list+0x30b/0x4e0 [ 294.901598][T12345] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 294.901625][T12345] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 294.901654][T12345] ? sctp_v6_is_any+0x64/0x80 [ 294.901688][T12345] ? sctp_copy_one_addr+0x93/0x360 [ 294.901719][T12345] sctp_bind_addr_copy+0xb3/0x3c0 [ 294.901747][T12345] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 294.901775][T12345] sctp_connect_new_asoc+0x2e0/0x690 [ 294.901808][T12345] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 294.901826][T12345] ? __local_bh_enable_ip+0x12d/0x1c0 [ 294.901866][T12345] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 294.901892][T12345] ? security_sctp_bind_connect+0x7e/0x2e0 [ 294.901925][T12345] sctp_sendmsg+0x155c/0x2810 [ 294.901963][T12345] ? __pfx_sctp_sendmsg+0x10/0x10 [ 294.901988][T12345] ? aa_sk_perm+0x81e/0x950 [ 294.902025][T12345] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.902059][T12345] ? sock_rps_record_flow+0x19/0x410 [ 294.902089][T12345] ? inet_sendmsg+0x2f4/0x370 [ 294.902120][T12345] __sock_sendmsg+0x19c/0x270 [ 294.902154][T12345] ____sys_sendmsg+0x52d/0x830 [ 294.902184][T12345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.902217][T12345] ? import_iovec+0x74/0xa0 [ 294.902248][T12345] ___sys_sendmsg+0x21f/0x2a0 [ 294.902273][T12345] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.902337][T12345] ? __fget_files+0x2a/0x420 [ 294.902363][T12345] ? __fget_files+0x3a0/0x420 [ 294.902401][T12345] __sys_sendmmsg+0x227/0x430 [ 294.902431][T12345] ? __pfx___sys_sendmmsg+0x10/0x10 [ 294.902465][T12345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.902513][T12345] ? ksys_write+0x1f0/0x250 [ 294.902534][T12345] ? rcu_is_watching+0x15/0xb0 [ 294.902577][T12345] __x64_sys_sendmmsg+0xa0/0xc0 [ 294.902603][T12345] do_syscall_64+0xf6/0x210 [ 294.902633][T12345] ? clear_bhb_loop+0x45/0xa0 [ 294.902659][T12345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.902679][T12345] RIP: 0033:0x7f886f78e969 [ 294.902698][T12345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.902717][T12345] RSP: 002b:00007f887060f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 294.902740][T12345] RAX: ffffffffffffffda RBX: 00007f886f9b5fa0 RCX: 00007f886f78e969 [ 294.902755][T12345] RDX: 0000000000000002 RSI: 0000200000002fc0 RDI: 0000000000000003 [ 294.902768][T12345] RBP: 00007f887060f090 R08: 0000000000000000 R09: 0000000000000000 [ 294.902787][T12345] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000002 [ 294.902799][T12345] R13: 0000000000000000 R14: 00007f886f9b5fa0 R15: 00007ffc6d144388 [ 294.902833][T12345] [ 294.907883][T12343] hsr0 speed is unknown, defaulting to 1000 [ 295.544616][T12366] siw: device registration error -23 [ 295.691128][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.532417][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.731142][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.833138][T12380] lo speed is unknown, defaulting to 1000 [ 296.908787][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.936680][T12380] hsr0 speed is unknown, defaulting to 1000 [ 297.036883][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.198127][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.572179][ T12] bridge_slave_1: left allmulticast mode [ 297.578306][ T12] bridge_slave_1: left promiscuous mode [ 297.593510][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.617952][ T12] bridge_slave_0: left allmulticast mode [ 297.632107][ T12] bridge_slave_0: left promiscuous mode [ 297.641411][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.771138][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.255305][T12425] siw: device registration error -23 [ 298.797476][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.811112][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.830869][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.852496][ T12] bond0 (unregistering): Released all slaves [ 298.877176][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.889697][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.899226][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.933182][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.945902][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.999738][T12432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.009355][T12432] bond1: entered promiscuous mode [ 299.015422][T12432] bond0: (slave bond1): Enslaving as an active interface with an up link [ 299.038837][T12435] vlan4: entered promiscuous mode [ 299.049751][T12435] vlan4: entered allmulticast mode [ 299.055287][T12435] gretap0: entered allmulticast mode [ 299.237557][T12436] lo speed is unknown, defaulting to 1000 [ 299.256702][T12436] hsr0 speed is unknown, defaulting to 1000 [ 299.273150][T12444] siw: device registration error -23 [ 299.708150][T12463] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.733741][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 299.764013][T12463] netlink: 476 bytes leftover after parsing attributes in process `syz.4.1734'. [ 299.805226][ T12] hsr_slave_0: left promiscuous mode [ 299.831364][ T12] hsr_slave_1: left promiscuous mode [ 299.837623][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.851133][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.882478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.920267][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.951313][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.029349][ T12] veth1_macvtap: left promiscuous mode [ 300.052530][ T12] veth0_macvtap: left promiscuous mode [ 300.058908][ T12] veth1_vlan: left promiscuous mode [ 300.069068][ T12] veth0_vlan: left promiscuous mode [ 300.295536][T12479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1737'. [ 300.891155][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.960206][ T12] team0 (unregistering): Port device team_slave_1 removed [ 301.014318][ T12] team0 (unregistering): Port device team_slave_0 removed [ 301.054562][ T5834] Bluetooth: hci2: command tx timeout [ 301.650897][T12463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1734'. [ 301.662943][T12463] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 301.745830][T12474] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.777387][T12476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1737'. [ 301.804682][T12476] team_slave_1: entered promiscuous mode [ 301.812568][T12477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1737'. [ 301.931136][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.953478][T12474] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.147372][T12496] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 302.178365][T12474] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.338179][T12501] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 302.371132][T12501] netlink: 'syz.0.1745': attribute type 2 has an invalid length. [ 302.483534][T12474] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.632663][T12513] FAULT_INJECTION: forcing a failure. [ 302.632663][T12513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.672095][T12436] chnl_net:caif_netlink_parms(): no params data found [ 302.679130][T12513] CPU: 1 UID: 0 PID: 12513 Comm: syz.2.1749 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 302.679161][T12513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 302.679174][T12513] Call Trace: [ 302.679183][T12513] [ 302.679192][T12513] dump_stack_lvl+0x189/0x250 [ 302.679228][T12513] ? __lock_acquire+0xaac/0xd20 [ 302.679261][T12513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.679298][T12513] ? __pfx__printk+0x10/0x10 [ 302.679319][T12513] ? __might_fault+0xb0/0x130 [ 302.679358][T12513] should_fail_ex+0x414/0x560 [ 302.679396][T12513] _copy_from_user+0x2d/0xb0 [ 302.679423][T12513] ___sys_sendmsg+0x158/0x2a0 [ 302.679452][T12513] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.679513][T12513] ? __fget_files+0x2a/0x420 [ 302.679539][T12513] ? __fget_files+0x3a0/0x420 [ 302.679575][T12513] __x64_sys_sendmsg+0x19b/0x260 [ 302.679601][T12513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.679641][T12513] ? do_syscall_64+0xba/0x210 [ 302.679673][T12513] do_syscall_64+0xf6/0x210 [ 302.679700][T12513] ? clear_bhb_loop+0x45/0xa0 [ 302.679726][T12513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.679744][T12513] RIP: 0033:0x7f37e9f8e969 [ 302.679761][T12513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.679777][T12513] RSP: 002b:00007f37eadf0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.679798][T12513] RAX: ffffffffffffffda RBX: 00007f37ea1b5fa0 RCX: 00007f37e9f8e969 [ 302.679813][T12513] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 302.679826][T12513] RBP: 00007f37eadf0090 R08: 0000000000000000 R09: 0000000000000000 [ 302.679839][T12513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.679851][T12513] R13: 0000000000000000 R14: 00007f37ea1b5fa0 R15: 00007ffeab4c5f68 [ 302.679884][T12513] [ 302.971187][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.974133][T12474] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.998022][T12474] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.017311][T12474] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.039734][T12474] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.135506][ T5834] Bluetooth: hci2: command tx timeout [ 303.363841][T12525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1752'. [ 303.444846][T12525] xt_hashlimit: size too large, truncated to 1048576 [ 303.460304][T12528] batadv_slave_1: entered allmulticast mode [ 303.519410][T12522] batadv_slave_1: left allmulticast mode [ 303.591709][T12539] tun0: tun_chr_ioctl cmd 1074025677 [ 303.621667][T12539] tun0: linktype set to 773 [ 303.931633][ T10] page_pool_release_retry() stalled pool shutdown: id 81, 1 inflight 60 sec [ 303.968610][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.011118][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.119915][T12553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.231791][T12436] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.242434][T12436] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.249710][T12436] bridge_slave_0: entered allmulticast mode [ 304.267269][T12436] bridge_slave_0: entered promiscuous mode [ 304.387688][T12436] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.410860][T12436] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.428959][T12436] bridge_slave_1: entered allmulticast mode [ 304.450928][T12436] bridge_slave_1: entered promiscuous mode [ 304.552178][T12436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.589869][T12436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.605473][T12572] siw: device registration error -23 [ 304.762712][T12436] team0: Port device team_slave_0 added [ 304.776075][T12578] netlink: 'syz.2.1765': attribute type 1 has an invalid length. [ 304.789174][T12580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'. [ 304.800397][T12578] netlink: 'syz.2.1765': attribute type 2 has an invalid length. [ 304.802761][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 304.834439][T12436] team0: Port device team_slave_1 added [ 305.051205][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.141969][T12436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.149085][T12436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.211335][ T5834] Bluetooth: hci2: command tx timeout [ 305.235809][T12436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.263322][T12436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.270331][T12436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.329351][T12594] openvswitch: netlink: Duplicate or invalid key (type 0). [ 305.331123][T12436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.359851][T12594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.503929][T12598] erspan0: entered promiscuous mode [ 305.528682][T12598] erspan0: left promiscuous mode [ 305.617573][T12608] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 305.860037][T12436] hsr_slave_0: entered promiscuous mode [ 305.897566][T12436] hsr_slave_1: entered promiscuous mode [ 305.925787][T12436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.941217][T12436] Cannot create hsr debugfs directory [ 305.967692][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'. [ 305.989026][T12617] ------------[ cut here ]------------ [ 306.001316][T12614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1772'. [ 306.012511][T12617] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:21 [ 306.034779][T12617] index 16 is out of range for type 'const __u8[16]' (aka 'const unsigned char[16]') [ 306.061590][T12617] CPU: 1 UID: 0 PID: 12617 Comm: syz.0.1774 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 306.061625][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 306.061653][T12617] Call Trace: [ 306.061670][T12617] [ 306.061679][T12617] dump_stack_lvl+0x189/0x250 [ 306.061722][T12617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.061753][T12617] ? __pfx__printk+0x10/0x10 [ 306.061772][T12617] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 306.061812][T12617] ubsan_epilogue+0xa/0x40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 306.061835][T12617] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 306.061865][T12617] ? __asan_memcpy+0x40/0x70 [ 306.061889][T12617] ipv6_addr_prefix+0x145/0x1d0 [ 306.061923][T12617] ip6_route_info_create+0x629/0xa70 [ 306.061966][T12617] ip6_route_add+0x29/0x2f0 [ 306.061984][T12617] ? ipv6_route_ioctl+0x313/0x480 [ 306.062009][T12617] ipv6_route_ioctl+0x35c/0x480 [ 306.062036][T12617] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 306.062098][T12617] inet6_ioctl+0x219/0x280 [ 306.062127][T12617] ? __pfx_inet6_ioctl+0x10/0x10 [ 306.062165][T12617] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.062207][T12617] sock_do_ioctl+0xd9/0x300 [ 306.062239][T12617] ? __pfx_sock_do_ioctl+0x10/0x10 [ 306.062268][T12617] ? __lock_acquire+0xaac/0xd20 [ 306.062311][T12617] sock_ioctl+0x576/0x790 [ 306.062340][T12617] ? __pfx_sock_ioctl+0x10/0x10 [ 306.062370][T12617] ? __fget_files+0x3a0/0x420 [ 306.062397][T12617] ? __fget_files+0x2a/0x420 [ 306.062427][T12617] ? bpf_lsm_file_ioctl+0x9/0x20 [ 306.062454][T12617] ? __pfx_sock_ioctl+0x10/0x10 [ 306.062480][T12617] __se_sys_ioctl+0xf9/0x170 [ 306.062503][T12617] do_syscall_64+0xf6/0x210 [ 306.062531][T12617] ? clear_bhb_loop+0x45/0xa0 [ 306.062559][T12617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.062579][T12617] RIP: 0033:0x7fac3238e969 [ 306.062598][T12617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.062616][T12617] RSP: 002b:00007fac331aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.062639][T12617] RAX: ffffffffffffffda RBX: 00007fac325b5fa0 RCX: 00007fac3238e969 [ 306.062655][T12617] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000003 [ 306.062668][T12617] RBP: 00007fac32410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 306.062681][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.062693][T12617] R13: 0000000000000000 R14: 00007fac325b5fa0 R15: 00007ffe6ec505c8 [ 306.062725][T12617] [ 306.062812][T12617] ---[ end trace ]--- [ 306.091306][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.158637][T12617] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 306.158664][T12617] CPU: 1 UID: 0 PID: 12617 Comm: syz.0.1774 Not tainted 6.15.0-rc3-syzkaller-00614-g0d15a26b247d #0 PREEMPT(full) [ 306.158704][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 306.158720][T12617] Call Trace: [ 306.158731][T12617] [ 306.158742][T12617] dump_stack_lvl+0x99/0x250 [ 306.158782][T12617] ? __asan_memcpy+0x40/0x70 [ 306.158808][T12617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.158842][T12617] ? __pfx__printk+0x10/0x10 [ 306.158888][T12617] panic+0x2db/0x790 [ 306.158929][T12617] ? __pfx_panic+0x10/0x10 [ 306.158958][T12617] ? _printk+0xcf/0x120 [ 306.158987][T12617] ? __pfx__printk+0x10/0x10 [ 306.159006][T12617] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 306.159045][T12617] check_panic_on_warn+0x89/0xb0 [ 306.159079][T12617] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 306.159110][T12617] ? __asan_memcpy+0x40/0x70 [ 306.159135][T12617] ipv6_addr_prefix+0x145/0x1d0 [ 306.159172][T12617] ip6_route_info_create+0x629/0xa70 [ 306.159205][T12617] ip6_route_add+0x29/0x2f0 [ 306.159226][T12617] ? ipv6_route_ioctl+0x313/0x480 [ 306.159253][T12617] ipv6_route_ioctl+0x35c/0x480 [ 306.159282][T12617] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 306.455595][T12617] inet6_ioctl+0x219/0x280 [ 306.460138][T12617] ? __pfx_inet6_ioctl+0x10/0x10 [ 306.465460][T12617] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 306.471564][T12617] sock_do_ioctl+0xd9/0x300 [ 306.476208][T12617] ? __pfx_sock_do_ioctl+0x10/0x10 [ 306.481530][T12617] ? __lock_acquire+0xaac/0xd20 [ 306.486620][T12617] sock_ioctl+0x576/0x790 [ 306.491083][T12617] ? __pfx_sock_ioctl+0x10/0x10 [ 306.496449][T12617] ? __fget_files+0x3a0/0x420 [ 306.501243][T12617] ? __fget_files+0x2a/0x420 [ 306.505854][T12617] ? bpf_lsm_file_ioctl+0x9/0x20 [ 306.510834][T12617] ? __pfx_sock_ioctl+0x10/0x10 [ 306.515719][T12617] __se_sys_ioctl+0xf9/0x170 [ 306.520504][T12617] do_syscall_64+0xf6/0x210 [ 306.525146][T12617] ? clear_bhb_loop+0x45/0xa0 [ 306.529840][T12617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.535832][T12617] RIP: 0033:0x7fac3238e969 [ 306.540364][T12617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.560678][T12617] RSP: 002b:00007fac331aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.569110][T12617] RAX: ffffffffffffffda RBX: 00007fac325b5fa0 RCX: 00007fac3238e969 [ 306.577196][T12617] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000003 [ 306.585395][T12617] RBP: 00007fac32410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 306.593486][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.601512][T12617] R13: 0000000000000000 R14: 00007fac325b5fa0 R15: 00007ffe6ec505c8 [ 306.609722][T12617] [ 306.613071][T12617] Kernel Offset: disabled [ 306.617409][T12617] Rebooting in 86400 seconds..