last executing test programs: 5.724317816s ago: executing program 0 (id=2545): r0 = socket(0x22, 0x2, 0x23) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)="c0fb2d1e9f9ba97985158a241c495ebc1a941221b0892557a0", 0x19}], 0x1}}], 0x1, 0x1c0449f9) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a0000"], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 5.343751268s ago: executing program 0 (id=2551): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x800, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_EMATCHES={0x88, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{0x4, 0x1}, {0x2}}}}, @TCF_EM_IPT={0x4c, 0x3, 0x0, 0x0, {{0x2eb6, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0x6, 0xff, 0x5, 0x2, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24008004}, 0x8000) 4.982645339s ago: executing program 0 (id=2554): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x2007, 0x0, 0x8, 'syz1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, 0x0, 0x0) shutdown(r0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4.284358624s ago: executing program 0 (id=2558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xb, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x1, 0x619, 0x6, 'snmp\x00', 'syz0\x00', {0x631}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x0, 0x0, 'snmp_trap\x00', {0x11000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 3.96436648s ago: executing program 0 (id=2566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff0000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000e732d41d22cbb670"], 0x1fc}}, 0x0) 3.783232487s ago: executing program 0 (id=2571): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) 1.948337583s ago: executing program 2 (id=2586): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_EMATCHES={0x88, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{0x4, 0x1}, {0x2}}}}, @TCF_EM_IPT={0x4c, 0x3, 0x0, 0x0, {{0x2eb6, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0x6, 0xff, 0x5, 0x2, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24008004}, 0x8000) 1.880524062s ago: executing program 3 (id=2587): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1100000004000000000000000000000000003411", @ANYRESDEC, @ANYBLOB="0000000000000000000000000000000000000000c1f4a66dc7205c79db6a69cb3f5e2dd076097afcb026ecfb6bbaf1ad81e9607e0042bc0a07647cae7e413e368b5073a0c1f48949f0bd1b18789b506b54b21cf80f46474425ca2d5d5deadc99c8c141eb6c54b8d005747b44a339", @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000000000000000000000000de00bb9d6fb383bf"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f000000b800)=ANY=[@ANYBLOB="00020201"], 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYBLOB="7eba10adb24c29d9de99ff262add5dd1ed12465a0c8dfc3e8bb8818dc0e3a45b5565374582607812f4bc81e9cb8443584ad287ec286e5040b8902d41a277d40dc35edf"], 0x28}}], 0x1, 0x4080) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) 1.725009051s ago: executing program 3 (id=2588): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0xd}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x64}}, 0x0) 1.722386654s ago: executing program 4 (id=2589): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000001e80), 0x0) r1 = accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0xc0c00) (async) clock_gettime(0x0, &(0x7f0000003d00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003b80)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000380)=""/125, 0x7d}, {&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/75, 0x4b}], 0x9, &(0x7f0000000880)=""/241, 0xf1}, 0x2}, {{&(0x7f0000000980)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000a00)=""/116, 0x74}], 0x1, &(0x7f0000000a80)=""/4096, 0x1000}, 0x95f}, {{&(0x7f0000001a80)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b00)=""/15, 0xf}, {&(0x7f0000001b40)=""/34, 0x22}, {&(0x7f0000001b80)=""/243, 0xf3}, {&(0x7f0000001c80)=""/3, 0x3}, {&(0x7f0000001cc0)=""/102, 0x66}, {&(0x7f0000001d40)=""/23, 0x17}, {&(0x7f0000001d80)=""/31, 0x1f}], 0x7, &(0x7f0000003d80)=""/201, 0xc9}, 0x7fe}, {{&(0x7f0000001f40)=@tipc, 0x80, &(0x7f0000002480)=[{&(0x7f0000001fc0)=""/112, 0x70}, {&(0x7f0000002040)=""/127, 0x7f}, {&(0x7f00000020c0)=""/172, 0xac}, {&(0x7f0000002180)}, {&(0x7f00000021c0)=""/244, 0xf4}, {&(0x7f00000022c0)=""/48, 0x30}, {&(0x7f0000002300)=""/88, 0x58}, {&(0x7f0000002380)=""/15, 0xf}, {&(0x7f00000023c0)=""/139, 0x8b}]}, 0x9}, {{&(0x7f0000003540)=@generic, 0x80, &(0x7f0000003740)=[{&(0x7f00000035c0)=""/43, 0x2b}, {&(0x7f0000003600)=""/76, 0x4c}, {&(0x7f0000003680)=""/66, 0x42}, {&(0x7f0000003700)=""/3, 0x3}], 0x4, &(0x7f0000003780)=""/176, 0xb0}, 0x1}, {{&(0x7f0000003840)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000038c0)=""/167, 0xa7}, {&(0x7f0000003980)=""/112, 0x70}, {&(0x7f0000003a00)=""/8, 0x8}], 0x3, &(0x7f0000003a80)=""/230, 0xe6}, 0x2}], 0x6, 0x0, &(0x7f0000003d40)={r2, r3+10000000}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x50, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {}, {0xc, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xf3}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00001604000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) (async) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8000000000000c, &(0x7f0000000600)='u', 0x1) (async) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x46, 0x7, 0x1, 0x9, 0x8, "671a2d", 0x10}}) (async) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000001c0)=']', 0x1) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r13, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r14 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r14, &(0x7f0000000040), 0xc) getpeername(r14, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000002540)=""/4086, &(0x7f0000000180)=0xff6) (async) poll(&(0x7f0000001e40)=[{r8, 0x1000}, {r4, 0x440c}, {r9, 0x1}, {r7, 0x3041}, {0xffffffffffffffff, 0x210}, {r1, 0x402}, {r9, 0x8000}, {r1, 0x4}], 0x8, 0xb) 1.695405062s ago: executing program 2 (id=2590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xb, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x15, 0x1, 0x619, 0x6, 'snmp\x00', 'syz0\x00', {0x631}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x5, 0x0, 0x0, 'snmp_trap\x00', {0x32000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 1.544394228s ago: executing program 1 (id=2591): r0 = socket(0x22, 0x2, 0x23) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)="c0fb2d1e9f9ba97985158a241c495ebc1a941221b0892557a0", 0x19}], 0x1}}], 0x1, 0x1c0449f9) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.54382346s ago: executing program 3 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a0104"], 0xc4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000480a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f080003400000"], 0xd0}, 0x1, 0x0, 0x0, 0x2004c851}, 0x20050800) 1.40363241s ago: executing program 3 (id=2593): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a40)={0x200, r9, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xbc5, 0x9, 0x876, 0x7, 0xb]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3, 0x9, 0x7, 0x3, 0xd7, 0x8, 0x10]}, @NL80211_ATTR_FRAME={0x1b9, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xe0}, @device_b, @device_a, @initial, {0x1, 0x3}}, 0x1, 0x2, 0x53, @void, [{0xdd, 0xc0, "f42b2b1d6f503e658b001fd1eb258872ef34bffbac7b9e7be1f1951de0e673a45b6634aef36fc70931d0d2455fac69278b97fc0b6d1adc102b52911a39f99ca9ff257de9572dc19534ee07a48c702145953ee519525799f9cf1ff34568afdf9ab891435bcf466627cdb7012066e06a9da0f398f69e7f213b847c1e5f2256f0fac6067d415e26391ac1e16be0c66185d55d6f9d1b7d2e8f06920622151728746a45310bc8660725efba21dc9d385eaa95b33649e4b20b810d56aad2b7dee139a7"}, {0xdd, 0x3c, "f0ee98b98973899365c07325b49d6f65e3c83816a88a1ba4b8dfb42fbbd83c1e902bca786e241ad8768d1bc8affe232a611081bf8871732796ae8970"}, {0xdd, 0x62, "3ef59b9cb046a762ff2d863612d8e2db13608b99fc79df9fb330f8abf9dd552d3db86d411be46866ee4fdc420de96d66e41f2a3a2b392560a7de0801c119b06941b7d48d8efc940e2ab01827ec3174f4ad9d0b8ee13bac13878bb700587003a3208c"}, {0xdd, 0x24, "fd0d98f5d3d9544db842910622c3f5f513f3608ab8e1c4ccfa433f077ed3288ff3a75e83"}, {0xdd, 0xb, "9a19f18034b70500e67691"}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r4, @ANYBLOB='8\x00/'], 0x54}, 0x1, 0x0, 0x0, 0x5396ebcfacd993b0}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="28687002981566326453d7277d0500002115f56c06f316c719d016613a9610d5b76ca424b9c4e2b763dcfbb6feb43fa9741a335c822d18f693b645ab4d85532e85b0aa3f0d9d23f836385c8b0690a8248babedb6c683166d5d531a0b7e02e81e08dc978941c72085a7a7aabd0412bf1afc892c53302e7f6b16abfeec4ecb2c0d633af44324a4fd93c24414fa9fd86cfc7128448d63be09b61622676913de069210648a5d2c06", @ANYRES16=r1, @ANYBLOB="20002cbd7000ffdbdf251800000008000300", @ANYRES32=r4, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004881}, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="28687002981566326453d7277d0500002115f56c06f316c719d016613a9610d5b76ca424b9c4e2b763dcfbb6feb43fa9741a335c822d18f693b645ab4d85532e85b0aa3f0d9d23f836385c8b0690a8248babedb6c683166d5d531a0b7e02e81e08dc978941c72085a7a7aabd0412bf1afc892c53302e7f6b16abfeec4ecb2c0d633af44324a4fd93c24414fa9fd86cfc7128448d63be09b61622676913de069210648a5d2c06", @ANYRES16=r1, @ANYBLOB="20002cbd7000ffdbdf251800000008000300", @ANYRES32=r4, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004881}, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="00040000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000240004800500030005000000050003000500000005000300050000000500030005000000"], 0x54}}, 0x800) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="00040000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000240004800500030005000000050003000500000005000300050000000500030005000000"], 0x54}}, 0x800) 1.383562252s ago: executing program 2 (id=2594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffff8000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff0000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000e732d41d22cbb670"], 0x1fc}}, 0x0) 1.230825441s ago: executing program 1 (id=2595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/144, &(0x7f0000000100)=0x90) socket(0x1a, 0x0, 0x80) 1.230189404s ago: executing program 2 (id=2596): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FROZEN\x00', 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000d80)=ANY=[], 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d094", 0xe3}, {&(0x7f0000002880)="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", 0x118}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185", 0x29}, {&(0x7f00000007c0)="a256b046b450fa5ff8d84ed7bb2d833e7d1eb42ce57b7a7c221ac89ccb679c0231c0f4f4750dbb05db2a96f50a5183432ddfb75e", 0x34}, {&(0x7f0000000980)="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", 0x101}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc841985992b795546132dd41b9591335d5671bacfc02163b60fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb306c7f77c8a00000000000000d037280699ca67e7143e46e0267c791d", 0x52}, {&(0x7f0000002700)="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", 0x143}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8179726fdcd365a762580b34c011c956520efff53dc024adcdc1a1296588ac192e586b6818d5e2dd134dfdfce5", 0x81}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff44", 0x59}], 0x2}}], 0x3, 0x0) 1.127790306s ago: executing program 1 (id=2597): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000240)}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000340)={{r4}, 0x5, 0x0, 0xb7}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r2}, &(0x7f0000001040), &(0x7f0000001080)=r1}, 0x20) 737.395362ms ago: executing program 4 (id=2598): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000700000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000004700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000d803000000000000850000000c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 596.238799ms ago: executing program 4 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1100000004000000000000000000000000003411", @ANYRESDEC, @ANYBLOB="0000000000000000000000000000000000000000c1f4a66dc7205c79db6a69cb3f5e2dd076097afcb026ecfb6bbaf1ad81e9607e0042bc0a07647cae7e413e368b5073a0c1f48949f0bd1b18789b506b54b21cf80f46474425ca2d5d5deadc99c8c141eb6c54b8d005747b44a339", @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000000000000000000000000de00bb9d6fb383bf"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f000000b800)=ANY=[@ANYBLOB="00020201"], 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES64, @ANYBLOB="7eba10adb24c29d9de99ff262add5dd1ed12465a0c8dfc3e8bb8818dc0e3a45b5565374582607812f4bc81e9cb8443584ad287ec286e5040b8902d41a277d40dc35edf"], 0x28}}], 0x1, 0x4080) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @local, 0x6}], 0x1c) 595.461694ms ago: executing program 1 (id=2600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000002f00)=0x2) ioctl$PPPIOCSMAXCID(r2, 0x4004743c, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000800)="e7496d52e6b3404ba8586493fc960b203c570933c0b882c65f4d8d40a7a7828e629067a885388d12884860a9936d92a0a1f986f69bdef0e7ea63a35c969bd5a7a260add9dd4d03fc7513228359d20268c3e66709befbe391345c9f4a9ddff0968108ceeef726319e8b", 0x69}, {&(0x7f0000000700)="7ff9fbe1ec23043872ee46c7c2d46045d7cbed3debaaabbd684d8b9cf23551647530415a568fce08ae4a1c126cba3997c5362137971bbfb273a8dae4e7aa8739a95c9389a00265b1cbf0d656b526", 0x4e}], 0x2, 0x8, 0x2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xff}}, 0x18, &(0x7f0000000140)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0xee) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x0, 0x0, 0x188, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x100000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x2}, {0x0, 0x5, 0x4}, {0xffffffffffffffff, 0x1}, 0x3, 0x7fe0000}}}, {{@ip={@multicast1, @multicast2, 0x0, 0xff000000, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x2e, 0x0, 0x41}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x10001]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0xe, {0x80000000}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0xfd, {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000000101010100000000000000000a0000040800059a000000021c0010800800024000000005080001400000002d08000140000000062000164000000069ab5d"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000068000100fdfc000000000000020000000400000006000700040000000c0008800500050000000000080006000000000008000500", @ANYBLOB="6ac800000000000000000900000000"], 0x3c}}, 0x10) 490.817051ms ago: executing program 4 (id=2601): socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_EMATCHES={0x88, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{0x4, 0x1}, {0x2}}}}, @TCF_EM_IPT={0x4c, 0x3, 0x0, 0x0, {{0x2eb6, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0x6, 0xff, 0x5, 0x2, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24008004}, 0x8000) 438.197863ms ago: executing program 3 (id=2602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x29, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 281.972244ms ago: executing program 1 (id=2603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000008}) 266.451201ms ago: executing program 3 (id=2604): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)={0x58, r3, 0x400, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x77}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x58}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x200000c0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0x5, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040015) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x20, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x0, 0x6, 0x7, 0x8, 0xc, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff0e, 0x0, 0x0, 0x0, 0x7fffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x68040200) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r10, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000001880)=0x4) 265.604856ms ago: executing program 2 (id=2605): unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r1, 0x0, 0x4}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@map=r3, r0, 0x2f, 0x0, 0x0, @void, @value=r4}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, 0x0}, 0x8) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) (async) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r5, 0x4) unshare(0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, r4, 0x2f, 0x2000, 0x4, @value=r9}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) 199.743596ms ago: executing program 4 (id=2606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}, 0x1, 0x0, 0x0, 0x8880}, 0x40) 119.703028ms ago: executing program 1 (id=2607): r0 = socket$isdn_base(0x22, 0x3, 0x0) sendmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000000)="043e9d49ade417b085e5e90d4c196b63ce78fda0d1c6be1d48fe900bcbe5e38f48b5bd4432f15a4d1f75a8eb7e4f1dd870886347bd35f7dd49b07ea763e47439f72919a9310e6aa682c9c1892532d91f1d3b08a8eb85231f0151ee885f8119118e36e739ae8c9cb2184f5828b1c0bd9f881cfda25df9d6819e818dedb333fd3c33cd0556cf1cebcf29aa109b494a400fcda665707ffcfb9f7dad5093df86708e6e4a828f1e0604720a86f7d8cff51df33a0a80a4e54df46150c83a", 0xbb}, {&(0x7f00000000c0)="9edb30e93561235623cef524b228eb0649171831c2154ff858e8c663556799a1d8ba8212bfb8aa20fa1bc62f4563d03c38583e59da861fe423d88b94420c68d4e43829fb6a0cfefb659b9baa102b3b659a62832c20b4088ea8725fc4c443", 0x5e}, {&(0x7f00000001c0)="de387c58f191e4a54bacd1b9fa2ca7d03d2b6833d8b8fd657c362a152fb977e3c665b218becca62c38ae8c64149963fae0a0752a3cf3ad23f270200401a78112b3a8d9f7bf0c864375357535f8bc9af057346dd50d86610f0d522ecfc36a3b4922ec8a9bbb519b51c294630499c5ed782bf55c03d51176d48a5817cb465bcce0b7b1e1b300e854bab69ae97b15596a01cdc6", 0x92}, {&(0x7f0000000280)="1de845d6f8605149a0a939fa5c9c94d2c792f8909fb6ce7da34b4c5e00"/42, 0x2a}], 0x5, &(0x7f00000003c0)=[{0xb8, 0x102, 0x0, "6a08fcb362731ec5ff469118506fab9542be08a1c279df89ce2b989f229675dcd409c509109527e1f4205dcea56d46a0c308b4da65adaa09b573b0926edec1fcd774d63e8434dc82af3d01204f35fc80e20d1d3c33ce7cb85446ae8b3323447c67d0eae648d1910d68e581e5660c94cdba24ee1ffe1f3dbed8200a5ea9d85a2e501a12e5e02ba579c885caa48c74c58001dd9f2a380cf1b208ffe1ae2e82fa1a4e13"}, {0x88, 0x108, 0x4, "130b677d39266f550e0534e47c1d56531aa0f07934ecfdf2ba899e860c74bb078871db97737b8f03aeca4cb6ba9b5d255189863cb484741df9b6154ad2814a9705feafdc85379069992896afe35fc9a1df15ed968c6dbf0c85bfbd9b86a8a3117e8d82f1788a22acf5aee3064a0323d6678365"}, {0x30, 0x10f, 0x5, "faf0ebd0a7aa33a7a139facb88054a442cc4c9206e8bca51cbf2966fc059ad"}, {0x10, 0x115, 0x4}, {0x70, 0x10b, 0xffffffff, "501e46757a8da802d7396a8717c76550e43bb52210443b9d0c644b1d80101dc0081fbe50a22b3ff1c766c97cbe6e9c9d63e2acf11d5c84970aac2a16515d2dbfaca8aedd55a140ca6b05655ee5599829d4c5f64e796cc40d9eff1c822627d7"}], 0x1f0}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000001640)="e5804af8e2086e8d77581b48728be894d6e9799525c981a9313c812d7587cab0fdd9bb51adc5c8ed8cf514f4c286d670feb8b407b09c9516ad9b9fc39d55b12cec6c6f3a0c836eb8e16c2670ba76441fa0c085a711553c438c8d93e6ecf24650b34b20cccc4c20fc84ace37a4923dcf9ef844b7f70c7357100e7792ea49043350cc15e8095ea3bfb3d6d6bbbe9bcb7eb41d40e4b62d42fc751749e31912cb005e05df4dbbde8888b9213bd1e59bf08ee5a17762d70d98c1d8ca43a5aaa45c6b8372530be6a33f0", 0xc7}, {&(0x7f0000002bc0)="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", 0x1000}, {&(0x7f0000003bc0)="a908d6af0c30a6cdce8379aaa9b8c708977c43a52a51e4cefbf2de1a1b0c53b03ed2aeb69365706d7d55623e1ad3fcbf60499ba9b2044b9285a050fff8e4c9588d6ba4b0cca20b5827543ab55dea587617bd911e5709c624f6a5baaf946458c5b5ce720e6072b27f5538294f0cf6be191c870e2242afc09908b6445b30533a1379648e61b7189469e8c78ab4e9", 0x8d}, {&(0x7f0000003c80)="6b83f1c02542c6c37efb49c5626705caeca4cd2c36eaad1043ca3a2e76c027d7b0474d06b739e1a0288a1ea1171728985222ceaa52a473175d366ae1bb89d00a671739163fae914d1ad849676f99c6aa7344115d0c5c85f78dee507e017b9dbf387eb01da3cf673fe21a0e2fb2d78c820b796ed10d005c21aca35597dbe6d9722013544c6be230ff576ebccb27fd8b07cf1cd3a3b17b3b13d949f8d515f523f641450ff5407220354bac5d47832a95f18fb69edd7d4fc91c444a9165e7e5ed70a9228443076e19b2fc38", 0xca}, {&(0x7f0000003d80)="b837f6de1dae8eb80c9df10721fc6d51a6e7d669f7bf000fb4444e9575ca072cf4b7815ae4bb250bd8f47d2562cb5e8ae4a87ef7c5a828b2d8a1f476c7235d5e2c8297c12a85431377d4234fb8271e33d663573c31961cb9fd8eb22cf17082aa334bdddb4cb6c1d9a8fc9a8a1a86e4e120ae5bd8c71bfb057f33ea42e6c708ac44a34830316923e7eaab1ce6af24a0a18bd48471d6ff45c5a0bf1ac07454efed3e246406012ef4f2725764df642cd5ef511cbdcca62a6d1eb2", 0xb9}, {&(0x7f0000001740)="410620543fd45bdaab5dc2e060e2b9b7898ebed229fdb7f1e4aa333a907a13df37a0e12b4b6a25028bae3888d621bb060956633275709188a26e19daff4453bcb7cc78e3db73967880d19073ae", 0x4d}, {&(0x7f00000002c0)="76e2377780c1ce7321c2d8df9dda98e3e63c177aa45625a918ae53658021c1a3f7b4e5db29b318cbf68e6d29576b791e7662c442543c", 0x36}, {&(0x7f0000003e40)="7675cabe31c949b07c8147b7a39a545248dc4cda9ccac90a68bc828c9b1926ae40f68e6c7de4eb56417c79694c6764ea6ff9719a410551ce76b7381b3428bf6728d3139ae91cb1cc9ab0c6620e0ecc21f18f65adad2a1730758607a655c1293e02362f73b002e4fba2cbaf1416d4ac5407e52ed3127feefe0543ed18ea6fdf9a507c1191ca0bacb723c2aa25493c7214c19c7172adfc9100f0fd58", 0x9b}, {&(0x7f0000003f00)="fb0241b690c087070130b5a25dc80aa3a3b3a95208f01603d51438083bbef77c0bf6747c193721f1f7124fa85ebc4d94a9cdcc3c73a4ad9455f2410a34038891ea46c474541bb0b4e2dbbb510c9d9b986ab80deec586b56d6e013f370f701a43ce69d30bbdf374b0c4afdc49aa2fc4e658", 0x71}], 0x9, &(0x7f00000053c0)=[{0x90, 0x115, 0x7, "ae81b702e101e8e9cba3ecc577ba6269620511e5af50abd3ba1259b65d6d7131eaa74c200f7bd2651767681d2c009be09a2ced688fdaacb58e5fe4d429f9dd49fad0385164050739d1fde23f4ea95c6bfd91f3bf5bbc34be26ddf4557d4dfffaf1f1216315e08d2b6e9d9a74e2e7649b73c336fb9556fc447b0cf173c0cf06"}, {0xa8, 0x0, 0x6, "be8c9c13db95f2a794d32516607abc5e260bb51826392c1c4547fb4707564fda477c561fa3e0812d10a4d1a89bc45f54f56801ea285a587cc4233563922ec8ac6f32fe33a4e73217283f0790ac9d555d651de4b1103432ba79759579ff04ce2e8feb83bde69d77c29d2319f195c5e741bb76c46571ac8002a3e63c82ad0b024631679128bf241dc63d6729ff522c21cba8a4e40fe7"}, {0xd8, 0x3a, 0x0, "82af8928dcf15eb98e0c1dbf3814d0cd945e0a0d9b39962549b59dda8d39d23ddf35ddcae26f55d81685c763de5a99dd7fd810615571b181e34e23812eb1dfa3049a074bfbd135f885234033b6ea28b1a2123335d2f7b64c6256dc905c867acf30bf6b102c1a0299c4332b5ecfa9f0e5612dd88c248632145c3a9c5f6b9d563447a5c4213ca838deee46844a31777b0752bf421e21ceb8f655d965acb7d66ed7df42f46e45d74045c75c5e74b27424f8d3592655c0ddc9316e893c01a3011e4a52ef65"}], 0x210}}, {{&(0x7f0000004240)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000042c0)="17d0aecda130a4fc0d995ab99ce52cf33d43b639867b71b1700b346673f6d9b5219be6ef44ea3f8c386767ee2fdc4e77648b447ae98ff951f9c52baefe9b863a03604945abaab168181e71e64b2c46eda3e5ba138c9f1abf6ef3a6e1c23e0a0b80b080978ff05f029b510482179aab46f0607e055e3b98fe9609ef8461bde3c4fcc891a24328a1f3ae77ec0b2eec923698dd9811c8fa9dc5b19bbb397b5f7f454502018601d02ce4958c006472d628322ae513ca99143570e105e0076535a1e44615c06b21c9aae8773c7a8c4502dd747ab7d655aa73b309fe57f4caafb9a005c5cce725c62b37abdb6574", 0xeb}, {&(0x7f00000005c0)="addffea506a06b36ca4debb1c3bea3599ad45286df44059bdcb8bf38f96830", 0x1f}, {&(0x7f00000043c0)="5318bbd628faac691f43fdede764929b253b775b21b8929af1779be103c8533fd2064cfb2377a5b801cde167f3fd0bde62e7492b176152977513b7c174e5dc41b0c8c5baf22bac544e55a11ff14d737755340d7a38aa66572798f3f80de30ab3b064c0684e8b3d81a5162cc521da1c5ad0193d706317caa41c564104542e5242ce0a64ca3968725691890525de6ccbc81463bf0866a011228d157915d258de5855a657723883b37b0716bbb14415dbc33975e0e5ff929959b015bbca2f17d8b3187be7b7226d2b01c50899010714329de0", 0xd1}, {&(0x7f00000044c0)="584337e6345c269eba941bcddd52f06e57db8872473bd01101606653a320e1aed8492410d236e23a3aaaab591771a8aefdfcf1b61d6bf0d0d708391cc5c25e93176dc108c794f67211e038ebc27bfc542453271cd6f21b9dff4d1b43a4e0e856a82b1b5b34b919eb267fd33c9e030c63dbbf7cb8e8427fb14750d1f4125e9567ea9728baeea90e3d041e41b1bb0c6e94f5aa5cd7635bfe66eee7982c4e965305528d1775e80d045ba16f5180e6159326ff5d69c4694704409fda6856a2184f0f74ead18a75036f5052245a6eadce764ca88060801633f63c54dd645f09d53de76297864fcc0c99d24cef5ccb23b87a3e20", 0xf1}, {&(0x7f00000045c0)="629f991c8813dcd47ca91e2be0c361da78b113c8ed9a4acb7a799cacecf508e982f096a2fe39da60cfded9f23e84bf1d", 0x30}, {&(0x7f0000004600)="43e829929038b7ea7bc30eb90615b23d486fdb8ff26ed7ddc977a7e568f298f835d2b47cb4d49c170806cb77c060bc5ea52cb1e5fdb7aaa0c2805cff03814b9c47bcad2c19e8aa80538d7279070cf777bc45c15325c27e4812ffb7773bf1e1aab00b2121250dce35be61970048feeb96f6a196b966ed32678f4d88444d4eff3c012f42266a329a91777cf8461943ca75f759ad4eb3682f41aa8751f4ded72009", 0xa0}], 0x6, &(0x7f0000004740)=ANY=[@ANYBLOB="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"], 0x3f0}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004b40)="82615ef5adb21c68fc6385737e49f585a6e40d8a49f92616d097a39ac5893aa9e090f0089bca8a578068d50729efdc62413704c4b8fc4f414f3bf55b526913308cd513cefeebb3b13aa5e87a2821517d95f9a73686b8940d0a43923022d5c37ded8d61e9c7675788478b77ce02785c4d3d358bdda2a587f3f682f41bc356025dc7124138f426c46a036078a877", 0x8d}, {&(0x7f0000004c00)}, {&(0x7f0000004c40)="89921fbd503244e55051543a47e9224f813c4dc1cf7ca8a42cb7d1694d85736f537ecd89e576c1b61faf13f17562a8233bc3caac91f0fcee92cc95227cb97a4c7052d336c7496cf83304305ca77e5c4aafc2901171c73929e9eaafa911094dcc0bdc2a3ea260", 0x66}, {&(0x7f0000004cc0)}, {&(0x7f0000004d00)="9c06baa8ff5d149aead94b415931d996fc0abbbd938ce5a715c0b63bf974e28bc607f9a636300e9ead5080b5860f37359957874e3b1c0a782e90613fbd0315b5", 0x40}, {&(0x7f0000004d40)="158fa6", 0x3}, {&(0x7f0000004d80)="cb8f37e95c58c2f1e10453fdf52f8dd0d771892c2a9f148d8edf76cd8f0f4257fb15f897ea73f8d1cf675d21be30e23f2132a8151ee349d0ba84cc2ba78f6d2854810887538e68721d6edd90387c06173fd539f8d0591b284529518e3f0be338a8af2e33ee89245f521951b95d8cf2be506820da15d06ab0e408b5e63b5b3ed6a4987188239872eb12b69cc4c49342b34dc03ba4bb1aa6d300cbe60450f1ac9130354fd6a1de9bd2da6139252678115c4ba2448f52b1a2499e1dd0dac9bac38d6e63e468fe65", 0xc6}], 0x7, &(0x7f0000004f00)=[{0xc8, 0x10c, 0x1, "4c570df54aaadada56aa3a8fb6fbd0fcf1198c155fb112626a984028b75e881905acfd310a35c4ddb27bbb5f6a9b7e740d682ff064e6f2a383105bc58c54e4f6440903e5455340fa00b0119889335ce507751f24ba719c69bfc6b52613ee9fafbe20251dd962c070f8ec488763a7f739d205fb458a07be498427f7d1bc6349dc5bf067bff547303ddc7bec2e40bd2750621922d6b122ed5fd747d418ee7b3ae05008b20611ecb3031820b4153949c7362352"}, {0x68, 0x10e, 0x14000, "99b435df26f63afe54ee91ea88fd4514c568b3806716bf6d665579230d42dfd61685a02adc2684f529e37672e7478e04efcefc60bcff28bd0e714ea8539f3a4e2583937cefdac23c0ad16523fa9b00d68eb87ee17a8aaec4"}, {0x38, 0x6, 0x101, "753394bbfbc224faa9b2f0f1877104b4550e3a5702d0b9ddb95ec01dee37d63da9"}, {0xa8, 0x108, 0x86, "3e281ea0fff00011d386e6572758406e5559ea01e62bb418d299cd65627794a426bff556be7460b1fb8c03657718c5e6b53de7bbbabc8e1c4df0dc56bd9c4b9b3239b4b359a0f99a2e320b08bc05b246547a012eaf659099baeee68a2c140374d2cbc30084d67949d5c14803f3366bf2dd55069c43d72cb29b8ee8f9eca2b6602107c4479813a8dbe4270df1a03c1b4ebe390d9b90"}, {0x88, 0x115, 0x6, "2a4f3b789e46e2410364a697f625c9e4cccb6de33172f5ada9e72943d2c0aea62ceedbed79d8cf95f866aee9c012327399884d8b7aabfb9a1fd671320e72caa6e0bc470df5f520e89c0c06fd923517c4b5579ead5827dd9a73a147cc230157353c9d3db28dc1e73f0ba784e6c48ae2953613eaaa"}, {0x80, 0x112, 0xc3, "e5ff61973e17826bdaf61cc0ffada9d2bd2660f4393e64774862cf129639f41d6cd820a1af31a05e4ca1e3118142e03c3c99f8ace1f39ade44a392f061974eca9a26e92002f95880a30d9e1ab3b332f2f0e0dae696ea42c20ad0679b2ea5c4e2504b274a967636c285bab550eb93"}, {0x70, 0x10f, 0x8, "133c315d646bb1d75be44db34847963d699df6c1266f5451263161282ca15e03f5189eef5f2d491c57ea72535317cb8170f81c81dd87f58dcd2229d941686ab91ef6acc3ae29c5b2dbaf47bbf1cf241fa861b547489313f48206413d37d96b93"}], 0x388}}], 0x4, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000017c0)={@loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x3, 0x7fff, 0x500, 0x2, 0x10000, r5}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000017c0)={@loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x3, 0x7fff, 0x500, 0x2, 0x10000, r5}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x11e0, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff}}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x11e0, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff}}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) (async) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000200)={r9, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000040c0)={r9, 0x54, &(0x7f0000004040)=[@in6={0xa, 0x4e20, 0x7, @remote, 0x1}, @in6={0xa, 0x4e24, 0xc, @loopback, 0x8}, @in6={0xa, 0x4e21, 0xad8b5b1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000004100)=0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000018c0)}, 0x31c467c443849ffc) (async) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000018c0)}, 0x31c467c443849ffc) 84.131101ms ago: executing program 2 (id=2608): r0 = socket(0x21, 0x2, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x0) 0s ago: executing program 4 (id=2609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c00000009"], 0xc4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000480a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f080003"], 0xd0}, 0x1, 0x0, 0x0, 0x2004c851}, 0x20050800) kernel console output (not intermixed with test programs): ributes in process `syz.4.1156'. [ 192.166129][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 192.369769][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1160'. [ 192.401183][ T9394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1160'. [ 192.437574][ T9397] sctp: [Deprecated]: syz.2.1159 (pid 9397) Use of int in maxseg socket option. [ 192.437574][ T9397] Use struct sctp_assoc_value instead [ 192.523517][ T9394] team0: Mode changed to "loadbalance" [ 192.638962][ T9405] delete_channel: no stack [ 193.095596][ T9427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1172'. [ 193.125480][ T9427] batadv_slave_0: entered promiscuous mode [ 193.493612][ T9450] netlink: 'syz.1.1183': attribute type 1 has an invalid length. [ 193.568850][ T9455] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.744975][ T9461] delete_channel: no stack [ 194.170183][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.530665][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 194.912198][ T9511] delete_channel: no stack [ 195.025757][ T9515] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 195.118828][ T9515] bond9: entered promiscuous mode [ 195.134121][ T9515] 8021q: adding VLAN 0 to HW filter on device bond9 [ 195.201095][ T9519] batadv12: entered promiscuous mode [ 195.208093][ T9519] batadv12: entered allmulticast mode [ 195.222299][ T9523] batadv13: entered promiscuous mode [ 195.227899][ T9523] batadv13: entered allmulticast mode [ 195.635745][ T9539] block nbd2: NBD_DISCONNECT [ 195.643253][ T9539] block nbd2: Disconnected due to user request. [ 195.650847][ T9539] block nbd2: shutting down sockets [ 195.745951][ T9538] hsr0 speed is unknown, defaulting to 1000 [ 196.692517][ T9557] delete_channel: no stack [ 197.200651][ T9565] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 197.298739][ T9567] __nla_validate_parse: 3 callbacks suppressed [ 197.298762][ T9567] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1220'. [ 197.392024][ T9570] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1220'. [ 197.470866][ T9565] bond5: entered promiscuous mode [ 197.495470][ T9565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.559815][ T9567] batadv3: entered promiscuous mode [ 197.565459][ T9567] batadv3: entered allmulticast mode [ 197.581269][ T9570] batadv4: entered promiscuous mode [ 197.587537][ T9570] batadv4: entered allmulticast mode [ 197.921450][ T9584] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.035567][ T9590] netlink: 'syz.2.1228': attribute type 11 has an invalid length. [ 198.059417][ T9592] delete_channel: no stack [ 198.477384][ T9610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1234'. [ 198.486844][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1234'. [ 198.515008][ T9610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1234'. [ 198.542560][ T9610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1234'. [ 198.596332][ T9613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1238'. [ 199.071347][ T9636] delete_channel: no stack [ 199.249104][ T9644] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 199.353177][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1249'. [ 199.406637][ T9654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1249'. [ 199.441805][ T9644] bond10: entered promiscuous mode [ 199.461086][ T9644] 8021q: adding VLAN 0 to HW filter on device bond10 [ 199.781560][ T9670] bond9: entered allmulticast mode [ 199.787856][ T9670] 8021q: adding VLAN 0 to HW filter on device bond9 [ 199.969157][ T9678] delete_channel: no stack [ 200.276583][ T9689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1262'. [ 200.519901][ T9685] hsr0 speed is unknown, defaulting to 1000 [ 201.359945][ T5139] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.367020][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 201.851619][ T9726] delete_channel: no stack [ 201.995914][ T9729] hsr0 speed is unknown, defaulting to 1000 [ 202.108437][ T9731] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 57164 - 0 [ 202.128283][ T9731] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 57164 - 0 [ 202.147818][ T9731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 57164 - 0 [ 202.169016][ T9731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 57164 - 0 [ 202.188795][ T9731] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 47668 - 0 [ 202.217748][ T9731] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 47668 - 0 [ 202.259638][ T9731] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 47668 - 0 [ 202.300446][ T9731] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 47668 - 0 [ 202.345038][ T9731] geneve2: entered promiscuous mode [ 202.364928][ T9731] geneve2: entered allmulticast mode [ 203.142178][ T9767] dvmrp8: entered allmulticast mode [ 203.149361][ T9765] dvmrp8: left allmulticast mode [ 203.246479][ T9772] __nla_validate_parse: 3 callbacks suppressed [ 203.246498][ T9772] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1294'. [ 203.807487][ T9789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'. [ 203.933818][ T9793] FAULT_INJECTION: forcing a failure. [ 203.933818][ T9793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.963684][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.2.1301 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 203.963715][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.963729][ T9793] Call Trace: [ 203.963737][ T9793] [ 203.963746][ T9793] dump_stack_lvl+0x189/0x250 [ 203.963779][ T9793] ? __lock_acquire+0xaac/0xd20 [ 203.963809][ T9793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.963838][ T9793] ? __pfx__printk+0x10/0x10 [ 203.963858][ T9793] ? __might_fault+0xb0/0x130 [ 203.963895][ T9793] should_fail_ex+0x414/0x560 [ 203.963932][ T9793] _copy_from_user+0x2d/0xb0 [ 203.963960][ T9793] ___sys_sendmsg+0x158/0x2a0 [ 203.963995][ T9793] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.964060][ T9793] ? __fget_files+0x2a/0x420 [ 203.964084][ T9793] ? __fget_files+0x3a0/0x420 [ 203.964124][ T9793] __x64_sys_sendmsg+0x19b/0x260 [ 203.964152][ T9793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.964196][ T9793] ? do_syscall_64+0xba/0x210 [ 203.964230][ T9793] do_syscall_64+0xf6/0x210 [ 203.964260][ T9793] ? clear_bhb_loop+0x45/0xa0 [ 203.964284][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.964303][ T9793] RIP: 0033:0x7f56abf8e969 [ 203.964321][ T9793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.964338][ T9793] RSP: 002b:00007f56acdd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.964360][ T9793] RAX: ffffffffffffffda RBX: 00007f56ac1b5fa0 RCX: 00007f56abf8e969 [ 203.964374][ T9793] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000003 [ 203.964387][ T9793] RBP: 00007f56acdd8090 R08: 0000000000000000 R09: 0000000000000000 [ 203.964399][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.964411][ T9793] R13: 0000000000000000 R14: 00007f56ac1b5fa0 R15: 00007fff4b3d5b58 [ 203.964442][ T9793] [ 204.179679][ T48] IPVS: starting estimator thread 0... [ 204.274996][ T9799] IPVS: using max 29 ests per chain, 69600 per kthread [ 204.423418][ T9802] delete_channel: no stack [ 204.651901][ T9808] IPv6: sit1: Disabled Multicast RS [ 204.895941][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 205.086740][ T9827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1312'. [ 205.119123][ T9827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1312'. [ 205.159475][ T9827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1312'. [ 205.208101][ T9827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1312'. [ 205.268133][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'. [ 205.866208][ T9842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1317'. [ 205.885553][ T9844] ipvlan2: entered allmulticast mode [ 205.891066][ T9844] macsec0: entered allmulticast mode [ 205.957045][ T9847] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 206.058596][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 206.105616][ T9851] delete_channel: no stack [ 206.194195][ T9847] bond4: entered promiscuous mode [ 206.209047][ T9847] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.486033][ T9865] block nbd1: server does not support multiple connections per device. [ 206.506553][ T9865] block nbd1: shutting down sockets [ 206.606888][ T9872] x_tables: ip_tables: ah match: only valid for protocol 51 [ 206.717174][ T9875] netlink: 'syz.1.1328': attribute type 11 has an invalid length. [ 206.888086][ T9877] tipc: Started in network mode [ 206.893239][ T9877] tipc: Node identity 7623f3b44eb5, cluster identity 4711 [ 206.924899][ T30] audit: type=1107 audit(1746168071.972:2): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=', [ 206.924899][ T30] eAUV(<3ʗ f}G\7 X&xw.#wFEmں]4bw%;B[躃(ѫ 2s$fm.yOS[x@8Ȼ*n=uҦGE`DVd55%V'TjSI+ WJ!s@OlQ6*F#LXB3TL?⠍t,᤭b*!R#Hے|jhh͢2x4rZsh}tޏuto8&4mtq6se\=54%[VPJNVࡔO""2%tkKے{wܭY^mACI".ϡ\Ѳ~܋C0M-fUo70xˁF̫'sZ<jg%\RO]k( 7k4fʒSv!Mȧ~yT  )pj'ruBbxEi5_AAt"wȍAR&qEL D&)vӃ4V^[CvBVwYEY't,b121;_ޑT%Ye" yTJu+.7p>e\' [ 206.955759][ T9877] tipc: Enabled bearer , priority 0 [ 207.156467][ T9893] syzkaller0: MTU too low for tipc bearer [ 207.162251][ T9893] tipc: Disabling bearer [ 207.200404][ T5843] block nbd1: Receive control failed (result -32) [ 207.280210][ T9903] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 207.441849][ T9903] bond10: entered promiscuous mode [ 207.506289][ T9903] 8021q: adding VLAN 0 to HW filter on device bond10 [ 207.511290][ T9913] delete_channel: no stack [ 208.044125][ T9933] syz.1.1342 uses old SIOCAX25GETINFO [ 208.178162][ T9938] netlink: 'syz.1.1345': attribute type 23 has an invalid length. [ 208.356537][ T9948] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 208.428040][ T9948] bond11: entered promiscuous mode [ 208.428553][ T9957] __nla_validate_parse: 10 callbacks suppressed [ 208.428572][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 208.433732][ T9948] 8021q: adding VLAN 0 to HW filter on device bond11 [ 208.459227][ T9957] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1349'. [ 208.491823][ T9940] hsr0 speed is unknown, defaulting to 1000 [ 208.507213][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 208.517717][ T9948] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1349'. [ 208.904292][ T9967] sctp: [Deprecated]: syz.0.1353 (pid 9967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.904292][ T9967] Use struct sctp_sack_info instead [ 208.938948][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 208.971768][ T9969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1354'. [ 209.103808][ T9975] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1354'. [ 209.373057][ T9983] FAULT_INJECTION: forcing a failure. [ 209.373057][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.410936][ T9983] CPU: 1 UID: 0 PID: 9983 Comm: syz.3.1358 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 209.410968][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 209.410980][ T9983] Call Trace: [ 209.410988][ T9983] [ 209.410998][ T9983] dump_stack_lvl+0x189/0x250 [ 209.411030][ T9983] ? __lock_acquire+0xaac/0xd20 [ 209.411061][ T9983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.411090][ T9983] ? __pfx__printk+0x10/0x10 [ 209.411110][ T9983] ? __might_fault+0xb0/0x130 [ 209.411147][ T9983] should_fail_ex+0x414/0x560 [ 209.411184][ T9983] _copy_from_iter+0x1db/0x15a0 [ 209.411216][ T9983] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 209.411238][ T9983] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 209.411265][ T9983] ? __pfx__copy_from_iter+0x10/0x10 [ 209.411291][ T9983] ? __build_skb_around+0x257/0x3e0 [ 209.411316][ T9983] ? netlink_sendmsg+0x642/0xb30 [ 209.411339][ T9983] ? skb_put+0x11b/0x210 [ 209.411365][ T9983] netlink_sendmsg+0x6b2/0xb30 [ 209.411398][ T9983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.411423][ T9983] ? aa_sock_msg_perm+0x94/0x160 [ 209.411446][ T9983] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.411469][ T9983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.411492][ T9983] __sock_sendmsg+0x219/0x270 [ 209.411526][ T9983] ____sys_sendmsg+0x505/0x830 [ 209.411557][ T9983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.411601][ T9983] ? import_iovec+0x74/0xa0 [ 209.411631][ T9983] ___sys_sendmsg+0x21f/0x2a0 [ 209.411659][ T9983] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.411723][ T9983] ? __fget_files+0x2a/0x420 [ 209.411747][ T9983] ? __fget_files+0x3a0/0x420 [ 209.411784][ T9983] __x64_sys_sendmsg+0x19b/0x260 [ 209.411815][ T9983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.411859][ T9983] ? do_syscall_64+0xba/0x210 [ 209.411892][ T9983] do_syscall_64+0xf6/0x210 [ 209.411922][ T9983] ? clear_bhb_loop+0x45/0xa0 [ 209.411946][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.411965][ T9983] RIP: 0033:0x7f1fd3b8e969 [ 209.411983][ T9983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.412000][ T9983] RSP: 002b:00007f1fd4948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.412021][ T9983] RAX: ffffffffffffffda RBX: 00007f1fd3db5fa0 RCX: 00007f1fd3b8e969 [ 209.412035][ T9983] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 209.412048][ T9983] RBP: 00007f1fd4948090 R08: 0000000000000000 R09: 0000000000000000 [ 209.412060][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.412071][ T9983] R13: 0000000000000000 R14: 00007f1fd3db5fa0 R15: 00007ffe1bbfc3b8 [ 209.412102][ T9983] [ 210.039615][ T9970] wg2: left promiscuous mode [ 210.044278][ T9970] wg2: left allmulticast mode [ 210.281317][ T9970] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.301481][ T9970] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.314587][ T9970] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.327492][ T9970] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.409703][ T9970] vlan3: left promiscuous mode [ 210.425596][ T9970] bridge0: left promiscuous mode [ 210.433092][ T9970] vlan3: left allmulticast mode [ 210.455653][ T9970] bridge0: left allmulticast mode [ 210.465707][ T9970] bond1: left promiscuous mode [ 210.475908][ T9970] batadv1: left promiscuous mode [ 210.489962][ T9970] batadv1: left allmulticast mode [ 210.501465][ T9970] batadv2: left promiscuous mode [ 210.506841][ T9970] batadv2: left allmulticast mode [ 210.522281][ T9970] bond2: left allmulticast mode [ 210.534109][ T9970] bond3: left allmulticast mode [ 210.554328][ T9970] bond2: left promiscuous mode [ 210.564442][ T9970] bond3: left promiscuous mode [ 210.581850][ T9970] macsec1: left promiscuous mode [ 210.590562][ T9970] macsec1: left allmulticast mode [ 210.608303][ T9970] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 210.635992][ T9970] bond4: left promiscuous mode [ 210.642354][ T9970] bond5: left promiscuous mode [ 210.655782][ T9970] batadv3: left promiscuous mode [ 210.660782][ T9970] batadv3: left allmulticast mode [ 210.685466][ T9970] batadv4: left promiscuous mode [ 210.690664][ T9970] batadv4: left allmulticast mode [ 211.134225][ T9996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.134764][ T9995] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1362'. [ 211.177386][ T9995] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1362'. [ 211.212495][ T9995] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1362'. [ 211.517688][T10007] Unknown options in mask 700 [ 211.678485][T10013] FAULT_INJECTION: forcing a failure. [ 211.678485][T10013] name failslab, interval 1, probability 0, space 0, times 0 [ 211.741066][T10013] CPU: 0 UID: 0 PID: 10013 Comm: syz.1.1369 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 211.741098][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 211.741111][T10013] Call Trace: [ 211.741120][T10013] [ 211.741129][T10013] dump_stack_lvl+0x189/0x250 [ 211.741168][T10013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.741198][T10013] ? __pfx__printk+0x10/0x10 [ 211.741222][T10013] ? __pfx___might_resched+0x10/0x10 [ 211.741240][T10013] ? fs_reclaim_acquire+0x7d/0x100 [ 211.741275][T10013] should_fail_ex+0x414/0x560 [ 211.741321][T10013] should_failslab+0xa8/0x100 [ 211.741349][T10013] __kmalloc_noprof+0xcb/0x4f0 [ 211.741374][T10013] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 211.741411][T10013] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 211.741449][T10013] genl_family_rcv_msg_doit+0xb8/0x300 [ 211.741485][T10013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 211.741516][T10013] ? rcu_is_watching+0x15/0xb0 [ 211.741549][T10013] ? apparmor_capable+0x137/0x1b0 [ 211.741578][T10013] ? bpf_lsm_capable+0x9/0x20 [ 211.741610][T10013] ? security_capable+0x7e/0x2e0 [ 211.741638][T10013] genl_rcv_msg+0x60e/0x790 [ 211.741674][T10013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.741700][T10013] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 211.741740][T10013] netlink_rcv_skb+0x219/0x490 [ 211.741763][T10013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.741793][T10013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.741842][T10013] ? down_read+0x1ad/0x2e0 [ 211.741864][T10013] genl_rcv+0x28/0x40 [ 211.741890][T10013] netlink_unicast+0x758/0x8d0 [ 211.741923][T10013] netlink_sendmsg+0x805/0xb30 [ 211.741957][T10013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.741985][T10013] ? aa_sock_msg_perm+0x94/0x160 [ 211.742008][T10013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.742030][T10013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.742054][T10013] __sock_sendmsg+0x219/0x270 [ 211.742090][T10013] ____sys_sendmsg+0x505/0x830 [ 211.742123][T10013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.742159][T10013] ? import_iovec+0x74/0xa0 [ 211.742190][T10013] ___sys_sendmsg+0x21f/0x2a0 [ 211.742219][T10013] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.742292][T10013] ? __fget_files+0x2a/0x420 [ 211.742322][T10013] ? __fget_files+0x3a0/0x420 [ 211.742360][T10013] __x64_sys_sendmsg+0x19b/0x260 [ 211.742390][T10013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.742435][T10013] ? do_syscall_64+0xba/0x210 [ 211.742469][T10013] do_syscall_64+0xf6/0x210 [ 211.742499][T10013] ? clear_bhb_loop+0x45/0xa0 [ 211.742524][T10013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.742543][T10013] RIP: 0033:0x7f4eadb8e969 [ 211.742561][T10013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.742577][T10013] RSP: 002b:00007f4eaea90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.742598][T10013] RAX: ffffffffffffffda RBX: 00007f4eaddb5fa0 RCX: 00007f4eadb8e969 [ 211.742612][T10013] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 211.742625][T10013] RBP: 00007f4eaea90090 R08: 0000000000000000 R09: 0000000000000000 [ 211.742638][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.742649][T10013] R13: 0000000000000000 R14: 00007f4eaddb5fa0 R15: 00007ffda9021cb8 [ 211.742682][T10013] [ 212.080292][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 212.089914][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 212.096446][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 212.488019][T10037] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 212.540234][T10040] macvtap1: entered allmulticast mode [ 212.558392][T10040] veth0_macvtap: entered allmulticast mode [ 212.661157][T10051] FAULT_INJECTION: forcing a failure. [ 212.661157][T10051] name failslab, interval 1, probability 0, space 0, times 0 [ 212.715984][T10051] CPU: 1 UID: 0 PID: 10051 Comm: syz.0.1379 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 212.716012][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 212.716023][T10051] Call Trace: [ 212.716030][T10051] [ 212.716038][T10051] dump_stack_lvl+0x189/0x250 [ 212.716071][T10051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.716097][T10051] ? __pfx__printk+0x10/0x10 [ 212.716122][T10051] ? __pfx___might_resched+0x10/0x10 [ 212.716143][T10051] should_fail_ex+0x414/0x560 [ 212.716177][T10051] should_failslab+0xa8/0x100 [ 212.716202][T10051] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 212.716226][T10051] ? __alloc_skb+0x112/0x2d0 [ 212.716250][T10051] __alloc_skb+0x112/0x2d0 [ 212.716274][T10051] netlink_sendmsg+0x5c6/0xb30 [ 212.716304][T10051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.716328][T10051] ? aa_sock_msg_perm+0x94/0x160 [ 212.716348][T10051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.716368][T10051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.716388][T10051] __sock_sendmsg+0x219/0x270 [ 212.716420][T10051] ____sys_sendmsg+0x505/0x830 [ 212.716448][T10051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.716480][T10051] ? import_iovec+0x74/0xa0 [ 212.716507][T10051] ___sys_sendmsg+0x21f/0x2a0 [ 212.716532][T10051] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.716589][T10051] ? __fget_files+0x2a/0x420 [ 212.716611][T10051] ? __fget_files+0x3a0/0x420 [ 212.716644][T10051] __x64_sys_sendmsg+0x19b/0x260 [ 212.716669][T10051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.716708][T10051] ? do_syscall_64+0xba/0x210 [ 212.716738][T10051] do_syscall_64+0xf6/0x210 [ 212.716765][T10051] ? clear_bhb_loop+0x45/0xa0 [ 212.716787][T10051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.716803][T10051] RIP: 0033:0x7fcdce78e969 [ 212.716823][T10051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.716838][T10051] RSP: 002b:00007fcdcc5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.716857][T10051] RAX: ffffffffffffffda RBX: 00007fcdce9b5fa0 RCX: 00007fcdce78e969 [ 212.716870][T10051] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000003 [ 212.716882][T10051] RBP: 00007fcdcc5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.716893][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.716903][T10051] R13: 0000000000000000 R14: 00007fcdce9b5fa0 R15: 00007ffdbc537008 [ 212.716931][T10051] [ 213.061251][T10059] delete_channel: no stack [ 213.259586][T10067] FAULT_INJECTION: forcing a failure. [ 213.259586][T10067] name failslab, interval 1, probability 0, space 0, times 0 [ 213.337344][T10067] CPU: 0 UID: 0 PID: 10067 Comm: syz.1.1384 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 213.337371][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 213.337384][T10067] Call Trace: [ 213.337392][T10067] [ 213.337400][T10067] dump_stack_lvl+0x189/0x250 [ 213.337437][T10067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.337466][T10067] ? __pfx__printk+0x10/0x10 [ 213.337490][T10067] ? __pfx___might_resched+0x10/0x10 [ 213.337507][T10067] ? fs_reclaim_acquire+0x7d/0x100 [ 213.337540][T10067] should_fail_ex+0x414/0x560 [ 213.337577][T10067] should_failslab+0xa8/0x100 [ 213.337604][T10067] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 213.337628][T10067] ? __alloc_skb+0x112/0x2d0 [ 213.337653][T10067] __alloc_skb+0x112/0x2d0 [ 213.337678][T10067] netlink_ack+0x146/0xa50 [ 213.337697][T10067] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.337742][T10067] netlink_rcv_skb+0x2a0/0x490 [ 213.337763][T10067] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.337792][T10067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.337837][T10067] ? down_read+0x1ad/0x2e0 [ 213.337876][T10067] genl_rcv+0x28/0x40 [ 213.337901][T10067] netlink_unicast+0x758/0x8d0 [ 213.337931][T10067] netlink_sendmsg+0x805/0xb30 [ 213.337963][T10067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.337989][T10067] ? aa_sock_msg_perm+0x94/0x160 [ 213.338012][T10067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.338034][T10067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.338057][T10067] __sock_sendmsg+0x219/0x270 [ 213.338092][T10067] ____sys_sendmsg+0x505/0x830 [ 213.338132][T10067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.338168][T10067] ? import_iovec+0x74/0xa0 [ 213.338199][T10067] ___sys_sendmsg+0x21f/0x2a0 [ 213.338227][T10067] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.338292][T10067] ? __fget_files+0x2a/0x420 [ 213.338317][T10067] ? __fget_files+0x3a0/0x420 [ 213.338353][T10067] __x64_sys_sendmsg+0x19b/0x260 [ 213.338382][T10067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.338426][T10067] ? do_syscall_64+0xba/0x210 [ 213.338460][T10067] do_syscall_64+0xf6/0x210 [ 213.338490][T10067] ? clear_bhb_loop+0x45/0xa0 [ 213.338515][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.338535][T10067] RIP: 0033:0x7f4eadb8e969 [ 213.338552][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.338569][T10067] RSP: 002b:00007f4eaea90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.338591][T10067] RAX: ffffffffffffffda RBX: 00007f4eaddb5fa0 RCX: 00007f4eadb8e969 [ 213.338606][T10067] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 213.338618][T10067] RBP: 00007f4eaea90090 R08: 0000000000000000 R09: 0000000000000000 [ 213.338630][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.338641][T10067] R13: 0000000000000000 R14: 00007f4eaddb5fa0 R15: 00007ffda9021cb8 [ 213.338672][T10067] [ 214.015678][T10090] __nla_validate_parse: 1 callbacks suppressed [ 214.015699][T10090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1388'. [ 214.104958][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1388'. [ 214.113998][T10090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1388'. [ 214.653887][T10119] FAULT_INJECTION: forcing a failure. [ 214.653887][T10119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.670659][T10119] CPU: 0 UID: 0 PID: 10119 Comm: syz.0.1405 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 214.670689][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 214.670701][T10119] Call Trace: [ 214.670709][T10119] [ 214.670717][T10119] dump_stack_lvl+0x189/0x250 [ 214.670748][T10119] ? __lock_acquire+0xaac/0xd20 [ 214.670779][T10119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.670807][T10119] ? __pfx__printk+0x10/0x10 [ 214.670828][T10119] ? __might_fault+0xb0/0x130 [ 214.670865][T10119] should_fail_ex+0x414/0x560 [ 214.670902][T10119] _copy_from_iter+0x1db/0x15a0 [ 214.670934][T10119] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 214.670956][T10119] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 214.670981][T10119] ? __pfx__copy_from_iter+0x10/0x10 [ 214.671007][T10119] ? __build_skb_around+0x257/0x3e0 [ 214.671040][T10119] ? netlink_sendmsg+0x642/0xb30 [ 214.671061][T10119] ? skb_put+0x11b/0x210 [ 214.671088][T10119] netlink_sendmsg+0x6b2/0xb30 [ 214.671120][T10119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.671146][T10119] ? aa_sock_msg_perm+0x94/0x160 [ 214.671170][T10119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.671192][T10119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.671216][T10119] __sock_sendmsg+0x219/0x270 [ 214.671250][T10119] ____sys_sendmsg+0x505/0x830 [ 214.671282][T10119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.671317][T10119] ? import_iovec+0x74/0xa0 [ 214.671348][T10119] ___sys_sendmsg+0x21f/0x2a0 [ 214.671376][T10119] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.671439][T10119] ? __fget_files+0x2a/0x420 [ 214.671464][T10119] ? __fget_files+0x3a0/0x420 [ 214.671500][T10119] __x64_sys_sendmsg+0x19b/0x260 [ 214.671528][T10119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.671570][T10119] ? do_syscall_64+0xba/0x210 [ 214.671602][T10119] do_syscall_64+0xf6/0x210 [ 214.671632][T10119] ? clear_bhb_loop+0x45/0xa0 [ 214.671655][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.671675][T10119] RIP: 0033:0x7fcdce78e969 [ 214.671692][T10119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.671710][T10119] RSP: 002b:00007fcdcc5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.671730][T10119] RAX: ffffffffffffffda RBX: 00007fcdce9b5fa0 RCX: 00007fcdce78e969 [ 214.671745][T10119] RDX: 0000000000004000 RSI: 0000200000000300 RDI: 0000000000000003 [ 214.671757][T10119] RBP: 00007fcdcc5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.671769][T10119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.671781][T10119] R13: 0000000000000000 R14: 00007fcdce9b5fa0 R15: 00007ffdbc537008 [ 214.671811][T10119] [ 215.628123][T10146] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1414'. [ 216.000152][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 216.171784][T10162] xt_TCPMSS: Only works on TCP SYN packets [ 216.206565][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1421'. [ 216.293590][T10165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1420'. [ 216.319976][T10167] tipc: Started in network mode [ 216.335997][T10167] tipc: Node identity 4ec78da49f53, cluster identity 4711 [ 216.361782][T10167] tipc: Enabled bearer , priority 0 [ 216.474723][T10169] syzkaller0: entered promiscuous mode [ 216.501463][T10169] syzkaller0: entered allmulticast mode [ 216.518005][T10169] tipc: Resetting bearer [ 216.589763][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1423'. [ 216.670579][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 216.681437][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 216.865359][T10172] tipc: Resetting bearer [ 217.426421][ T9] tipc: Node number set to 3516173732 [ 218.669181][T10172] tipc: Disabling bearer [ 218.729087][T10184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.880015][T10184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.056825][T10192] hsr0 speed is unknown, defaulting to 1000 [ 219.118180][T10184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.272433][T10184] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.288457][T10212] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 219.302806][T10212] __nla_validate_parse: 1 callbacks suppressed [ 219.302823][T10212] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1434'. [ 219.471094][T10184] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.519838][T10184] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.565614][T10184] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.599545][T10184] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.739716][T10222] sctp: [Deprecated]: syz.0.1438 (pid 10222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.739716][T10222] Use struct sctp_sack_info instead [ 219.786739][T10224] netlink: 'syz.4.1439': attribute type 1 has an invalid length. [ 219.799861][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1438'. [ 219.893443][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 219.928704][T10224] bond11: entered promiscuous mode [ 219.934458][T10224] 8021q: adding VLAN 0 to HW filter on device bond11 [ 219.938457][T10230] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1439'. [ 220.030746][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 220.056122][T10224] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1439'. [ 220.074417][T10230] batadv14: entered promiscuous mode [ 220.082021][T10235] x_tables: duplicate underflow at hook 1 [ 220.152023][T10230] batadv14: entered allmulticast mode [ 220.212931][T10224] batadv15: entered promiscuous mode [ 220.225302][T10224] batadv15: entered allmulticast mode [ 220.333863][T10242] veth2: entered allmulticast mode [ 220.509455][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'. [ 220.544583][T10247] xt_hashlimit: size too large, truncated to 1048576 [ 220.976532][T10269] Cannot find del_set index 0 as target [ 221.005840][T10272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.051076][T10273] netlink: 'syz.3.1454': attribute type 1 has an invalid length. [ 221.069563][T10273] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 221.087008][T10275] netlink: 'syz.4.1455': attribute type 27 has an invalid length. [ 221.180121][T10279] netlink: 'syz.1.1456': attribute type 10 has an invalid length. [ 221.188602][T10276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.480295][T10275] batadv_slave_0: left promiscuous mode [ 221.583544][T10275] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.593971][T10275] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.629117][T10275] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.637811][T10275] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.717259][T10275] vti0: left promiscuous mode [ 221.732942][T10275] bond2: left promiscuous mode [ 221.762952][T10275] batadv1: left promiscuous mode [ 221.784150][T10275] batadv1: left allmulticast mode [ 221.815150][T10275] batadv2: left promiscuous mode [ 221.820174][T10275] batadv2: left allmulticast mode [ 221.855580][T10275] bond3: left promiscuous mode [ 221.862533][T10275] batadv3: left promiscuous mode [ 221.894974][T10275] batadv3: left allmulticast mode [ 221.900263][T10275] batadv4: left promiscuous mode [ 221.912998][T10275] batadv4: left allmulticast mode [ 221.919457][T10275] bridge1: left allmulticast mode [ 221.935876][T10275] bond4: left promiscuous mode [ 221.942546][T10275] batadv5: left promiscuous mode [ 221.965125][T10275] batadv5: left allmulticast mode [ 221.970386][T10275] batadv6: left promiscuous mode [ 221.985603][T10275] batadv6: left allmulticast mode [ 221.991443][T10275] bond5: left promiscuous mode [ 222.005665][T10275] batadv7: left promiscuous mode [ 222.010677][T10275] batadv7: left allmulticast mode [ 222.023320][T10275] batadv8: left promiscuous mode [ 222.028385][T10275] batadv8: left allmulticast mode [ 222.034235][T10275] bond6: left promiscuous mode [ 222.046569][T10275] batadv9: left promiscuous mode [ 222.051629][T10275] batadv9: left allmulticast mode [ 222.066295][T10275] batadv10: left promiscuous mode [ 222.071475][T10275] batadv10: left allmulticast mode [ 222.086524][T10275] ip6erspan0: left promiscuous mode [ 222.097317][T10275] veth3: left promiscuous mode [ 222.115360][T10275] bond9: left promiscuous mode [ 222.121850][T10275] batadv12: left promiscuous mode [ 222.141503][T10275] batadv12: left allmulticast mode [ 222.147008][T10275] batadv13: left promiscuous mode [ 222.152065][T10275] batadv13: left allmulticast mode [ 222.158191][T10275] bond10: left promiscuous mode [ 222.171475][T10275] bond11: left promiscuous mode [ 222.177342][T10275] batadv14: left promiscuous mode [ 222.182426][T10275] batadv14: left allmulticast mode [ 222.194708][T10275] batadv15: left promiscuous mode [ 222.200258][T10275] batadv15: left allmulticast mode [ 222.470059][T10313] bond12: entered promiscuous mode [ 222.480237][T10313] 8021q: adding VLAN 0 to HW filter on device bond12 [ 222.505201][T10317] tipc: Enabling of bearer rejected, failed to enable media [ 222.807414][T10330] x_tables: ip_tables: ah match: only valid for protocol 51 [ 223.047290][T10336] bridge1: entered allmulticast mode [ 223.187332][T10351] xt_socket: unknown flags 0xd0 [ 223.226812][T10351] netlink: 'syz.1.1472': attribute type 5 has an invalid length. [ 223.256437][T10351] macsec2: entered promiscuous mode [ 223.342360][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 223.530776][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1475'. [ 223.553564][T10373] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 223.713273][T10383] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 223.909650][T10380] delete_channel: no stack [ 223.946236][T10388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.167638][T10396] hsr0 speed is unknown, defaulting to 1000 [ 224.353860][T10403] __nla_validate_parse: 2 callbacks suppressed [ 224.353881][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 224.446438][T10403] netlink: 'syz.0.1487': attribute type 16 has an invalid length. [ 224.454336][T10403] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1487'. [ 224.523615][T10409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1488'. [ 224.557782][T10403] netlink: 'syz.0.1487': attribute type 9 has an invalid length. [ 224.589652][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 224.610411][T10408] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 224.656062][T10416] netlink: 'syz.3.1491': attribute type 10 has an invalid length. [ 224.687068][T10403] macvlan2: entered promiscuous mode [ 224.700986][T10403] hsr0: entered promiscuous mode [ 224.715505][T10403] macvlan2: entered allmulticast mode [ 224.744529][T10403] hsr0: entered allmulticast mode [ 224.757010][T10403] hsr_slave_0: entered allmulticast mode [ 224.773712][T10403] hsr_slave_1: entered allmulticast mode [ 224.828058][T10423] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 225.192447][T10436] netlink: 'syz.0.1497': attribute type 6 has an invalid length. [ 225.202997][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1496'. [ 225.234372][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 225.269662][T10433] netlink: 'syz.2.1496': attribute type 1 has an invalid length. [ 225.278018][T10433] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1496'. [ 225.315399][T10433] block nbd2: Unsupported socket: shutdown callout must be supported. [ 225.358764][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 225.378239][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1495'. [ 225.405466][T10434] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1495'. [ 225.453997][T10446] netlink: 'syz.2.1500': attribute type 5 has an invalid length. [ 225.494628][T10446] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 225.528430][T10446] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 225.547510][T10446] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 225.585052][T10446] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 225.595016][ T5840] Bluetooth: hci0: command tx timeout [ 225.606059][T10446] geneve2: entered promiscuous mode [ 225.640485][T10446] geneve2: entered allmulticast mode [ 225.961433][T10474] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 226.045467][T10474] bond5: entered promiscuous mode [ 226.051443][T10474] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.060203][T10458] hsr0 speed is unknown, defaulting to 1000 [ 226.088891][T10474] batadv1: entered promiscuous mode [ 226.100515][T10479] xt_TCPMSS: Only works on TCP SYN packets [ 226.119166][T10474] batadv1: entered allmulticast mode [ 226.203055][T10478] batadv2: entered promiscuous mode [ 226.243092][T10478] batadv2: entered allmulticast mode [ 227.181853][T10509] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 227.257203][T10509] bond7: entered promiscuous mode [ 227.265560][T10509] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.320752][T10519] batadv5: entered promiscuous mode [ 227.334870][T10519] batadv5: entered allmulticast mode [ 227.355985][T10422] delete_channel: no stack [ 227.394134][T10516] batadv6: entered promiscuous mode [ 227.399783][T10516] batadv6: entered allmulticast mode [ 227.404603][T10521] x_tables: ip_tables: osf match: only valid for protocol 6 [ 227.424701][T10523] netlink: 'syz.2.1519': attribute type 1 has an invalid length. [ 227.484719][T10523] bond3: entered promiscuous mode [ 227.523938][T10523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.610201][T10535] netlink: 'syz.3.1520': attribute type 27 has an invalid length. [ 228.051826][T10535] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.071046][T10535] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.087593][T10535] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.096629][T10535] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.139659][T10535] bond1: left promiscuous mode [ 228.146703][T10535] bond2: left promiscuous mode [ 228.153320][T10535] bond3: left promiscuous mode [ 228.189467][T10535] bond4: left promiscuous mode [ 228.210206][T10535] bond5: left promiscuous mode [ 228.225781][T10535] batadv1: left promiscuous mode [ 228.233035][T10535] batadv1: left allmulticast mode [ 228.238452][T10535] batadv2: left promiscuous mode [ 228.243632][T10535] batadv2: left allmulticast mode [ 228.259736][T10525] batadv3: entered promiscuous mode [ 228.275610][T10525] batadv3: entered allmulticast mode [ 228.293095][T10523] batadv4: entered promiscuous mode [ 228.305115][T10523] batadv4: entered allmulticast mode [ 228.523206][T10556] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 228.839015][T10556] wg1: entered promiscuous mode [ 228.846784][T10556] wg1: entered allmulticast mode [ 228.881827][T10556] syz.0.1528 (10556) used greatest stack depth: 19712 bytes left [ 229.066386][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.076629][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.233652][T10586] veth0_to_bridge: entered promiscuous mode [ 229.241422][T10586] veth0_to_bridge: left promiscuous mode [ 229.815729][T10597] __nla_validate_parse: 16 callbacks suppressed [ 229.815750][T10597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1542'. [ 230.232909][T10611] netlink: 'syz.0.1546': attribute type 7 has an invalid length. [ 230.363043][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'. [ 230.483526][T10615] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.758683][T10560] delete_channel: no stack [ 231.007390][ T5840] block nbd2: Receive control failed (result -32) [ 231.151994][T10642] hsr0 speed is unknown, defaulting to 1000 [ 231.279268][T10651] bond0: (slave wlan1): Releasing backup interface [ 231.306774][T10651] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 231.313697][T10651] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 231.620911][T10638] hsr0 speed is unknown, defaulting to 1000 [ 231.936230][T10662] delete_channel: no stack [ 232.196627][T10658] hsr0 speed is unknown, defaulting to 1000 [ 233.308257][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 233.446321][T10684] hsr0 speed is unknown, defaulting to 1000 [ 233.844168][T10303] page_pool_release_retry() stalled pool shutdown: id 28, 1 inflight 60 sec [ 234.155675][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1570'. [ 234.262216][T10690] hsr0 speed is unknown, defaulting to 1000 [ 234.762046][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'. [ 234.823505][T10702] netlink: 'syz.2.1574': attribute type 3 has an invalid length. [ 234.847130][T10703] netlink: 'syz.4.1572': attribute type 1 has an invalid length. [ 234.865082][T10703] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1572'. [ 234.900155][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 235.618972][T10722] Bluetooth: MGMT ver 1.23 [ 235.636478][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1579'. [ 235.847592][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1579'. [ 235.861961][T10704] delete_channel: no stack [ 236.348723][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 236.406450][T10741] ksmbd: Unknown IPC event: 1, ignore. [ 236.595994][T10738] bond0: (slave macvlan2): Opening slave failed [ 236.648219][T10748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1587'. [ 236.660975][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1587'. [ 236.675681][T10748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1587'. [ 237.060774][T10754] vlan3: entered allmulticast mode [ 237.066356][T10754] veth1_to_hsr: entered allmulticast mode [ 237.137234][T10757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1591'. [ 237.180186][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1591'. [ 237.542665][T10771] Bluetooth: MGMT ver 1.23 [ 237.560390][T10765] hsr0 speed is unknown, defaulting to 1000 [ 237.575881][T10758] delete_channel: no stack [ 238.150555][T10796] tipc: Started in network mode [ 238.167155][T10796] tipc: Node identity 5, cluster identity 4711 [ 238.189656][T10796] tipc: Node number set to 5 [ 238.736505][T10806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 239.000796][T10815] ip6gre1: entered allmulticast mode [ 239.009727][T10809] delete_channel: no stack [ 239.885990][T10847] delete_channel: no stack [ 239.904623][T10863] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 239.921724][T10859] hsr0 speed is unknown, defaulting to 1000 [ 239.943423][T10858] syzkaller1: entered promiscuous mode [ 239.949125][T10858] syzkaller1: entered allmulticast mode [ 240.134696][T10872] ip6tnl1: entered promiscuous mode [ 240.151660][T10872] ip6tnl1: entered allmulticast mode [ 240.353840][T10888] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 240.383136][T10887] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 240.503725][T10860] hsr0 speed is unknown, defaulting to 1000 [ 241.138187][T10907] delete_channel: no stack [ 241.623381][T10929] __nla_validate_parse: 8 callbacks suppressed [ 241.623402][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 241.699942][T10929] 8021q: VLANs not supported on nlmon0 [ 242.099746][T10941] x_tables: ip_tables: ah match: only valid for protocol 51 [ 242.301262][T10951] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1651'. [ 242.310598][T10951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'. [ 242.329127][T10951] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1651'. [ 242.387645][T10944] delete_channel: no stack [ 242.448548][T10954] lo: left promiscuous mode [ 242.453411][T10954] tunl0: left promiscuous mode [ 242.459123][T10954] gre0: left promiscuous mode [ 242.475694][T10954] gretap0: left promiscuous mode [ 242.480957][T10954] erspan0: left promiscuous mode [ 242.495586][T10954] ip_vti0: left promiscuous mode [ 242.500895][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 242.514261][T10954] ip6_vti0: left promiscuous mode [ 242.519831][T10954] sit0: left promiscuous mode [ 242.524788][T10955] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 242.536023][T10954] ip6tnl0: left promiscuous mode [ 242.541262][T10954] ip6gre0: left promiscuous mode [ 242.546729][T10954] syz_tun: left promiscuous mode [ 242.551993][T10954] ip6gretap0: left promiscuous mode [ 242.558221][T10954] bond0: left promiscuous mode [ 242.563403][T10954] team0: left promiscuous mode [ 242.568942][T10954] dummy0: left promiscuous mode [ 242.574386][T10954] nlmon0: left promiscuous mode [ 242.579587][T10954] caif0: left promiscuous mode [ 242.584683][T10954] batadv0: left promiscuous mode [ 242.589994][T10954] vxcan0: left promiscuous mode [ 242.595111][T10954] vxcan1: left promiscuous mode [ 242.600195][T10954] veth0: left promiscuous mode [ 242.605337][T10954] veth1: left promiscuous mode [ 242.610448][T10954] wg0: left promiscuous mode [ 242.615354][T10954] wg1: left promiscuous mode [ 242.620228][T10954] wg2: left promiscuous mode [ 242.625163][T10954] veth0_to_bridge: left promiscuous mode [ 242.631067][T10954] bridge_slave_0: left promiscuous mode [ 242.637123][T10954] veth1_to_bridge: left promiscuous mode [ 242.643016][T10954] bridge_slave_1: left promiscuous mode [ 242.648908][T10954] veth0_to_bond: left promiscuous mode [ 242.654674][T10954] @: left promiscuous mode [ 242.665058][T10954] veth1_to_bond: left promiscuous mode [ 242.670789][T10954] bond_slave_1: left promiscuous mode [ 242.685577][T10954] veth0_to_team: left promiscuous mode [ 242.691391][T10954] team_slave_0: left promiscuous mode [ 242.697402][T10954] veth1_to_team: left promiscuous mode [ 242.705057][T10954] team_slave_1: left promiscuous mode [ 242.725217][T10954] veth0_to_batadv: left promiscuous mode [ 242.731176][T10954] batadv_slave_0: left promiscuous mode [ 242.734990][T10955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.741319][T10954] veth1_to_batadv: left promiscuous mode [ 242.765229][T10954] batadv_slave_1: left promiscuous mode [ 242.771029][T10954] xfrm0: left promiscuous mode [ 242.795803][T10954] veth0_to_hsr: left promiscuous mode [ 242.805596][T10954] veth1_to_hsr: left promiscuous mode [ 242.811423][T10954] hsr0: left promiscuous mode [ 242.831958][T10954] veth1_virt_wifi: left promiscuous mode [ 242.842067][T10954] veth0_virt_wifi: left promiscuous mode [ 242.862263][T10954] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 242.874782][T10954] vlan0: left promiscuous mode [ 242.885138][T10954] vlan1: left promiscuous mode [ 242.890266][T10954] macvlan0: left promiscuous mode [ 242.895708][T10954] macvlan1: left promiscuous mode [ 242.900934][T10954] ipvlan0: left promiscuous mode [ 242.906412][T10954] ipvlan1: left promiscuous mode [ 242.911925][T10954] macvtap0: left promiscuous mode [ 242.918384][T10954] macsec0: left promiscuous mode [ 242.923629][T10954] geneve0: left promiscuous mode [ 242.928979][T10954] geneve1: left promiscuous mode [ 242.934216][T10954] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 242.941690][T10954] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 242.949082][T10954] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 242.957265][T10954] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 242.964605][T10954] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 242.973309][T10954] bond1: left promiscuous mode [ 242.978977][T10954] batadv1: left promiscuous mode [ 242.985545][T10954] batadv2: left promiscuous mode [ 242.992132][T10954] bond2: left promiscuous mode [ 242.997280][T10954] bond3: left promiscuous mode [ 243.002305][T10954] macsec1: left promiscuous mode [ 243.007775][T10954] ip6tnl1: left promiscuous mode [ 243.012983][T10954] vxlan0: left promiscuous mode [ 243.018358][T10954] syztnl2: left promiscuous mode [ 243.023866][T10954] bond4: left promiscuous mode [ 243.029341][T10954] batadv3: left promiscuous mode [ 243.034659][T10954] batadv4: left promiscuous mode [ 243.040085][T10954] bond5: left promiscuous mode [ 243.051179][T10954] batadv5: left promiscuous mode [ 243.056801][T10954] batadv6: left promiscuous mode [ 243.063033][T10954] bond6: left promiscuous mode [ 243.086620][T10954] batadv7: left promiscuous mode [ 243.091740][T10954] batadv7: left allmulticast mode [ 243.097329][T10954] batadv8: left promiscuous mode [ 243.102431][T10954] batadv8: left allmulticast mode [ 243.108690][T10954] bond7: left promiscuous mode [ 243.117318][T10954] bond8: left promiscuous mode [ 243.132064][T10954] bond9: left allmulticast mode [ 243.149292][T10954] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 47668 - 0 [ 243.162775][T10954] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 47668 - 0 [ 243.172524][T10954] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 47668 - 0 [ 243.181639][T10954] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 47668 - 0 [ 243.191061][T10954] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 57164 - 0 [ 243.200582][T10954] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 57164 - 0 [ 243.209805][T10954] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 57164 - 0 [ 243.218909][T10954] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 57164 - 0 [ 243.228259][T10954] geneve2: left promiscuous mode [ 243.233339][T10954] geneve2: left allmulticast mode [ 243.270254][T10954] ipvlan2: left allmulticast mode [ 243.286793][T10954] macsec0: left allmulticast mode [ 243.301835][T10954] bond10: left promiscuous mode [ 243.317660][T10954] bond11: left promiscuous mode [ 243.329737][T10954] veth0_macvtap: left allmulticast mode [ 243.338326][T10954] macvtap1: left allmulticast mode [ 243.503998][T10975] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1658'. [ 243.517691][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 243.544988][T10975] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 243.632330][T10980] Cannot find del_set index 0 as target [ 243.659884][T10982] batadv_slave_1: entered promiscuous mode [ 243.704085][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 244.057597][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 244.158016][T10985] delete_channel: no stack [ 244.388321][T11022] tipc: Started in network mode [ 244.393267][T11022] tipc: Node identity aa64f3b89ac4, cluster identity 4711 [ 244.416866][T11022] tipc: Enabled bearer , priority 0 [ 244.647613][T11022] tipc: Disabling bearer [ 245.044440][T11058] netlink: 'syz.0.1684': attribute type 58 has an invalid length. [ 245.478682][T11082] IPv6: Can't replace route, no match found [ 245.486101][T11075] batman_adv: batadv0: Adding interface: dummy0 [ 245.492385][T11075] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.526948][T11075] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 245.582095][T11086] xt_TCPMSS: Only works on TCP SYN packets [ 245.930468][T11093] mac80211_hwsim hwsim4 wlan0: Device is already in use. [ 246.669894][T11124] __nla_validate_parse: 7 callbacks suppressed [ 246.669921][T11124] netlink: 460 bytes leftover after parsing attributes in process `syz.3.1704'. [ 246.899695][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 247.113506][T11151] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 247.136167][T11151] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1714'. [ 247.336735][T11159] trusted_key: syz.0.1717 sent an empty control message without MSG_MORE. [ 247.587739][T11165] netlink: 'syz.0.1719': attribute type 1 has an invalid length. [ 247.752687][T11172] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 247.855831][T11172] bond9: entered promiscuous mode [ 247.861382][T11172] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.880090][T11176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1722'. [ 247.927026][T11180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1723'. [ 247.969196][T11181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1722'. [ 248.127554][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1728'. [ 248.174221][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1728'. [ 248.246880][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1730'. [ 248.282236][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 248.523373][T11209] netlink: 'syz.0.1734': attribute type 2 has an invalid length. [ 248.543473][T11212] team0: entered allmulticast mode [ 248.577049][T11209] : entered promiscuous mode [ 248.682256][T11219] netlink: 'syz.2.1737': attribute type 11 has an invalid length. [ 248.742191][T11224] netlink: 'syz.2.1737': attribute type 11 has an invalid length. [ 248.784776][T11226] netlink: 'syz.0.1738': attribute type 7 has an invalid length. [ 248.793350][T11226] netlink: 'syz.0.1738': attribute type 8 has an invalid length. [ 248.878608][T11230] Cannot find map_set index 0 as target [ 248.931568][T11230] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 249.203225][T11245] macvlan2: entered promiscuous mode [ 249.231913][T11245] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.273576][T11252] syz_tun: entered allmulticast mode [ 249.297477][T11251] syz_tun: left allmulticast mode [ 249.481645][T11260] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 249.603882][T11260] bond13: entered promiscuous mode [ 249.610759][T11260] 8021q: adding VLAN 0 to HW filter on device bond13 [ 250.018205][T11262] delete_channel: no stack [ 250.057102][T11265] hsr0 speed is unknown, defaulting to 1000 [ 250.135260][T11267] macvlan3: entered promiscuous mode [ 250.461452][T11278] netlink: 'syz.1.1756': attribute type 3 has an invalid length. [ 251.141269][T11298] bond10: entered promiscuous mode [ 251.170387][T11298] 8021q: adding VLAN 0 to HW filter on device bond10 [ 251.756131][T11321] __nla_validate_parse: 13 callbacks suppressed [ 251.756152][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 251.998861][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 252.197804][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 252.238984][T11333] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 252.328768][T11330] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1772'. [ 252.558621][T11346] validate_nla: 4 callbacks suppressed [ 252.558640][T11346] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 252.658151][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'. [ 252.735202][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1777'. [ 252.780778][T11346] bond13: entered promiscuous mode [ 252.796116][T11346] 8021q: adding VLAN 0 to HW filter on device bond13 [ 252.810127][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 253.017814][T11374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1786'. [ 253.190725][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 253.395203][T11389] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1793'. [ 253.414476][T11391] rdma_op ffff888027f3c9f0 conn xmit_rdma 0000000000000000 [ 253.443335][T11389] vti0: entered promiscuous mode [ 253.507009][T11395] netlink: 'syz.2.1795': attribute type 1 has an invalid length. [ 253.627251][T11395] bond4: entered promiscuous mode [ 253.651817][T11395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.699578][T11402] Bluetooth: MGMT ver 1.23 [ 253.949699][T11406] Cannot find del_set index 0 as target [ 254.232562][T11423] sch_fq: defrate 0 ignored. [ 254.535863][T11442] netlink: 'syz.2.1806': attribute type 7 has an invalid length. [ 254.564014][T11442] netlink: 'syz.2.1806': attribute type 8 has an invalid length. [ 254.590784][T11442] ipt_REJECT: TCP_RESET invalid for non-tcp [ 254.763619][T11451] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 254.877884][T11451] bond5: entered promiscuous mode [ 254.893518][T11451] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.000538][T11464] x_tables: ip_tables: ah match: only valid for protocol 51 [ 255.136022][T11466] netlink: 'syz.3.1813': attribute type 29 has an invalid length. [ 255.156134][T11466] netlink: 'syz.3.1813': attribute type 29 has an invalid length. [ 255.184957][T11466] netlink: 'syz.3.1813': attribute type 29 has an invalid length. [ 255.193179][T11466] netlink: 'syz.3.1813': attribute type 29 has an invalid length. [ 255.235827][T11466] netlink: 'syz.3.1813': attribute type 29 has an invalid length. [ 255.285941][T11474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 255.306088][T11474] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 255.526897][T11480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 255.611978][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.178622][T11498] bond6: entered promiscuous mode [ 256.216605][T11498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 256.482610][T11515] gretap1: entered promiscuous mode [ 256.488856][T11515] gretap1: entered allmulticast mode [ 256.541345][T11521] syz_tun: entered allmulticast mode [ 256.625743][T11513] syz_tun: left allmulticast mode [ 256.675841][T11525] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 256.695848][T11524] macsec0: entered promiscuous mode [ 256.701117][T11524] dummy0: entered promiscuous mode [ 256.726672][T11524] macsec0: entered allmulticast mode [ 256.732034][T11524] dummy0: entered allmulticast mode [ 256.776040][T11524] dummy0: left allmulticast mode [ 256.806648][T11524] dummy0: left promiscuous mode [ 256.987658][T11525] vlan2: entered promiscuous mode [ 256.992755][T11525] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 257.068032][T11525] vlan2: entered allmulticast mode [ 257.077966][T11525] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 257.573134][T11552] __nla_validate_parse: 10 callbacks suppressed [ 257.573156][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'. [ 257.580263][T11558] validate_nla: 27 callbacks suppressed [ 257.580281][T11558] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 257.604771][T11558] bond6: entered promiscuous mode [ 257.611120][T11558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 257.622901][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1838'. [ 257.632560][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1838'. [ 257.694650][T11563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 257.907187][T11565] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1844'. [ 258.174458][T11567] hsr0 speed is unknown, defaulting to 1000 [ 258.407776][T11595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'. [ 258.501330][T11596] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.521954][T11596] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.535902][T11596] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.575182][T11596] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.625747][T11596] geneve3: entered promiscuous mode [ 259.105748][T11606] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 259.198913][T11609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1854'. [ 259.205350][T11606] bond7: entered promiscuous mode [ 259.213499][T11606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.250117][T11606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1854'. [ 259.348563][T11610] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1855'. [ 259.427401][T11613] dvmrp0: entered allmulticast mode [ 259.455619][T11613] dvmrp0: left allmulticast mode [ 259.625350][T11619] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 259.675191][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1857'. [ 259.906057][T11623] hsr0 speed is unknown, defaulting to 1000 [ 260.167280][T11637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1864'. [ 260.245711][T11638] batadv_slave_0: entered promiscuous mode [ 260.299958][T11638] batadv_slave_0: left promiscuous mode [ 260.638403][T11650] netlink: 'syz.0.1866': attribute type 1 has an invalid length. [ 260.676986][T11652] Cannot find del_set index 0 as target [ 260.798477][T11650] bond11: entered promiscuous mode [ 260.824576][T11650] 8021q: adding VLAN 0 to HW filter on device bond11 [ 261.107194][T11662] tipc: New replicast peer: 255.255.255.255 [ 261.161123][T11662] tipc: Enabled bearer , priority 10 [ 261.239506][T11627] xt_hashlimit: invalid rate [ 261.245703][T11666] tipc: Disabling bearer [ 261.456208][T11662] vxcan3: entered allmulticast mode [ 261.515620][T11674] netlink: 'syz.4.1870': attribute type 3 has an invalid length. [ 262.286628][T11699] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 262.410740][T11699] bond7: entered promiscuous mode [ 262.416398][T11699] 8021q: adding VLAN 0 to HW filter on device bond7 [ 262.638354][T11708] __nla_validate_parse: 4 callbacks suppressed [ 262.638376][T11708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1880'. [ 262.686118][T11710] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.1881'. [ 262.716273][T11710] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 262.735032][T11710] openvswitch: netlink: Message has 13 unknown bytes. [ 262.874329][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'. [ 263.308769][T11723] hsr0 speed is unknown, defaulting to 1000 [ 263.945068][T11742] netlink: 'syz.4.1890': attribute type 1 has an invalid length. [ 264.148498][T11742] bond14: entered promiscuous mode [ 264.179379][T11742] 8021q: adding VLAN 0 to HW filter on device bond14 [ 264.312842][T11754] No such timeout policy "syz0" [ 264.578397][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1886'. [ 264.655705][T11760] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 264.757934][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 264.784057][T11760] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 264.845241][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 264.871780][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 264.924715][ T5944] IPVS: starting estimator thread 0... [ 265.024923][T11784] IPVS: using max 31 ests per chain, 74400 per kthread [ 265.030793][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 265.421289][T11801] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 265.501898][T11806] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1905'. [ 265.681287][T11801] bond12: entered promiscuous mode [ 265.689402][T11801] 8021q: adding VLAN 0 to HW filter on device bond12 [ 266.138342][T11832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1912'. [ 266.192493][T11832] vti0: entered promiscuous mode [ 266.261616][T11836] xt_connbytes: Forcing CT accounting to be enabled [ 266.268925][T11836] set match dimension is over the limit! [ 266.310187][T11837] hsr0 speed is unknown, defaulting to 1000 [ 266.377849][T11836] netlink: 'syz.4.1914': attribute type 11 has an invalid length. [ 266.636050][T11852] netlink: 'syz.2.1919': attribute type 1 has an invalid length. [ 266.660449][T11853] netlink: 'syz.4.1918': attribute type 11 has an invalid length. [ 266.795286][T11852] bond8: entered promiscuous mode [ 266.837251][T11852] 8021q: adding VLAN 0 to HW filter on device bond8 [ 267.508897][T11894] Cannot find add_set index 3 as target [ 267.647032][T11902] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 267.848072][T11902] bond13: entered promiscuous mode [ 267.878378][T11902] 8021q: adding VLAN 0 to HW filter on device bond13 [ 268.051701][T11910] x_tables: ip_tables: ah match: only valid for protocol 51 [ 268.589100][T11936] ip6t_rpfilter: unknown options [ 268.614030][T11936] __nla_validate_parse: 5 callbacks suppressed [ 268.614048][T11936] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1948'. [ 268.661745][T11940] netlink: 'syz.1.1950': attribute type 1 has an invalid length. [ 268.684882][T11937] tipc: Started in network mode [ 268.689812][T11937] tipc: Node identity 724d29d6, cluster identity 4711 [ 268.697015][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1948'. [ 268.716319][T11937] tipc: Node number set to 1917659606 [ 268.764635][T11940] bond14: entered promiscuous mode [ 268.809958][T11940] 8021q: adding VLAN 0 to HW filter on device bond14 [ 268.858606][T11938] wg1: left promiscuous mode [ 268.863346][T11938] wg1: left allmulticast mode [ 268.915142][T11950] netlink: 'syz.3.1952': attribute type 16 has an invalid length. [ 268.931761][T11938] veth2: left allmulticast mode [ 268.952868][T11950] netlink: 'syz.3.1952': attribute type 17 has an invalid length. [ 268.971360][T11938] hsr0: left allmulticast mode [ 268.984946][T11938] hsr_slave_0: left allmulticast mode [ 268.987776][T11954] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 269.005402][T11938] hsr_slave_1: left allmulticast mode [ 269.021033][T11938] hsr0: left promiscuous mode [ 269.046110][T11938] macvlan2: left promiscuous mode [ 269.051377][T11938] macvlan2: left allmulticast mode [ 269.073724][T11938] bond7: left promiscuous mode [ 269.109429][T11938] batadv5: left promiscuous mode [ 269.145255][T11938] batadv5: left allmulticast mode [ 269.165373][T11938] batadv6: left promiscuous mode [ 269.180762][T11938] batadv6: left allmulticast mode [ 269.221273][T11938] ip6gre1: left allmulticast mode [ 269.256048][T11938] bond9: left promiscuous mode [ 269.332879][T11938] bond10: left promiscuous mode [ 269.359588][T11938] bond11: left promiscuous mode [ 269.376564][T11938] vxcan3: left allmulticast mode [ 269.409401][T11938] bond12: left promiscuous mode [ 269.455914][T11938] vti0: left promiscuous mode [ 269.486272][T11938] bond13: left promiscuous mode [ 269.506184][T11951] netlink: 'syz.3.1952': attribute type 29 has an invalid length. [ 269.603172][T11948] hsr0 speed is unknown, defaulting to 1000 [ 269.765280][T11970] netlink: 'syz.3.1959': attribute type 2 has an invalid length. [ 269.794989][T11970] netlink: 'syz.3.1959': attribute type 2 has an invalid length. [ 270.065865][T11983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1962'. [ 270.088493][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1962'. [ 270.210714][T11989] netlink: 'syz.2.1964': attribute type 1 has an invalid length. [ 270.321987][T11989] bond9: entered promiscuous mode [ 270.327821][T11989] 8021q: adding VLAN 0 to HW filter on device bond9 [ 270.345725][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1965'. [ 271.026405][T12018] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 271.046147][T12015] x_tables: ip_tables: ah match: only valid for protocol 51 [ 271.388411][T12031] netlink: 'syz.0.1978': attribute type 1 has an invalid length. [ 271.504114][T12031] bond14: entered promiscuous mode [ 271.509939][T12031] 8021q: adding VLAN 0 to HW filter on device bond14 [ 271.961966][T12053] netlink: 'syz.4.1985': attribute type 10 has an invalid length. [ 271.984776][T12053] veth1_vlan: entered allmulticast mode [ 272.015848][T12053] veth1_vlan: left promiscuous mode [ 272.052179][T12053] team0: Device veth1_vlan failed to register rx_handler [ 272.154712][T12059] x_tables: ip_tables: ah match: only valid for protocol 51 [ 272.577403][T12061] ip6erspan0: entered promiscuous mode [ 272.608448][T12072] IPVS: set_ctl: invalid protocol: 108 172.20.20.44:20003 [ 272.729818][T12069] netlink: 'syz.3.1992': attribute type 29 has an invalid length. [ 272.744353][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 272.878675][T12080] netlink: 'syz.2.1995': attribute type 1 has an invalid length. [ 272.930398][T12087] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1995'. [ 272.963419][T12080] bond10: entered promiscuous mode [ 272.994643][T12080] 8021q: adding VLAN 0 to HW filter on device bond10 [ 273.018792][T12086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.038409][T12089] x_tables: ip_tables: ah match: only valid for protocol 51 [ 273.082788][T12087] batadv5: entered promiscuous mode [ 273.105302][T12087] batadv5: entered allmulticast mode [ 273.116226][T12087] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 273.167323][T12087] bond10: (slave batadv5): making interface the new active one [ 273.185463][T12087] bond10: (slave batadv5): Enslaving as an active interface with an up link [ 273.371884][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 273.383537][T12103] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2004'. [ 273.387793][ T30] audit: type=1800 audit(1746168138.462:3): pid=12104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2003" name="memory.events" dev="tmpfs" ino=2188 res=0 errno=0 [ 273.850527][T12120] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 273.924696][T12120] bond15: entered promiscuous mode [ 273.995567][T12120] 8021q: adding VLAN 0 to HW filter on device bond15 [ 274.024934][T12120] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2012'. [ 274.043034][T12133] netlink: 'syz.2.2013': attribute type 1 has an invalid length. [ 274.051407][T12133] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2013'. [ 274.089260][T12120] batadv16: entered promiscuous mode [ 274.104966][T12120] batadv16: entered allmulticast mode [ 274.116165][T12120] 8021q: adding VLAN 0 to HW filter on device batadv16 [ 274.137712][T12120] bond15: (slave batadv16): making interface the new active one [ 274.167068][T12120] bond15: (slave batadv16): Enslaving as an active interface with an up link [ 274.186035][T12131] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2014'. [ 274.326699][T12144] bridge0: port 1(erspan0) entered blocking state [ 274.342979][T12144] bridge0: port 1(erspan0) entered disabled state [ 274.358900][T12144] erspan0: entered allmulticast mode [ 274.367388][T12144] erspan0: entered promiscuous mode [ 274.395037][T12146] erspan0: left allmulticast mode [ 274.396809][T12147] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$UvyآDUDw}zR3 [ 274.410102][T12146] erspan0: left promiscuous mode [ 274.430763][T12146] bridge0: port 1(erspan0) entered disabled state [ 274.483751][T12144] bridge0: port 1(erspan0) entered blocking state [ 274.491332][T12144] bridge0: port 1(erspan0) entered disabled state [ 274.515106][T12144] erspan0: entered allmulticast mode [ 274.522265][T12144] erspan0: entered promiscuous mode [ 274.618037][T12157] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.2021'. [ 274.634869][T12157] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.2021'. [ 274.726599][T12163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2025'. [ 274.904746][T12171] hsr0 speed is unknown, defaulting to 1000 [ 274.938717][T12182] validate_nla: 1 callbacks suppressed [ 274.938738][T12182] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 275.027391][T12188] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2029'. [ 275.033488][T12182] bond16: entered promiscuous mode [ 275.045946][T12182] 8021q: adding VLAN 0 to HW filter on device bond16 [ 275.106998][T12187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2030'. [ 275.129198][T12188] batadv17: entered promiscuous mode [ 275.155021][T12188] batadv17: entered allmulticast mode [ 275.158104][T12191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 275.172361][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2030'. [ 275.196517][T12188] 8021q: adding VLAN 0 to HW filter on device batadv17 [ 275.223497][T12188] bond16: (slave batadv17): making interface the new active one [ 275.431281][T12188] bond16: (slave batadv17): Enslaving as an active interface with an up link [ 275.474943][T12187] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2030'. [ 276.192641][T12229] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 276.274492][T12234] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 276.456750][T12234] bond11: entered promiscuous mode [ 276.486808][T12234] 8021q: adding VLAN 0 to HW filter on device bond11 [ 276.598426][T12237] batadv6: entered promiscuous mode [ 276.619589][T12237] batadv6: entered allmulticast mode [ 276.649993][T12237] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 276.677718][T12237] bond11: (slave batadv6): making interface the new active one [ 276.697342][T12249] netlink: 'syz.4.2047': attribute type 33 has an invalid length. [ 276.705197][T12237] bond11: (slave batadv6): Enslaving as an active interface with an up link [ 276.745701][T12240] batadv7: entered promiscuous mode [ 276.751410][T12240] batadv7: entered allmulticast mode [ 276.785552][T12240] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 276.798581][T12240] bond11: (slave batadv7): Enslaving as an active interface with an up link [ 276.829472][T12247] batadv18: entered promiscuous mode [ 277.143801][T12259] SET target dimension over the limit! [ 277.261242][T12263] tipc: New replicast peer: 0.0.0.0 [ 277.278872][T12263] tipc: Enabled bearer , priority 10 [ 277.329233][T10288] IPVS: starting estimator thread 0... [ 277.382350][T12265] hsr0 speed is unknown, defaulting to 1000 [ 277.425287][T12268] IPVS: using max 29 ests per chain, 69600 per kthread [ 277.698308][T12266] hsr0 speed is unknown, defaulting to 1000 [ 278.047321][T12271] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 278.266081][T12281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 278.395129][T10288] tipc: Node number set to 949416884 [ 278.469072][T12278] syzkaller0: entered promiscuous mode [ 278.474600][T12278] syzkaller0: entered allmulticast mode [ 278.863575][T12307] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 279.196017][T12326] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 279.241059][ T30] audit: type=1107 audit(1746168144.312:4): pid=12320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 281.088679][T12354] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 281.250243][T12357] ip6gretap3: entered allmulticast mode [ 281.302941][T12365] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 281.315244][T12353] hsr0 speed is unknown, defaulting to 1000 [ 281.512390][T12373] __nla_validate_parse: 8 callbacks suppressed [ 281.512410][T12373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2082'. [ 281.565981][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 281.630330][T12377] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 281.666819][T12377] netlink: 'syz.1.2084': attribute type 1 has an invalid length. [ 281.720977][T12384] SET target dimension over the limit! [ 281.728719][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 281.831653][T12384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2086'. [ 282.068331][T12395] netlink: 'syz.0.2089': attribute type 3 has an invalid length. [ 283.142213][T12404] delete_channel: no stack [ 283.178448][T12420] hsr0 speed is unknown, defaulting to 1000 [ 283.405062][T12426] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2099'. [ 283.425461][T12427] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2099'. [ 283.948761][T12430] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2100'. [ 284.110977][T12433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2101'. [ 284.162986][T12433] macsec1: entered promiscuous mode [ 284.185812][T12433] veth0_to_bridge: entered promiscuous mode [ 284.191951][T12433] macsec1: entered allmulticast mode [ 284.227489][T12433] veth0_to_bridge: entered allmulticast mode [ 284.233642][T12434] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2101'. [ 284.278848][T12437] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2101'. [ 284.293643][T12433] veth0_to_bridge: left allmulticast mode [ 284.338818][T12433] veth0_to_bridge: left promiscuous mode [ 284.594242][T12434] batadv3: entered promiscuous mode [ 284.627639][T12434] batadv3: entered allmulticast mode [ 284.688534][T12437] batadv3: entered promiscuous mode [ 284.725246][T12437] batadv3: entered allmulticast mode [ 284.821953][T12448] x_tables: ip_tables: ah match: only valid for protocol 51 [ 285.033585][T12450] syzkaller0: entered promiscuous mode [ 285.055941][T12450] syzkaller0: entered allmulticast mode [ 285.182280][T12450] vlan2: entered allmulticast mode [ 285.188139][T12450] batadv0: entered allmulticast mode [ 285.288680][T12459] delete_channel: no stack [ 285.425494][T12473] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 285.545015][T12481] netlink: 'syz.1.2113': attribute type 1 has an invalid length. [ 286.874503][T12473] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 286.882167][T12480] batadv3: entered promiscuous mode [ 286.896296][T12480] batadv3: entered allmulticast mode [ 286.933063][T12484] batadv3: entered promiscuous mode [ 286.949512][T12484] batadv3: entered allmulticast mode [ 287.007943][T12481] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 287.016394][T12487] batadv9: entered promiscuous mode [ 287.041411][T12487] batadv9: entered allmulticast mode [ 287.097488][T12488] batadv9: entered promiscuous mode [ 287.133308][T12488] batadv9: entered allmulticast mode [ 287.233061][T12499] x_tables: ip_tables: ah match: only valid for protocol 51 [ 287.407033][T12506] __nla_validate_parse: 7 callbacks suppressed [ 287.407055][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 287.455879][T12508] netlink: 'syz.0.2118': attribute type 9 has an invalid length. [ 287.536849][T12506] hsr0 speed is unknown, defaulting to 1000 [ 287.663513][T12519] netlink: 'syz.4.2123': attribute type 1 has an invalid length. [ 287.735043][T12522] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2123'. [ 287.792253][T12524] FAULT_INJECTION: forcing a failure. [ 287.792253][T12524] name failslab, interval 1, probability 0, space 0, times 0 [ 287.823528][T12522] batadv18: entered promiscuous mode [ 287.841174][T12524] CPU: 1 UID: 0 PID: 12524 Comm: syz.4.2123 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 287.841220][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 287.841276][T12524] Call Trace: [ 287.841285][T12524] [ 287.841295][T12524] dump_stack_lvl+0x189/0x250 [ 287.841332][T12524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.841361][T12524] ? __pfx__printk+0x10/0x10 [ 287.841387][T12524] ? __pfx___might_resched+0x10/0x10 [ 287.841405][T12524] ? fs_reclaim_acquire+0x7d/0x100 [ 287.841439][T12524] should_fail_ex+0x414/0x560 [ 287.841484][T12524] should_failslab+0xa8/0x100 [ 287.841531][T12524] __kmalloc_cache_noprof+0x70/0x3d0 [ 287.841556][T12524] ? rtnl_newlink+0xed/0x1c70 [ 287.841583][T12524] rtnl_newlink+0xed/0x1c70 [ 287.841613][T12524] ? __lock_acquire+0xaac/0xd20 [ 287.841642][T12524] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.841680][T12524] ? __lock_acquire+0xaac/0xd20 [ 287.841720][T12524] ? __lock_acquire+0xaac/0xd20 [ 287.841767][T12524] ? is_bpf_text_address+0x26/0x2b0 [ 287.841801][T12524] ? is_bpf_text_address+0x292/0x2b0 [ 287.841828][T12524] ? is_bpf_text_address+0x26/0x2b0 [ 287.841863][T12524] ? aa_get_newest_label+0xf7/0x5d0 [ 287.841887][T12524] ? __lock_acquire+0xaac/0xd20 [ 287.841938][T12524] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.841958][T12524] rtnetlink_rcv_msg+0x7cc/0xb70 [ 287.841977][T12524] ? kasan_save_track+0x4f/0x80 [ 287.842001][T12524] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 287.842021][T12524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.842043][T12524] ? __lock_acquire+0xaac/0xd20 [ 287.842083][T12524] netlink_rcv_skb+0x219/0x490 [ 287.842108][T12524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.842131][T12524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.842173][T12524] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.842195][T12524] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.842227][T12524] netlink_unicast+0x758/0x8d0 [ 287.842258][T12524] netlink_sendmsg+0x805/0xb30 [ 287.842291][T12524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.842318][T12524] ? aa_sock_msg_perm+0x94/0x160 [ 287.842342][T12524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.842375][T12524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.842405][T12524] __sock_sendmsg+0x219/0x270 [ 287.842439][T12524] ____sys_sendmsg+0x52d/0x830 [ 287.842491][T12524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.842523][T12524] ? import_iovec+0x74/0xa0 [ 287.842551][T12524] ___sys_sendmsg+0x21f/0x2a0 [ 287.842577][T12524] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.842634][T12524] ? __fget_files+0x2a/0x420 [ 287.842656][T12524] ? __fget_files+0x3a0/0x420 [ 287.842689][T12524] __sys_sendmmsg+0x227/0x430 [ 287.842717][T12524] ? __pfx___sys_sendmmsg+0x10/0x10 [ 287.842749][T12524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.842794][T12524] ? ksys_write+0x1f0/0x250 [ 287.842825][T12524] __x64_sys_sendmmsg+0xa0/0xc0 [ 287.842851][T12524] do_syscall_64+0xf6/0x210 [ 287.842879][T12524] ? clear_bhb_loop+0x45/0xa0 [ 287.842902][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.842920][T12524] RIP: 0033:0x7f893978e969 [ 287.842937][T12524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.842953][T12524] RSP: 002b:00007f893a674038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 287.842973][T12524] RAX: ffffffffffffffda RBX: 00007f89399b6160 RCX: 00007f893978e969 [ 287.842986][T12524] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 287.842998][T12524] RBP: 00007f893a674090 R08: 0000000000000000 R09: 0000000000000000 [ 287.843009][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.843020][T12524] R13: 0000000000000001 R14: 00007f89399b6160 R15: 00007ffcd03222f8 [ 287.843048][T12524] [ 287.863367][T12522] batadv18: entered allmulticast mode [ 287.916039][T12509] delete_channel: no stack [ 288.324531][T12519] bond17: entered promiscuous mode [ 288.331485][T12519] 8021q: adding VLAN 0 to HW filter on device bond17 [ 288.349669][T12518] syzkaller1: entered promiscuous mode [ 288.364993][T12518] syzkaller1: entered allmulticast mode [ 288.551165][T12538] macvlan2: entered promiscuous mode [ 288.575271][T12538] macvlan2: entered allmulticast mode [ 288.722348][T12546] netlink: 'syz.4.2129': attribute type 1 has an invalid length. [ 288.760580][T12546] bond18: entered promiscuous mode [ 288.766698][T12546] 8021q: adding VLAN 0 to HW filter on device bond18 [ 288.787226][T12546] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2129'. [ 288.837977][T12551] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2129'. [ 288.870598][T12546] batadv18: entered promiscuous mode [ 288.908164][T12546] batadv18: entered allmulticast mode [ 288.934489][T12546] 8021q: adding VLAN 0 to HW filter on device batadv18 [ 288.947715][T12546] bond18: (slave batadv18): making interface the new active one [ 288.957216][T12546] bond18: (slave batadv18): Enslaving as an active interface with an up link [ 288.981145][T12551] batadv19: entered promiscuous mode [ 288.986716][T12551] batadv19: entered allmulticast mode [ 288.993919][T12551] 8021q: adding VLAN 0 to HW filter on device batadv19 [ 289.027134][T12551] bond18: (slave batadv19): Enslaving as an active interface with an up link [ 289.179938][T12563] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2133'. [ 289.598920][T12566] delete_channel: no stack [ 289.720839][T12596] sctp: [Deprecated]: syz.4.2142 (pid 12596) Use of int in max_burst socket option. [ 289.720839][T12596] Use struct sctp_assoc_value instead [ 290.234287][T12619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2151'. [ 290.558373][T12631] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 290.597577][T12628] bond19: entered allmulticast mode [ 290.758131][T12631] bond8: entered promiscuous mode [ 290.815395][T12631] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.899171][T12642] netlink: 'syz.2.2157': attribute type 9 has an invalid length. [ 291.006629][T12647] netlink: 'syz.1.2160': attribute type 1 has an invalid length. [ 291.066871][T12647] bond15: entered promiscuous mode [ 291.067252][T12652] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2160'. [ 291.072464][T12647] 8021q: adding VLAN 0 to HW filter on device bond15 [ 291.136215][T12647] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2160'. [ 291.255706][T12652] batadv9: entered promiscuous mode [ 291.261062][T12652] batadv9: entered allmulticast mode [ 291.292614][T12652] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 291.346646][T12652] bond15: (slave batadv9): making interface the new active one [ 291.377241][T12652] bond15: (slave batadv9): Enslaving as an active interface with an up link [ 291.408480][T12647] batadv10: entered promiscuous mode [ 291.413829][T12647] batadv10: entered allmulticast mode [ 291.427322][T12647] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 291.453527][T12647] bond15: (slave batadv10): Enslaving as an active interface with an up link [ 291.712113][T12675] Unsupported ieee802154 address type: 0 [ 291.754013][T12678] netlink: 'syz.4.2171': attribute type 1 has an invalid length. [ 291.818790][T12678] bond20: entered promiscuous mode [ 291.825880][T12678] 8021q: adding VLAN 0 to HW filter on device bond20 [ 291.936212][T12684] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2171'. [ 291.952847][T12684] batadv20: entered promiscuous mode [ 291.958542][T12684] batadv20: entered allmulticast mode [ 291.965912][T12684] 8021q: adding VLAN 0 to HW filter on device batadv20 [ 291.976034][T12684] bond20: (slave batadv20): making interface the new active one [ 291.984993][T12684] bond20: (slave batadv20): Enslaving as an active interface with an up link [ 292.268142][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2175'. [ 292.732797][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2181'. [ 292.758461][T12715] netlink: 'syz.3.2182': attribute type 1 has an invalid length. [ 292.849462][T12723] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2182'. [ 292.855561][T12715] bond9: entered promiscuous mode [ 292.884292][T12715] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.912021][T12715] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2182'. [ 292.923161][T12722] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 293.004587][T12723] batadv3: entered promiscuous mode [ 293.014918][T12723] batadv3: entered allmulticast mode [ 293.036007][T12723] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 293.056380][T12723] bond9: (slave batadv3): making interface the new active one [ 293.065064][T12723] bond9: (slave batadv3): Enslaving as an active interface with an up link [ 293.099375][T12715] batadv4: entered promiscuous mode [ 293.111328][T12715] batadv4: entered allmulticast mode [ 293.152446][T12715] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 293.187364][T12715] bond9: (slave batadv4): Enslaving as an active interface with an up link [ 293.273210][T12733] netlink: 'syz.2.2185': attribute type 11 has an invalid length. [ 293.288772][T12733] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2185'. [ 293.324773][T12734] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 293.349272][T12734] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 293.455473][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2188'. [ 293.549804][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2190'. [ 294.082178][T12764] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2196'. [ 294.141449][T12764] gretap1: entered promiscuous mode [ 294.150205][T12766] netlink: 'syz.4.2197': attribute type 1 has an invalid length. [ 294.163056][T12764] gretap1: entered allmulticast mode [ 294.227653][T12768] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2197'. [ 294.248471][T12766] bond21: entered promiscuous mode [ 294.265392][T12766] 8021q: adding VLAN 0 to HW filter on device bond21 [ 294.387460][T12768] batadv21: entered promiscuous mode [ 294.455218][T12768] batadv21: entered allmulticast mode [ 294.492551][T12768] 8021q: adding VLAN 0 to HW filter on device batadv21 [ 294.548418][T12768] bond21: (slave batadv21): making interface the new active one [ 294.606662][T12768] bond21: (slave batadv21): Enslaving as an active interface with an up link [ 294.696142][T12766] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2197'. [ 294.732508][T12771] netlink: 'syz.1.2198': attribute type 27 has an invalid length. [ 294.771796][T12766] batadv22: entered promiscuous mode [ 294.806796][T12766] batadv22: entered allmulticast mode [ 294.816670][T12766] 8021q: adding VLAN 0 to HW filter on device batadv22 [ 294.843193][T12766] bond21: (slave batadv22): Enslaving as an active interface with an up link [ 295.007128][T12778] hsr0 speed is unknown, defaulting to 1000 [ 295.028908][T12773] tipc: Started in network mode [ 295.033810][T12773] tipc: Node identity , cluster identity 4711 [ 295.572546][T12796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2205'. [ 295.771302][T12799] netpci0: tun_chr_ioctl cmd 1074025681 [ 295.784275][T12799] netlink: 'syz.3.2207': attribute type 5 has an invalid length. [ 295.982711][T12796] hsr0 speed is unknown, defaulting to 1000 [ 296.739140][T12826] 8021q: adding VLAN 0 to HW filter on device team1 [ 297.071981][T12822] hsr0 speed is unknown, defaulting to 1000 [ 297.226529][T12838] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 297.973215][T12869] __nla_validate_parse: 4 callbacks suppressed [ 297.973234][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2229'. [ 298.079341][T12871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.161197][T12874] netlink: 'syz.0.2231': attribute type 1 has an invalid length. [ 299.790659][T12918] hsr0 speed is unknown, defaulting to 1000 [ 299.811409][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 299.912746][T12929] vlan3: entered allmulticast mode [ 299.925405][T12929] bond0: entered allmulticast mode [ 300.129006][T12933] tipc: Enabled bearer , priority 0 [ 300.166395][T12933] syzkaller0: entered promiscuous mode [ 300.171927][T12933] syzkaller0: entered allmulticast mode [ 300.218082][T12933] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 300.280279][T12933] tipc: Resetting bearer [ 300.315295][T12933] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 300.335179][T12932] tipc: Resetting bearer [ 300.453649][T12932] tipc: Disabling bearer [ 300.921757][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'. [ 301.116688][T12964] netlink: 'syz.1.2258': attribute type 9 has an invalid length. [ 301.238494][T12967] --map-set only usable from mangle table [ 301.419737][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 301.640541][T12986] ipt_REJECT: ECHOREPLY no longer supported. [ 301.676923][T12986] x_tables: duplicate underflow at hook 1 [ 301.938765][T12992] dvmrp0: entered allmulticast mode [ 301.966859][T12991] dvmrp0: left allmulticast mode [ 302.553993][T13010] netlink: 'syz.1.2272': attribute type 1 has an invalid length. [ 302.742589][T13024] netlink: 'syz.0.2274': attribute type 9 has an invalid length. [ 302.831410][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2277'. [ 303.065463][T13040] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 303.078970][T13040] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2283'. [ 303.101819][T13039] bridge2: entered promiscuous mode [ 303.115225][T13039] bridge2: entered allmulticast mode [ 303.130903][T13039] team0: Port device bridge2 added [ 303.297621][T13048] gretap1: entered promiscuous mode [ 303.309708][T13048] gretap1: entered allmulticast mode [ 303.363258][T13052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2289'. [ 303.403250][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'. [ 303.492553][T13064] netlink: 'syz.4.2291': attribute type 9 has an invalid length. [ 303.582989][T13068] netlink: zone id is out of range [ 303.590049][T13068] netlink: zone id is out of range [ 303.598285][T13068] netlink: zone id is out of range [ 303.624929][T13068] netlink: zone id is out of range [ 303.631734][T13068] netlink: zone id is out of range [ 303.649170][T13068] netlink: zone id is out of range [ 303.654339][T13068] netlink: zone id is out of range [ 303.717316][T13068] netlink: zone id is out of range [ 303.735867][T13068] netlink: zone id is out of range [ 303.751215][T13068] netlink: zone id is out of range [ 303.766411][T13074] hsr0 speed is unknown, defaulting to 1000 [ 304.016168][T13085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2295'. [ 304.843596][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 304.890222][T13122] netlink: 'syz.3.2307': attribute type 9 has an invalid length. [ 305.696684][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 305.717120][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 305.736799][T13145] nbd: socks must be embedded in a SOCK_ITEM attr [ 305.910897][T13151] bridge0: entered allmulticast mode [ 305.946008][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2315'. [ 306.277423][T13168] netlink: 'syz.0.2321': attribute type 9 has an invalid length. [ 306.739334][T13185] netlink: 'syz.0.2325': attribute type 2 has an invalid length. [ 306.762387][T13186] netlink: 'syz.0.2325': attribute type 2 has an invalid length. [ 306.946145][T13191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2327'. [ 307.052815][T13191] vlan0: entered promiscuous mode [ 307.065491][T13191] bridge0: entered promiscuous mode [ 307.070919][T13191] vlan0: entered allmulticast mode [ 307.223460][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 307.256495][T13202] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 307.329206][T13201] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 307.392612][T13207] macvlan0: entered promiscuous mode [ 308.027371][T13223] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.057614][T13223] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.076010][T13223] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.084237][T13223] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.433733][T13234] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$UvyآDUDw}zR3p(@PaGͽӓp' [ 308.453028][T13234] CPU: 1 UID: 0 PID: 13234 Comm: syz.3.2340 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 308.453058][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 308.453075][T13234] Call Trace: [ 308.453087][T13234] [ 308.453097][T13234] dump_stack_lvl+0x189/0x250 [ 308.453133][T13234] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.453164][T13234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.453194][T13234] ? __pfx__printk+0x10/0x10 [ 308.453220][T13234] ? kernfs_path_from_node+0x2b/0x260 [ 308.453250][T13234] ? kernfs_path_from_node+0x216/0x260 [ 308.453283][T13234] sysfs_warn_dup+0x8e/0xa0 [ 308.453310][T13234] sysfs_do_create_link_sd+0xc0/0x110 [ 308.453340][T13234] device_add_class_symlinks+0x1cf/0x240 [ 308.453369][T13234] device_add+0x475/0xb50 [ 308.453407][T13234] wiphy_register+0x199a/0x26b0 [ 308.453448][T13234] ? __pfx_wiphy_register+0x10/0x10 [ 308.453485][T13234] ? minstrel_ht_alloc+0x893/0x990 [ 308.453517][T13234] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 308.453547][T13234] ieee80211_register_hw+0x334b/0x4060 [ 308.453590][T13234] ? ieee80211_register_hw+0x14b1/0x4060 [ 308.453628][T13234] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 308.453670][T13234] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 308.453707][T13234] ? __hrtimer_setup+0x187/0x210 [ 308.453736][T13234] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 308.453761][T13234] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 308.453827][T13234] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 308.453856][T13234] ? trace_kmalloc+0x1f/0xd0 [ 308.453878][T13234] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 308.453905][T13234] ? kstrndup+0xbf/0x160 [ 308.453936][T13234] hwsim_new_radio_nl+0xea4/0x1b10 [ 308.453970][T13234] ? __pfx___nla_validate_parse+0x10/0x10 [ 308.454011][T13234] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 308.454057][T13234] ? __nla_parse+0x40/0x60 [ 308.454085][T13234] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 308.454125][T13234] genl_family_rcv_msg_doit+0x212/0x300 [ 308.454164][T13234] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 308.454208][T13234] ? bpf_lsm_capable+0x9/0x20 [ 308.454236][T13234] ? security_capable+0x7e/0x2e0 [ 308.454266][T13234] genl_rcv_msg+0x60e/0x790 [ 308.454302][T13234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.454329][T13234] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 308.454377][T13234] netlink_rcv_skb+0x219/0x490 [ 308.454401][T13234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.454431][T13234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.454483][T13234] ? down_read+0x1ad/0x2e0 [ 308.454505][T13234] genl_rcv+0x28/0x40 [ 308.454530][T13234] netlink_unicast+0x758/0x8d0 [ 308.454564][T13234] netlink_sendmsg+0x805/0xb30 [ 308.454598][T13234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.454625][T13234] ? aa_sock_msg_perm+0x94/0x160 [ 308.454655][T13234] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.454677][T13234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.454701][T13234] __sock_sendmsg+0x219/0x270 [ 308.454737][T13234] ____sys_sendmsg+0x505/0x830 [ 308.454774][T13234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.454811][T13234] ? import_iovec+0x74/0xa0 [ 308.454855][T13234] ___sys_sendmsg+0x21f/0x2a0 [ 308.454883][T13234] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.454951][T13234] ? __fget_files+0x2a/0x420 [ 308.454975][T13234] ? __fget_files+0x3a0/0x420 [ 308.455013][T13234] __x64_sys_sendmsg+0x19b/0x260 [ 308.455041][T13234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.455084][T13234] ? do_syscall_64+0xba/0x210 [ 308.455119][T13234] do_syscall_64+0xf6/0x210 [ 308.455148][T13234] ? clear_bhb_loop+0x45/0xa0 [ 308.455173][T13234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.455193][T13234] RIP: 0033:0x7f1fd3b8e969 [ 308.455211][T13234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.455228][T13234] RSP: 002b:00007f1fd4948038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.455250][T13234] RAX: ffffffffffffffda RBX: 00007f1fd3db5fa0 RCX: 00007f1fd3b8e969 [ 308.455264][T13234] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 308.455276][T13234] RBP: 00007f1fd3c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 308.455289][T13234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.455300][T13234] R13: 0000000000000000 R14: 00007f1fd3db5fa0 R15: 00007ffe1bbfc3b8 [ 308.455334][T13234] [ 308.907811][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 309.188611][T13230] delete_channel: no stack [ 309.555485][T13242] sctp: [Deprecated]: syz.1.2342 (pid 13242) Use of int in max_burst socket option. [ 309.555485][T13242] Use struct sctp_assoc_value instead [ 309.815929][T13253] __nla_validate_parse: 3 callbacks suppressed [ 309.815946][T13253] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2347'. [ 309.936141][ T30] audit: type=1107 audit(1746168175.012:5): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 309.949374][T13257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2349'. [ 309.965466][T13260] netlink: 'syz.1.2348': attribute type 9 has an invalid length. [ 310.588218][T13268] delete_channel: no stack [ 311.058906][T13299] netlink: 'syz.4.2364': attribute type 16 has an invalid length. [ 311.093854][T13299] netlink: 'syz.4.2364': attribute type 17 has an invalid length. [ 311.094091][T13304] netlink: 'syz.2.2363': attribute type 9 has an invalid length. [ 311.156348][T13306] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2364'. [ 311.188775][T13306] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2364'. [ 311.231874][T13307] xt_hashlimit: invalid rate [ 311.249019][T13299] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.267509][T13299] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.286568][T13299] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.308368][T13299] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.486571][T13318] IPVS: length: 209 != 24 [ 311.806922][T13319] delete_channel: no stack [ 312.026988][T13338] hsr0 speed is unknown, defaulting to 1000 [ 312.237473][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2380'. [ 312.268154][T13354] netlink: 'syz.4.2381': attribute type 9 has an invalid length. [ 312.295200][T13352] tipc: Invalid UDP bearer configuration [ 312.295261][T13352] tipc: Enabling of bearer rejected, failed to enable media [ 313.095888][T13380] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 313.252473][T13376] delete_channel: no stack [ 313.583340][T13394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2393'. [ 313.618631][T13395] siw: device registration error -23 [ 313.693178][T13401] netlink: 'syz.2.2394': attribute type 9 has an invalid length. [ 313.721996][T13404] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 313.765325][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 313.870673][T13413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2397'. [ 314.046116][T13418] IPVS: set_ctl: invalid protocol: 46 172.20.20.14:20004 [ 314.146540][T13419] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2399'. [ 314.458301][T13426] delete_channel: no stack [ 314.664620][T13454] netlink: 'syz.1.2411': attribute type 9 has an invalid length. [ 314.847327][T13461] netlink: 532 bytes leftover after parsing attributes in process `syz.4.2415'. [ 315.387773][T13477] delete_channel: no stack [ 315.438687][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2426'. [ 316.103003][T13515] netlink: 'syz.0.2432': attribute type 9 has an invalid length. [ 316.529421][T13531] siw: device registration error -23 [ 316.556342][T13531] smc: removing ib device syz2 [ 316.613492][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 316.737475][T13532] delete_channel: no stack [ 317.040774][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.261970][T13556] netlink: 'syz.3.2446': attribute type 9 has an invalid length. [ 317.873605][T13577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2452'. [ 317.918391][T13576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2453'. [ 317.930687][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2453'. [ 318.216545][T13572] delete_channel: no stack [ 318.360045][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2457'. [ 318.691770][T13603] netlink: 'syz.0.2461': attribute type 9 has an invalid length. [ 319.447732][T13630] netlink: 'syz.3.2469': attribute type 6 has an invalid length. [ 319.655147][T13640] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 319.728075][T13647] x_tables: ip_tables: ah match: only valid for protocol 51 [ 319.826006][T13652] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 320.032965][T13664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 320.199329][T13674] netlink: 'syz.0.2483': attribute type 9 has an invalid length. [ 320.208742][T13658] delete_channel: no stack [ 320.609359][T13697] x_tables: ip_tables: ah match: only valid for protocol 51 [ 320.840392][T13708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 321.053318][T13723] gretap1: entered promiscuous mode [ 321.075747][T13707] delete_channel: no stack [ 321.080366][T13723] gretap1: entered allmulticast mode [ 321.243174][T13734] netlink: 'syz.3.2503': attribute type 9 has an invalid length. [ 321.266305][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2504'. [ 321.393582][T13740] netlink: 'syz.4.2506': attribute type 3 has an invalid length. [ 321.425319][T13741] netlink: 'syz.4.2506': attribute type 3 has an invalid length. [ 321.524726][T13745] x_tables: ip_tables: ah match: only valid for protocol 51 [ 321.623364][T13751] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 322.037559][T13762] delete_channel: no stack [ 322.376125][T13783] x_tables: ip_tables: ah match: only valid for protocol 51 [ 322.599784][T13792] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 323.015771][T13809] FAULT_INJECTION: forcing a failure. [ 323.015771][T13809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.049134][T13809] CPU: 0 UID: 0 PID: 13809 Comm: syz.2.2532 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 323.049165][T13809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 323.049178][T13809] Call Trace: [ 323.049186][T13809] [ 323.049196][T13809] dump_stack_lvl+0x189/0x250 [ 323.049230][T13809] ? __lock_acquire+0xaac/0xd20 [ 323.049264][T13809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.049292][T13809] ? __pfx__printk+0x10/0x10 [ 323.049312][T13809] ? __might_fault+0xb0/0x130 [ 323.049349][T13809] should_fail_ex+0x414/0x560 [ 323.049386][T13809] _copy_from_user+0x2d/0xb0 [ 323.049414][T13809] do_sock_getsockopt+0x1cd/0x650 [ 323.049442][T13809] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 323.049466][T13809] ? do_syscall_64+0x40/0x210 [ 323.049494][T13809] ? __fget_files+0x2a/0x420 [ 323.049519][T13809] ? __fget_files+0x3a0/0x420 [ 323.049543][T13809] ? __fget_files+0x2a/0x420 [ 323.049575][T13809] __x64_sys_getsockopt+0x1a5/0x250 [ 323.049599][T13809] ? do_syscall_64+0x40/0x210 [ 323.049629][T13809] ? do_syscall_64+0x40/0x210 [ 323.049661][T13809] do_syscall_64+0xf6/0x210 [ 323.049690][T13809] ? clear_bhb_loop+0x45/0xa0 [ 323.049714][T13809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.049733][T13809] RIP: 0033:0x7f56abf8e969 [ 323.049750][T13809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.049767][T13809] RSP: 002b:00007f56acdd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 323.049787][T13809] RAX: ffffffffffffffda RBX: 00007f56ac1b5fa0 RCX: 00007f56abf8e969 [ 323.049801][T13809] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 323.049812][T13809] RBP: 00007f56acdd8090 R08: 0000200000000100 R09: 0000000000000000 [ 323.049825][T13809] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 323.049837][T13809] R13: 0000000000000000 R14: 00007f56ac1b5fa0 R15: 00007fff4b3d5b58 [ 323.049868][T13809] [ 323.331003][T13813] netlink: 'syz.4.2533': attribute type 16 has an invalid length. [ 323.339128][T13813] netlink: 'syz.4.2533': attribute type 17 has an invalid length. [ 323.352260][T13804] delete_channel: no stack [ 323.506609][T13813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.546950][T13813] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.587081][T13813] net_ratelimit: 9 callbacks suppressed [ 323.587092][T13813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.810751][T13827] x_tables: ip_tables: ah match: only valid for protocol 51 [ 324.029211][T13832] netlink: 'syz.0.2539': attribute type 7 has an invalid length. [ 324.084918][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 324.101292][T13838] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input23 [ 324.302427][T13844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2544'. [ 324.639055][T13846] delete_channel: no stack [ 324.785701][T13856] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 325.200861][T13872] x_tables: ip_tables: ah match: only valid for protocol 51 [ 325.227499][T13877] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 325.379019][T13883] FAULT_INJECTION: forcing a failure. [ 325.379019][T13883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.393399][T13883] CPU: 1 UID: 0 PID: 13883 Comm: syz.4.2556 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 325.393427][T13883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 325.393439][T13883] Call Trace: [ 325.393446][T13883] [ 325.393455][T13883] dump_stack_lvl+0x189/0x250 [ 325.393486][T13883] ? __lock_acquire+0xaac/0xd20 [ 325.393516][T13883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.393543][T13883] ? __pfx__printk+0x10/0x10 [ 325.393562][T13883] ? __might_fault+0xb0/0x130 [ 325.393596][T13883] should_fail_ex+0x414/0x560 [ 325.393632][T13883] _copy_from_user+0x2d/0xb0 [ 325.393660][T13883] do_ip_getsockopt+0x25f/0x1b60 [ 325.393689][T13883] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 325.393719][T13883] ? __might_fault+0xb0/0x130 [ 325.393744][T13883] ? _parse_integer_limit+0x1ae/0x1f0 [ 325.393765][T13883] ? aa_label_sk_perm+0x413/0x560 [ 325.393790][T13883] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 325.393832][T13883] ip_getsockopt+0xbb/0x220 [ 325.393858][T13883] ? __pfx_ip_getsockopt+0x10/0x10 [ 325.393882][T13883] ? __might_fault+0xb0/0x130 [ 325.393908][T13883] ipv6_getsockopt+0x182/0x290 [ 325.393937][T13883] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 325.393968][T13883] ? sock_common_getsockopt+0x2d/0xb0 [ 325.393992][T13883] do_sock_getsockopt+0x35d/0x650 [ 325.394020][T13883] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 325.394043][T13883] ? do_syscall_64+0x40/0x210 [ 325.394071][T13883] ? __fget_files+0x2a/0x420 [ 325.394103][T13883] ? __fget_files+0x3a0/0x420 [ 325.394128][T13883] ? __fget_files+0x2a/0x420 [ 325.394160][T13883] __x64_sys_getsockopt+0x1a5/0x250 [ 325.394184][T13883] ? do_syscall_64+0x40/0x210 [ 325.394213][T13883] ? do_syscall_64+0x40/0x210 [ 325.394245][T13883] do_syscall_64+0xf6/0x210 [ 325.394274][T13883] ? clear_bhb_loop+0x45/0xa0 [ 325.394298][T13883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.394317][T13883] RIP: 0033:0x7f893978e969 [ 325.394335][T13883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.394351][T13883] RSP: 002b:00007f893a6b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 325.394372][T13883] RAX: ffffffffffffffda RBX: 00007f89399b5fa0 RCX: 00007f893978e969 [ 325.394387][T13883] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 325.394398][T13883] RBP: 00007f893a6b6090 R08: 0000200000000100 R09: 0000000000000000 [ 325.394412][T13883] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 325.394424][T13883] R13: 0000000000000000 R14: 00007f89399b5fa0 R15: 00007ffcd03222f8 [ 325.394454][T13883] [ 326.035298][T13888] delete_channel: no stack [ 326.046845][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2562'. [ 326.175294][T13908] x_tables: ip_tables: ah match: only valid for protocol 51 [ 326.779199][T13939] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 326.887956][T13935] delete_channel: no stack [ 326.913988][T13947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2579'. [ 327.073003][T13952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 327.200386][T13957] FAULT_INJECTION: forcing a failure. [ 327.200386][T13957] name failslab, interval 1, probability 0, space 0, times 0 [ 327.246487][T13957] CPU: 1 UID: 0 PID: 13957 Comm: syz.2.2581 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 327.246513][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 327.246523][T13957] Call Trace: [ 327.246531][T13957] [ 327.246539][T13957] dump_stack_lvl+0x189/0x250 [ 327.246569][T13957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.246592][T13957] ? __pfx__printk+0x10/0x10 [ 327.246613][T13957] ? __pfx___might_resched+0x10/0x10 [ 327.246627][T13957] ? fs_reclaim_acquire+0x7d/0x100 [ 327.246655][T13957] should_fail_ex+0x414/0x560 [ 327.246684][T13957] should_failslab+0xa8/0x100 [ 327.246706][T13957] __kmalloc_noprof+0xcb/0x4f0 [ 327.246734][T13957] ? kfree+0x4d/0x440 [ 327.246749][T13957] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 327.246773][T13957] tomoyo_realpath_from_path+0xe3/0x5d0 [ 327.246794][T13957] ? tomoyo_domain+0xda/0x130 [ 327.246818][T13957] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 327.246843][T13957] tomoyo_path_number_perm+0x1e8/0x5a0 [ 327.246871][T13957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 327.246911][T13957] ? __lock_acquire+0xaac/0xd20 [ 327.246951][T13957] ? __fget_files+0x2a/0x420 [ 327.246978][T13957] ? __fget_files+0x3a0/0x420 [ 327.246997][T13957] ? __fget_files+0x2a/0x420 [ 327.247020][T13957] security_file_ioctl+0xcb/0x2d0 [ 327.247047][T13957] __se_sys_ioctl+0x47/0x170 [ 327.247066][T13957] do_syscall_64+0xf6/0x210 [ 327.247092][T13957] ? clear_bhb_loop+0x45/0xa0 [ 327.247111][T13957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.247126][T13957] RIP: 0033:0x7f56abf8e969 [ 327.247142][T13957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.247155][T13957] RSP: 002b:00007f56acdb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.247173][T13957] RAX: ffffffffffffffda RBX: 00007f56ac1b6080 RCX: 00007f56abf8e969 [ 327.247184][T13957] RDX: 00002000000000c0 RSI: 00000000400448c8 RDI: 0000000000000005 [ 327.247194][T13957] RBP: 00007f56acdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.247204][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.247213][T13957] R13: 0000000000000000 R14: 00007f56ac1b6080 R15: 00007fff4b3d5b58 [ 327.247238][T13957] [ 327.247246][T13957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.608315][T13965] x_tables: ip_tables: ah match: only valid for protocol 51 [ 327.676457][T13969] FAULT_INJECTION: forcing a failure. [ 327.676457][T13969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.695196][T13969] CPU: 1 UID: 0 PID: 13969 Comm: syz.2.2584 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 327.695226][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 327.695238][T13969] Call Trace: [ 327.695245][T13969] [ 327.695254][T13969] dump_stack_lvl+0x189/0x250 [ 327.695285][T13969] ? __lock_acquire+0xaac/0xd20 [ 327.695316][T13969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.695345][T13969] ? __pfx__printk+0x10/0x10 [ 327.695365][T13969] ? __might_fault+0xb0/0x130 [ 327.695402][T13969] should_fail_ex+0x414/0x560 [ 327.695440][T13969] _copy_from_user+0x2d/0xb0 [ 327.695466][T13969] do_ip_vs_get_ctl+0x29a/0xd10 [ 327.695493][T13969] ? __pfx___mutex_trylock_common+0x10/0x10 [ 327.695515][T13969] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 327.695554][T13969] ? nf_getsockopt+0x224/0x290 [ 327.695583][T13969] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 327.695616][T13969] ? __pfx___mutex_lock+0x10/0x10 [ 327.695645][T13969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 327.695688][T13969] ? __might_fault+0xb0/0x130 [ 327.695723][T13969] nf_getsockopt+0x26b/0x290 [ 327.695754][T13969] ip_getsockopt+0x1c4/0x220 [ 327.695780][T13969] ? __pfx_ip_getsockopt+0x10/0x10 [ 327.695803][T13969] ? __might_fault+0xb0/0x130 [ 327.695831][T13969] ipv6_getsockopt+0x182/0x290 [ 327.695861][T13969] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 327.695893][T13969] ? sock_common_getsockopt+0x2d/0xb0 [ 327.695917][T13969] do_sock_getsockopt+0x35d/0x650 [ 327.695945][T13969] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 327.695969][T13969] ? do_syscall_64+0x40/0x210 [ 327.695996][T13969] ? __fget_files+0x2a/0x420 [ 327.696021][T13969] ? __fget_files+0x3a0/0x420 [ 327.696045][T13969] ? __fget_files+0x2a/0x420 [ 327.696077][T13969] __x64_sys_getsockopt+0x1a5/0x250 [ 327.696101][T13969] ? do_syscall_64+0x40/0x210 [ 327.696132][T13969] ? do_syscall_64+0x40/0x210 [ 327.696164][T13969] do_syscall_64+0xf6/0x210 [ 327.696193][T13969] ? clear_bhb_loop+0x45/0xa0 [ 327.696217][T13969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.696236][T13969] RIP: 0033:0x7f56abf8e969 [ 327.696253][T13969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.696270][T13969] RSP: 002b:00007f56acdd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 327.696290][T13969] RAX: ffffffffffffffda RBX: 00007f56ac1b5fa0 RCX: 00007f56abf8e969 [ 327.696305][T13969] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 327.696317][T13969] RBP: 00007f56acdd8090 R08: 0000200000000100 R09: 0000000000000000 [ 327.696329][T13969] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 327.696341][T13969] R13: 0000000000000000 R14: 00007f56ac1b5fa0 R15: 00007fff4b3d5b58 [ 327.696372][T13969] [ 328.715401][T13983] delete_channel: no stack [ 328.807284][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 328.842074][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 328.862115][T14000] IPVS: length: 144 != 8 [ 329.554512][T14013] x_tables: ip_tables: ah match: only valid for protocol 51 [ 329.985408][T14032] ------------[ cut here ]------------ [ 329.990929][T14032] memcpy: detected field-spanning write (size 4095) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 330.053646][T14036] ================================================================== [ 330.061796][T14036] BUG: KASAN: stack-out-of-bounds in ipv6_addr_prefix+0x6e/0x1d0 [ 330.069558][T14036] Read of size 4095 at addr ffffc9000339fa94 by task syz.1.2607/14036 [ 330.077730][T14036] [ 330.080093][T14036] CPU: 0 UID: 0 PID: 14036 Comm: syz.1.2607 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 330.080119][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 330.080132][T14036] Call Trace: [ 330.080140][T14036] [ 330.080149][T14036] dump_stack_lvl+0x189/0x250 [ 330.080181][T14036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.080207][T14036] ? __pfx__printk+0x10/0x10 [ 330.080227][T14036] ? __pfx__printk+0x10/0x10 [ 330.080243][T14036] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 330.080273][T14036] ? __virt_addr_valid+0xc3/0x540 [ 330.080299][T14036] print_report+0xb4/0x290 [ 330.080322][T14036] ? ipv6_addr_prefix+0x6e/0x1d0 [ 330.080350][T14036] kasan_report+0x118/0x150 [ 330.080373][T14036] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 330.080399][T14036] ? ipv6_addr_prefix+0x6e/0x1d0 [ 330.080431][T14036] kasan_check_range+0x29a/0x2b0 [ 330.080456][T14036] ? ipv6_addr_prefix+0x6e/0x1d0 [ 330.080484][T14036] __asan_memcpy+0x29/0x70 [ 330.080503][T14036] ipv6_addr_prefix+0x6e/0x1d0 [ 330.080533][T14036] ip6_route_info_create+0x629/0xa70 [ 330.080559][T14036] ip6_route_add+0x29/0x2f0 [ 330.080579][T14036] ? ipv6_route_ioctl+0x313/0x480 [ 330.080602][T14036] ipv6_route_ioctl+0x35c/0x480 [ 330.080628][T14036] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 330.080668][T14036] inet6_ioctl+0x219/0x280 [ 330.080703][T14036] ? __pfx_inet6_ioctl+0x10/0x10 [ 330.080736][T14036] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 330.080771][T14036] sock_do_ioctl+0xd9/0x300 [ 330.080801][T14036] ? __pfx_sock_do_ioctl+0x10/0x10 [ 330.080829][T14036] ? __lock_acquire+0xaac/0xd20 [ 330.080862][T14036] sock_ioctl+0x576/0x790 [ 330.080890][T14036] ? __pfx_sock_ioctl+0x10/0x10 [ 330.080918][T14036] ? __fget_files+0x3a0/0x420 [ 330.080942][T14036] ? __fget_files+0x2a/0x420 [ 330.080968][T14036] ? bpf_lsm_file_ioctl+0x9/0x20 [ 330.080992][T14036] ? __pfx_sock_ioctl+0x10/0x10 [ 330.081019][T14036] __se_sys_ioctl+0xf9/0x170 [ 330.081040][T14036] do_syscall_64+0xf6/0x210 [ 330.081068][T14036] ? clear_bhb_loop+0x45/0xa0 [ 330.081090][T14036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.081108][T14036] RIP: 0033:0x7f4eadb8e969 [ 330.081125][T14036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.081142][T14036] RSP: 002b:00007f4eaea6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.081162][T14036] RAX: ffffffffffffffda RBX: 00007f4eaddb6080 RCX: 00007f4eadb8e969 [ 330.081177][T14036] RDX: 00002000000017c0 RSI: 000000000000890b RDI: 0000000000000005 [ 330.081189][T14036] RBP: 00007f4eadc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 330.081201][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.081213][T14036] R13: 0000000000000001 R14: 00007f4eaddb6080 R15: 00007ffda9021cb8 [ 330.081234][T14036] [ 330.081241][T14036] [ 330.363016][T14036] The buggy address belongs to stack of task syz.1.2607/14036 [ 330.370478][T14036] and is located at offset 84 in frame: [ 330.376103][T14036] ipv6_route_ioctl+0x0/0x480 [ 330.380788][T14036] [ 330.383107][T14036] This frame has 1 object: [ 330.387520][T14036] [32, 208) 'cfg' [ 330.387531][T14036] [ 330.393583][T14036] The buggy address belongs to the virtual mapping at [ 330.393583][T14036] [ffffc90003398000, ffffc900033a1000) created by: [ 330.393583][T14036] copy_process+0x544/0x3b80 [ 330.411217][T14036] [ 330.413545][T14036] The buggy address belongs to the physical page: [ 330.419986][T14036] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888053d50ee0 pfn:0x53d50 [ 330.430058][T14036] memcg:ffff88803226a682 [ 330.434301][T14036] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 330.441429][T14036] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 330.450010][T14036] raw: ffff888053d50ee0 0000000000000000 00000001ffffffff ffff88803226a682 [ 330.458600][T14036] page dumped because: kasan: bad access detected [ 330.465026][T14036] page_owner tracks the page as allocated [ 330.470733][T14036] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 13991, tgid 13991 (syz.3.2593), ts 328733513470, free_ts 328695446019 [ 330.490105][T14036] post_alloc_hook+0x1d8/0x230 [ 330.494877][T14036] get_page_from_freelist+0x21e0/0x22c0 [ 330.500442][T14036] __alloc_frozen_pages_noprof+0x181/0x370 [ 330.506275][T14036] alloc_pages_mpol+0x232/0x4a0 [ 330.511147][T14036] alloc_pages_noprof+0xa9/0x190 [ 330.516085][T14036] __vmalloc_node_range_noprof+0x8fe/0x12c0 [ 330.521979][T14036] __vmalloc_node_noprof+0x7d/0x90 [ 330.527106][T14036] dup_task_struct+0x3e7/0x860 [ 330.531869][T14036] copy_process+0x544/0x3b80 [ 330.536473][T14036] kernel_clone+0x21e/0x870 [ 330.540978][T14036] __se_sys_clone3+0x256/0x2d0 [ 330.545745][T14036] do_syscall_64+0xf6/0x210 [ 330.550254][T14036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.556143][T14036] page last free pid 1163 tgid 1163 stack trace: [ 330.562463][T14036] __free_frozen_pages+0xb14/0xce0 [ 330.567582][T14036] __tlb_remove_table+0x2d2/0x3b0 [ 330.572601][T14036] tlb_remove_table_rcu+0x85/0x100 [ 330.577715][T14036] rcu_core+0xca5/0x1710 [ 330.581962][T14036] handle_softirqs+0x283/0x870 [ 330.586731][T14036] __irq_exit_rcu+0xca/0x1f0 [ 330.591312][T14036] irq_exit_rcu+0x9/0x30 [ 330.595561][T14036] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 330.601198][T14036] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.607201][T14036] [ 330.609523][T14036] Memory state around the buggy address: [ 330.615151][T14036] ffffc9000339fa00: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 330.623206][T14036] ffffc9000339fa80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 330.631263][T14036] >ffffc9000339fb00: 00 00 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 330.639315][T14036] ^ [ 330.643897][T14036] ffffc9000339fb80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 330.651975][T14036] ffffc9000339fc00: 00 00 00 00 00 00 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 330.660030][T14036] ================================================================== [ 330.753815][T14032] WARNING: CPU: 1 PID: 14032 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 330.759791][T14036] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 330.759812][T14036] CPU: 0 UID: 0 PID: 14036 Comm: syz.1.2607 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 330.759838][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 330.759851][T14036] Call Trace: [ 330.759859][T14036] [ 330.759868][T14036] dump_stack_lvl+0x99/0x250 [ 330.759903][T14036] ? __asan_memcpy+0x40/0x70 [ 330.759923][T14036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.759952][T14036] ? __pfx__printk+0x10/0x10 [ 330.759979][T14036] panic+0x2db/0x790 [ 330.760010][T14036] ? __pfx_panic+0x10/0x10 [ 330.760041][T14036] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 330.760068][T14036] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 330.760094][T14036] ? print_memory_metadata+0x314/0x400 [ 330.760122][T14036] ? ipv6_addr_prefix+0x6e/0x1d0 [ 330.760154][T14036] check_panic_on_warn+0x89/0xb0 [ 330.760180][T14036] ? ipv6_addr_prefix+0x6e/0x1d0 [ 330.760215][T14036] end_report+0x78/0x160 [ 330.760240][T14036] kasan_report+0x129/0x150 [ 330.760264][T14036] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 330.760292][T14036] ? ipv6_addr_prefix+0x6e/0x1d0 [ 330.760326][T14036] kasan_check_range+0x29a/0x2b0 [ 330.760352][T14036] ? ipv6_addr_prefix+0x6e/0x1d0 [ 330.760382][T14036] __asan_memcpy+0x29/0x70 [ 330.760419][T14036] ipv6_addr_prefix+0x6e/0x1d0 [ 330.760453][T14036] ip6_route_info_create+0x629/0xa70 [ 330.760482][T14036] ip6_route_add+0x29/0x2f0 [ 330.760505][T14036] ? ipv6_route_ioctl+0x313/0x480 [ 330.760531][T14036] ipv6_route_ioctl+0x35c/0x480 [ 330.760559][T14036] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 330.760602][T14036] inet6_ioctl+0x219/0x280 [ 330.760641][T14036] ? __pfx_inet6_ioctl+0x10/0x10 [ 330.760678][T14036] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 330.760716][T14036] sock_do_ioctl+0xd9/0x300 [ 330.760750][T14036] ? __pfx_sock_do_ioctl+0x10/0x10 [ 330.760781][T14036] ? __lock_acquire+0xaac/0xd20 [ 330.760817][T14036] sock_ioctl+0x576/0x790 [ 330.760848][T14036] ? __pfx_sock_ioctl+0x10/0x10 [ 330.760880][T14036] ? __fget_files+0x3a0/0x420 [ 330.760908][T14036] ? __fget_files+0x2a/0x420 [ 330.760937][T14036] ? bpf_lsm_file_ioctl+0x9/0x20 [ 330.760965][T14036] ? __pfx_sock_ioctl+0x10/0x10 [ 330.760996][T14036] __se_sys_ioctl+0xf9/0x170 [ 330.761019][T14036] do_syscall_64+0xf6/0x210 [ 330.761051][T14036] ? clear_bhb_loop+0x45/0xa0 [ 330.761075][T14036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.761095][T14036] RIP: 0033:0x7f4eadb8e969 [ 330.761114][T14036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.761134][T14036] RSP: 002b:00007f4eaea6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.761157][T14036] RAX: ffffffffffffffda RBX: 00007f4eaddb6080 RCX: 00007f4eadb8e969 [ 330.761174][T14036] RDX: 00002000000017c0 RSI: 000000000000890b RDI: 0000000000000005 [ 330.761188][T14036] RBP: 00007f4eadc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 330.761203][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.761216][T14036] R13: 0000000000000001 R14: 00007f4eaddb6080 R15: 00007ffda9021cb8 [ 330.761240][T14036] [ 330.763718][T14036] Kernel Offset: disabled