last executing test programs: 24.571551733s ago: executing program 4 (id=1264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000020020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 24.486761602s ago: executing program 4 (id=1267): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x6, &(0x7f0000000000)={0x3, "445aa1"}, 0x4) (async, rerun: 32) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa60000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0), 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 24.368073712s ago: executing program 4 (id=1269): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 24.12354236s ago: executing program 4 (id=1271): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x12, 0x3, 0x0, 0x3a) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ddc26a8b7f648532a60000000000000000000000000000000000000000000000656e4204b4a0b4ab0f5a8f2bac1d3d3a66944f3712730618e4c66bbfb86db96acbdef661ef8e7a6f64aac55335d8b1486fca60d72d5fa0d0541879e152fb6608587cd44444455acab03e6cc00aabcf2d759a9110dd43"], 0x48) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000280)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r5}, 0x38) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x3, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000001b80)=ANY=[@ANYRES64=0x0, @ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="14526ee4829b0f6ef2b038f68729da0dbfe2437561ab8397c5a6fbc4f7a7274ffe528b3cc044f2f2895896a9a469456a4de6b4544790684af72195586f6fab1d21cc3f293f1bf96f1b2108de3bdf611d65a6371a76b6a8fff527870eac5c5f46c23972d02e95e43735053e3729b3182a4ad012dbaf6ac8cb23dc563679eb3784187cf4d6f3efcfa62ee2ab5730710a4bdcd9f29b449b0715dc3783039b6396c394cb8d12df3a761598a2df8884fa918c0097d369ae231aed0ddbae78108d0dcd6fa8837fbdf1544f84c155c23eebff284d1515669cded7155afbb1c54ff5ff7160"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7c, @void, @value}, 0x94) 23.860124234s ago: executing program 4 (id=1273): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x0, 0x200000006c832, r0, 0xfe108000) 8.762053437s ago: executing program 4 (id=1273): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x0, 0x200000006c832, r0, 0xfe108000) 7.851521522s ago: executing program 2 (id=1413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r1, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32=r4, @ANYBLOB="000000000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6f8, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @jmp={0x5, 0x0, 0x0, 0x3, 0x4, 0x18, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb1d}, @jmp={0x5, 0x0, 0x7, 0x3, 0x9, 0xffffffffffffffe0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) 7.463713427s ago: executing program 2 (id=1418): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="0beff30a9ee9c9bb70eccc881ea25efa66859e92c0c34ef9c38102b31f9d6743a62b1124e12b1d3130b62c07fc4d021faf0380be403f7fb151094e158301f2afe792f75b8ff4d78b6568012a2d8e2428a21e3467a3feb66e2caeccb501be4c8c25b6a1f82f8f82846ea6bc12e16f1d8e844d9b662a3ca53b4326e4a2e5ce26c3c637241767883cf1d741d39a845b92323d8f98355c886e88ed8f7577bdb9d29feb7344be4037374fbd290a764ea706dc6695c1498b8e", 0xb6}, {&(0x7f0000000c40)="a8ce8e7e742a97e89d8cf071216275", 0xf}], 0x2}}], 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000004440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004400)={&(0x7f0000004340)={0x14, r2, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x20000040) sendmsg$TIPC_CMD_SHOW_PORTS(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/220, 0xdc}], 0x1, &(0x7f00000002c0)=""/165, 0xa5}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000480)=""/37, 0x25}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/76, 0x4c}, {&(0x7f00000008c0)=""/232, 0xe8}], 0x7}, 0x8001}, {{&(0x7f00000009c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f0000000a40)=""/46, 0x2e}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}, 0xf8d}, {{&(0x7f0000000e00)=@qipcrtr, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e80)=""/111, 0x6f}, {&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/255, 0xff}, {&(0x7f0000001100)}, {&(0x7f0000001140)=""/246, 0xf6}], 0x5}, 0xa594}, {{&(0x7f0000001500)=@rc, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000002840)=""/161, 0xa1}, 0x5}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/231, 0xe7}, {&(0x7f0000003a80)=""/242, 0xf2}, {&(0x7f0000003b80)=""/223, 0xdf}, {&(0x7f0000003d00)=""/247, 0xf7}, {&(0x7f0000003e00)=""/14, 0xe}], 0x6, &(0x7f0000003ec0)=""/106, 0x6a}, 0x57}], 0x6, 0x0, &(0x7f0000004100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x68040200) close(0x3) 2.939841514s ago: executing program 2 (id=1450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) listen(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0xf}}, 0x0, 0x0, 0x10, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r2 = socket(0x23, 0x5, 0x0) setsockopt$llc_int(r2, 0x10c, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) setsockopt$sock_timeval(r1, 0x1, 0xd3, &(0x7f0000000180)={0x77359400}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000880)=0x3, 0x4) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}], 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x0, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) writev(r0, &(0x7f0000000080), 0x0) 2.752757506s ago: executing program 2 (id=1453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0xc000) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (fail_nth: 2) 2.511690879s ago: executing program 2 (id=1458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000240007"], 0x38}}, 0x0) pipe(&(0x7f00000000c0)) 2.444957566s ago: executing program 2 (id=1460): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="0beff30a9ee9c9bb70eccc881ea25efa66859e92c0c34ef9c38102b31f9d6743a62b1124e12b1d3130b62c07fc4d021faf0380be403f7fb151094e158301f2afe792f75b8ff4d78b6568012a2d8e2428a21e3467a3feb66e2caeccb501be4c8c25b6a1f82f8f82846ea6bc12e16f1d8e844d9b662a3ca53b4326e4a2e5ce26c3c637241767883cf1d741d39a845b92323d8f98355c886e88ed8f7577bdb9d29feb7344be4037374fbd290a764ea706dc6695c1498b8e", 0xb6}, {&(0x7f0000000c40)="a8ce8e7e742a97e89d8cf071216275", 0xf}], 0x2}}], 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000004440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004400)={&(0x7f0000004340)={0x14, r2, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x20000040) sendmsg$TIPC_CMD_SHOW_PORTS(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/220, 0xdc}], 0x1, &(0x7f00000002c0)=""/165, 0xa5}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000480)=""/37, 0x25}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/76, 0x4c}, {&(0x7f00000008c0)=""/232, 0xe8}], 0x7}, 0x8001}, {{&(0x7f00000009c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f0000000a40)=""/46, 0x2e}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x4}, 0xf8d}, {{&(0x7f0000000e00)=@qipcrtr, 0x80, &(0x7f0000001240)=[{&(0x7f0000000e80)=""/111, 0x6f}, {&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/255, 0xff}, {0x0}, {&(0x7f0000001100)}, {&(0x7f0000001140)=""/246, 0xf6}], 0x6}, 0xa594}, {{&(0x7f0000001500)=@rc, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000002840)=""/161, 0xa1}, 0x5}, {{&(0x7f0000002900)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/231, 0xe7}, {&(0x7f0000003a80)=""/242, 0xf2}, {&(0x7f0000003b80)=""/223, 0xdf}, {&(0x7f0000003d00)=""/247, 0xf7}, {&(0x7f0000003e00)=""/14, 0xe}], 0x6, &(0x7f0000003ec0)=""/106, 0x6a}, 0x57}], 0x6, 0x0, &(0x7f0000004100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x68040200) close(0x3) 2.003708119s ago: executing program 3 (id=1463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) (async) 1.909179701s ago: executing program 3 (id=1465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0xf1}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x82, &(0x7f0000000240)=""/130, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.848236738s ago: executing program 0 (id=1467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0xc000) listen(r0, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x60, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='veth0_to_bond\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_DELSETELEM={0x18, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 1.636910527s ago: executing program 3 (id=1468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0xc000) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (fail_nth: 3) 1.205492459s ago: executing program 1 (id=1469): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000508000240000000000800044000000000080003400000001508000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x0) shutdown(r2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x2d6dd000) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x2d6dd000) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0x2c}}, 0xc0) 1.177155736s ago: executing program 3 (id=1470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f126e6df1b0e9c676d1ab5", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f00000003c0)="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", 0x14f}, {&(0x7f0000000700)="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", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b237409", 0x6a}, {&(0x7f0000000300)="77729a", 0x3}], 0x7, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1.106446698s ago: executing program 3 (id=1471): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x8}]}}]}, 0x38}}, 0x40840) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r6, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbf7, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044001}, 0x4008050) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.037549826s ago: executing program 0 (id=1472): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x240}], 0x2}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000d6ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 955.324152ms ago: executing program 1 (id=1473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x40840) (async) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r3, 0x1, 0xfffffffe, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x89ed}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000740)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r7) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8) sendmsg$nl_generic(r6, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b40100002f0000012bbd7000fddbdf25070000009d01148014009100fe8000000000000000000000000000391400d70000000000000000000010ffff640101028d09f8ff8955acb89e45ebe793ae5782594fa7bc2070f67d7c6c337e2dab511e7eaead6a1839e56b34d0b7c425a9803553dbf9b2193b71b289c66b1f621808003a00", @ANYRES32=r9, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4080041}, 0x20000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2, 0xb, 0x7, 0x5, 0x4, 0x4, 0x7}, 0x9c) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x100000, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x3ffd, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0x400000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'veth0_to_bridge\x00', @multicast}) 609.137236ms ago: executing program 0 (id=1474): socket$nl_route(0x10, 0x3, 0x0) 539.818451ms ago: executing program 1 (id=1475): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61145b00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 528.362155ms ago: executing program 3 (id=1476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x8014) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 478.834405ms ago: executing program 0 (id=1477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x23c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) (async) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffff8, {0x0, 0x0, 0x12, r4, {0x0, 0x1000b}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xfc, 0xd, 0x0, 0xa], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8, 0x0, 0xfffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x400, 0xe}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x9a8b}, &(0x7f0000000100)=0x8) 211.945975ms ago: executing program 1 (id=1478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0xc000) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x13, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 137.0216ms ago: executing program 1 (id=1479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x4015) 118.742895ms ago: executing program 0 (id=1480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0xc000) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (fail_nth: 4) 3.338233ms ago: executing program 1 (id=1481): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) listen(0xffffffffffffffff, 0x1) 0s ago: executing program 0 (id=1482): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e", 0x5}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) kernel console output (not intermixed with test programs): m0: Port device team_slave_0 added [ 72.006652][ T5845] Bluetooth: hci1: command tx timeout [ 72.024297][ T5829] hsr_slave_0: entered promiscuous mode [ 72.030832][ T5829] hsr_slave_1: entered promiscuous mode [ 72.038090][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.045044][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.071517][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.075538][ T5845] Bluetooth: hci3: command tx timeout [ 72.082174][ T5835] Bluetooth: hci4: command tx timeout [ 72.087990][ T5845] Bluetooth: hci0: command tx timeout [ 72.092877][ T5842] Bluetooth: hci2: command tx timeout [ 72.104380][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.111386][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.137871][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.149157][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.156990][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.164135][ T5827] bridge_slave_0: entered allmulticast mode [ 72.172163][ T5827] bridge_slave_0: entered promiscuous mode [ 72.181038][ T5843] team0: Port device team_slave_1 added [ 72.234555][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.242045][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.249601][ T5827] bridge_slave_1: entered allmulticast mode [ 72.258108][ T5827] bridge_slave_1: entered promiscuous mode [ 72.274763][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.281914][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.307910][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.333317][ T5837] hsr_slave_0: entered promiscuous mode [ 72.341524][ T5837] hsr_slave_1: entered promiscuous mode [ 72.347850][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.355801][ T5837] Cannot create hsr debugfs directory [ 72.376809][ T5839] hsr_slave_0: entered promiscuous mode [ 72.383150][ T5839] hsr_slave_1: entered promiscuous mode [ 72.389426][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.397089][ T5839] Cannot create hsr debugfs directory [ 72.425036][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.432116][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.458530][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.557450][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.570387][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.601050][ T5843] hsr_slave_0: entered promiscuous mode [ 72.607888][ T5843] hsr_slave_1: entered promiscuous mode [ 72.613910][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.622173][ T5843] Cannot create hsr debugfs directory [ 72.743016][ T5827] team0: Port device team_slave_0 added [ 72.752372][ T5827] team0: Port device team_slave_1 added [ 72.856871][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.863844][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.889938][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.939517][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.946705][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.973377][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.141472][ T5827] hsr_slave_0: entered promiscuous mode [ 73.148370][ T5827] hsr_slave_1: entered promiscuous mode [ 73.154415][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.162750][ T5827] Cannot create hsr debugfs directory [ 73.292089][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.304033][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.329091][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.365133][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.430083][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.444022][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.470108][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.484381][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.566290][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.577035][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.606540][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.638381][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.708243][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.723057][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.742143][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.751779][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.810926][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.870797][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.885213][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.924767][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.940910][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.952537][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.982771][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.019842][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.051295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.058605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.071193][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.078312][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.086739][ T5842] Bluetooth: hci1: command tx timeout [ 74.112421][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.119592][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.131230][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.138385][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.156243][ T5842] Bluetooth: hci2: command tx timeout [ 74.162011][ T5844] Bluetooth: hci0: command tx timeout [ 74.162046][ T5845] Bluetooth: hci3: command tx timeout [ 74.167807][ T5835] Bluetooth: hci4: command tx timeout [ 74.218944][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.253504][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.291883][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.330822][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.343873][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.351082][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.384118][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.391406][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.401727][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.408925][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.440505][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.447707][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.642906][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.722229][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.763232][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.810427][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.817884][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.878892][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.886083][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.988593][ T5829] veth0_vlan: entered promiscuous mode [ 75.014546][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.103333][ T5829] veth1_vlan: entered promiscuous mode [ 75.118632][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.153623][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.261896][ T5829] veth0_macvtap: entered promiscuous mode [ 75.289608][ T5829] veth1_macvtap: entered promiscuous mode [ 75.369220][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.409624][ T5837] veth0_vlan: entered promiscuous mode [ 75.427769][ T5839] veth0_vlan: entered promiscuous mode [ 75.442075][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.482122][ T5837] veth1_vlan: entered promiscuous mode [ 75.492652][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.505268][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.525674][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.534415][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.589386][ T5839] veth1_vlan: entered promiscuous mode [ 75.718515][ T5837] veth0_macvtap: entered promiscuous mode [ 75.763482][ T5837] veth1_macvtap: entered promiscuous mode [ 75.771633][ T5839] veth0_macvtap: entered promiscuous mode [ 75.799282][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.817931][ T5839] veth1_macvtap: entered promiscuous mode [ 75.842752][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.851554][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.873105][ T5843] veth0_vlan: entered promiscuous mode [ 75.899795][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.910951][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.919324][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.938055][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.953016][ T5843] veth1_vlan: entered promiscuous mode [ 75.963418][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.973397][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.008702][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.017968][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.028246][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.037180][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.056194][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.064913][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.069317][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.074572][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.097433][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.160741][ T5835] Bluetooth: hci1: command tx timeout [ 76.236011][ T5835] Bluetooth: hci0: command tx timeout [ 76.236060][ T5842] Bluetooth: hci3: command tx timeout [ 76.241434][ T5835] Bluetooth: hci4: command tx timeout [ 76.246871][ T5844] Bluetooth: hci2: command tx timeout [ 76.284038][ T5843] veth0_macvtap: entered promiscuous mode [ 76.294596][ T5827] veth0_vlan: entered promiscuous mode [ 76.347607][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.356502][ T5843] veth1_macvtap: entered promiscuous mode [ 76.382961][ T5827] veth1_vlan: entered promiscuous mode [ 76.385776][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.403755][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.418971][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.471244][ T5827] veth0_macvtap: entered promiscuous mode [ 76.520070][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.529231][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.547536][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.601398][ T5827] veth1_macvtap: entered promiscuous mode [ 76.636840][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.660989][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.674719][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.684851][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.762690][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.784996][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.829172][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.849691][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.869054][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.874061][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.941655][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.963845][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.973606][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.995518][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.076452][ T5930] syz.1.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 77.114460][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.145659][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.148166][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: syz.1.2 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 77.148188][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.148201][ T5930] Call Trace: [ 77.148211][ T5930] [ 77.148218][ T5930] dump_stack_lvl+0x189/0x250 [ 77.148252][ T5930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.148272][ T5930] ? __pfx__printk+0x10/0x10 [ 77.148288][ T5930] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 77.148312][ T5930] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 77.148336][ T5930] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 77.148361][ T5930] warn_alloc+0x214/0x310 [ 77.148387][ T5930] ? __pfx_warn_alloc+0x10/0x10 [ 77.148406][ T5930] ? kasan_save_track+0x4f/0x80 [ 77.148423][ T5930] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 77.148440][ T5930] ? xskq_create+0x56/0x170 [ 77.148457][ T5930] ? __x64_sys_setsockopt+0x18b/0x220 [ 77.148474][ T5930] ? do_syscall_64+0xf6/0x210 [ 77.148500][ T5930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.148526][ T5930] __vmalloc_node_range_noprof+0x125/0x12c0 [ 77.148574][ T5930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 77.148597][ T5930] ? __kasan_kmalloc+0x93/0xb0 [ 77.148620][ T5930] vmalloc_user_noprof+0x74/0x80 [ 77.148639][ T5930] ? xskq_create+0xbf/0x170 [ 77.148654][ T5930] xskq_create+0xbf/0x170 [ 77.148673][ T5930] xsk_init_queue+0xb0/0x110 [ 77.148692][ T5930] xsk_setsockopt+0x43f/0x710 [ 77.148711][ T5930] ? __pfx_xsk_setsockopt+0x10/0x10 [ 77.148737][ T5930] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 77.148753][ T5930] ? __pfx_xsk_setsockopt+0x10/0x10 [ 77.148771][ T5930] do_sock_setsockopt+0x257/0x3e0 [ 77.148792][ T5930] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 77.148808][ T5930] ? __fget_files+0x2a/0x420 [ 77.148830][ T5930] ? __fget_files+0x3a0/0x420 [ 77.148847][ T5930] ? __fget_files+0x2a/0x420 [ 77.148872][ T5930] __x64_sys_setsockopt+0x18b/0x220 [ 77.148896][ T5930] do_syscall_64+0xf6/0x210 [ 77.148916][ T5930] ? clear_bhb_loop+0x45/0xa0 [ 77.148935][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.148949][ T5930] RIP: 0033:0x7f3ba778e969 [ 77.148967][ T5930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.148979][ T5930] RSP: 002b:00007f3ba852b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 77.148996][ T5930] RAX: ffffffffffffffda RBX: 00007f3ba79b5fa0 RCX: 00007f3ba778e969 [ 77.149007][ T5930] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 77.149017][ T5930] RBP: 00007f3ba7810ab1 R08: 0000000000000004 R09: 0000000000000000 [ 77.149026][ T5930] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.149035][ T5930] R13: 0000000000000000 R14: 00007f3ba79b5fa0 R15: 00007ffd241f0b88 [ 77.149061][ T5930] [ 77.149070][ T5930] Mem-Info: [ 77.443596][ T5930] active_anon:5313 inactive_anon:0 isolated_anon:0 [ 77.443596][ T5930] active_file:586 inactive_file:39817 isolated_file:0 [ 77.443596][ T5930] unevictable:768 dirty:1381 writeback:0 [ 77.443596][ T5930] slab_reclaimable:9802 slab_unreclaimable:95682 [ 77.443596][ T5930] mapped:28866 shmem:1361 pagetables:788 [ 77.443596][ T5930] sec_pagetables:0 bounce:0 [ 77.443596][ T5930] kernel_misc_reclaimable:0 [ 77.443596][ T5930] free:1351777 free_pcp:532 free_cma:0 [ 77.565149][ T5930] Node 0 active_anon:21252kB inactive_anon:0kB active_file:2444kB inactive_file:159064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115464kB dirty:5508kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10632kB pagetables:3152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 77.620198][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.640103][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.672175][ T5930] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 77.738165][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.764687][ T5930] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.792927][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.795099][ T5930] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 77.806815][ T5930] Node 0 DMA32 free:1480468kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21344kB inactive_anon:0kB active_file:2744kB inactive_file:158972kB unevictable:1536kB writepending:5504kB present:3129332kB managed:2564136kB mlocked:0kB bounce:0kB free_pcp:992kB local_pcp:768kB free_cma:0kB [ 77.838850][ T5930] lowmem_reserve[]: 0 0 0 0 0 [ 77.844806][ T5930] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 77.878029][ T5930] lowmem_reserve[]: 0 0 0 0 0 [ 77.882919][ T5930] Node 1 Normal free:3908828kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:800kB local_pcp:400kB free_cma:0kB [ 77.913458][ T5930] lowmem_reserve[]: 0 0 0 0 0 [ 77.919904][ T5930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.932919][ T5930] Node 0 DMA32: 71*4kB (UME) 294*8kB (UM) 3*16kB (UM) 1*32kB (E) 6*64kB (UME) 9*128kB (UME) 4*256kB (M) 8*512kB (UME) 4*1024kB (M) 5*2048kB (M) 355*4096kB (M) = 1477788kB [ 77.951407][ T5930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 77.963315][ T5930] Node 1 Normal: 75*4kB (UE) 48*8kB (UME) 37*16kB (UME) 192*32kB (UME) 110*64kB (UME) 30*128kB (UME) 13*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 945*4096kB (M) = 3908732kB [ 78.018852][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.027576][ T5930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.052811][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.088062][ T5930] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.119896][ T5930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.142488][ T5912] IPVS: starting estimator thread 0... [ 78.171569][ T5930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.199443][ T5930] 42061 total pagecache pages [ 78.204175][ T5930] 0 pages in swap cache [ 78.224998][ T5930] Free swap = 124996kB [ 78.232098][ T5930] Total swap = 124996kB [ 78.241300][ T5835] Bluetooth: hci1: command tx timeout [ 78.249949][ T5930] 2097051 pages RAM [ 78.255559][ T5955] IPVS: using max 32 ests per chain, 76800 per kthread [ 78.260819][ T5930] 0 pages HighMem/MovableOnly [ 78.267753][ T5930] 424359 pages reserved [ 78.272018][ T5930] 0 pages cma reserved [ 78.315741][ T5835] Bluetooth: hci4: command tx timeout [ 78.316600][ T5845] Bluetooth: hci3: command tx timeout [ 78.321161][ T5835] Bluetooth: hci2: command tx timeout [ 78.321190][ T5835] Bluetooth: hci0: command tx timeout [ 78.825182][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.857304][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.021372][ T5965] netlink: 'syz.1.13': attribute type 16 has an invalid length. [ 79.043077][ T5965] netlink: 'syz.1.13': attribute type 17 has an invalid length. [ 79.064259][ T5981] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.13'. [ 79.120539][ T5969] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 79.159091][ T5981] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.181692][ T5969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13'. [ 79.263578][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.270927][ T5965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.301253][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 79.320307][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.327669][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.382252][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ba6000: rx timeout, send abort [ 79.400636][ T6002] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 79.490433][ T5997] warning: `syz.4.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.692028][ T6012] netlink: 'syz.2.22': attribute type 33 has an invalid length. [ 79.726242][ T6012] netlink: 152 bytes leftover after parsing attributes in process `syz.2.22'. [ 79.882765][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ba5c00: rx timeout, send abort [ 79.892185][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ba6000: abort rx timeout. Force session deactivation [ 79.929709][ T6020] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 79.969360][ T6020] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 80.071113][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 80.086695][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 80.121327][ T6032] netlink: 'syz.4.29': attribute type 15 has an invalid length. [ 80.194419][ T6040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.31'. [ 80.305053][ T6048] netlink: 72 bytes leftover after parsing attributes in process `syz.2.32'. [ 80.376963][ T6043] xt_CT: No such helper "pptp" [ 80.389746][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ba5800: rx timeout, send abort [ 80.398762][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ba5c00: abort rx timeout. Force session deactivation [ 80.492097][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.532341][ T6054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.602119][ T6056] bridge0: port 3(batadv1) entered blocking state [ 80.636495][ T6056] bridge0: port 3(batadv1) entered disabled state [ 80.658287][ T6056] batadv1: entered allmulticast mode [ 80.679864][ T6056] batadv1: entered promiscuous mode [ 80.702082][ T6064] tipc: Enabling of bearer rejected, failed to enable media [ 80.898024][ C1] vcan0: j1939_tp_rxtimer: 0xffff888145ba5800: abort rx timeout. Force session deactivation [ 81.097313][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 81.106759][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 81.187196][ T6066] batadv_slave_1: entered promiscuous mode [ 81.267814][ T6065] batadv_slave_1: left promiscuous mode [ 81.600701][ T3076] cfg80211: failed to load regulatory.db [ 81.649145][ T6109] netlink: 'syz.3.47': attribute type 2 has an invalid length. [ 81.773804][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 82.217581][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.431136][ T6140] netlink: 116 bytes leftover after parsing attributes in process `syz.3.58'. [ 82.505127][ T6147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 83.448636][ T6204] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 83.583524][ T6219] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 83.602578][ T6211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.611647][ T6211] bond0: (slave bond1): Enslaving as an active interface with an up link [ 83.912275][ T6230] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 84.103555][ T6244] netlink: 'syz.3.93': attribute type 64 has an invalid length. [ 84.129240][ T6244] __nla_validate_parse: 10 callbacks suppressed [ 84.129256][ T6244] netlink: 5 bytes leftover after parsing attributes in process `syz.3.93'. [ 84.210747][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 84.237367][ T6252] ipt_REJECT: ECHOREPLY no longer supported. [ 84.253612][ T6254] delete_channel: no stack [ 84.264527][ T6254] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 84.433723][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 84.601366][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'. [ 84.957853][ T6288] IPVS: Error joining to the multicast group [ 84.985886][ T6292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.993337][ T6292] IPv6: NLM_F_CREATE should be set when creating new route [ 85.067136][ T6298] Zero length message leads to an empty skb [ 85.204307][ T6303] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 85.531444][ T6323] netlink: 'syz.4.116': attribute type 12 has an invalid length. [ 85.567976][ T6323] netlink: 'syz.4.116': attribute type 29 has an invalid length. [ 85.584035][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 85.594414][ T6323] netlink: 148 bytes leftover after parsing attributes in process `syz.4.116'. [ 85.597649][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'. [ 85.605675][ T6323] netlink: 'syz.4.116': attribute type 2 has an invalid length. [ 85.620415][ T6323] netlink: 43 bytes leftover after parsing attributes in process `syz.4.116'. [ 85.686851][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.117'. [ 85.900503][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.909225][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.960079][ T6348] Cannot find set identified by id 0 to match [ 85.992259][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 86.074577][ T6353] openvswitch: netlink: Key type 272 is out of range max 32 [ 86.412347][ T10] hid (null): unknown global tag 0xdf [ 86.459846][ T10] hid (null): unknown global tag 0xc [ 86.489130][ T6365] geneve1: entered promiscuous mode [ 86.498729][ T10] hid-generic 0005:046D:0A0A.0001: unknown main item tag 0x0 [ 86.507765][ T6365] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 86.514637][ T10] hid-generic 0005:046D:0A0A.0001: unexpected long global item [ 86.549429][ T6378] vlan2: entered promiscuous mode [ 86.554872][ T6378] bridge0: entered promiscuous mode [ 86.563458][ T10] hid-generic 0005:046D:0A0A.0001: probe with driver hid-generic failed with error -22 [ 87.215839][ T6417] ieee802154 phy1 wpan1: encryption failed: -22 [ 87.384712][ T6421] SET target dimension over the limit! [ 87.457166][ T6429] xt_TCPMSS: Only works on TCP SYN packets [ 87.502875][ T6429] netlink: 'syz.1.143': attribute type 6 has an invalid length. [ 87.561272][ T6429] batman_adv: batadv0: Adding interface: gretap1 [ 87.601947][ T6429] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 87.664145][ T6437] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 87.683625][ T6437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.748214][ T6437] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 87.805632][ T6437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.820809][ T6445] netlink: 'syz.3.149': attribute type 29 has an invalid length. [ 87.846790][ T6445] netlink: 'syz.3.149': attribute type 29 has an invalid length. [ 87.887239][ T6445] unsupported nla_type 58 [ 87.947105][ T6448] lo: entered promiscuous mode [ 87.973186][ T6448] tunl0: entered promiscuous mode [ 87.983542][ T6419] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 88.005614][ T6448] gre0: entered promiscuous mode [ 88.062920][ T6448] gretap0: entered promiscuous mode [ 88.093131][ T6448] erspan0: entered promiscuous mode [ 88.109001][ T6448] ip_vti0: entered promiscuous mode [ 88.164953][ T6453] netlink: 'syz.0.153': attribute type 10 has an invalid length. [ 88.218071][ T6453] team0: Cannot enslave team device to itself [ 88.372600][ T6473] netlink: 'syz.2.158': attribute type 7 has an invalid length. [ 88.383893][ T6477] Cannot find add_set index 0 as target [ 88.502339][ T6482] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 88.509106][ T6482] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 89.297258][ T6523] __nla_validate_parse: 14 callbacks suppressed [ 89.297276][ T6523] netlink: 164 bytes leftover after parsing attributes in process `syz.0.171'. [ 89.351876][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 89.355826][ T5835] Bluetooth: hci2: command 0x0401 tx timeout [ 89.390803][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.172'. [ 89.681779][ T6548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.179'. [ 89.826468][ T6553] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.940136][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 90.054992][ T6568] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 90.067309][ T6567] validate_nla: 6 callbacks suppressed [ 90.067325][ T6567] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 90.073352][ T6569] trusted_key: syz.3.185 sent an empty control message without MSG_MORE. [ 90.113887][ T6570] IPv6: Can't replace route, no match found [ 90.130353][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.186'. [ 90.391069][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 90.525880][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 90.864197][ T6618] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 91.032729][ T6627] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 91.057644][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.072129][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 91.129808][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.204'. [ 91.208728][ T6642] netlink: 'syz.0.205': attribute type 5 has an invalid length. [ 91.220011][ T6642] netlink: 140 bytes leftover after parsing attributes in process `syz.0.205'. [ 91.257602][ T6618] veth3: entered promiscuous mode [ 91.263289][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 91.282521][ T6618] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 91.525975][ T6660] netlink: 'syz.2.212': attribute type 14 has an invalid length. [ 91.956097][ T6683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 92.051082][ T6683] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 92.092072][ T6683] gretap1: entered promiscuous mode [ 92.103377][ T6683] gretap1: entered allmulticast mode [ 92.123790][ T6687] ieee802154 phy1 wpan1: encryption failed: -22 [ 93.162978][ T6739] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 93.283206][ T6743] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.292738][ T6743] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.301914][ T6743] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.311244][ T6743] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.704978][ T6764] veth1_virt_wifi: entered allmulticast mode [ 94.052672][ T5870] IPVS: starting estimator thread 0... [ 94.156218][ T6789] IPVS: using max 28 ests per chain, 67200 per kthread [ 94.357973][ T6798] __nla_validate_parse: 15 callbacks suppressed [ 94.357992][ T6798] netlink: 80 bytes leftover after parsing attributes in process `syz.2.255'. [ 94.425322][ T6798] netlink: 80 bytes leftover after parsing attributes in process `syz.2.255'. [ 94.507575][ T6803] tap0: tun_chr_ioctl cmd 1074025677 [ 94.513091][ T6803] tap0: linktype set to 65534 [ 95.516814][ T6857] gre1: entered promiscuous mode [ 95.575527][ T6857] gre1: entered allmulticast mode [ 96.497453][ T6908] xt_CT: No such helper "pptp" [ 97.668232][ T6973] netlink: 96 bytes leftover after parsing attributes in process `syz.2.297'. [ 97.690426][ T6973] netlink: 'syz.2.297': attribute type 8 has an invalid length. [ 98.005324][ T6985] netlink: 'syz.4.300': attribute type 39 has an invalid length. [ 98.153764][ T6989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.301'. [ 98.471808][ T7006] netlink: set zone limit has 8 unknown bytes [ 98.509346][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'. [ 98.606891][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.308'. [ 98.706494][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 98.987295][ T7025] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 99.067310][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.316'. [ 99.168680][ T7025] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.668362][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 100.703267][ T7038] sit0: entered promiscuous mode [ 100.726134][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 100.729871][ T7038] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 100.756351][ T7038] netlink: 1 bytes leftover after parsing attributes in process `syz.2.318'. [ 100.792468][ T7040] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 100.823262][ T7040] netlink: 'syz.1.319': attribute type 2 has an invalid length. [ 101.071132][ T7049] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 101.082222][ T7049] netlink: 'syz.0.322': attribute type 3 has an invalid length. [ 101.108371][ T7049] netlink: 216 bytes leftover after parsing attributes in process `syz.0.322'. [ 101.127884][ T7049] NCSI netlink: No device for ifindex 813332851 [ 101.489593][ T7079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.329'. [ 101.888936][ T7088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'. [ 102.219918][ T7090] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 102.253607][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 102.265709][ T7090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.336'. [ 102.315964][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.335'. [ 102.403136][ T7090] team0: Port device geneve0 added [ 102.557761][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 102.618198][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.748181][ T7112] bridge_slave_1 (unregistering): left allmulticast mode [ 102.777846][ T7112] bridge_slave_1 (unregistering): left promiscuous mode [ 102.797469][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.049954][ T7132] sctp: [Deprecated]: syz.1.346 (pid 7132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.049954][ T7132] Use struct sctp_sack_info instead [ 103.316061][ T7140] bridge_slave_0: left allmulticast mode [ 103.321766][ T7140] bridge_slave_0: left promiscuous mode [ 103.376891][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.499476][ T7153] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 103.510111][ T7140] bridge_slave_1: left allmulticast mode [ 103.575630][ T7140] bridge_slave_1: left promiscuous mode [ 103.581482][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.743852][ T7140] bond0: (slave bond_slave_0): Releasing backup interface [ 103.784419][ T7140] bond0: (slave bond_slave_1): Releasing backup interface [ 103.832843][ T7140] team0: Port device team_slave_0 removed [ 103.878707][ T7140] team0: Port device team_slave_1 removed [ 103.893488][ T7140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.912418][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.933585][ T7140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.948068][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.418010][ T7193] netlink: 'syz.3.361': attribute type 16 has an invalid length. [ 104.461062][ T7193] netlink: 'syz.3.361': attribute type 3 has an invalid length. [ 104.495202][ T7193] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 104.507928][ T7193] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 104.526646][ T7198] 0·: renamed from hsr_slave_1 (while UP) [ 104.561331][ T7198] 0·: entered allmulticast mode [ 104.586814][ T7198] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 104.956346][ T7222] netlink: 'syz.3.370': attribute type 5 has an invalid length. [ 105.247884][ T7237] xfrm1: entered allmulticast mode [ 105.300219][ T7245] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 105.774849][ T7273] __nla_validate_parse: 16 callbacks suppressed [ 105.774867][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 105.793148][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'. [ 105.828765][ T7277] pim6reg: entered allmulticast mode [ 105.834915][ T7276] lo: entered allmulticast mode [ 105.850198][ T7277] pim6reg: left allmulticast mode [ 105.857346][ T7277] lo: left allmulticast mode [ 105.929127][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 106.202449][ T7298] syz.0.390 uses old SIOCAX25GETINFO [ 106.407504][ T7303] team0 (unregistering): Port device team_slave_0 removed [ 106.433064][ T7303] team0 (unregistering): Port device team_slave_1 removed [ 106.592067][ T7313] Bluetooth: MGMT ver 1.23 [ 106.602403][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 106.736911][ T7318] netlink: 'syz.0.397': attribute type 33 has an invalid length. [ 106.744871][ T7318] netlink: 152 bytes leftover after parsing attributes in process `syz.0.397'. [ 106.789174][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 107.185213][ T7346] netlink: 'syz.2.402': attribute type 1 has an invalid length. [ 108.003001][ T7384] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 108.163596][ T7384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.221203][ T7384] veth7: entered promiscuous mode [ 108.231601][ T7384] bond2: (slave veth7): Enslaving as an active interface with a down link [ 108.242126][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 108.371608][ T7401] netlink: 'syz.0.418': attribute type 12 has an invalid length. [ 108.401256][ T7401] netlink: 132 bytes leftover after parsing attributes in process `syz.0.418'. [ 108.565218][ T7411] openvswitch: netlink: Multiple metadata blocks provided [ 108.987674][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 109.000500][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.424'. [ 109.009689][ T7428] netlink: 'syz.4.424': attribute type 15 has an invalid length. [ 109.882622][ T7435] bridge_slave_0: left allmulticast mode [ 109.888641][ T7435] bridge_slave_0: left promiscuous mode [ 109.894825][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.921379][ T7435] bridge_slave_1: left allmulticast mode [ 109.927807][ T7435] bridge_slave_1: left promiscuous mode [ 109.933716][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.953021][ T7435] bond0: (slave bond_slave_0): Releasing backup interface [ 109.989947][ T7435] bond0: (slave bond_slave_1): Releasing backup interface [ 110.047952][ T7435] team0: Port device team_slave_0 removed [ 110.051880][ T7439] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.070080][ T7435] team0: Port device team_slave_1 removed [ 110.078137][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.087470][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.099139][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.107080][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.124098][ T7435] batadv1: left allmulticast mode [ 110.130476][ T7435] batadv1: left promiscuous mode [ 110.137330][ T7435] bridge0: port 3(batadv1) entered disabled state [ 110.163584][ T7435] bond0: (slave bond1): Releasing backup interface [ 110.187229][ T7435] batman_adv: batadv0: Removing interface: gretap1 [ 110.205637][ T7435] bond2: (slave veth7): Releasing active interface [ 110.552720][ T7461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.635797][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 110.738649][ T7473] x_tables: duplicate underflow at hook 2 [ 110.760624][ T7461] ieee802154 phy1 wpan1: encryption failed: -22 [ 110.980568][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.368289][ T7508] __nla_validate_parse: 3 callbacks suppressed [ 111.368308][ T7508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 111.505189][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 111.545981][ T5912] IPVS: starting estimator thread 0... [ 111.556468][ T7519] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 111.581253][ T7519] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 111.644974][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 111.653423][ T7522] netlink: 56 bytes leftover after parsing attributes in process `syz.0.448'. [ 111.684406][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 111.695694][ T7517] IPVS: using max 31 ests per chain, 74400 per kthread [ 112.026383][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 112.676669][ T7610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.461'. [ 112.749253][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.757092][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.896772][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.909565][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.978308][ T7596] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.988075][ T7596] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.997528][ T7596] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.006927][ T7596] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.428448][ T7625] can: request_module (can-proto-5) failed. [ 113.551681][ T7635] netlink: 'syz.2.467': attribute type 32 has an invalid length. [ 114.054212][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 114.554928][ T7697] netlink: 52 bytes leftover after parsing attributes in process `syz.0.488'. [ 115.018715][ T7686] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.029499][ T7686] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.038536][ T7686] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.049713][ T7719] netlink: 'syz.1.493': attribute type 4 has an invalid length. [ 115.057725][ T7719] netlink: 17 bytes leftover after parsing attributes in process `syz.1.493'. [ 115.066278][ T7686] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.081185][ T7686] geneve1: left promiscuous mode [ 116.007052][ T7761] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 116.038988][ T7767] veth1_vlan: left promiscuous mode [ 116.284767][ T7784] SET target dimension over the limit! [ 116.297929][ T7785] sctp: [Deprecated]: syz.3.514 (pid 7785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.297929][ T7785] Use struct sctp_sack_info instead [ 116.391638][ T7789] __nla_validate_parse: 5 callbacks suppressed [ 116.391656][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 116.424415][ T7789] netlink: 'syz.2.516': attribute type 4 has an invalid length. [ 116.802242][ T7807] netlink: 'syz.1.521': attribute type 23 has an invalid length. [ 116.863030][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 116.902178][ T7809] netlink: 'syz.4.522': attribute type 8 has an invalid length. [ 117.081625][ T7822] netlink: 19 bytes leftover after parsing attributes in process `syz.1.525'. [ 117.435959][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 117.438851][ T7829] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 117.448745][ T7845] netlink: 'syz.4.533': attribute type 33 has an invalid length. [ 117.466541][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 117.676589][ T7834] bond0: (slave bridge0): Releasing backup interface [ 117.852891][ T7861] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 117.876779][ T7861] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 118.003489][ T7867] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581 [ 118.062943][ T7874] veth0: entered promiscuous mode [ 118.071885][ T7873] veth0: left promiscuous mode [ 118.496416][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 118.544431][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 118.581572][ T7896] x_tables: duplicate underflow at hook 1 [ 118.640476][ T7905] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 118.900436][ T7919] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 118.916930][ T7905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.961932][ T7905] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 119.034062][ T7907] vlan2: entered allmulticast mode [ 119.062373][ T7907] bond3: entered allmulticast mode [ 119.067168][ T7929] netlink: 14 bytes leftover after parsing attributes in process `syz.4.558'. [ 119.203361][ T7905] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 119.332057][ T7940] Bluetooth: MGMT ver 1.23 [ 119.439006][ T7929] bond0 (unregistering): Released all slaves [ 119.470275][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.477882][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.489599][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.530089][ T7935] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.638220][ T7935] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.725156][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.741645][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.771286][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.802601][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.815925][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 119.851082][ T7935] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.980673][ T7965] netlink: 7 bytes leftover after parsing attributes in process `syz.4.567'. [ 120.062116][ T7973] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 120.257005][ T7980] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 120.293288][ T3076] IPVS: starting estimator thread 0... [ 120.406361][ T7985] IPVS: using max 31 ests per chain, 74400 per kthread [ 120.621120][ T8008] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 120.717829][ T8016] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 121.401613][ T8053] netlink: 'syz.4.590': attribute type 27 has an invalid length. [ 121.453164][ T8053] openvswitch: netlink: IP tunnel dst address not specified [ 121.486443][ T8057] openvswitch: netlink: IP tunnel dst address not specified [ 121.487748][ T8053] netlink: 'syz.4.590': attribute type 27 has an invalid length. [ 121.790848][ T8077] __nla_validate_parse: 5 callbacks suppressed [ 121.790865][ T8077] netlink: 156 bytes leftover after parsing attributes in process `syz.2.594'. [ 121.952775][ T8085] netlink: 96 bytes leftover after parsing attributes in process `syz.3.598'. [ 122.009644][ T8088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.599'. [ 122.193158][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 122.320171][ T8104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 122.370898][ T8082] can: request_module (can-proto-0) failed. [ 122.392879][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'. [ 122.463248][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.605'. [ 122.581437][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 122.828979][ T8132] virt_wifi0 speed is unknown, defaulting to 1000 [ 123.633498][ T8167] openvswitch: netlink: Message has 3 unknown bytes. [ 123.664680][ T8167] openvswitch: netlink: Actions may not be safe on all matching packets [ 123.691174][ T8167] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 123.702895][ T8164] bridge0: entered allmulticast mode [ 123.714012][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.623'. [ 123.987824][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 124.068150][ T8187] sock: sock_timestamping_bind_phc: sock not bind to device [ 124.509972][ T8209] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 124.519349][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.585330][ T8209] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.592593][ T8209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.612139][ T8209] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.678118][ T8211] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.624269][ T8256] bridge_slave_0 (unregistering): left allmulticast mode [ 125.659644][ T8256] bridge_slave_0 (unregistering): left promiscuous mode [ 125.675070][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.056437][ T8287] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.169933][ T8275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.186094][ T8275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.201537][ T8275] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 126.219176][ T8275] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 126.228119][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.243231][ T8275] bond0 (unregistering): Released all slaves [ 126.294297][ T8273] syz.0.651 (8273) used greatest stack depth: 18168 bytes left [ 126.433917][ T8300] netlink: 'syz.1.656': attribute type 4 has an invalid length. [ 126.470803][ T8300] openvswitch: netlink: Message has 24 unknown bytes. [ 126.600100][ T8305] virt_wifi0 speed is unknown, defaulting to 1000 [ 126.807972][ T8316] __nla_validate_parse: 9 callbacks suppressed [ 126.807988][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 127.070946][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 127.218741][ T8338] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20003 [ 127.261484][ T8338] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20000 [ 127.404216][ T8351] x_tables: ip_tables: udp match: only valid for protocol 17 [ 127.551965][ T8354] geneve2: entered promiscuous mode [ 127.581012][ T8354] geneve2: entered allmulticast mode [ 127.628300][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 127.703706][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 127.732536][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 127.749522][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 127.760371][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 127.770740][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 127.815718][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 127.833333][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 128.067506][ T8390] netlink: 'syz.1.685': attribute type 23 has an invalid length. [ 128.072343][ T8387] virt_wifi0 speed is unknown, defaulting to 1000 [ 128.218021][ T8395] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 128.243401][ T8397] syz_tun: entered promiscuous mode [ 128.254126][ T8397] vlan2: entered promiscuous mode [ 129.252299][ T8457] nbd: must specify a size in bytes for the device [ 129.447638][ T8462] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.880842][ T8484] tipc: Started in network mode [ 129.909943][ T8484] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 129.932158][ T8484] tipc: Enabling of bearer rejected, failed to enable media [ 130.044840][ T8486] can: request_module (can-proto-0) failed. [ 130.427400][ T8520] lo speed is unknown, defaulting to 1000 [ 130.448458][ T8520] lo speed is unknown, defaulting to 1000 [ 130.465074][ T8520] lo speed is unknown, defaulting to 1000 [ 130.942496][ T5870] lo speed is unknown, defaulting to 1000 [ 130.949522][ T8520] infiniband syz0: set active [ 130.954521][ T8520] infiniband syz0: added lo [ 131.048460][ T8520] RDS/IB: syz0: added [ 131.053229][ T8520] smc: adding ib device syz0 with port count 1 [ 131.110711][ T8520] smc: ib device syz0 port 1 has pnetid [ 131.155103][ T10] lo speed is unknown, defaulting to 1000 [ 131.181097][ T8520] lo speed is unknown, defaulting to 1000 [ 131.686065][ T8577] macvlan2: entered promiscuous mode [ 131.757609][ T8580] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 131.878100][ T8520] lo speed is unknown, defaulting to 1000 [ 132.596374][ T8592] __nla_validate_parse: 69 callbacks suppressed [ 132.596391][ T8592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 132.827043][ T8520] lo speed is unknown, defaulting to 1000 [ 132.870849][ T8605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.749'. [ 132.903361][ T8605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.749'. [ 133.243295][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 133.564307][ T8520] lo speed is unknown, defaulting to 1000 [ 134.003478][ T8653] virt_wifi0 speed is unknown, defaulting to 1000 [ 134.119353][ T8656] netlink: 64 bytes leftover after parsing attributes in process `syz.4.765'. [ 134.145160][ T8656] netlink: 64 bytes leftover after parsing attributes in process `syz.4.765'. [ 134.300906][ T8520] lo speed is unknown, defaulting to 1000 [ 134.310742][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 134.421377][ T8676] netlink: 388 bytes leftover after parsing attributes in process `syz.4.771'. [ 134.572399][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 134.693191][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.771'. [ 134.768215][ T8689] IPVS: length: 232 != 24 [ 134.933744][ T8697] netlink: 'syz.0.777': attribute type 75 has an invalid length. [ 135.188081][ T8707] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 136.209346][ T8724] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 136.568503][ T8788] xt_CT: No such helper "pptp" [ 137.194131][ T8819] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 137.346572][ T8825] tipc: Cannot configure node identity twice [ 137.614712][ T8838] __nla_validate_parse: 17 callbacks suppressed [ 137.614730][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 137.643717][ T8840] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.821'. [ 138.022980][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 138.068952][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 138.083207][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 138.661873][ T8890] netlink: 108 bytes leftover after parsing attributes in process `syz.3.837'. [ 138.704693][ T8890] netlink: 108 bytes leftover after parsing attributes in process `syz.3.837'. [ 138.734229][ T8890] netlink: 84 bytes leftover after parsing attributes in process `syz.3.837'. [ 138.816517][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.839'. [ 139.055423][ T8907] dvmrp0: entered allmulticast mode [ 139.201499][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 139.292408][ T8921] netlink: 108 bytes leftover after parsing attributes in process `syz.3.848'. [ 139.353189][ T8927] netlink: 'syz.0.847': attribute type 12 has an invalid length. [ 139.371626][ T8915] virt_wifi0 speed is unknown, defaulting to 1000 [ 139.428359][ T8915] lo speed is unknown, defaulting to 1000 [ 139.794872][ T8939] pimreg: entered allmulticast mode [ 140.171131][ T8966] xt_policy: neither incoming nor outgoing policy selected [ 140.340958][ T8974] netlink: 'syz.2.861': attribute type 2 has an invalid length. [ 140.361192][ T8974] netlink: 'syz.2.861': attribute type 8 has an invalid length. [ 141.046102][ T8995] virt_wifi0 speed is unknown, defaulting to 1000 [ 141.090401][ T8995] lo speed is unknown, defaulting to 1000 [ 142.411604][ T9064] smc: net device bond0 applied user defined pnetid SYZ2 [ 142.468073][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.475886][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.666216][ T9074] virt_wifi0 speed is unknown, defaulting to 1000 [ 142.667193][ T9079] __nla_validate_parse: 8 callbacks suppressed [ 142.667207][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 142.691634][ T9074] lo speed is unknown, defaulting to 1000 [ 142.824101][ T9084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.894'. [ 142.882376][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 142.902178][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 142.921940][ T9089] netlink: 72 bytes leftover after parsing attributes in process `syz.0.896'. [ 142.938956][ T9089] syzkaller1: entered allmulticast mode [ 143.072304][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.4.900'. [ 143.241332][ T9103] pim6reg1: entered promiscuous mode [ 143.255593][ T9103] pim6reg1: entered allmulticast mode [ 143.701823][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.908'. [ 143.744878][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 143.878353][ T9136] batadv_slave_1: entered promiscuous mode [ 143.944410][ T9136] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.978463][ C1] Illegal XDP return value 16128 on prog (id 359) dev veth0, expect packet loss! [ 144.041206][ T5884] lo speed is unknown, defaulting to 1000 [ 144.059847][ T9136] batadv_slave_1: left promiscuous mode [ 144.158418][ T9145] xt_hashlimit: size too large, truncated to 1048576 [ 144.279173][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 144.662530][ T9164] openvswitch: netlink: Message has 4 unknown bytes. [ 144.743898][ T9164] openvswitch: netlink: Message has 4 unknown bytes. [ 144.758401][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.921'. [ 144.772606][ T9160] bond2: entered promiscuous mode [ 144.786111][ T9160] bond2: entered allmulticast mode [ 144.794757][ T9160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.947029][ T9185] xt_limit: Overflow, try lower: 2147483649/128 [ 144.953551][ T9185] xt_limit: Overflow, try lower: 2147483649/128 [ 144.994809][ T9185] xt_limit: Overflow, try lower: 2147483649/128 [ 145.020535][ T9185] xt_limit: Overflow, try lower: 2147483649/128 [ 145.291736][ T9207] xt_hashlimit: size too large, truncated to 1048576 [ 145.429286][ T9211] virt_wifi0 speed is unknown, defaulting to 1000 [ 145.504956][ T9211] lo speed is unknown, defaulting to 1000 [ 145.675022][ T9223] netlink: 'syz.2.936': attribute type 14 has an invalid length. [ 146.812354][ T9265] xt_hashlimit: size too large, truncated to 1048576 [ 147.194215][ T9277] virt_wifi0 speed is unknown, defaulting to 1000 [ 147.237682][ T9277] lo speed is unknown, defaulting to 1000 [ 147.644703][ T9303] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 147.761618][ T9314] xt_hashlimit: size too large, truncated to 1048576 [ 147.782277][ T9303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.491631][ T9329] bond4 (unregistering): Released all slaves [ 148.638275][ T9346] ÿ: renamed from veth0_virt_wifi (while UP) [ 148.859760][ T9358] xt_hashlimit: size too large, truncated to 1048576 [ 148.894291][ T9356] __nla_validate_parse: 5 callbacks suppressed [ 148.894307][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 148.938166][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'. [ 149.082123][ T9356] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.091042][ T9356] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.099884][ T9356] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.108803][ T9356] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.447935][ T9372] netlink: 'syz.0.984': attribute type 3 has an invalid length. [ 149.502147][ T9372] netlink: 48 bytes leftover after parsing attributes in process `syz.0.984'. [ 149.533154][ T9379] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 149.550799][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 149.596476][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.988'. [ 149.808227][ T9392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.990'. [ 149.846358][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 149.886597][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 149.916879][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 150.029013][ T9401] openvswitch: netlink: Message has 3 unknown bytes. [ 150.073121][ T9401] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.422845][ T9418] xt_hashlimit: size too large, truncated to 1048576 [ 150.428560][ T9420] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.751795][ T9431] virt_wifi0 speed is unknown, defaulting to 1000 [ 150.794993][ T9437] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1009'. [ 150.807980][ T9431] lo speed is unknown, defaulting to 1000 [ 150.861834][ T9437] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 151.595607][ T5842] Bluetooth: hci0: command tx timeout [ 151.910612][ T9472] xt_hashlimit: size too large, truncated to 1048576 [ 152.613049][ T9491] netlink: zone id is out of range [ 154.132554][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.168596][ T9492] lo speed is unknown, defaulting to 1000 [ 154.804504][ T9523] xt_hashlimit: size too large, truncated to 1048576 [ 155.579454][ T9543] __nla_validate_parse: 5 callbacks suppressed [ 155.579471][ T9543] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1040'. [ 155.770437][ T9552] bridge: RTM_NEWNEIGH with invalid ether address [ 156.168841][ T9560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.381117][ T9566] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 156.406235][ T9563] xt_hashlimit: size too large, truncated to 1048576 [ 156.420013][ T9564] virt_wifi0 speed is unknown, defaulting to 1000 [ 156.430631][ T9564] lo speed is unknown, defaulting to 1000 [ 156.740212][ T9566] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1050'. [ 157.217767][ T9575] .: renamed from bond0 (while UP) [ 157.808216][ T9607] lo: entered promiscuous mode [ 157.813039][ T9607] lo: entered allmulticast mode [ 157.841107][ T9609] xt_hashlimit: size too large, truncated to 1048576 [ 157.872283][ T9607] tunl0: entered promiscuous mode [ 157.889931][ T9607] tunl0: entered allmulticast mode [ 157.917260][ T9607] gre0: entered promiscuous mode [ 157.943923][ T9607] gre0: entered allmulticast mode [ 157.974978][ T9607] gretap0: entered promiscuous mode [ 158.034856][ T9607] gretap0: entered allmulticast mode [ 158.081839][ T9607] erspan0: entered promiscuous mode [ 158.110944][ T9607] erspan0: entered allmulticast mode [ 158.151203][ T9607] ip_vti0: entered promiscuous mode [ 158.196134][ T9607] ip_vti0: entered allmulticast mode [ 158.209366][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 158.242550][ T9607] ip6_vti0: entered promiscuous mode [ 158.263829][ T9607] ip6_vti0: entered allmulticast mode [ 158.270215][ T9621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 158.314448][ T9607] sit0: entered promiscuous mode [ 158.359595][ T9607] sit0: entered allmulticast mode [ 158.404853][ T9607] ip6tnl0: entered promiscuous mode [ 158.464683][ T9607] ip6tnl0: entered allmulticast mode [ 158.511372][ T9607] ip6gre0: entered promiscuous mode [ 158.547441][ T9607] ip6gre0: entered allmulticast mode [ 158.553516][ T9607] syz_tun: entered promiscuous mode [ 158.564329][ T9607] syz_tun: entered allmulticast mode [ 158.571422][ T9607] ip6gretap0: entered promiscuous mode [ 158.577152][ T9607] ip6gretap0: entered allmulticast mode [ 158.583496][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.590697][ T9607] bridge0: port 2(bridge_slave_1) entered listening state [ 158.598104][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.605262][ T9607] bridge0: port 1(bridge_slave_0) entered listening state [ 158.641696][ T9607] bridge0: entered promiscuous mode [ 158.655299][ T9607] bridge0: entered allmulticast mode [ 158.664161][ T9607] vcan0: entered promiscuous mode [ 158.669427][ T9607] vcan0: entered allmulticast mode [ 158.680888][ T9607] bond0: entered promiscuous mode [ 158.693346][ T9607] bond_slave_0: entered promiscuous mode [ 158.707500][ T9607] bond_slave_1: entered promiscuous mode [ 158.718387][ T9607] bond0: entered allmulticast mode [ 158.729106][ T9607] bond_slave_0: entered allmulticast mode [ 158.745026][ T9607] bond_slave_1: entered allmulticast mode [ 158.754605][ T9607] nlmon0: entered promiscuous mode [ 158.764520][ T9607] nlmon0: entered allmulticast mode [ 158.773021][ T9607] batadv0: entered promiscuous mode [ 158.781805][ T9607] batadv0: entered allmulticast mode [ 158.800593][ T9607] veth0: entered promiscuous mode [ 158.807958][ T9607] veth0: entered allmulticast mode [ 158.813942][ T9607] veth1: entered promiscuous mode [ 158.821458][ T9607] veth1: entered allmulticast mode [ 158.831214][ T9607] wg0: entered promiscuous mode [ 158.837220][ T9607] wg0: entered allmulticast mode [ 158.843063][ T9607] wg1: entered promiscuous mode [ 158.850685][ T9607] wg1: entered allmulticast mode [ 158.859001][ T9607] wg2: entered promiscuous mode [ 158.863970][ T9607] wg2: entered allmulticast mode [ 158.872144][ T9607] veth0_to_bridge: entered promiscuous mode [ 158.880759][ T9607] veth0_to_bridge: entered allmulticast mode [ 158.891130][ T9607] veth1_to_bridge: entered promiscuous mode [ 158.899683][ T9607] veth1_to_bridge: entered allmulticast mode [ 158.910173][ T9607] veth0_to_bond: entered promiscuous mode [ 158.916975][ T9607] veth0_to_bond: entered allmulticast mode [ 158.924842][ T9607] veth1_to_bond: entered promiscuous mode [ 158.931200][ T9607] veth1_to_bond: entered allmulticast mode [ 158.940739][ T9607] veth0_to_team: entered promiscuous mode [ 158.946965][ T9607] veth0_to_team: entered allmulticast mode [ 158.953798][ T9607] team_slave_0: entered promiscuous mode [ 158.960150][ T9607] team_slave_0: entered allmulticast mode [ 158.967549][ T9607] veth1_to_team: entered promiscuous mode [ 158.973387][ T9607] veth1_to_team: entered allmulticast mode [ 158.980770][ T9607] team_slave_1: entered promiscuous mode [ 158.986876][ T9607] team_slave_1: entered allmulticast mode [ 158.993661][ T9607] veth0_to_batadv: entered promiscuous mode [ 159.002198][ T9607] veth0_to_batadv: entered allmulticast mode [ 159.011272][ T9607] batadv_slave_0: entered promiscuous mode [ 159.019884][ T9607] batadv_slave_0: entered allmulticast mode [ 159.028932][ T9607] veth1_to_batadv: entered promiscuous mode [ 159.034921][ T9607] veth1_to_batadv: entered allmulticast mode [ 159.042533][ T9607] batadv_slave_1: entered promiscuous mode [ 159.048978][ T9607] batadv_slave_1: entered allmulticast mode [ 159.057623][ T9607] xfrm0: entered promiscuous mode [ 159.062754][ T9607] xfrm0: entered allmulticast mode [ 159.070709][ T9607] veth0_to_hsr: entered promiscuous mode [ 159.076802][ T9607] veth0_to_hsr: entered allmulticast mode [ 159.083414][ T9607] hsr_slave_0: entered allmulticast mode [ 159.090678][ T9607] veth1_to_hsr: entered promiscuous mode [ 159.097445][ T9607] veth1_to_hsr: entered allmulticast mode [ 159.104176][ T9607] hsr_slave_1: entered allmulticast mode [ 159.111272][ T9607] hsr0: entered promiscuous mode [ 159.116980][ T9607] hsr0: entered allmulticast mode [ 159.122803][ T9607] veth1_virt_wifi: entered promiscuous mode [ 159.131142][ T9607] veth0_virt_wifi: entered promiscuous mode [ 159.137773][ T9607] veth0_virt_wifi: entered allmulticast mode [ 159.145343][ T9607] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 159.153922][ T9607] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 159.164637][ T9607] veth1_vlan: entered allmulticast mode [ 159.172513][ T9607] veth0_vlan: entered allmulticast mode [ 159.179322][ T9607] vlan0: entered promiscuous mode [ 159.184706][ T9607] vlan0: entered allmulticast mode [ 159.193138][ T9607] vlan1: entered promiscuous mode [ 159.199861][ T9607] vlan1: entered allmulticast mode [ 159.206784][ T9607] macvlan0: entered promiscuous mode [ 159.212342][ T9607] macvlan0: entered allmulticast mode [ 159.221235][ T9607] macvlan1: entered promiscuous mode [ 159.229154][ T9607] macvlan1: entered allmulticast mode [ 159.238501][ T9607] ipvlan0: entered promiscuous mode [ 159.243825][ T9607] ipvlan0: entered allmulticast mode [ 159.255779][ T9607] ipvlan1: entered promiscuous mode [ 159.261144][ T9607] ipvlan1: entered allmulticast mode [ 159.271279][ T9607] geneve0: entered promiscuous mode [ 159.278024][ T9607] geneve0: entered allmulticast mode [ 159.284157][ T9607] geneve1: entered promiscuous mode [ 159.290206][ T9607] geneve1: entered allmulticast mode [ 159.297395][ T9607] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 159.304809][ T9607] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 159.315048][ T9607] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 159.322727][ T9607] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 159.333395][ T9607] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 159.341090][ T9607] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 159.350324][ T9607] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 159.358406][ T9607] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 159.367337][ T9607] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 159.374505][ T9607] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 159.383503][ T9607] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 159.392778][ T9607] gre1: entered promiscuous mode [ 159.398559][ T9607] gre1: entered allmulticast mode [ 159.407261][ T9607] bond1: entered promiscuous mode [ 159.412388][ T9607] bond1: entered allmulticast mode [ 159.418511][ T9607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.426886][ T9607] vxcan2: entered promiscuous mode [ 159.432146][ T9607] vxcan2: entered allmulticast mode [ 159.438878][ T9607] syztnl2: entered promiscuous mode [ 159.444217][ T9607] syztnl2: entered allmulticast mode [ 159.452396][ T9607] bond3: entered promiscuous mode [ 159.457966][ T9607] bond3: entered allmulticast mode [ 159.464490][ T9607] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.473641][ T9607] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.482428][ T9607] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.491268][ T9607] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.501639][ T9607] vxlan0: entered promiscuous mode [ 159.509554][ T9607] vxlan0: entered allmulticast mode [ 159.608914][ T5881] virt_wifi0 speed is unknown, defaulting to 1000 [ 159.652592][ T9618] virt_wifi0 speed is unknown, defaulting to 1000 [ 159.655127][ T1098] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 159.728976][ T9618] lo speed is unknown, defaulting to 1000 [ 159.756730][ T9634] FAULT_INJECTION: forcing a failure. [ 159.756730][ T9634] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.836198][ T9634] CPU: 0 UID: 0 PID: 9634 Comm: syz.4.1071 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 159.836221][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.836230][ T9634] Call Trace: [ 159.836237][ T9634] [ 159.836244][ T9634] dump_stack_lvl+0x189/0x250 [ 159.836276][ T9634] ? __lock_acquire+0xaac/0xd20 [ 159.836297][ T9634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.836316][ T9634] ? __pfx__printk+0x10/0x10 [ 159.836331][ T9634] ? __might_fault+0xb0/0x130 [ 159.836359][ T9634] should_fail_ex+0x414/0x560 [ 159.836379][ T9634] _copy_from_user+0x2d/0xb0 [ 159.836398][ T9634] ___sys_sendmsg+0x158/0x2a0 [ 159.836419][ T9634] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.836469][ T9634] ? __fget_files+0x2a/0x420 [ 159.836485][ T9634] ? __fget_files+0x3a0/0x420 [ 159.836512][ T9634] __x64_sys_sendmsg+0x19b/0x260 [ 159.836532][ T9634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.836565][ T9634] ? do_syscall_64+0xba/0x210 [ 159.836586][ T9634] do_syscall_64+0xf6/0x210 [ 159.836603][ T9634] ? clear_bhb_loop+0x45/0xa0 [ 159.836620][ T9634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.836634][ T9634] RIP: 0033:0x7fdd2438e969 [ 159.836653][ T9634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.836664][ T9634] RSP: 002b:00007fdd25192038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.836686][ T9634] RAX: ffffffffffffffda RBX: 00007fdd245b5fa0 RCX: 00007fdd2438e969 [ 159.836696][ T9634] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 159.836705][ T9634] RBP: 00007fdd25192090 R08: 0000000000000000 R09: 0000000000000000 [ 159.836713][ T9634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.836722][ T9634] R13: 0000000000000000 R14: 00007fdd245b5fa0 R15: 00007ffc6f9f4628 [ 159.836746][ T9634] [ 160.426268][ T9650] xt_hashlimit: size too large, truncated to 1048576 [ 160.463541][ T9651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1078'. [ 160.951823][ T9670] tap0: tun_chr_ioctl cmd 1074025672 [ 160.964766][ T9670] tap0: ignored: set checksum disabled [ 161.179131][ T9677] FAULT_INJECTION: forcing a failure. [ 161.179131][ T9677] name failslab, interval 1, probability 0, space 0, times 1 [ 161.198668][ T9677] CPU: 1 UID: 0 PID: 9677 Comm: syz.2.1086 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 161.198691][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.198700][ T9677] Call Trace: [ 161.198706][ T9677] [ 161.198714][ T9677] dump_stack_lvl+0x189/0x250 [ 161.198743][ T9677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.198763][ T9677] ? __pfx__printk+0x10/0x10 [ 161.198786][ T9677] ? __pfx___might_resched+0x10/0x10 [ 161.198806][ T9677] should_fail_ex+0x414/0x560 [ 161.198827][ T9677] should_failslab+0xa8/0x100 [ 161.198849][ T9677] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 161.198869][ T9677] ? __alloc_skb+0x112/0x2d0 [ 161.198892][ T9677] __alloc_skb+0x112/0x2d0 [ 161.198913][ T9677] netlink_sendmsg+0x5c6/0xb30 [ 161.198940][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.198961][ T9677] ? aa_sock_msg_perm+0x94/0x160 [ 161.198980][ T9677] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.198997][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.199014][ T9677] __sock_sendmsg+0x219/0x270 [ 161.199033][ T9677] ____sys_sendmsg+0x505/0x830 [ 161.199059][ T9677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.199087][ T9677] ? import_iovec+0x74/0xa0 [ 161.199111][ T9677] ___sys_sendmsg+0x21f/0x2a0 [ 161.199132][ T9677] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.199187][ T9677] ? __fget_files+0x2a/0x420 [ 161.199205][ T9677] ? __fget_files+0x3a0/0x420 [ 161.199234][ T9677] __x64_sys_sendmsg+0x19b/0x260 [ 161.199256][ T9677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.199292][ T9677] ? do_syscall_64+0xba/0x210 [ 161.199315][ T9677] do_syscall_64+0xf6/0x210 [ 161.199334][ T9677] ? clear_bhb_loop+0x45/0xa0 [ 161.199354][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.199369][ T9677] RIP: 0033:0x7f790458e969 [ 161.199384][ T9677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.199397][ T9677] RSP: 002b:00007f7905320038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.199415][ T9677] RAX: ffffffffffffffda RBX: 00007f79047b5fa0 RCX: 00007f790458e969 [ 161.199427][ T9677] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 161.199437][ T9677] RBP: 00007f7905320090 R08: 0000000000000000 R09: 0000000000000000 [ 161.199447][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.199457][ T9677] R13: 0000000000000000 R14: 00007f79047b5fa0 R15: 00007ffe3fb956c8 [ 161.199485][ T9677] [ 162.024154][ T9696] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 162.053565][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1091'. [ 162.207144][ T9707] xt_hashlimit: size too large, truncated to 1048576 [ 162.743172][ T9725] FAULT_INJECTION: forcing a failure. [ 162.743172][ T9725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.792795][ T9725] CPU: 0 UID: 0 PID: 9725 Comm: syz.2.1103 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 162.792824][ T9725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.792833][ T9725] Call Trace: [ 162.792840][ T9725] [ 162.792847][ T9725] dump_stack_lvl+0x189/0x250 [ 162.792876][ T9725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.792897][ T9725] ? __pfx__printk+0x10/0x10 [ 162.792926][ T9725] should_fail_ex+0x414/0x560 [ 162.792948][ T9725] _copy_to_user+0x31/0xb0 [ 162.792971][ T9725] simple_read_from_buffer+0xe1/0x170 [ 162.792995][ T9725] proc_fail_nth_read+0x1df/0x250 [ 162.793019][ T9725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.793043][ T9725] ? rw_verify_area+0x258/0x650 [ 162.793059][ T9725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.793081][ T9725] vfs_read+0x1fd/0x980 [ 162.793105][ T9725] ? __pfx___mutex_lock+0x10/0x10 [ 162.793124][ T9725] ? __pfx_vfs_read+0x10/0x10 [ 162.793144][ T9725] ? __fget_files+0x2a/0x420 [ 162.793167][ T9725] ? __fget_files+0x3a0/0x420 [ 162.793184][ T9725] ? __fget_files+0x2a/0x420 [ 162.793212][ T9725] ksys_read+0x145/0x250 [ 162.793232][ T9725] ? __pfx_ksys_read+0x10/0x10 [ 162.793254][ T9725] ? do_syscall_64+0xba/0x210 [ 162.793277][ T9725] do_syscall_64+0xf6/0x210 [ 162.793296][ T9725] ? clear_bhb_loop+0x45/0xa0 [ 162.793317][ T9725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.793332][ T9725] RIP: 0033:0x7f790458d37c [ 162.793346][ T9725] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.793359][ T9725] RSP: 002b:00007f7905320030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.793377][ T9725] RAX: ffffffffffffffda RBX: 00007f79047b5fa0 RCX: 00007f790458d37c [ 162.793389][ T9725] RDX: 000000000000000f RSI: 00007f79053200a0 RDI: 0000000000000004 [ 162.793399][ T9725] RBP: 00007f7905320090 R08: 0000000000000000 R09: 0000000000000000 [ 162.793409][ T9725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.793417][ T9725] R13: 0000000000000000 R14: 00007f79047b5fa0 R15: 00007ffe3fb956c8 [ 162.793442][ T9725] [ 163.089859][ T9734] set match dimension is over the limit! [ 163.126775][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 163.434455][ T9752] virt_wifi0 speed is unknown, defaulting to 1000 [ 163.484820][ T9754] openvswitch: netlink: Message has 8 unknown bytes. [ 163.549918][ T9752] lo speed is unknown, defaulting to 1000 [ 163.567691][ T9760] xt_hashlimit: size too large, truncated to 1048576 [ 163.595886][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 164.207603][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1117'. [ 164.224755][ T9785] FAULT_INJECTION: forcing a failure. [ 164.224755][ T9785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.309997][ T9785] CPU: 1 UID: 0 PID: 9785 Comm: syz.1.1118 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 164.310020][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.310029][ T9785] Call Trace: [ 164.310036][ T9785] [ 164.310043][ T9785] dump_stack_lvl+0x189/0x250 [ 164.310068][ T9785] ? __lock_acquire+0xaac/0xd20 [ 164.310091][ T9785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.310111][ T9785] ? __pfx__printk+0x10/0x10 [ 164.310127][ T9785] ? __might_fault+0xb0/0x130 [ 164.310157][ T9785] should_fail_ex+0x414/0x560 [ 164.310186][ T9785] _copy_from_iter+0x1db/0x15a0 [ 164.310212][ T9785] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 164.310229][ T9785] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 164.310249][ T9785] ? __pfx__copy_from_iter+0x10/0x10 [ 164.310269][ T9785] ? __build_skb_around+0x257/0x3e0 [ 164.310292][ T9785] ? netlink_sendmsg+0x642/0xb30 [ 164.310308][ T9785] ? skb_put+0x11b/0x210 [ 164.310329][ T9785] netlink_sendmsg+0x6b2/0xb30 [ 164.310356][ T9785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.310376][ T9785] ? aa_sock_msg_perm+0x94/0x160 [ 164.310395][ T9785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.310413][ T9785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.310430][ T9785] __sock_sendmsg+0x219/0x270 [ 164.310448][ T9785] ____sys_sendmsg+0x505/0x830 [ 164.310474][ T9785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.310502][ T9785] ? import_iovec+0x74/0xa0 [ 164.310525][ T9785] ___sys_sendmsg+0x21f/0x2a0 [ 164.310547][ T9785] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.310602][ T9785] ? __fget_files+0x2a/0x420 [ 164.310620][ T9785] ? __fget_files+0x3a0/0x420 [ 164.310649][ T9785] __x64_sys_sendmsg+0x19b/0x260 [ 164.310672][ T9785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.310708][ T9785] ? do_syscall_64+0xba/0x210 [ 164.310731][ T9785] do_syscall_64+0xf6/0x210 [ 164.310750][ T9785] ? clear_bhb_loop+0x45/0xa0 [ 164.310770][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.310785][ T9785] RIP: 0033:0x7f3ba778e969 [ 164.310799][ T9785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.310812][ T9785] RSP: 002b:00007f3ba852b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.310829][ T9785] RAX: ffffffffffffffda RBX: 00007f3ba79b5fa0 RCX: 00007f3ba778e969 [ 164.310841][ T9785] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 164.310851][ T9785] RBP: 00007f3ba852b090 R08: 0000000000000000 R09: 0000000000000000 [ 164.310861][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.310870][ T9785] R13: 0000000000000000 R14: 00007f3ba79b5fa0 R15: 00007ffd241f0b88 [ 164.310898][ T9785] [ 165.018667][ T9805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'. [ 165.221079][ T9812] xt_hashlimit: size too large, truncated to 1048576 [ 165.516966][ T9825] FAULT_INJECTION: forcing a failure. [ 165.516966][ T9825] name failslab, interval 1, probability 0, space 0, times 0 [ 165.632100][ T9825] CPU: 0 UID: 0 PID: 9825 Comm: syz.0.1132 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 165.632124][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.632134][ T9825] Call Trace: [ 165.632141][ T9825] [ 165.632148][ T9825] dump_stack_lvl+0x189/0x250 [ 165.632176][ T9825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.632197][ T9825] ? __pfx__printk+0x10/0x10 [ 165.632220][ T9825] ? ref_tracker_alloc+0x318/0x460 [ 165.632240][ T9825] should_fail_ex+0x414/0x560 [ 165.632261][ T9825] should_failslab+0xa8/0x100 [ 165.632283][ T9825] kmem_cache_alloc_noprof+0x73/0x3c0 [ 165.632301][ T9825] ? skb_clone+0x212/0x3a0 [ 165.632325][ T9825] skb_clone+0x212/0x3a0 [ 165.632347][ T9825] __netlink_deliver_tap+0x404/0x850 [ 165.632377][ T9825] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.632396][ T9825] netlink_deliver_tap+0x19c/0x1b0 [ 165.632412][ T9825] netlink_unicast+0x72f/0x8d0 [ 165.632436][ T9825] netlink_sendmsg+0x805/0xb30 [ 165.632461][ T9825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.632481][ T9825] ? aa_sock_msg_perm+0x94/0x160 [ 165.632500][ T9825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.632518][ T9825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.632535][ T9825] __sock_sendmsg+0x219/0x270 [ 165.632555][ T9825] ____sys_sendmsg+0x505/0x830 [ 165.632580][ T9825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.632609][ T9825] ? import_iovec+0x74/0xa0 [ 165.632633][ T9825] ___sys_sendmsg+0x21f/0x2a0 [ 165.632654][ T9825] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.632711][ T9825] ? __fget_files+0x2a/0x420 [ 165.632728][ T9825] ? __fget_files+0x3a0/0x420 [ 165.632758][ T9825] __x64_sys_sendmsg+0x19b/0x260 [ 165.632780][ T9825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.632816][ T9825] ? do_syscall_64+0xba/0x210 [ 165.632839][ T9825] do_syscall_64+0xf6/0x210 [ 165.632859][ T9825] ? clear_bhb_loop+0x45/0xa0 [ 165.632879][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.632894][ T9825] RIP: 0033:0x7fa79558e969 [ 165.632908][ T9825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.632920][ T9825] RSP: 002b:00007fa796326038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.632937][ T9825] RAX: ffffffffffffffda RBX: 00007fa7957b5fa0 RCX: 00007fa79558e969 [ 165.632949][ T9825] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 165.632959][ T9825] RBP: 00007fa796326090 R08: 0000000000000000 R09: 0000000000000000 [ 165.632969][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.632978][ T9825] R13: 0000000000000000 R14: 00007fa7957b5fa0 R15: 00007ffe036d75d8 [ 165.633006][ T9825] [ 166.095905][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1134'. [ 166.293304][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1136'. [ 166.330861][ T9840] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 166.456663][ T9844] syzkaller1: entered promiscuous mode [ 166.491071][ T9844] syzkaller1: entered allmulticast mode [ 166.777524][ T9864] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 166.836412][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 166.893840][ T9866] xt_hashlimit: size too large, truncated to 1048576 [ 166.927902][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 167.107555][ T9868] virt_wifi0 speed is unknown, defaulting to 1000 [ 167.173982][ T9878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 167.184979][ T9868] lo speed is unknown, defaulting to 1000 [ 167.216445][ T9878] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1148'. [ 167.689026][ T9888] x_tables: unsorted entry at hook 1 [ 167.738249][ T9890] FAULT_INJECTION: forcing a failure. [ 167.738249][ T9890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.784757][ T9890] CPU: 1 UID: 0 PID: 9890 Comm: syz.3.1155 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 167.784783][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.784793][ T9890] Call Trace: [ 167.784799][ T9890] [ 167.784807][ T9890] dump_stack_lvl+0x189/0x250 [ 167.784836][ T9890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.784857][ T9890] ? __pfx__printk+0x10/0x10 [ 167.784887][ T9890] should_fail_ex+0x414/0x560 [ 167.784909][ T9890] _copy_to_user+0x31/0xb0 [ 167.784931][ T9890] simple_read_from_buffer+0xe1/0x170 [ 167.784956][ T9890] proc_fail_nth_read+0x1df/0x250 [ 167.784980][ T9890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.785004][ T9890] ? rw_verify_area+0x258/0x650 [ 167.785020][ T9890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.785048][ T9890] vfs_read+0x1fd/0x980 [ 167.785071][ T9890] ? __pfx___mutex_lock+0x10/0x10 [ 167.785091][ T9890] ? __pfx_vfs_read+0x10/0x10 [ 167.785110][ T9890] ? __fget_files+0x2a/0x420 [ 167.785133][ T9890] ? __fget_files+0x3a0/0x420 [ 167.785151][ T9890] ? __fget_files+0x2a/0x420 [ 167.785178][ T9890] ksys_read+0x145/0x250 [ 167.785193][ T9890] ? rcu_is_watching+0x15/0xb0 [ 167.785215][ T9890] ? __pfx_ksys_read+0x10/0x10 [ 167.785232][ T9890] ? do_syscall_64+0xba/0x210 [ 167.785254][ T9890] do_syscall_64+0xf6/0x210 [ 167.785271][ T9890] ? clear_bhb_loop+0x45/0xa0 [ 167.785292][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.785307][ T9890] RIP: 0033:0x7f3070b8d37c [ 167.785322][ T9890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.785336][ T9890] RSP: 002b:00007f3071abb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.785357][ T9890] RAX: ffffffffffffffda RBX: 00007f3070db5fa0 RCX: 00007f3070b8d37c [ 167.785367][ T9890] RDX: 000000000000000f RSI: 00007f3071abb0a0 RDI: 0000000000000005 [ 167.785377][ T9890] RBP: 00007f3071abb090 R08: 0000000000000000 R09: 0000000000000000 [ 167.785387][ T9890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.785396][ T9890] R13: 0000000000000000 R14: 00007f3070db5fa0 R15: 00007fff5f7a7068 [ 167.785425][ T9890] [ 168.703834][ T9906] virt_wifi0 speed is unknown, defaulting to 1000 [ 168.743472][ T9906] lo speed is unknown, defaulting to 1000 [ 168.784391][ T9913] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004 [ 168.919176][ T9915] xt_hashlimit: size too large, truncated to 1048576 [ 169.318728][ T9919] nbd: must specify a size in bytes for the device [ 169.393774][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1167'. [ 169.440895][ T9928] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1167'. [ 169.459377][ T9928] netlink: 'syz.1.1167': attribute type 6 has an invalid length. [ 169.475969][ T9928] netlink: 'syz.1.1167': attribute type 5 has an invalid length. [ 169.484316][ T9928] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1167'. [ 169.599441][ T9933] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1168'. [ 169.683239][ T9937] netlink: 'syz.2.1170': attribute type 13 has an invalid length. [ 169.761365][ T9937] macvtap0: entered promiscuous mode [ 169.776011][ T9939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1172'. [ 169.787752][ T9937] macvtap0: refused to change device tx_queue_len [ 169.966635][ T9957] netlink: 'syz.2.1175': attribute type 21 has an invalid length. [ 169.984920][ T9957] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1175'. [ 170.038486][ T9952] veth0: entered promiscuous mode [ 170.044331][ T9957] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1175'. [ 170.063320][ T9940] veth0: left promiscuous mode [ 170.149227][ T9965] xt_hashlimit: size too large, truncated to 1048576 [ 170.366465][ T9966] virt_wifi0 speed is unknown, defaulting to 1000 [ 170.382948][ T9966] lo speed is unknown, defaulting to 1000 [ 170.920978][ T9989] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1185'. [ 171.195792][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 171.302410][T10010] xt_hashlimit: size too large, truncated to 1048576 [ 172.082697][T10049] xt_hashlimit: size too large, truncated to 1048576 [ 172.324670][T10060] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 172.579635][T10069] __nla_validate_parse: 5 callbacks suppressed [ 172.579653][T10069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1211'. [ 172.679553][T10069] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 172.745850][T10077] x_tables: duplicate underflow at hook 2 [ 172.870708][T10084] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.897423][T10087] netlink: 'syz.1.1217': attribute type 12 has an invalid length. [ 173.118392][T10093] virt_wifi0 speed is unknown, defaulting to 1000 [ 173.137694][T10093] lo speed is unknown, defaulting to 1000 [ 173.232453][T10110] xt_TCPMSS: Only works on TCP SYN packets [ 173.266447][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 173.275673][T10104] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1221'. [ 173.450195][T10121] xt_hashlimit: size too large, truncated to 1048576 [ 173.756275][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 173.764402][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 173.912931][T10143] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.151765][T10147] sctp: [Deprecated]: syz.2.1233 (pid 10147) Use of int in max_burst socket option deprecated. [ 174.151765][T10147] Use struct sctp_assoc_value instead [ 174.618714][T10158] syzkaller0: entered promiscuous mode [ 174.624448][T10158] syzkaller0: entered allmulticast mode [ 174.704393][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 174.816943][ T5842] block nbd0: Receive control failed (result -32) [ 174.992036][T10187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'. [ 176.192197][T10178] virt_wifi0 speed is unknown, defaulting to 1000 [ 176.247665][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 176.279729][T10178] lo speed is unknown, defaulting to 1000 [ 176.289693][T10205] xt_hashlimit: size too large, truncated to 1048576 [ 176.553957][T10214] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 176.599532][T10215] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 176.646094][T10214] Cannot find del_set index 5 as target [ 176.787405][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'. [ 176.948114][T10227] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1258'. [ 177.083822][T10235] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1262'. [ 177.098869][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1261'. [ 177.333506][T10247] xt_hashlimit: size too large, truncated to 1048576 [ 178.249197][T10269] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 178.303609][T10270] __nla_validate_parse: 2 callbacks suppressed [ 178.303623][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 178.467430][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 178.695773][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.716133][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.724692][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.733290][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.741946][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.864193][T10286] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.935693][T10295] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 179.050362][T10295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.078637][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.086131][T10297] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 179.110447][T10297] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 179.223141][T10300] veth11: entered promiscuous mode [ 179.239062][T10300] bond0: (slave veth11): Enslaving as an active interface with a down link [ 179.252645][T10295] erspan0: left promiscuous mode [ 179.259320][T10295] erspan0: entered allmulticast mode [ 179.273727][T10295] bond0: (slave erspan0): making interface the new active one [ 179.282814][T10295] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 179.407058][T10317] xt_hashlimit: size too large, truncated to 1048576 [ 180.748988][T10289] virt_wifi0 speed is unknown, defaulting to 1000 [ 180.795690][ T5842] Bluetooth: hci4: command tx timeout [ 180.803709][T10289] lo speed is unknown, defaulting to 1000 [ 181.219499][T10354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1292'. [ 181.271801][T10355] netlink: 'syz.1.1292': attribute type 2 has an invalid length. [ 181.280449][T10355] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1292'. [ 181.531608][T10344] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.590425][T10344] lo speed is unknown, defaulting to 1000 [ 181.669692][T10363] xt_hashlimit: size too large, truncated to 1048576 [ 182.066429][T10374] netlink: 'syz.0.1296': attribute type 1 has an invalid length. [ 182.690499][T10391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1302'. [ 182.769694][T10289] chnl_net:caif_netlink_parms(): no params data found [ 182.815917][T10396] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 182.825675][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 182.877881][ T5842] Bluetooth: hci4: command tx timeout [ 182.928833][ T7579] hsr_slave_0: left promiscuous mode [ 182.934941][ T7579] hsr_slave_1: left promiscuous mode [ 183.742515][T10407] xt_hashlimit: size too large, truncated to 1048576 [ 184.223003][T10289] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.266145][T10289] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.273751][T10289] bridge_slave_0: entered allmulticast mode [ 184.293052][T10289] bridge_slave_0: entered promiscuous mode [ 184.311581][T10289] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.320670][T10289] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.346826][T10289] bridge_slave_1: entered allmulticast mode [ 184.359976][T10289] bridge_slave_1: entered promiscuous mode [ 184.461459][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 184.483295][T10289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.533827][T10289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.624561][T10289] team0: Port device team_slave_0 added [ 184.650803][T10289] team0: Port device team_slave_1 added [ 184.680231][ T7579] IPVS: stop unused estimator thread 0... [ 184.835228][T10289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.860611][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.893159][T10455] xt_hashlimit: size too large, truncated to 1048576 [ 184.912724][T10289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.930620][T10456] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1323'. [ 184.940237][T10289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.947541][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.975912][ T5842] Bluetooth: hci4: command tx timeout [ 184.982637][T10289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.983561][T10459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.215322][T10464] netlink: 'syz.2.1324': attribute type 9 has an invalid length. [ 185.261918][T10289] hsr_slave_0: entered promiscuous mode [ 185.276511][T10289] hsr_slave_1: entered promiscuous mode [ 185.290845][T10464] netlink: 'syz.2.1324': attribute type 6 has an invalid length. [ 185.308522][T10289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.323440][T10289] Cannot create hsr debugfs directory [ 185.339426][T10469] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 185.365247][T10469] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 185.484224][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1329'. [ 185.509732][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1329'. [ 185.632835][T10488] netlink: 'syz.0.1332': attribute type 39 has an invalid length. [ 185.762697][T10498] xt_policy: too many policy elements [ 185.908443][T10503] xt_hashlimit: size too large, truncated to 1048576 [ 185.943216][T10500] virt_wifi0 speed is unknown, defaulting to 1000 [ 185.963277][T10500] lo speed is unknown, defaulting to 1000 [ 186.536407][T10513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'. [ 186.555817][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 186.985028][T10535] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.038335][ T5842] Bluetooth: hci4: command tx timeout [ 187.284216][T10537] tipc: Failed to remove unknown binding: 66,1,1/0:1585205585/1585205587 [ 187.427670][T10550] virt_wifi0 speed is unknown, defaulting to 1000 [ 187.434258][T10289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.461580][T10289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.480952][T10550] lo speed is unknown, defaulting to 1000 [ 187.487482][T10289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.538011][T10289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.544795][T10556] xt_hashlimit: size too large, truncated to 1048576 [ 187.967210][T10563] netlink: 'syz.0.1356': attribute type 9 has an invalid length. [ 188.002944][T10566] veth1_to_team: entered promiscuous mode [ 188.038066][T10569] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1358'. [ 188.096050][T10565] veth1_to_team (unregistering): left promiscuous mode [ 188.270912][T10575] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1360'. [ 188.290522][T10289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.400962][T10578] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1361'. [ 188.427864][T10582] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 188.433202][T10289] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.441080][ T3076] hid (null): unknown global tag 0xe [ 188.450979][ T3076] hid (null): unknown global tag 0xd [ 188.460390][T10582] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1363'. [ 188.472278][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.479467][ T7578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.573513][ T3076] hid-generic 0005:0007:0009.0002: unknown main item tag 0x0 [ 188.602750][ T3076] hid-generic 0005:0007:0009.0002: unknown main item tag 0x5 [ 188.634695][ T3076] hid-generic 0005:0007:0009.0002: unexpected long global item [ 188.657579][ T3076] hid-generic 0005:0007:0009.0002: probe with driver hid-generic failed with error -22 [ 188.678109][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.685323][ T7565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.980780][T10602] xt_hashlimit: size too large, truncated to 1048576 [ 189.116930][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.124190][ C0] bridge0: topology change detected, propagating [ 189.131822][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.139084][ C0] bridge0: topology change detected, propagating [ 189.329039][T10621] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 189.589956][T10289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.772815][T10642] xt_l2tp: invalid flags combination: 4 [ 189.978178][T10649] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 190.009185][T10649] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 190.123473][T10667] virt_wifi0 speed is unknown, defaulting to 1000 [ 190.141883][T10667] lo speed is unknown, defaulting to 1000 [ 190.212524][T10289] veth0_vlan: entered promiscuous mode [ 190.212874][T10670] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1384'. [ 190.249359][T10289] veth1_vlan: entered promiscuous mode [ 190.295701][T10670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.340084][T10289] veth0_macvtap: entered promiscuous mode [ 190.508068][T10677] xt_hashlimit: size too large, truncated to 1048576 [ 190.529752][T10289] veth1_macvtap: entered promiscuous mode [ 190.787059][T10289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.824330][T10289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.868987][T10289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.920166][T10289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.965534][T10289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.010107][T10289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.183062][T10694] netlink: 'syz.1.1390': attribute type 1 has an invalid length. [ 191.273627][T10694] 8021q: adding VLAN 0 to HW filter on device bond16 [ 191.345254][T10702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1393'. [ 191.430742][ T7579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.473046][ T7579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.847754][ T30] audit: type=1800 audit(1746924058.848:2): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1392" name="cgroup.controllers" dev="tmpfs" ino=1220 res=0 errno=0 [ 191.923600][ T7584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.952281][ T7584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.071424][T10719] bond2: entered promiscuous mode [ 192.077003][T10719] bond2: entered allmulticast mode [ 192.082582][T10719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.153011][T10727] virt_wifi0 speed is unknown, defaulting to 1000 [ 192.162548][T10727] lo speed is unknown, defaulting to 1000 [ 192.226115][T10732] xt_hashlimit: size too large, truncated to 1048576 [ 192.478890][T10733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.771230][T10733] bond1 (unregistering): Released all slaves [ 193.067730][ T7579] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.370918][ T7579] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.459859][ T7579] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.577740][ T7579] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.730899][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.745532][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.753792][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.765104][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.786729][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.901577][T10773] netlink: 'syz.3.1411': attribute type 11 has an invalid length. [ 193.910859][T10773] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 193.923599][T10773] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 193.987664][T10763] virt_wifi0 speed is unknown, defaulting to 1000 [ 194.028935][T10763] lo speed is unknown, defaulting to 1000 [ 194.061241][ T7579] bridge_slave_1: left allmulticast mode [ 194.086637][ T7579] bridge_slave_1: left promiscuous mode [ 194.093788][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.156983][ T7579] bridge_slave_0: left allmulticast mode [ 194.162940][ T7579] bridge_slave_0: left promiscuous mode [ 194.207750][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.260507][T10790] xt_hashlimit: size too large, truncated to 1048576 [ 194.319690][T10789] xt_hashlimit: size too large, truncated to 1048576 [ 194.940779][ T7579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.951863][ T7579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.963296][ T7579] bond0 (unregistering): Released all slaves [ 194.979019][T10798] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1417'. [ 195.007694][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 195.096836][T10796] virt_wifi0 speed is unknown, defaulting to 1000 [ 195.194504][T10796] lo speed is unknown, defaulting to 1000 [ 195.626967][T10763] chnl_net:caif_netlink_parms(): no params data found [ 195.673588][T10834] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1426'. [ 195.841505][ T5138] Bluetooth: hci4: command tx timeout [ 196.003099][T10844] xt_hashlimit: size too large, truncated to 1048576 [ 196.068718][T10763] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.105036][T10763] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.153572][T10763] bridge_slave_0: entered allmulticast mode [ 196.207288][T10763] bridge_slave_0: entered promiscuous mode [ 196.317179][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 196.324155][ T5844] Bluetooth: hci2: command 0x0401 tx timeout [ 196.324168][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 196.353236][ T7579] hsr_slave_0: left promiscuous mode [ 196.376759][ T7579] hsr_slave_1: left promiscuous mode [ 196.391666][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.404737][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.418496][ T7579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.426800][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.472322][ T7579] veth1_macvtap: left promiscuous mode [ 196.496688][ T7579] veth0_macvtap: left promiscuous mode [ 196.502520][ T7579] veth1_vlan: left promiscuous mode [ 196.508198][ T7579] veth0_vlan: left promiscuous mode [ 196.889770][ T7579] team0 (unregistering): Port device team_slave_1 removed [ 196.930353][ T7579] team0 (unregistering): Port device team_slave_0 removed [ 197.293758][T10763] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.301891][T10763] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.309680][T10763] bridge_slave_1: entered allmulticast mode [ 197.318173][T10763] bridge_slave_1: entered promiscuous mode [ 197.373442][T10763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.458873][T10763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.536233][T10862] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1435'. [ 197.791953][T10763] team0: Port device team_slave_0 added [ 197.844867][T10763] team0: Port device team_slave_1 added [ 197.866121][T10874] FAULT_INJECTION: forcing a failure. [ 197.866121][T10874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.913410][T10874] CPU: 0 UID: 0 PID: 10874 Comm: syz.1.1438 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 197.913436][T10874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.913446][T10874] Call Trace: [ 197.913453][T10874] [ 197.913461][T10874] dump_stack_lvl+0x189/0x250 [ 197.913486][T10874] ? __lock_acquire+0xaac/0xd20 [ 197.913508][T10874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.913529][T10874] ? __pfx__printk+0x10/0x10 [ 197.913545][T10874] ? __might_fault+0xb0/0x130 [ 197.913576][T10874] should_fail_ex+0x414/0x560 [ 197.913597][T10874] _copy_from_user+0x2d/0xb0 [ 197.913618][T10874] ___sys_sendmsg+0x158/0x2a0 [ 197.913642][T10874] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.913695][T10874] ? __fget_files+0x2a/0x420 [ 197.913713][T10874] ? __fget_files+0x3a0/0x420 [ 197.913742][T10874] __sys_sendmmsg+0x227/0x430 [ 197.913767][T10874] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.913794][T10874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.913831][T10874] ? ksys_write+0x1f0/0x250 [ 197.913847][T10874] ? rcu_is_watching+0x15/0xb0 [ 197.913877][T10874] __x64_sys_sendmmsg+0xa0/0xc0 [ 197.913899][T10874] do_syscall_64+0xf6/0x210 [ 197.913925][T10874] ? clear_bhb_loop+0x45/0xa0 [ 197.913945][T10874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.913961][T10874] RIP: 0033:0x7f3ba778e969 [ 197.913976][T10874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.913990][T10874] RSP: 002b:00007f3ba852b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.914008][T10874] RAX: ffffffffffffffda RBX: 00007f3ba79b5fa0 RCX: 00007f3ba778e969 [ 197.914020][T10874] RDX: 0000000000000044 RSI: 0000200000002000 RDI: 0000000000000003 [ 197.914031][T10874] RBP: 00007f3ba852b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.914041][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.914051][T10874] R13: 0000000000000000 R14: 00007f3ba79b5fa0 R15: 00007ffd241f0b88 [ 197.914078][T10874] [ 198.116271][ T5835] Bluetooth: hci4: command tx timeout [ 198.143147][T10763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.166515][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.224847][T10881] xt_hashlimit: size too large, truncated to 1048576 [ 198.243646][T10763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.254821][T10877] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1440'. [ 198.401384][T10763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.416721][T10763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.485430][T10763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.621959][T10896] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 198.632066][T10896] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1445'. [ 198.654848][T10763] hsr_slave_0: entered promiscuous mode [ 198.689582][T10763] hsr_slave_1: entered promiscuous mode [ 198.697886][T10763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.707504][T10763] Cannot create hsr debugfs directory [ 198.877836][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1449'. [ 199.079403][T10917] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1452'. [ 199.250598][T10932] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1458'. [ 199.318967][T10933] xt_hashlimit: size too large, truncated to 1048576 [ 199.459960][T10944] netlink: 'syz.3.1461': attribute type 9 has an invalid length. [ 199.720337][T10942] virt_wifi0 speed is unknown, defaulting to 1000 [ 199.731936][T10942] lo speed is unknown, defaulting to 1000 [ 200.039598][T10962] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 200.156214][ T5835] Bluetooth: hci4: command tx timeout [ 200.224821][T10966] FAULT_INJECTION: forcing a failure. [ 200.224821][T10966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.258196][T10966] CPU: 1 UID: 0 PID: 10966 Comm: syz.3.1468 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 200.258218][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.258226][T10966] Call Trace: [ 200.258232][T10966] [ 200.258238][T10966] dump_stack_lvl+0x189/0x250 [ 200.258258][T10966] ? __lock_acquire+0xaac/0xd20 [ 200.258277][T10966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.258293][T10966] ? __pfx__printk+0x10/0x10 [ 200.258307][T10966] ? __might_fault+0xb0/0x130 [ 200.258331][T10966] should_fail_ex+0x414/0x560 [ 200.258349][T10966] _copy_from_iter+0x1db/0x15a0 [ 200.258365][T10966] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 200.258384][T10966] ? __sk_mem_raise_allocated+0x2df/0x1300 [ 200.258407][T10966] ? __pfx__copy_from_iter+0x10/0x10 [ 200.258425][T10966] ? get_page+0xdc/0x220 [ 200.258445][T10966] sk_msg_memcopy_from_iter+0x2ea/0x660 [ 200.258467][T10966] tcp_bpf_sendmsg+0x5ec/0x1a40 [ 200.258502][T10966] ? process_measurement+0x3d8/0x1a40 [ 200.258529][T10966] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 200.258612][T10966] ? __pfx_aa_sk_perm+0x10/0x10 [ 200.258623][T10966] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 200.258640][T10966] ? sock_rps_record_flow+0x19/0x400 [ 200.258660][T10966] ? inet_send_prepare+0x5c/0x270 [ 200.258679][T10966] ? inet6_sendmsg+0x101/0x120 [ 200.258699][T10966] __sock_sendmsg+0xe5/0x270 [ 200.258724][T10966] ____sys_sendmsg+0x52d/0x830 [ 200.258746][T10966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.258775][T10966] ? import_iovec+0x74/0xa0 [ 200.258796][T10966] ___sys_sendmsg+0x21f/0x2a0 [ 200.258817][T10966] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.258868][T10966] ? __fget_files+0x2a/0x420 [ 200.258886][T10966] ? __fget_files+0x3a0/0x420 [ 200.258915][T10966] __sys_sendmmsg+0x227/0x430 [ 200.258941][T10966] ? __pfx___sys_sendmmsg+0x10/0x10 [ 200.258967][T10966] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 200.259004][T10966] ? ksys_write+0x1f0/0x250 [ 200.259018][T10966] ? rcu_is_watching+0x15/0xb0 [ 200.259046][T10966] __x64_sys_sendmmsg+0xa0/0xc0 [ 200.259066][T10966] do_syscall_64+0xf6/0x210 [ 200.259084][T10966] ? clear_bhb_loop+0x45/0xa0 [ 200.259102][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.259115][T10966] RIP: 0033:0x7f3070b8e969 [ 200.259130][T10966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.259143][T10966] RSP: 002b:00007f3071abb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 200.259160][T10966] RAX: ffffffffffffffda RBX: 00007f3070db5fa0 RCX: 00007f3070b8e969 [ 200.259170][T10966] RDX: 0000000000000044 RSI: 0000200000002000 RDI: 0000000000000003 [ 200.259181][T10966] RBP: 00007f3071abb090 R08: 0000000000000000 R09: 0000000000000000 [ 200.259190][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.259199][T10966] R13: 0000000000000000 R14: 00007f3070db5fa0 R15: 00007fff5f7a7068 [ 200.259224][T10966] [ 200.659971][T10763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.712884][T10763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.728279][T10973] xt_hashlimit: size too large, truncated to 1048576 [ 200.743647][T10763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.774793][T10763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.264555][T10763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.333408][T10763] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.471502][T11005] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1476'. [ 201.509563][T11005] unsupported nlmsg_type 40 [ 201.554798][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.562110][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.697812][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.705006][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.796739][ C0] ------------[ cut here ]------------ [ 201.802444][ C0] WARNING: CPU: 0 PID: 10942 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 201.812077][ C0] Modules linked in: [ 201.816190][ C0] CPU: 0 UID: 0 PID: 10942 Comm: syz.2.1460 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 201.828326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.838423][ C0] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 201.844265][ C0] Code: 0f 0b 90 e9 62 fe ff ff e8 0a 00 e0 f7 90 0f 0b 90 e9 95 fe ff ff e8 fc ff df f7 90 0f 0b 90 e9 bb fe ff ff e8 ee ff df f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 201.863918][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 201.870039][ C0] RAX: ffffffff89dfd062 RBX: dffffc0000000000 RCX: ffff888025210000 [ 201.878066][ C0] RDX: 0000000000000100 RSI: 0000000000000fec RDI: 0000000000000000 [ 201.886084][ C0] RBP: 0000000000000fec R08: ffff88803267461f R09: 1ffff110064ce8c3 [ 201.894080][ C0] R10: dffffc0000000000 R11: ffffed10064ce8c4 R12: ffff888032674380 [ 201.902102][ C0] R13: dffffc0000000000 R14: ffff888032674604 R15: 1ffff110064ce872 [ 201.910137][ C0] FS: 00007f79053206c0(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 201.919120][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.925760][ C0] CR2: 00007f3ba784db21 CR3: 000000003f39c000 CR4: 00000000003526f0 [ 201.933759][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.941788][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.949797][ C0] Call Trace: [ 201.953081][ C0] [ 201.955959][ C0] ? inet6_cleanup_sock+0x197/0x230 [ 201.961177][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 201.966852][ C0] __sk_destruct+0x86/0x660 [ 201.971367][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 201.976513][ C0] ? rcu_core+0xc34/0x1710 [ 201.980943][ C0] rcu_core+0xca5/0x1710 [ 201.985197][ C0] ? __pfx_rcu_core+0x10/0x10 [ 201.989927][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 201.995608][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 202.001881][ C0] handle_softirqs+0x283/0x870 [ 202.006708][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 202.011493][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 202.016842][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 202.022064][ C0] __irq_exit_rcu+0xca/0x1f0 [ 202.026724][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 202.031968][ C0] irq_exit_rcu+0x9/0x30 [ 202.036315][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 202.041975][ C0] [ 202.044920][ C0] [ 202.047883][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.053889][ C0] RIP: 0010:__kasan_check_read+0xa/0x20 [ 202.059507][ C0] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 4f e6 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 202.079149][ C0] RSP: 0018:ffffc90002f87960 EFLAGS: 00000246 [ 202.085210][ C0] RAX: 1ffff11004a42000 RBX: ffffffff8f2f4830 RCX: ffffffff819da398 [ 202.093217][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f2f47e0 [ 202.101234][ C0] RBP: 1ffffffff1e5e8fc R08: ffffffff8f2f47e7 R09: 1ffffffff1e5e8fc [ 202.109419][ C0] R10: dffffc0000000000 R11: fffffbfff1e5e8fd R12: ffffffff8f2f47e0 [ 202.117525][ C0] R13: ffffffff8f2f4830 R14: dffffc0000000000 R15: ffff888026cf9e00 [ 202.125567][ C0] ? mutex_spin_on_owner+0x288/0x360 [ 202.130891][ C0] mutex_spin_on_owner+0x288/0x360 [ 202.136063][ C0] __mutex_lock+0x7ef/0xe80 [ 202.140591][ C0] ? __mutex_lock+0x51b/0xe80 [ 202.145292][ C0] ? ip6mr_net_exit_batch+0x20/0x90 [ 202.150547][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 202.155634][ C0] ? kvfree_call_rcu+0x374/0x410 [ 202.160590][ C0] ? __pfx_ip6mr_net_exit_batch+0x10/0x10 [ 202.166345][ C0] ip6mr_net_exit_batch+0x20/0x90 [ 202.171392][ C0] ? __pfx_ip6mr_net_exit_batch+0x10/0x10 [ 202.177154][ C0] setup_net+0x6d4/0x830 [ 202.181419][ C0] ? __pfx_setup_net+0x10/0x10 [ 202.186244][ C0] ? down_read_killable+0x1d1/0x350 [ 202.191457][ C0] copy_net_ns+0x32e/0x590 [ 202.195919][ C0] create_new_namespaces+0x3d3/0x700 [ 202.201255][ C0] unshare_nsproxy_namespaces+0x11c/0x170 [ 202.207142][ C0] ksys_unshare+0x4c8/0x8c0 [ 202.211663][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 202.216734][ C0] ? rcu_is_watching+0x15/0xb0 [ 202.221539][ C0] __x64_sys_unshare+0x38/0x50 [ 202.226360][ C0] do_syscall_64+0xf6/0x210 [ 202.230876][ C0] ? clear_bhb_loop+0x45/0xa0 [ 202.235593][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.236343][ T5835] Bluetooth: hci4: command tx timeout [ 202.241483][ C0] RIP: 0033:0x7f790458e969 [ 202.241508][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.270960][ C0] RSP: 002b:00007f7905320038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 202.279424][ C0] RAX: ffffffffffffffda RBX: 00007f79047b5fa0 RCX: 00007f790458e969 [ 202.287442][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 202.295464][ C0] RBP: 00007f7904610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 202.303631][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.311648][ C0] R13: 0000000000000000 R14: 00007f79047b5fa0 R15: 00007ffe3fb956c8 [ 202.319691][ C0] [ 202.322728][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 202.330002][ C0] CPU: 0 UID: 0 PID: 10942 Comm: syz.2.1460 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 202.342064][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.352134][ C0] Call Trace: [ 202.355416][ C0] [ 202.358276][ C0] dump_stack_lvl+0x99/0x250 [ 202.362887][ C0] ? __asan_memcpy+0x40/0x70 [ 202.367481][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.372723][ C0] ? __pfx__printk+0x10/0x10 [ 202.377330][ C0] panic+0x2db/0x790 [ 202.381221][ C0] ? __pfx_panic+0x10/0x10 [ 202.385637][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 202.390856][ C0] __warn+0x31b/0x4b0 [ 202.394828][ C0] ? inet_sock_destruct+0x623/0x730 [ 202.400021][ C0] ? inet_sock_destruct+0x623/0x730 [ 202.405220][ C0] report_bug+0x2be/0x4f0 [ 202.409551][ C0] ? inet_sock_destruct+0x623/0x730 [ 202.414745][ C0] ? inet_sock_destruct+0x623/0x730 [ 202.419937][ C0] ? inet_sock_destruct+0x625/0x730 [ 202.425152][ C0] handle_bug+0x84/0x160 [ 202.429434][ C0] exc_invalid_op+0x1a/0x50 [ 202.433950][ C0] asm_exc_invalid_op+0x1a/0x20 [ 202.438797][ C0] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 202.444659][ C0] Code: 0f 0b 90 e9 62 fe ff ff e8 0a 00 e0 f7 90 0f 0b 90 e9 95 fe ff ff e8 fc ff df f7 90 0f 0b 90 e9 bb fe ff ff e8 ee ff df f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 202.464266][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 202.470425][ C0] RAX: ffffffff89dfd062 RBX: dffffc0000000000 RCX: ffff888025210000 [ 202.478397][ C0] RDX: 0000000000000100 RSI: 0000000000000fec RDI: 0000000000000000 [ 202.486384][ C0] RBP: 0000000000000fec R08: ffff88803267461f R09: 1ffff110064ce8c3 [ 202.494349][ C0] R10: dffffc0000000000 R11: ffffed10064ce8c4 R12: ffff888032674380 [ 202.502308][ C0] R13: dffffc0000000000 R14: ffff888032674604 R15: 1ffff110064ce872 [ 202.510277][ C0] ? inet_sock_destruct+0x622/0x730 [ 202.515487][ C0] ? inet_sock_destruct+0x622/0x730 [ 202.520691][ C0] ? inet6_cleanup_sock+0x197/0x230 [ 202.525886][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 202.531515][ C0] __sk_destruct+0x86/0x660 [ 202.536019][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 202.541122][ C0] ? rcu_core+0xc34/0x1710 [ 202.545543][ C0] rcu_core+0xca5/0x1710 [ 202.549804][ C0] ? __pfx_rcu_core+0x10/0x10 [ 202.554480][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 202.560115][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 202.566371][ C0] handle_softirqs+0x283/0x870 [ 202.571137][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 202.575895][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 202.581178][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 202.586376][ C0] __irq_exit_rcu+0xca/0x1f0 [ 202.591040][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 202.596241][ C0] irq_exit_rcu+0x9/0x30 [ 202.600471][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 202.606108][ C0] [ 202.609028][ C0] [ 202.611947][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 202.617921][ C0] RIP: 0010:__kasan_check_read+0xa/0x20 [ 202.623462][ C0] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 4f e6 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 202.643065][ C0] RSP: 0018:ffffc90002f87960 EFLAGS: 00000246 [ 202.649142][ C0] RAX: 1ffff11004a42000 RBX: ffffffff8f2f4830 RCX: ffffffff819da398 [ 202.657108][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8f2f47e0 [ 202.665075][ C0] RBP: 1ffffffff1e5e8fc R08: ffffffff8f2f47e7 R09: 1ffffffff1e5e8fc [ 202.673036][ C0] R10: dffffc0000000000 R11: fffffbfff1e5e8fd R12: ffffffff8f2f47e0 [ 202.680997][ C0] R13: ffffffff8f2f4830 R14: dffffc0000000000 R15: ffff888026cf9e00 [ 202.688972][ C0] ? mutex_spin_on_owner+0x288/0x360 [ 202.694259][ C0] mutex_spin_on_owner+0x288/0x360 [ 202.699370][ C0] __mutex_lock+0x7ef/0xe80 [ 202.703865][ C0] ? __mutex_lock+0x51b/0xe80 [ 202.708538][ C0] ? ip6mr_net_exit_batch+0x20/0x90 [ 202.713730][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 202.718754][ C0] ? kvfree_call_rcu+0x374/0x410 [ 202.723686][ C0] ? __pfx_ip6mr_net_exit_batch+0x10/0x10 [ 202.729397][ C0] ip6mr_net_exit_batch+0x20/0x90 [ 202.734412][ C0] ? __pfx_ip6mr_net_exit_batch+0x10/0x10 [ 202.740118][ C0] setup_net+0x6d4/0x830 [ 202.744354][ C0] ? __pfx_setup_net+0x10/0x10 [ 202.749115][ C0] ? down_read_killable+0x1d1/0x350 [ 202.754313][ C0] copy_net_ns+0x32e/0x590 [ 202.758725][ C0] create_new_namespaces+0x3d3/0x700 [ 202.764019][ C0] unshare_nsproxy_namespaces+0x11c/0x170 [ 202.769745][ C0] ksys_unshare+0x4c8/0x8c0 [ 202.774245][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 202.779259][ C0] ? rcu_is_watching+0x15/0xb0 [ 202.784029][ C0] __x64_sys_unshare+0x38/0x50 [ 202.788786][ C0] do_syscall_64+0xf6/0x210 [ 202.793285][ C0] ? clear_bhb_loop+0x45/0xa0 [ 202.797956][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.803835][ C0] RIP: 0033:0x7f790458e969 [ 202.808240][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.827840][ C0] RSP: 002b:00007f7905320038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 202.836257][ C0] RAX: ffffffffffffffda RBX: 00007f79047b5fa0 RCX: 00007f790458e969 [ 202.844219][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 202.852178][ C0] RBP: 00007f7904610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 202.860228][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.868193][ C0] R13: 0000000000000000 R14: 00007f79047b5fa0 R15: 00007ffe3fb956c8 [ 202.876198][ C0] [ 202.879451][ C0] Kernel Offset: disabled [ 202.883774][ C0] Rebooting in 86400 seconds..