last executing test programs: 3.068335199s ago: executing program 0 (id=464): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) (fail_nth: 54) 2.052445318s ago: executing program 0 (id=474): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}]}}]}, 0x40}}, 0x0) 2.05201467s ago: executing program 2 (id=475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$inet6(0xa, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (fail_nth: 2) 1.748695716s ago: executing program 0 (id=477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000600)=ANY=[], 0x408) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 1.604484841s ago: executing program 2 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1c, r1, 0xf01, 0xfffffffc, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x51}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/126, 0x7e}], 0x1}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x60, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x60}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r6, @ANYRES16=r7, @ANYRES32=r8, @ANYRES32=r8, @ANYRESHEX=r6], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.520578636s ago: executing program 0 (id=480): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x4000001) sendmsg$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r6], 0x1000f) socket$nl_generic(0x10, 0x3, 0x10) 1.479962619s ago: executing program 4 (id=482): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "ae8ebd61000033d6", "2607080d7f4fcf00fd4ef2dece6c7c58", "ceb0597e", "faffffffffecffff"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) close(0xffffffffffffffff) 1.372418128s ago: executing program 4 (id=483): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x7f00000000000000, 0x4000010}, 0x4000000) 1.305449566s ago: executing program 0 (id=486): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f00000044c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000600)="ff0e85bdbdefc1a08849dcb343001f659d35e07031c1b6d96cf875c2ef1e219799bf5979e32d20977ae8268d7c8f6f3366f16b4a53aa2cfd3081cc5f", 0x3c}], 0x1}}, {{&(0x7f0000001e40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x0, 0x8}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000640)="010091ddc0", 0x5}], 0x1}, 0x4000001) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r3], 0x1000f) 1.220550512s ago: executing program 4 (id=487): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYBLOB='.'], 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev}}}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000000}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r3, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e1bcf71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ebb4cbc}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd8456b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1caea5f8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb4eacb6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d640264}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe02}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeabd}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe7b12b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5eca}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x342c}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x2000c004) 1.176736251s ago: executing program 2 (id=488): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001600)={'filter\x00', 0xb001, 0x4, 0x3f8, 0x110, 0x110, 0x0, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0xffffffff}}}, {{@uncond, 0xc0, 0x220, 0x0, {0xfeffff0700000000, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010102, @local, 0x2, 0xfffffffe}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10b, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) 1.129984868s ago: executing program 1 (id=489): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18, 0x60000000}}], 0x1, 0x800) 988.621708ms ago: executing program 4 (id=490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000600)=ANY=[], 0x408) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 976.123329ms ago: executing program 1 (id=491): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x280, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x26c, 0x1, [@m_gact={0x23c, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x210, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a72ad3a2c2dbf727e06036e6f15f608bea0e2a8ff93600a6133a9b45faa6924e7b9e8756e78750bdef4103fcd162842f48260e1dbb952cf91a4fdf9ca11cc86255d345cc97e3e5a060faa5892b6b343ae47592ed09d5829b187941331c8c321997cbc0395a6658c85915c1468ea768127b402af42155e96f11ef5f95a4118370c736689c029238b89e6a7a47d06e553b3f1968de8d30df98c713bd5d18d8c5e00aee2d650046089d3fd1abf65c454e7e5f582e3e17fde068a7d8cfdaf8831aca9c839662d70f7a7893073ad4a108e44a105d7ec27a1511d8775f389b68079b9fb5ba0f7bc4755ca4a45642090d553db4715ba07f0f54dd66544b89e6ad25c32d6f63d39e8d5e0034b5d37c947abfec5a54689a66f9355ac9a474b1e8da8ff31a348a1dda478d98b005419240d0d0e19"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x280}}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)=@in6={0xa, 0x4e22, 0xcc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x80, 0x0}, 0x40014) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001408e00000d0500020007000000080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 830.730156ms ago: executing program 2 (id=492): socket$alg(0x26, 0x5, 0x0) read(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x700) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="365dffff5bdd8759ffffaaaaaaaaaa3e8100220086dd6d000000000811"], 0x42) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0303000000000a0000000c000000070003"], 0x1c}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x8918, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a7260180", @ANYRESHEX=r0], 0x26c0}}, 0x4010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c00018005"], 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000440), 0x77, r6}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r12, 0x22820, 0x55007}, [@IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_TXQLEN={0x8, 0xd, 0x7d631b68}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x24040840) 739.839229ms ago: executing program 3 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6, &(0x7f0000000000), &(0x7f0000000000), 0x2000000}, 0x2c) 738.920016ms ago: executing program 1 (id=494): socket(0x9, 0x800, 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xfffffffffffffed6}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x22811, r0, 0xa3698000) 700.211362ms ago: executing program 4 (id=495): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x5) socket$inet6_sctp(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x40, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000ac0), 0x86, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20) 564.550855ms ago: executing program 3 (id=496): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x4000001) sendmsg$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r6], 0x1000f) socket$nl_generic(0x10, 0x3, 0x10) 508.197264ms ago: executing program 0 (id=497): r0 = socket(0x2b, 0x80801, 0x1) socket$packet(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) 423.125988ms ago: executing program 4 (id=498): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000240000012abd7000ffdbdf2506000000666ba34baddc269bd2a9927d80b7de3203a4254fec90e17d48dc294c1e3a1d5af2b37a1ecc5d45d7c58af41f6b784bd6bf580e29e9d6ac607fdc3624c996ef082ac959fc01e197f909dcaa860a552ea1865754c9743397530ebcdb8a6f32d0944fb2c81672ec78791919dd1fcb29e6d507cef01e1e7e247068b926578a4fb78e9a23af2252b408001e800400f5800000"], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000040) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xcf, 0x0, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/125, 0x7d}], 0x1}, 0x2102) sendmsg$alg(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0}], 0x1, &(0x7f0000001b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4008001) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000b08000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r8], 0x38}}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x6f4}}, 0x0) 352.3652ms ago: executing program 3 (id=499): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000040000000000000000000000071108e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 212.428447ms ago: executing program 3 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x8500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1, @void, @void, @value}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x20000000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) shutdown(r3, 0x1) ppoll(&(0x7f0000000000)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 212.216036ms ago: executing program 1 (id=501): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet(0x2, 0x4000000805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640ffe001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 168.455064ms ago: executing program 2 (id=502): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000340), &(0x7f00000003c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @dev}, &(0x7f0000000540)=0x10, 0x80800) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000005c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r2, @ANYBLOB="01012dbd7000030000002b00000008000300", @ANYRES32=r4, @ANYBLOB="1b00aa007e1512820b080211000000030000000f000000060000000008000c2dd91600005f512896b576077b5652ca197edc661a8938fa6f377ccb5576190549afefe1d7323c24154f6232ee115873d5ea0369da0c695eceed5a2ae86a0e330e1f49c170449643cdb43b8b3eee7bb0e021d51a883b131be184de3c7e6e1757d76e485f29c0fe211ceb527f240ff5a62b2e28c65d442dbbc2e2e7f9b7b6487b61baf7716799156684212caa501cc60f5d893bcd962b2e449b78e8230b4106ff1147c5f36feb2f22ac1aa19b2647"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4800) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x422e3000) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) bind$alg(r6, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000000)=0x14, 0x4) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, &(0x7f0000000380)=0x13) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'rose0\x00', 0x400}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007cc0)=[{{&(0x7f0000001a80)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010001fff2ebd700000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8600030022000000"], 0x48}}, 0x81040) connect$can_bcm(r9, &(0x7f00000005c0), 0x10) 154.682769ms ago: executing program 3 (id=503): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0x800}, {0x6, 0x7, 0x0, 0x6}]}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000014) openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 80.658218ms ago: executing program 1 (id=504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8000000010000304000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) 42.557314ms ago: executing program 1 (id=505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x20) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000600)=ANY=[], 0x408) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 30.550885ms ago: executing program 2 (id=506): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0xb, 0x6, 0x0, 0x0, @local, @remote, 0x80, 0x10, 0x3, 0x7}}) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRESOCT=r7, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socketpair(0x23, 0x800, 0x2, &(0x7f00000002c0)) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2, @in=@remote, 0x800, 0x0, 0x4e20, 0x8, 0x2}, {0x0, 0x0, 0x0, 0x3, 0x2, 0x2}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x0, 0x0, 0x1, 0xfb}}, 0xe8) close(r9) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002dc0)='D', 0x1}], 0x1}}], 0x2, 0x40080c0) 0s ago: executing program 3 (id=507): socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast1, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @local, 0x2f2, 0x1, 0xfff8, 0x100, 0xca4, 0x1880008, r1}) r2 = epoll_create1(0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000500)={0x14}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x81}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r3, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0xfffffffc, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="ed"], 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 67.102799][ T5814] cgroup: Unknown subsys name 'net' [ 67.236716][ T5814] cgroup: Unknown subsys name 'cpuset' [ 67.245162][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.732988][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.184217][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190672][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.324883][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.360809][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.368149][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.376271][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.394206][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.401912][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.423954][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.443541][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.455872][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.456209][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.463312][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.477128][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.478610][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.492392][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.492834][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.500197][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.507223][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.514377][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.520992][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.535702][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.543163][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.544910][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.554945][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.565052][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.572293][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.091822][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 72.143061][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.330053][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 72.390550][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.414026][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.473469][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.481132][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.488792][ T5829] bridge_slave_0: entered allmulticast mode [ 72.496619][ T5829] bridge_slave_0: entered promiscuous mode [ 72.512331][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.519699][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.527097][ T5829] bridge_slave_1: entered allmulticast mode [ 72.534340][ T5829] bridge_slave_1: entered promiscuous mode [ 72.553060][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.560216][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.567504][ T5824] bridge_slave_0: entered allmulticast mode [ 72.574562][ T5824] bridge_slave_0: entered promiscuous mode [ 72.589284][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.596429][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.603981][ T5824] bridge_slave_1: entered allmulticast mode [ 72.611421][ T5824] bridge_slave_1: entered promiscuous mode [ 72.697314][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.735851][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.751717][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.764608][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.898704][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.906388][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.914677][ T5834] bridge_slave_0: entered allmulticast mode [ 72.921622][ T5834] bridge_slave_0: entered promiscuous mode [ 72.931491][ T5829] team0: Port device team_slave_0 added [ 72.937678][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.944917][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.952067][ T5835] bridge_slave_0: entered allmulticast mode [ 72.959608][ T5835] bridge_slave_0: entered promiscuous mode [ 72.968500][ T5824] team0: Port device team_slave_0 added [ 72.977382][ T5824] team0: Port device team_slave_1 added [ 72.992904][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.000486][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.007751][ T5834] bridge_slave_1: entered allmulticast mode [ 73.015744][ T5834] bridge_slave_1: entered promiscuous mode [ 73.024012][ T5829] team0: Port device team_slave_1 added [ 73.029946][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.037150][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.044302][ T5835] bridge_slave_1: entered allmulticast mode [ 73.051212][ T5835] bridge_slave_1: entered promiscuous mode [ 73.069794][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.076909][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.084429][ T5830] bridge_slave_0: entered allmulticast mode [ 73.092478][ T5830] bridge_slave_0: entered promiscuous mode [ 73.150949][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.158455][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.165930][ T5830] bridge_slave_1: entered allmulticast mode [ 73.172873][ T5830] bridge_slave_1: entered promiscuous mode [ 73.193901][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.226114][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.233058][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.259339][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.285022][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.306484][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.313797][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.339733][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.351986][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.359305][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.386345][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.399595][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.412126][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.422225][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.429755][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.455792][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.518044][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.530109][ T5834] team0: Port device team_slave_0 added [ 73.539189][ T5834] team0: Port device team_slave_1 added [ 73.559204][ T5835] team0: Port device team_slave_0 added [ 73.568118][ T5835] team0: Port device team_slave_1 added [ 73.573587][ T5842] Bluetooth: hci3: command tx timeout [ 73.581126][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.643816][ T5842] Bluetooth: hci1: command tx timeout [ 73.644472][ T5833] Bluetooth: hci4: command tx timeout [ 73.649292][ T5827] Bluetooth: hci0: command tx timeout [ 73.654685][ T55] Bluetooth: hci2: command tx timeout [ 73.717281][ T5824] hsr_slave_0: entered promiscuous mode [ 73.724149][ T5824] hsr_slave_1: entered promiscuous mode [ 73.746569][ T5829] hsr_slave_0: entered promiscuous mode [ 73.752760][ T5829] hsr_slave_1: entered promiscuous mode [ 73.759646][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.767371][ T5829] Cannot create hsr debugfs directory [ 73.775210][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.782156][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.808098][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.819705][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.827080][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.853032][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.865716][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.872666][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.898623][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.911793][ T5830] team0: Port device team_slave_0 added [ 73.922214][ T5830] team0: Port device team_slave_1 added [ 73.929595][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.937145][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.963111][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.050983][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.058613][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.086216][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.099179][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.106473][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.132612][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.212823][ T5835] hsr_slave_0: entered promiscuous mode [ 74.219497][ T5835] hsr_slave_1: entered promiscuous mode [ 74.226368][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.234096][ T5835] Cannot create hsr debugfs directory [ 74.292478][ T5834] hsr_slave_0: entered promiscuous mode [ 74.299137][ T5834] hsr_slave_1: entered promiscuous mode [ 74.305839][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.313641][ T5834] Cannot create hsr debugfs directory [ 74.408942][ T5830] hsr_slave_0: entered promiscuous mode [ 74.415983][ T5830] hsr_slave_1: entered promiscuous mode [ 74.421974][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.429618][ T5830] Cannot create hsr debugfs directory [ 74.776994][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.806370][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.817254][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.840094][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.894226][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.910193][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.935293][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.945404][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.018954][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.044094][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.059672][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.084803][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.170615][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.181704][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.192050][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.228063][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.238080][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.257367][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.318264][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.345197][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.370125][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.381905][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.405702][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.416793][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.428103][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.435290][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.445230][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.452351][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.461772][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.468914][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.529774][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.536936][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.606077][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.643939][ T5827] Bluetooth: hci3: command tx timeout [ 75.685013][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.714745][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.721851][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.731065][ T5827] Bluetooth: hci1: command tx timeout [ 75.733923][ T5833] Bluetooth: hci2: command tx timeout [ 75.736549][ T5827] Bluetooth: hci0: command tx timeout [ 75.742011][ T5842] Bluetooth: hci4: command tx timeout [ 75.764703][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.796173][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.803298][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.878165][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.902215][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.949964][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.979022][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.986228][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.006631][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.013755][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.051002][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.058270][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.086148][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.100759][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.107944][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.320577][ T5824] veth0_vlan: entered promiscuous mode [ 76.332806][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.371708][ T5824] veth1_vlan: entered promiscuous mode [ 76.461122][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.497508][ T5829] veth0_vlan: entered promiscuous mode [ 76.557491][ T5829] veth1_vlan: entered promiscuous mode [ 76.568866][ T5824] veth0_macvtap: entered promiscuous mode [ 76.602081][ T5824] veth1_macvtap: entered promiscuous mode [ 76.652269][ T5829] veth0_macvtap: entered promiscuous mode [ 76.679599][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.710839][ T5829] veth1_macvtap: entered promiscuous mode [ 76.739643][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.750446][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.763082][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.780821][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.794497][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.803137][ T5835] veth0_vlan: entered promiscuous mode [ 76.812981][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.825272][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.834932][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.844554][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.872709][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.894855][ T5835] veth1_vlan: entered promiscuous mode [ 76.902469][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.914659][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.927567][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.951575][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.961170][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.971130][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.980101][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.133831][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.141777][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.192706][ T5830] veth0_vlan: entered promiscuous mode [ 77.211078][ T5835] veth0_macvtap: entered promiscuous mode [ 77.227276][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.241404][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.273068][ T5835] veth1_macvtap: entered promiscuous mode [ 77.279736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.288510][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.299911][ T5830] veth1_vlan: entered promiscuous mode [ 77.341876][ T5834] veth0_vlan: entered promiscuous mode [ 77.350122][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.357208][ T5834] veth1_vlan: entered promiscuous mode [ 77.378410][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.398957][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.410481][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.420924][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.431605][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.442976][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.463999][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.501960][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.514824][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.525292][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.538703][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.549769][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.567717][ T5830] veth0_macvtap: entered promiscuous mode [ 77.615847][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.624956][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.635043][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.644557][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.671309][ T5830] veth1_macvtap: entered promiscuous mode [ 77.690187][ T5834] veth0_macvtap: entered promiscuous mode [ 77.723765][ T5842] Bluetooth: hci3: command tx timeout [ 77.760431][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.783883][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.794056][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.805128][ T5842] Bluetooth: hci4: command tx timeout [ 77.805144][ T5827] Bluetooth: hci2: command tx timeout [ 77.810508][ T5842] Bluetooth: hci1: command tx timeout [ 77.816561][ T5833] Bluetooth: hci0: command tx timeout [ 77.822042][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.851146][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.862436][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.874583][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.884660][ T5834] veth1_macvtap: entered promiscuous mode [ 77.898249][ T5919] nbd: socks must be embedded in a SOCK_ITEM attr [ 77.917055][ T5919] block nbd0: shutting down sockets [ 77.925488][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.972870][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.982987][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.994943][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.005176][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.015932][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.027484][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.097824][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.136392][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.155393][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.180495][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.189805][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.200163][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.210226][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.261081][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.271689][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.285343][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.296250][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.307022][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.317487][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.332820][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.348727][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.360137][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.500213][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.512763][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.535266][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.549461][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.559421][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.573577][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.583794][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.594510][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.608073][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.655619][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.665097][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.673961][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.682681][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.694171][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.702023][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.840269][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.858557][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.049282][ T5939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.064202][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.073621][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.271278][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.312145][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.434990][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.442845][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.803612][ T5827] Bluetooth: hci3: command tx timeout [ 79.883568][ T5827] Bluetooth: hci2: command tx timeout [ 79.889686][ T5833] Bluetooth: hci0: command tx timeout [ 79.889706][ T5842] Bluetooth: hci4: command tx timeout [ 79.895767][ T5833] Bluetooth: hci1: command tx timeout [ 79.937607][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 79.950224][ T5970] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 80.129592][ T5974] Zero length message leads to an empty skb [ 80.189173][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 80.213919][ T30] audit: type=1800 audit(1746156241.013:2): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11" name="cgroup.controllers" dev="tmpfs" ino=34 res=0 errno=0 [ 80.286607][ T5974] vlan2: entered promiscuous mode [ 80.295233][ T5974] batadv0: entered promiscuous mode [ 80.704450][ T5993] netlink: 596 bytes leftover after parsing attributes in process `syz.2.20'. [ 81.343778][ T6019] nbd: socks must be embedded in a SOCK_ITEM attr [ 81.365974][ T6019] block nbd0: shutting down sockets [ 82.868532][ T6049] : entered promiscuous mode [ 83.436590][ T6080] netlink: 64 bytes leftover after parsing attributes in process `syz.4.46'. [ 83.439700][ T6081] netlink: 248 bytes leftover after parsing attributes in process `syz.0.48'. [ 83.529016][ T6064] warning: `syz.4.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.592029][ T6083] FAULT_INJECTION: forcing a failure. [ 83.592029][ T6083] name failslab, interval 1, probability 0, space 0, times 1 [ 83.621669][ T6083] CPU: 1 UID: 0 PID: 6083 Comm: syz.3.50 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 83.621691][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 83.621705][ T6083] Call Trace: [ 83.621715][ T6083] [ 83.621722][ T6083] dump_stack_lvl+0x189/0x250 [ 83.621763][ T6083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.621788][ T6083] ? __pfx__printk+0x10/0x10 [ 83.621816][ T6083] ? __pfx___might_resched+0x10/0x10 [ 83.621830][ T6083] ? fs_reclaim_acquire+0x7d/0x100 [ 83.621860][ T6083] should_fail_ex+0x414/0x560 [ 83.621891][ T6083] ? alloc_netdev_mqs+0xa6/0x11e0 [ 83.621914][ T6083] should_failslab+0xa8/0x100 [ 83.621938][ T6083] __kvmalloc_node_noprof+0x168/0x5e0 [ 83.621961][ T6083] ? alloc_netdev_mqs+0xa6/0x11e0 [ 83.621983][ T6083] ? snprintf+0xda/0x120 [ 83.622004][ T6083] ? __pfx_vlan_setup+0x10/0x10 [ 83.622022][ T6083] alloc_netdev_mqs+0xa6/0x11e0 [ 83.622045][ T6083] ? __pfx_vlan_setup+0x10/0x10 [ 83.622061][ T6083] ? __pfx_snprintf+0x10/0x10 [ 83.622084][ T6083] rtnl_create_link+0x31f/0xd10 [ 83.622114][ T6083] rtnl_newlink_create+0x25c/0xb00 [ 83.622140][ T6083] ? __mutex_lock+0x51b/0xe80 [ 83.622170][ T6083] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 83.622188][ T6083] ? rtnl_newlink+0x8db/0x1c70 [ 83.622208][ T6083] ? __pfx___mutex_lock+0x10/0x10 [ 83.622241][ T6083] ? ns_capable+0x8a/0xf0 [ 83.622261][ T6083] rtnl_newlink+0x16d6/0x1c70 [ 83.622280][ T6083] ? __kasan_slab_free+0x62/0x70 [ 83.622311][ T6083] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.622356][ T6083] ? kasan_quarantine_put+0xdd/0x220 [ 83.622374][ T6083] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.622404][ T6083] ? nlmon_xmit+0xb0/0x100 [ 83.622424][ T6083] ? kmem_cache_free+0x192/0x3f0 [ 83.622453][ T6083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 83.622479][ T6083] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.622503][ T6083] ? __local_bh_enable_ip+0x12d/0x1c0 [ 83.622528][ T6083] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 83.622561][ T6083] ? aa_get_newest_label+0xf7/0x5d0 [ 83.622582][ T6083] ? __lock_acquire+0xaac/0xd20 [ 83.622631][ T6083] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.622648][ T6083] rtnetlink_rcv_msg+0x7cc/0xb70 [ 83.622669][ T6083] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 83.622686][ T6083] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.622707][ T6083] ? ref_tracker_free+0x63a/0x7d0 [ 83.622723][ T6083] ? __copy_skb_header+0xa7/0x550 [ 83.622754][ T6083] netlink_rcv_skb+0x219/0x490 [ 83.622774][ T6083] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.622793][ T6083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.622838][ T6083] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.622857][ T6083] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.622881][ T6083] netlink_unicast+0x758/0x8d0 [ 83.622907][ T6083] netlink_sendmsg+0x805/0xb30 [ 83.622935][ T6083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.622958][ T6083] ? aa_sock_msg_perm+0x94/0x160 [ 83.622978][ T6083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 83.622996][ T6083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.623016][ T6083] __sock_sendmsg+0x219/0x270 [ 83.623046][ T6083] ____sys_sendmsg+0x505/0x830 [ 83.623073][ T6083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.623104][ T6083] ? import_iovec+0x74/0xa0 [ 83.623131][ T6083] ___sys_sendmsg+0x21f/0x2a0 [ 83.623154][ T6083] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.623211][ T6083] ? __fget_files+0x2a/0x420 [ 83.623233][ T6083] ? __fget_files+0x3a0/0x420 [ 83.623265][ T6083] __x64_sys_sendmsg+0x19b/0x260 [ 83.623289][ T6083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 83.623328][ T6083] ? do_syscall_64+0xba/0x210 [ 83.623357][ T6083] do_syscall_64+0xf6/0x210 [ 83.623382][ T6083] ? clear_bhb_loop+0x45/0xa0 [ 83.623403][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.623418][ T6083] RIP: 0033:0x7f2a8378e969 [ 83.623440][ T6083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.623453][ T6083] RSP: 002b:00007f2a845e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.623478][ T6083] RAX: ffffffffffffffda RBX: 00007f2a839b5fa0 RCX: 00007f2a8378e969 [ 83.623490][ T6083] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011 [ 83.623500][ T6083] RBP: 00007f2a845e2090 R08: 0000000000000000 R09: 0000000000000000 [ 83.623510][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.623520][ T6083] R13: 0000000000000000 R14: 00007f2a839b5fa0 R15: 00007fffad7e1558 [ 83.623548][ T6083] [ 84.746195][ T6127] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 84.826604][ T6127] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 85.061189][ T6124] team0 (unregistering): Port device team_slave_0 removed [ 85.114069][ T6124] team0 (unregistering): Port device team_slave_1 removed [ 85.156295][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 85.195654][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 85.289804][ T6143] bond0: entered promiscuous mode [ 85.296400][ T6152] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 85.312998][ T6143] bond_slave_0: entered promiscuous mode [ 85.319399][ T6143] bond_slave_1: entered promiscuous mode [ 85.356876][ T6143] bridge0: entered promiscuous mode [ 85.882311][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 85.900327][ T6172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 85.945980][ T6179] netlink: 1 bytes leftover after parsing attributes in process `syz.0.74'. [ 85.964993][ T6179] netlink: 1 bytes leftover after parsing attributes in process `syz.0.74'. [ 85.997949][ T6179] netlink: 56 bytes leftover after parsing attributes in process `syz.0.74'. [ 86.025921][ T6180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.098883][ T6185] Bluetooth: MGMT ver 1.23 [ 86.199428][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 86.551692][ T24] cfg80211: failed to load regulatory.db [ 87.576027][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 87.642878][ T6247] netlink: 56 bytes leftover after parsing attributes in process `syz.0.87'. [ 87.714802][ T6246] FAULT_INJECTION: forcing a failure. [ 87.714802][ T6246] name failslab, interval 1, probability 0, space 0, times 0 [ 87.740658][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.1.86 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 87.740680][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.740690][ T6246] Call Trace: [ 87.740697][ T6246] [ 87.740704][ T6246] dump_stack_lvl+0x189/0x250 [ 87.740737][ T6246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.740762][ T6246] ? __pfx__printk+0x10/0x10 [ 87.740781][ T6246] ? __pfx___might_resched+0x10/0x10 [ 87.740797][ T6246] ? fs_reclaim_acquire+0x7d/0x100 [ 87.740826][ T6246] should_fail_ex+0x414/0x560 [ 87.740858][ T6246] should_failslab+0xa8/0x100 [ 87.740881][ T6246] __kmalloc_cache_noprof+0x70/0x3d0 [ 87.740902][ T6246] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 87.740925][ T6246] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 87.740948][ T6246] alloc_netdev_mqs+0xbd5/0x11e0 [ 87.740979][ T6246] rtnl_create_link+0x31f/0xd10 [ 87.741009][ T6246] rtnl_newlink_create+0x25c/0xb00 [ 87.741033][ T6246] ? __mutex_lock+0x51b/0xe80 [ 87.741064][ T6246] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 87.741082][ T6246] ? rtnl_newlink+0x8db/0x1c70 [ 87.741102][ T6246] ? __pfx___mutex_lock+0x10/0x10 [ 87.741136][ T6246] ? ns_capable+0x8a/0xf0 [ 87.741155][ T6246] rtnl_newlink+0x16d6/0x1c70 [ 87.741172][ T6246] ? __kasan_slab_free+0x62/0x70 [ 87.741203][ T6246] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.741248][ T6246] ? kasan_quarantine_put+0xdd/0x220 [ 87.741265][ T6246] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.741295][ T6246] ? __pfx_do_softirq+0x10/0x10 [ 87.741326][ T6246] ? __local_bh_enable_ip+0x12d/0x1c0 [ 87.741350][ T6246] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.741373][ T6246] ? __local_bh_enable_ip+0x12d/0x1c0 [ 87.741396][ T6246] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 87.741428][ T6246] ? aa_get_newest_label+0xf7/0x5d0 [ 87.741454][ T6246] ? __lock_acquire+0xaac/0xd20 [ 87.741498][ T6246] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.741514][ T6246] rtnetlink_rcv_msg+0x7cc/0xb70 [ 87.741533][ T6246] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 87.741549][ T6246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.741569][ T6246] ? ref_tracker_free+0x63a/0x7d0 [ 87.741584][ T6246] ? __copy_skb_header+0xa7/0x550 [ 87.741613][ T6246] netlink_rcv_skb+0x219/0x490 [ 87.741633][ T6246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.741651][ T6246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.741693][ T6246] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.741712][ T6246] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.741737][ T6246] netlink_unicast+0x758/0x8d0 [ 87.741763][ T6246] netlink_sendmsg+0x805/0xb30 [ 87.741791][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.741813][ T6246] ? aa_sock_msg_perm+0x94/0x160 [ 87.741831][ T6246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 87.741850][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.741869][ T6246] __sock_sendmsg+0x219/0x270 [ 87.741898][ T6246] ____sys_sendmsg+0x505/0x830 [ 87.741925][ T6246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.741956][ T6246] ? import_iovec+0x74/0xa0 [ 87.741982][ T6246] ___sys_sendmsg+0x21f/0x2a0 [ 87.742006][ T6246] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.742063][ T6246] ? __fget_files+0x2a/0x420 [ 87.742084][ T6246] ? __fget_files+0x3a0/0x420 [ 87.742116][ T6246] __x64_sys_sendmsg+0x19b/0x260 [ 87.742141][ T6246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.742180][ T6246] ? do_syscall_64+0xba/0x210 [ 87.742207][ T6246] do_syscall_64+0xf6/0x210 [ 87.742233][ T6246] ? clear_bhb_loop+0x45/0xa0 [ 87.742254][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.742270][ T6246] RIP: 0033:0x7f355f38e969 [ 87.742285][ T6246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.742299][ T6246] RSP: 002b:00007f356026b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.742316][ T6246] RAX: ffffffffffffffda RBX: 00007f355f5b5fa0 RCX: 00007f355f38e969 [ 87.742328][ T6246] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 87.742338][ T6246] RBP: 00007f356026b090 R08: 0000000000000000 R09: 0000000000000000 [ 87.742348][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.742356][ T6246] R13: 0000000000000000 R14: 00007f355f5b5fa0 R15: 00007fffe8a91688 [ 87.742381][ T6246] [ 88.599727][ T6284] syz.0.94 (6284) used obsolete PPPIOCDETACH ioctl [ 90.199422][ T6352] __nla_validate_parse: 4 callbacks suppressed [ 90.199441][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 90.223545][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 90.307462][ T6352] dummy0: entered promiscuous mode [ 90.335723][ T6352] team0: entered promiscuous mode [ 90.351103][ T6352] team_slave_0: entered promiscuous mode [ 90.372335][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 90.394374][ T6352] team_slave_1: entered promiscuous mode [ 90.431186][ T6352] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 90.477341][ T6352] Cannot create hsr debugfs directory [ 91.749310][ T6433] nbd: socks must be embedded in a SOCK_ITEM attr [ 91.766404][ T6433] block nbd0: shutting down sockets [ 92.257278][ T6449] team0 (unregistering): Port device team_slave_0 removed [ 92.348887][ T6449] team0 (unregistering): Port device team_slave_1 removed [ 92.647435][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 93.125170][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.147'. [ 93.566918][ T6514] FAULT_INJECTION: forcing a failure. [ 93.566918][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 93.640903][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.0.154 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 93.640929][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 93.640951][ T6514] Call Trace: [ 93.640958][ T6514] [ 93.640966][ T6514] dump_stack_lvl+0x189/0x250 [ 93.641000][ T6514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.641026][ T6514] ? __pfx__printk+0x10/0x10 [ 93.641049][ T6514] ? __pfx___might_resched+0x10/0x10 [ 93.641070][ T6514] should_fail_ex+0x414/0x560 [ 93.641105][ T6514] should_failslab+0xa8/0x100 [ 93.641130][ T6514] __kmalloc_noprof+0xcb/0x4f0 [ 93.641152][ T6514] ? sock_kmalloc+0xd6/0x160 [ 93.641180][ T6514] sock_kmalloc+0xd6/0x160 [ 93.641207][ T6514] af_alg_get_rsgl+0x236/0x810 [ 93.641254][ T6514] skcipher_recvmsg+0x3c0/0x11c0 [ 93.641277][ T6514] ? aa_sk_perm+0x81e/0x950 [ 93.641306][ T6514] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 93.641328][ T6514] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 93.641347][ T6514] ? security_socket_recvmsg+0x7e/0x2e0 [ 93.641371][ T6514] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 93.641390][ T6514] sock_recvmsg+0x229/0x270 [ 93.641411][ T6514] ____sys_recvmsg+0x1c9/0x460 [ 93.641443][ T6514] ? __pfx_____sys_recvmsg+0x10/0x10 [ 93.641482][ T6514] ? import_iovec+0x74/0xa0 [ 93.641509][ T6514] ___sys_recvmsg+0x1b5/0x510 [ 93.641539][ T6514] ? __pfx____sys_recvmsg+0x10/0x10 [ 93.641588][ T6514] ? __fget_files+0x3a0/0x420 [ 93.641622][ T6514] __x64_sys_recvmsg+0x198/0x260 [ 93.641649][ T6514] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 93.641689][ T6514] ? do_syscall_64+0xba/0x210 [ 93.641720][ T6514] do_syscall_64+0xf6/0x210 [ 93.641747][ T6514] ? clear_bhb_loop+0x45/0xa0 [ 93.641769][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.641785][ T6514] RIP: 0033:0x7f47a018e969 [ 93.641799][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.641813][ T6514] RSP: 002b:00007f47a0fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 93.641831][ T6514] RAX: ffffffffffffffda RBX: 00007f47a03b6080 RCX: 00007f47a018e969 [ 93.641843][ T6514] RDX: 0000000020000253 RSI: 00002000000005c0 RDI: 0000000000000004 [ 93.641854][ T6514] RBP: 00007f47a0fee090 R08: 0000000000000000 R09: 0000000000000000 [ 93.641864][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.641874][ T6514] R13: 0000000000000001 R14: 00007f47a03b6080 R15: 00007ffe46d5d2a8 [ 93.641901][ T6514] [ 94.001846][ T6501] team0 (unregistering): left promiscuous mode [ 94.010078][ T6501] team_slave_0: left promiscuous mode [ 94.018734][ T6501] team_slave_1: left promiscuous mode [ 94.032064][ T6501] team0 (unregistering): Port device team_slave_0 removed [ 94.043093][ T6501] team0 (unregistering): Port device team_slave_1 removed [ 94.957629][ T6565] sctp: [Deprecated]: syz.1.173 (pid 6565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.957629][ T6565] Use struct sctp_sack_info instead [ 95.059853][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 95.384785][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.181'. [ 96.995292][ T6655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.204'. [ 97.045230][ T6655] FAULT_INJECTION: forcing a failure. [ 97.045230][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 97.093550][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.0.204 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 97.093573][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 97.093583][ T6655] Call Trace: [ 97.093589][ T6655] [ 97.093596][ T6655] dump_stack_lvl+0x189/0x250 [ 97.093627][ T6655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.093652][ T6655] ? __pfx__printk+0x10/0x10 [ 97.093673][ T6655] ? __pfx___might_resched+0x10/0x10 [ 97.093693][ T6655] should_fail_ex+0x414/0x560 [ 97.093724][ T6655] should_failslab+0xa8/0x100 [ 97.093749][ T6655] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 97.093770][ T6655] ? __alloc_skb+0x112/0x2d0 [ 97.093794][ T6655] __alloc_skb+0x112/0x2d0 [ 97.093815][ T6655] netlink_sendmsg+0x5c6/0xb30 [ 97.093862][ T6655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.093885][ T6655] ? aa_sock_msg_perm+0x94/0x160 [ 97.093905][ T6655] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 97.093924][ T6655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.093943][ T6655] __sock_sendmsg+0x219/0x270 [ 97.093972][ T6655] ____sys_sendmsg+0x505/0x830 [ 97.093999][ T6655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.094031][ T6655] ? import_iovec+0x74/0xa0 [ 97.094059][ T6655] ___sys_sendmsg+0x21f/0x2a0 [ 97.094084][ T6655] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.094140][ T6655] ? __fget_files+0x2a/0x420 [ 97.094163][ T6655] ? __fget_files+0x3a0/0x420 [ 97.094195][ T6655] __x64_sys_sendmsg+0x19b/0x260 [ 97.094221][ T6655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.094259][ T6655] ? do_syscall_64+0xba/0x210 [ 97.094290][ T6655] do_syscall_64+0xf6/0x210 [ 97.094316][ T6655] ? clear_bhb_loop+0x45/0xa0 [ 97.094338][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.094354][ T6655] RIP: 0033:0x7f47a018e969 [ 97.094369][ T6655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.094384][ T6655] RSP: 002b:00007f47a100f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.094424][ T6655] RAX: ffffffffffffffda RBX: 00007f47a03b5fa0 RCX: 00007f47a018e969 [ 97.094435][ T6655] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 97.094445][ T6655] RBP: 00007f47a100f090 R08: 0000000000000000 R09: 0000000000000000 [ 97.094456][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.094466][ T6655] R13: 0000000000000000 R14: 00007f47a03b5fa0 R15: 00007ffe46d5d2a8 [ 97.094494][ T6655] [ 97.356765][ T6664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.210'. [ 97.377251][ T6664] vti0: entered promiscuous mode [ 97.834833][ T6681] syzkaller0: entered promiscuous mode [ 97.847374][ T6681] syzkaller0: entered allmulticast mode [ 98.118184][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 99.764055][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 99.902575][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 99.943973][ T6756] IPv6: addrconf: prefix option has invalid lifetime [ 100.081364][ T6762] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 100.924764][ T6801] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 101.123978][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.251'. [ 101.504825][ T6833] FAULT_INJECTION: forcing a failure. [ 101.504825][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 101.517522][ T6833] CPU: 0 UID: 0 PID: 6833 Comm: syz.4.256 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 101.517544][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.517555][ T6833] Call Trace: [ 101.517561][ T6833] [ 101.517569][ T6833] dump_stack_lvl+0x189/0x250 [ 101.517601][ T6833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.517625][ T6833] ? __pfx__printk+0x10/0x10 [ 101.517645][ T6833] ? rcu_is_watching+0x15/0xb0 [ 101.517671][ T6833] ? trace_sched_exit_tp+0x38/0x120 [ 101.517698][ T6833] should_fail_ex+0x414/0x560 [ 101.517730][ T6833] should_failslab+0xa8/0x100 [ 101.517754][ T6833] kmem_cache_alloc_noprof+0x73/0x3c0 [ 101.517774][ T6833] ? skb_clone+0x212/0x3a0 [ 101.517801][ T6833] skb_clone+0x212/0x3a0 [ 101.517827][ T6833] bpf_clone_redirect+0xad/0x3d0 [ 101.517862][ T6833] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x64 [ 101.517882][ T6833] ? preempt_schedule+0xae/0xc0 [ 101.517903][ T6833] ? bpf_test_run+0x205/0x830 [ 101.517922][ T6833] ? preempt_schedule_common+0x83/0xd0 [ 101.517945][ T6833] ? preempt_schedule+0xae/0xc0 [ 101.517966][ T6833] ? __pfx_preempt_schedule+0x10/0x10 [ 101.517989][ T6833] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 101.518012][ T6833] ? preempt_schedule_thunk+0x16/0x30 [ 101.518034][ T6833] ? __local_bh_disable_ip+0xf1/0x190 [ 101.518060][ T6833] ? __pfx___cant_migrate+0x10/0x10 [ 101.518073][ T6833] ? __local_bh_enable_ip+0x13e/0x1c0 [ 101.518099][ T6833] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 101.518127][ T6833] ? bpf_test_timer_continue+0x136/0x350 [ 101.518150][ T6833] bpf_test_run+0x38b/0x830 [ 101.518178][ T6833] ? bpf_test_run+0x205/0x830 [ 101.518202][ T6833] ? __pfx_bpf_test_run+0x10/0x10 [ 101.518242][ T6833] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 101.518260][ T6833] ? convert___skb_to_skb+0x3d/0x590 [ 101.518285][ T6833] bpf_prog_test_run_skb+0xb30/0x1560 [ 101.518317][ T6833] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 101.518336][ T6833] bpf_prog_test_run+0x2a9/0x340 [ 101.518379][ T6833] __sys_bpf+0x4a4/0x860 [ 101.518422][ T6833] ? __pfx___sys_bpf+0x10/0x10 [ 101.518460][ T6833] ? ksys_write+0x1f0/0x250 [ 101.518481][ T6833] ? rcu_is_watching+0x15/0xb0 [ 101.518522][ T6833] __x64_sys_bpf+0x7c/0x90 [ 101.518545][ T6833] do_syscall_64+0xf6/0x210 [ 101.518575][ T6833] ? clear_bhb_loop+0x45/0xa0 [ 101.518600][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.518618][ T6833] RIP: 0033:0x7f5d9f38e969 [ 101.518635][ T6833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.518650][ T6833] RSP: 002b:00007f5da0222038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.518671][ T6833] RAX: ffffffffffffffda RBX: 00007f5d9f5b5fa0 RCX: 00007f5d9f38e969 [ 101.518685][ T6833] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 101.518697][ T6833] RBP: 00007f5da0222090 R08: 0000000000000000 R09: 0000000000000000 [ 101.518709][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.518720][ T6833] R13: 0000000000000000 R14: 00007f5d9f5b5fa0 R15: 00007ffcc482e0d8 [ 101.518752][ T6833] [ 101.561406][ T6836] netlink: 84 bytes leftover after parsing attributes in process `syz.2.258'. [ 103.037497][ T6861] netlink: 'syz.3.267': attribute type 4 has an invalid length. [ 103.331594][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 103.355160][ T6881] vlan0: entered promiscuous mode [ 103.457883][ T6884] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 103.516637][ T6893] netlink: 'syz.3.279': attribute type 8 has an invalid length. [ 103.535543][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 103.613555][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 103.866856][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'. [ 104.348189][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 104.357186][ T6929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 104.478819][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 104.695468][ T6950] nbd: socks must be embedded in a SOCK_ITEM attr [ 104.711877][ T6950] block nbd0: shutting down sockets [ 104.798448][ T6954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.109000][ T6966] team0 (unregistering): Port device team_slave_0 removed [ 105.138580][ T6966] team0 (unregistering): Port device team_slave_1 removed [ 105.547610][ T6957] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 105.801977][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 106.039595][ T5833] block nbd0: Receive control failed (result -107) [ 106.073577][ T7008] nbd0: detected capacity change from 0 to 32 [ 106.118421][ T6495] block nbd0: Dead connection, failed to find a fallback [ 106.126388][ T6495] block nbd0: shutting down sockets [ 106.131810][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.147603][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.177512][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.204485][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.212361][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.221710][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.267296][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.277911][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.287908][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.300187][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.344399][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.394342][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.412949][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.440357][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.479012][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.503400][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.525137][ T6495] ldm_validate_partition_table(): Disk read failed. [ 106.531928][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.576787][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.604536][ T6495] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 106.625930][ T6495] Buffer I/O error on dev nbd0, logical block 0, async page read [ 106.630580][ T7045] netlink: 'syz.0.321': attribute type 10 has an invalid length. [ 106.653001][ T6495] Dev nbd0: unable to read RDB block 0 [ 106.657961][ T7045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.321'. [ 106.674955][ T6495] nbd0: unable to read partition table [ 106.675162][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e0d6c00: rx timeout, send abort [ 106.689787][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e0d6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.726604][ T6495] ldm_validate_partition_table(): Disk read failed. [ 106.735608][ T7045] batadv0: entered allmulticast mode [ 106.741532][ T6495] Dev nbd0: unable to read RDB block 0 [ 106.747939][ T7045] bridge0: port 3(batadv0) entered blocking state [ 106.748338][ T6495] nbd0: unable to read partition table [ 106.759812][ T7045] bridge0: port 3(batadv0) entered disabled state [ 106.767500][ T5833] Bluetooth: hci4: command 0x0401 tx timeout [ 106.779763][ T7045] bridge0: port 3(batadv0) entered blocking state [ 106.786448][ T7045] bridge0: port 3(batadv0) entered forwarding state [ 106.835148][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 106.904284][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 106.914088][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 107.087027][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.095211][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.189514][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.207436][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.280383][ T7051] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.290770][ T7051] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.299694][ T7051] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.310085][ T7051] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.604067][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 107.918474][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.334'. [ 108.485534][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 108.594691][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 108.726909][ T7121] syzkaller1: entered promiscuous mode [ 108.732508][ T7121] syzkaller1: entered allmulticast mode [ 108.761635][ T7123] FAULT_INJECTION: forcing a failure. [ 108.761635][ T7123] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.775045][ T7123] CPU: 1 UID: 0 PID: 7123 Comm: syz.2.347 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 108.775066][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 108.775076][ T7123] Call Trace: [ 108.775083][ T7123] [ 108.775090][ T7123] dump_stack_lvl+0x189/0x250 [ 108.775117][ T7123] ? __lock_acquire+0xaac/0xd20 [ 108.775143][ T7123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.775166][ T7123] ? __pfx__printk+0x10/0x10 [ 108.775183][ T7123] ? __might_fault+0xb0/0x130 [ 108.775214][ T7123] should_fail_ex+0x414/0x560 [ 108.775245][ T7123] _copy_from_user+0x2d/0xb0 [ 108.775269][ T7123] ___sys_sendmsg+0x158/0x2a0 [ 108.775293][ T7123] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.775347][ T7123] ? __fget_files+0x2a/0x420 [ 108.775367][ T7123] ? __fget_files+0x3a0/0x420 [ 108.775398][ T7123] __x64_sys_sendmsg+0x19b/0x260 [ 108.775422][ T7123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.775459][ T7123] ? do_syscall_64+0xba/0x210 [ 108.775487][ T7123] do_syscall_64+0xf6/0x210 [ 108.775512][ T7123] ? clear_bhb_loop+0x45/0xa0 [ 108.775533][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.775549][ T7123] RIP: 0033:0x7f3e0358e969 [ 108.775563][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.775577][ T7123] RSP: 002b:00007f3e04371038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.775594][ T7123] RAX: ffffffffffffffda RBX: 00007f3e037b5fa0 RCX: 00007f3e0358e969 [ 108.775606][ T7123] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000005 [ 108.775616][ T7123] RBP: 00007f3e04371090 R08: 0000000000000000 R09: 0000000000000000 [ 108.775626][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.775635][ T7123] R13: 0000000000000000 R14: 00007f3e037b5fa0 R15: 00007ffe20d6aa68 [ 108.775668][ T7123] [ 109.025808][ T7126] sctp: [Deprecated]: syz.3.348 (pid 7126) Use of int in max_burst socket option deprecated. [ 109.025808][ T7126] Use struct sctp_assoc_value instead [ 109.950464][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.368'. [ 109.980397][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.368'. [ 110.205461][ T7195] netlink: 56 bytes leftover after parsing attributes in process `syz.2.370'. [ 110.223477][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 110.390310][ T7202] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$UvyآDUDw}z' [ 110.407411][ T7204] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 110.420934][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: syz.3.376 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 110.420957][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 110.420968][ T7202] Call Trace: [ 110.420975][ T7202] [ 110.420983][ T7202] dump_stack_lvl+0x189/0x250 [ 110.421014][ T7202] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.421040][ T7202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.421065][ T7202] ? __pfx__printk+0x10/0x10 [ 110.421088][ T7202] ? kernfs_path_from_node+0x2b/0x260 [ 110.421115][ T7202] ? kernfs_path_from_node+0x216/0x260 [ 110.421141][ T7202] sysfs_warn_dup+0x8e/0xa0 [ 110.421164][ T7202] sysfs_do_create_link_sd+0xc0/0x110 [ 110.421190][ T7202] device_add_class_symlinks+0x1cf/0x240 [ 110.421214][ T7202] device_add+0x475/0xb50 [ 110.421238][ T7202] wiphy_register+0x199a/0x26b0 [ 110.421281][ T7202] ? __pfx_wiphy_register+0x10/0x10 [ 110.421297][ T7202] ? minstrel_ht_alloc+0x893/0x990 [ 110.421325][ T7202] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 110.421350][ T7202] ieee80211_register_hw+0x334b/0x4060 [ 110.421385][ T7202] ? ieee80211_register_hw+0x14b1/0x4060 [ 110.421417][ T7202] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 110.421444][ T7202] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 110.421475][ T7202] ? __hrtimer_setup+0x187/0x210 [ 110.421500][ T7202] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 110.421523][ T7202] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 110.421579][ T7202] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 110.421604][ T7202] ? trace_kmalloc+0x1f/0xd0 [ 110.421623][ T7202] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 110.421645][ T7202] ? kstrndup+0xbf/0x160 [ 110.421671][ T7202] hwsim_new_radio_nl+0xea4/0x1b10 [ 110.421700][ T7202] ? __pfx___nla_validate_parse+0x10/0x10 [ 110.421735][ T7202] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 110.421772][ T7202] ? __nla_parse+0x40/0x60 [ 110.421796][ T7202] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 110.421829][ T7202] genl_family_rcv_msg_doit+0x212/0x300 [ 110.421861][ T7202] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 110.421898][ T7202] ? bpf_lsm_capable+0x9/0x20 [ 110.421921][ T7202] ? security_capable+0x7e/0x2e0 [ 110.421946][ T7202] genl_rcv_msg+0x60e/0x790 [ 110.421977][ T7202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.422000][ T7202] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 110.422039][ T7202] netlink_rcv_skb+0x219/0x490 [ 110.422059][ T7202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.422085][ T7202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.422128][ T7202] ? down_read+0x1ad/0x2e0 [ 110.422147][ T7202] genl_rcv+0x28/0x40 [ 110.422168][ T7202] netlink_unicast+0x758/0x8d0 [ 110.422197][ T7202] netlink_sendmsg+0x805/0xb30 [ 110.422227][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.422250][ T7202] ? aa_sock_msg_perm+0x94/0x160 [ 110.422279][ T7202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.422298][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.422320][ T7202] __sock_sendmsg+0x219/0x270 [ 110.422350][ T7202] ____sys_sendmsg+0x505/0x830 [ 110.422379][ T7202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.422410][ T7202] ? import_iovec+0x74/0xa0 [ 110.422438][ T7202] ___sys_sendmsg+0x21f/0x2a0 [ 110.422462][ T7202] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.422521][ T7202] ? __fget_files+0x2a/0x420 [ 110.422543][ T7202] ? __fget_files+0x3a0/0x420 [ 110.422575][ T7202] __x64_sys_sendmsg+0x19b/0x260 [ 110.422600][ T7202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.422639][ T7202] ? do_syscall_64+0xba/0x210 [ 110.422670][ T7202] do_syscall_64+0xf6/0x210 [ 110.422696][ T7202] ? clear_bhb_loop+0x45/0xa0 [ 110.422718][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.422734][ T7202] RIP: 0033:0x7f2a8378e969 [ 110.422749][ T7202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.422763][ T7202] RSP: 002b:00007f2a845e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.422781][ T7202] RAX: ffffffffffffffda RBX: 00007f2a839b5fa0 RCX: 00007f2a8378e969 [ 110.422794][ T7202] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 110.422805][ T7202] RBP: 00007f2a83810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 110.422815][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.422825][ T7202] R13: 0000000000000000 R14: 00007f2a839b5fa0 R15: 00007fffad7e1558 [ 110.422854][ T7202] [ 111.033921][ T7211] netlink: 'syz.3.380': attribute type 30 has an invalid length. [ 111.479615][ T7240] nbd: must specify at least one socket [ 111.592821][ T7237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.622405][ T30] audit: type=1800 audit(1746156272.433:3): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.382" name="cgroup.controllers" dev="tmpfs" ino=374 res=0 errno=0 [ 111.659263][ T7248] __nla_validate_parse: 9 callbacks suppressed [ 111.659279][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 111.691227][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.392'. [ 112.026257][ T7264] FAULT_INJECTION: forcing a failure. [ 112.026257][ T7264] name failslab, interval 1, probability 0, space 0, times 0 [ 112.045520][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.4.397 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 112.045543][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 112.045553][ T7264] Call Trace: [ 112.045560][ T7264] [ 112.045567][ T7264] dump_stack_lvl+0x189/0x250 [ 112.045598][ T7264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.045623][ T7264] ? __pfx__printk+0x10/0x10 [ 112.045642][ T7264] ? __pfx___might_resched+0x10/0x10 [ 112.045658][ T7264] ? fs_reclaim_acquire+0x7d/0x100 [ 112.045688][ T7264] should_fail_ex+0x414/0x560 [ 112.045720][ T7264] should_failslab+0xa8/0x100 [ 112.045744][ T7264] __kmalloc_cache_noprof+0x70/0x3d0 [ 112.045764][ T7264] ? alloc_netdev_mqs+0xc36/0x11e0 [ 112.045794][ T7264] alloc_netdev_mqs+0xc36/0x11e0 [ 112.045824][ T7264] rtnl_create_link+0x31f/0xd10 [ 112.045854][ T7264] rtnl_newlink_create+0x25c/0xb00 [ 112.045879][ T7264] ? __mutex_lock+0x51b/0xe80 [ 112.045909][ T7264] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 112.045926][ T7264] ? rtnl_newlink+0x8db/0x1c70 [ 112.045946][ T7264] ? __pfx___mutex_lock+0x10/0x10 [ 112.045979][ T7264] ? ns_capable+0x8a/0xf0 [ 112.045998][ T7264] rtnl_newlink+0x16d6/0x1c70 [ 112.046017][ T7264] ? __kasan_slab_free+0x62/0x70 [ 112.046049][ T7264] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.046095][ T7264] ? kasan_quarantine_put+0xdd/0x220 [ 112.046113][ T7264] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.046144][ T7264] ? nlmon_xmit+0xb0/0x100 [ 112.046165][ T7264] ? kmem_cache_free+0x192/0x3f0 [ 112.046193][ T7264] ? __local_bh_enable_ip+0x12d/0x1c0 [ 112.046236][ T7264] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.046261][ T7264] ? __local_bh_enable_ip+0x12d/0x1c0 [ 112.046289][ T7264] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 112.046324][ T7264] ? aa_get_newest_label+0xf7/0x5d0 [ 112.046348][ T7264] ? __lock_acquire+0xaac/0xd20 [ 112.046403][ T7264] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.046421][ T7264] rtnetlink_rcv_msg+0x7cc/0xb70 [ 112.046444][ T7264] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 112.046462][ T7264] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.046485][ T7264] ? ref_tracker_free+0x63a/0x7d0 [ 112.046501][ T7264] ? __copy_skb_header+0xa7/0x550 [ 112.046535][ T7264] netlink_rcv_skb+0x219/0x490 [ 112.046556][ T7264] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.046576][ T7264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.046617][ T7264] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.046635][ T7264] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.046661][ T7264] netlink_unicast+0x758/0x8d0 [ 112.046690][ T7264] netlink_sendmsg+0x805/0xb30 [ 112.046720][ T7264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.046744][ T7264] ? aa_sock_msg_perm+0x94/0x160 [ 112.046764][ T7264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.046785][ T7264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.046806][ T7264] __sock_sendmsg+0x219/0x270 [ 112.046837][ T7264] ____sys_sendmsg+0x505/0x830 [ 112.046866][ T7264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.046899][ T7264] ? import_iovec+0x74/0xa0 [ 112.046927][ T7264] ___sys_sendmsg+0x21f/0x2a0 [ 112.046952][ T7264] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.047013][ T7264] ? __fget_files+0x2a/0x420 [ 112.047035][ T7264] ? __fget_files+0x3a0/0x420 [ 112.047069][ T7264] __x64_sys_sendmsg+0x19b/0x260 [ 112.047095][ T7264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.047137][ T7264] ? do_syscall_64+0xba/0x210 [ 112.047176][ T7264] do_syscall_64+0xf6/0x210 [ 112.047201][ T7264] ? clear_bhb_loop+0x45/0xa0 [ 112.047220][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.047236][ T7264] RIP: 0033:0x7f5d9f38e969 [ 112.047251][ T7264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.047264][ T7264] RSP: 002b:00007f5da0222038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.047281][ T7264] RAX: ffffffffffffffda RBX: 00007f5d9f5b5fa0 RCX: 00007f5d9f38e969 [ 112.047293][ T7264] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 112.047303][ T7264] RBP: 00007f5da0222090 R08: 0000000000000000 R09: 0000000000000000 [ 112.047313][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.047322][ T7264] R13: 0000000000000000 R14: 00007f5d9f5b5fa0 R15: 00007ffcc482e0d8 [ 112.047350][ T7264] [ 112.608865][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.401'. [ 112.661851][ T7268] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 112.857227][ T7289] FAULT_INJECTION: forcing a failure. [ 112.857227][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 112.885490][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.3.407 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 112.885513][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 112.885524][ T7289] Call Trace: [ 112.885530][ T7289] [ 112.885537][ T7289] dump_stack_lvl+0x189/0x250 [ 112.885568][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.885593][ T7289] ? __pfx__printk+0x10/0x10 [ 112.885616][ T7289] ? ref_tracker_alloc+0x318/0x460 [ 112.885636][ T7289] should_fail_ex+0x414/0x560 [ 112.885668][ T7289] should_failslab+0xa8/0x100 [ 112.885692][ T7289] kmem_cache_alloc_noprof+0x73/0x3c0 [ 112.885713][ T7289] ? skb_clone+0x212/0x3a0 [ 112.885739][ T7289] skb_clone+0x212/0x3a0 [ 112.885765][ T7289] __netlink_deliver_tap+0x404/0x850 [ 112.885797][ T7289] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.885817][ T7289] netlink_deliver_tap+0x19c/0x1b0 [ 112.885836][ T7289] netlink_unicast+0x72f/0x8d0 [ 112.885861][ T7289] netlink_sendmsg+0x805/0xb30 [ 112.885883][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.885901][ T7289] ? aa_sock_msg_perm+0x94/0x160 [ 112.885917][ T7289] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.885932][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.885948][ T7289] __sock_sendmsg+0x219/0x270 [ 112.885971][ T7289] sock_write_iter+0x258/0x330 [ 112.885993][ T7289] ? __pfx_sock_write_iter+0x10/0x10 [ 112.886021][ T7289] ? bpf_lsm_file_permission+0x9/0x20 [ 112.886037][ T7289] ? security_file_permission+0x75/0x290 [ 112.886070][ T7289] vfs_write+0x548/0xa90 [ 112.886089][ T7289] ? __pfx_sock_write_iter+0x10/0x10 [ 112.886109][ T7289] ? __pfx_vfs_write+0x10/0x10 [ 112.886131][ T7289] ? __fget_files+0x2a/0x420 [ 112.886155][ T7289] ksys_write+0x145/0x250 [ 112.886169][ T7289] ? rcu_is_watching+0x15/0xb0 [ 112.886191][ T7289] ? __pfx_ksys_write+0x10/0x10 [ 112.886208][ T7289] ? do_syscall_64+0xba/0x210 [ 112.886231][ T7289] do_syscall_64+0xf6/0x210 [ 112.886251][ T7289] ? clear_bhb_loop+0x45/0xa0 [ 112.886268][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.886280][ T7289] RIP: 0033:0x7f2a8378e969 [ 112.886292][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.886304][ T7289] RSP: 002b:00007f2a845e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.886318][ T7289] RAX: ffffffffffffffda RBX: 00007f2a839b5fa0 RCX: 00007f2a8378e969 [ 112.886328][ T7289] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 112.886336][ T7289] RBP: 00007f2a845e2090 R08: 0000000000000000 R09: 0000000000000000 [ 112.886344][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.886351][ T7289] R13: 0000000000000000 R14: 00007f2a839b5fa0 R15: 00007fffad7e1558 [ 112.886372][ T7289] [ 113.518212][ T7309] xt_connbytes: Forcing CT accounting to be enabled [ 113.526721][ T7309] Cannot find add_set index 0 as target [ 113.537046][ T7312] Dead loop on virtual device ip6_vti0, fix it urgently! [ 113.545159][ T7312] Dead loop on virtual device ip6_vti0, fix it urgently! [ 113.554783][ T7312] Dead loop on virtual device ip6_vti0, fix it urgently! [ 113.573722][ T7312] Dead loop on virtual device ip6_vti0, fix it urgently! [ 113.581431][ T7312] Dead loop on virtual device ip6_vti0, fix it urgently! [ 113.592655][ T7312] Dead loop on virtual device ip6_vti0, fix it urgently! [ 113.612924][ T7297] netlink: 96 bytes leftover after parsing attributes in process `syz.2.410'. [ 113.980722][ T7330] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 113.991235][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 114.269960][ T7345] netlink: 20 bytes leftover after parsing attributes in process `syz.0.427'. [ 114.587214][ T7361] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 114.632933][ T7357] bridge0: entered promiscuous mode [ 114.653689][ T7357] macsec1: entered allmulticast mode [ 114.673199][ T7357] bridge0: entered allmulticast mode [ 114.714471][ T7357] bridge0: port 3(macsec1) entered blocking state [ 114.739893][ T7357] bridge0: port 3(macsec1) entered disabled state [ 114.768869][ T7357] bridge0: left allmulticast mode [ 114.777974][ T7357] bridge0: left promiscuous mode [ 114.841080][ T7370] veth0: entered promiscuous mode [ 114.868212][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 114.877262][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 114.945900][ T7375] Bluetooth: MGMT ver 1.23 [ 115.107565][ T7377] vlan3: entered allmulticast mode [ 115.112732][ T7377] bond0: entered allmulticast mode [ 115.128284][ T7377] bond_slave_0: entered allmulticast mode [ 115.143453][ T7377] bond_slave_1: entered allmulticast mode [ 115.297450][ T7384] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.332390][ T7390] netlink: 'syz.2.446': attribute type 10 has an invalid length. [ 115.375444][ T7390] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.437904][ T7384] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.457728][ T7395] netlink: 44 bytes leftover after parsing attributes in process `syz.0.448'. [ 115.469732][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 115.570060][ T7384] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.871781][ T7384] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.040618][ T7415] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 116.133027][ T7384] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.181380][ T7384] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.199787][ T7421] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 116.255035][ T7384] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.291495][ T7384] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.808183][ T7449] FAULT_INJECTION: forcing a failure. [ 116.808183][ T7449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 116.837111][ T7449] CPU: 0 UID: 0 PID: 7449 Comm: syz.0.464 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 116.837138][ T7449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 116.837148][ T7449] Call Trace: [ 116.837155][ T7449] [ 116.837162][ T7449] dump_stack_lvl+0x189/0x250 [ 116.837194][ T7449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.837219][ T7449] ? __pfx__printk+0x10/0x10 [ 116.837238][ T7449] ? fs_reclaim_acquire+0x7d/0x100 [ 116.837271][ T7449] should_fail_ex+0x414/0x560 [ 116.837302][ T7449] prepare_alloc_pages+0x213/0x610 [ 116.837335][ T7449] __alloc_frozen_pages_noprof+0x123/0x370 [ 116.837365][ T7449] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 116.837390][ T7449] ? __lock_acquire+0xaac/0xd20 [ 116.837422][ T7449] ? policy_nodemask+0x27c/0x720 [ 116.837448][ T7449] alloc_pages_mpol+0x232/0x4a0 [ 116.837476][ T7449] vma_alloc_folio_noprof+0xe4/0x200 [ 116.837500][ T7449] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 116.837534][ T7449] folio_prealloc+0x30/0x180 [ 116.837559][ T7449] do_wp_page+0x123a/0x5760 [ 116.837598][ T7449] ? __pfx_do_wp_page+0x10/0x10 [ 116.837614][ T7449] ? do_raw_spin_lock+0x121/0x290 [ 116.837636][ T7449] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 116.837664][ T7449] __handle_mm_fault+0x1028/0x5380 [ 116.837703][ T7449] ? __pfx___handle_mm_fault+0x10/0x10 [ 116.837746][ T7449] ? follow_page_pte+0xdee/0x13c0 [ 116.837775][ T7449] handle_mm_fault+0x3f6/0x8c0 [ 116.837805][ T7449] __get_user_pages+0x16f0/0x2a40 [ 116.837854][ T7449] ? __pfx___get_user_pages+0x10/0x10 [ 116.837874][ T7449] ? __gup_longterm_locked+0xbf7/0x15b0 [ 116.837894][ T7449] ? down_read_killable+0x1d1/0x350 [ 116.837916][ T7449] __gup_longterm_locked+0xd66/0x15b0 [ 116.837948][ T7449] ? sanity_check_pinned_pages+0x11a2/0x1290 [ 116.837970][ T7449] ? gup_fast_fallback+0x1672/0x1d60 [ 116.837992][ T7449] gup_fast_fallback+0x1843/0x1d60 [ 116.838010][ T7449] ? arch_stack_walk+0xfc/0x150 [ 116.838061][ T7449] ? __pfx_gup_fast_fallback+0x10/0x10 [ 116.838078][ T7449] ? __kasan_kmalloc+0x93/0xb0 [ 116.838097][ T7449] ? sock_kmalloc+0xd6/0x160 [ 116.838118][ T7449] ? af_alg_get_rsgl+0x236/0x810 [ 116.838141][ T7449] ? skcipher_recvmsg+0x3c0/0x11c0 [ 116.838158][ T7449] ? ____sys_recvmsg+0x1c9/0x460 [ 116.838177][ T7449] ? ___sys_recvmsg+0x1b5/0x510 [ 116.838196][ T7449] ? __x64_sys_recvmsg+0x198/0x260 [ 116.838222][ T7449] ? pin_user_pages_fast+0x4d/0xb0 [ 116.838245][ T7449] iov_iter_extract_pages+0x35a/0x5e0 [ 116.838276][ T7449] extract_iter_to_sg+0xdeb/0x2480 [ 116.838309][ T7449] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 116.838331][ T7449] ? rcu_is_watching+0x15/0xb0 [ 116.838373][ T7449] ? trace_kmalloc+0x1f/0xd0 [ 116.838393][ T7449] ? __kmalloc_noprof+0x29b/0x4f0 [ 116.838424][ T7449] ? __asan_memset+0x22/0x50 [ 116.838447][ T7449] af_alg_get_rsgl+0x436/0x810 [ 116.838500][ T7449] skcipher_recvmsg+0x3c0/0x11c0 [ 116.838525][ T7449] ? aa_sk_perm+0x81e/0x950 [ 116.838557][ T7449] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 116.838582][ T7449] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 116.838603][ T7449] ? security_socket_recvmsg+0x7e/0x2e0 [ 116.838629][ T7449] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 116.838651][ T7449] sock_recvmsg+0x229/0x270 [ 116.838674][ T7449] ____sys_recvmsg+0x1c9/0x460 [ 116.838720][ T7449] ? __pfx_____sys_recvmsg+0x10/0x10 [ 116.838763][ T7449] ? import_iovec+0x74/0xa0 [ 116.838792][ T7449] ___sys_recvmsg+0x1b5/0x510 [ 116.838824][ T7449] ? __pfx____sys_recvmsg+0x10/0x10 [ 116.838878][ T7449] ? __fget_files+0x3a0/0x420 [ 116.838915][ T7449] __x64_sys_recvmsg+0x198/0x260 [ 116.838944][ T7449] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 116.838990][ T7449] ? do_syscall_64+0xba/0x210 [ 116.839025][ T7449] do_syscall_64+0xf6/0x210 [ 116.839056][ T7449] ? clear_bhb_loop+0x45/0xa0 [ 116.839081][ T7449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.839100][ T7449] RIP: 0033:0x7f47a018e969 [ 116.839117][ T7449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.839132][ T7449] RSP: 002b:00007f47a0fee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 116.839153][ T7449] RAX: ffffffffffffffda RBX: 00007f47a03b6080 RCX: 00007f47a018e969 [ 116.839166][ T7449] RDX: 0000000020000253 RSI: 00002000000005c0 RDI: 0000000000000004 [ 116.839179][ T7449] RBP: 00007f47a0fee090 R08: 0000000000000000 R09: 0000000000000000 [ 116.839191][ T7449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.839201][ T7449] R13: 0000000000000001 R14: 00007f47a03b6080 R15: 00007ffe46d5d2a8 [ 116.839233][ T7449] [ 117.006472][ T7450] __nla_validate_parse: 3 callbacks suppressed [ 117.006488][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 117.016195][ T7447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.466'. [ 117.033544][ T7450] netlink: 'syz.4.466': attribute type 3 has an invalid length. [ 117.327302][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.466'. [ 117.446849][ T7462] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 117.686997][ T7474] FAULT_INJECTION: forcing a failure. [ 117.686997][ T7474] name failslab, interval 1, probability 0, space 0, times 0 [ 117.716898][ T7474] CPU: 1 UID: 0 PID: 7474 Comm: syz.2.475 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 117.716921][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.716936][ T7474] Call Trace: [ 117.716943][ T7474] [ 117.716950][ T7474] dump_stack_lvl+0x189/0x250 [ 117.716981][ T7474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.717005][ T7474] ? __pfx__printk+0x10/0x10 [ 117.717028][ T7474] ? __pfx___might_resched+0x10/0x10 [ 117.717048][ T7474] should_fail_ex+0x414/0x560 [ 117.717079][ T7474] should_failslab+0xa8/0x100 [ 117.717102][ T7474] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 117.717124][ T7474] ? __alloc_skb+0x112/0x2d0 [ 117.717147][ T7474] __alloc_skb+0x112/0x2d0 [ 117.717169][ T7474] netlink_sendmsg+0x5c6/0xb30 [ 117.717198][ T7474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.717219][ T7474] ? aa_sock_msg_perm+0x94/0x160 [ 117.717238][ T7474] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.717258][ T7474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.717277][ T7474] __sock_sendmsg+0x219/0x270 [ 117.717306][ T7474] ____sys_sendmsg+0x505/0x830 [ 117.717332][ T7474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.717362][ T7474] ? import_iovec+0x74/0xa0 [ 117.717387][ T7474] ___sys_sendmsg+0x21f/0x2a0 [ 117.717410][ T7474] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.717464][ T7474] ? __fget_files+0x2a/0x420 [ 117.717484][ T7474] ? __fget_files+0x3a0/0x420 [ 117.717515][ T7474] __x64_sys_sendmsg+0x19b/0x260 [ 117.717538][ T7474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.717575][ T7474] ? do_syscall_64+0xba/0x210 [ 117.717603][ T7474] do_syscall_64+0xf6/0x210 [ 117.717628][ T7474] ? clear_bhb_loop+0x45/0xa0 [ 117.717648][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.717664][ T7474] RIP: 0033:0x7f3e0358e969 [ 117.717679][ T7474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.717692][ T7474] RSP: 002b:00007f3e04371038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.717709][ T7474] RAX: ffffffffffffffda RBX: 00007f3e037b5fa0 RCX: 00007f3e0358e969 [ 117.717721][ T7474] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000006 [ 117.717732][ T7474] RBP: 00007f3e04371090 R08: 0000000000000000 R09: 0000000000000000 [ 117.717741][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.717751][ T7474] R13: 0000000000000000 R14: 00007f3e037b5fa0 R15: 00007ffe20d6aa68 [ 117.717777][ T7474] [ 118.018005][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'. [ 118.041254][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 118.100329][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 118.121246][ T7479] vlan0: entered promiscuous mode [ 118.131510][ T7479] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 118.250342][ T7488] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 118.444782][ T7486] block nbd1: shutting down sockets [ 118.555986][ T7508] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.487'. [ 119.089991][ T7527] netlink: zone id is out of range [ 119.113661][ T7527] netlink: zone id is out of range [ 119.119315][ T7527] netlink: zone id is out of range [ 119.121436][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'. [ 119.139712][ T7533] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 119.157628][ T7527] netlink: zone id is out of range [ 119.195130][ T7527] netlink: zone id is out of range [ 119.202785][ T7527] netlink: zone id is out of range [ 119.210911][ T7527] netlink: zone id is out of range [ 119.220245][ T7527] netlink: zone id is out of range [ 119.229453][ T7527] netlink: zone id is out of range [ 119.234686][ T7527] netlink: zone id is out of range [ 119.305395][ T7531] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 119.337542][ T7534] syz_tun: refused to change device tx_queue_len [ 119.744255][ T7562] ------------[ cut here ]------------ [ 119.749754][ T7562] memcpy: detected field-spanning write (size 8191) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 119.764685][ T7562] WARNING: CPU: 1 PID: 7562 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 119.774259][ T7562] Modules linked in: [ 119.778175][ T7562] CPU: 1 UID: 0 PID: 7562 Comm: syz.3.507 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 119.790130][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 119.800258][ T7562] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 119.806082][ T7562] Code: cc e8 a0 56 b2 f7 c6 05 1e cd 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 cd b2 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 6e 56 b2 f7 44 89 e6 48 c7 c7 c0 10 [ 119.826039][ T7562] RSP: 0018:ffffc9000515f920 EFLAGS: 00010246 [ 119.832158][ T7562] RAX: fa7c4ef018175600 RBX: ffff888028554c68 RCX: 0000000000080000 [ 119.840215][ T7562] RDX: ffffc900049da000 RSI: 00000000000062ee RDI: 00000000000062ef [ 119.848236][ T7562] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 119.856502][ T7562] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000001fff [ 119.864586][ T7562] R13: 1ffff92000a2bf4e R14: ffffc9000515fa94 R15: 0000000000001fff [ 119.872627][ T7562] FS: 00007f2a845e26c0(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000 [ 119.881621][ T7562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.888324][ T7562] CR2: 0000200000000080 CR3: 0000000066bc2000 CR4: 00000000003526f0 [ 119.896375][ T7562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.899797][ T7564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.506'. [ 119.904493][ T7562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.904511][ T7562] Call Trace: [ 119.904518][ T7562] [ 119.904532][ T7562] ip6_route_info_create+0x629/0xa70 [ 119.904565][ T7562] ip6_route_add+0x29/0x2f0 [ 119.904585][ T7562] ? ipv6_route_ioctl+0x313/0x480 [ 119.904609][ T7562] ipv6_route_ioctl+0x35c/0x480 [ 119.904637][ T7562] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 119.904689][ T7562] inet6_ioctl+0x219/0x280 [ 119.904716][ T7562] ? __pfx_inet6_ioctl+0x10/0x10 [ 119.904751][ T7562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.904792][ T7562] sock_do_ioctl+0xd9/0x300 [ 119.904824][ T7562] ? __pfx_sock_do_ioctl+0x10/0x10 [ 119.904852][ T7562] ? __lock_acquire+0xaac/0xd20 [ 119.904889][ T7562] sock_ioctl+0x576/0x790 [ 119.987443][ T7562] ? __pfx_sock_ioctl+0x10/0x10 [ 119.992323][ T7562] ? __fget_files+0x3a0/0x420 [ 119.997066][ T7562] ? __fget_files+0x2a/0x420 [ 120.001687][ T7562] ? bpf_lsm_file_ioctl+0x9/0x20 [ 120.006864][ T7562] ? __pfx_sock_ioctl+0x10/0x10 [ 120.011758][ T7562] __se_sys_ioctl+0xf9/0x170 [ 120.016436][ T7562] do_syscall_64+0xf6/0x210 [ 120.020983][ T7562] ? clear_bhb_loop+0x45/0xa0 [ 120.025745][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.031760][ T7562] RIP: 0033:0x7f2a8378e969 [ 120.036247][ T7562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.056035][ T7562] RSP: 002b:00007f2a845e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.064521][ T7562] RAX: ffffffffffffffda RBX: 00007f2a839b5fa0 RCX: 00007f2a8378e969 [ 120.072527][ T7562] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000005 [ 120.080562][ T7562] RBP: 00007f2a83810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 120.088602][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.096652][ T7562] R13: 0000000000000000 R14: 00007f2a839b5fa0 R15: 00007fffad7e1558 [ 120.104685][ T7562] [ 120.107735][ T7562] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.115034][ T7562] CPU: 1 UID: 0 PID: 7562 Comm: syz.3.507 Not tainted 6.15.0-rc4-syzkaller-00701-g337079d31fb1 #0 PREEMPT(full) [ 120.126933][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 120.136997][ T7562] Call Trace: [ 120.140275][ T7562] [ 120.143206][ T7562] dump_stack_lvl+0x99/0x250 [ 120.147800][ T7562] ? __asan_memcpy+0x40/0x70 [ 120.152387][ T7562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.157596][ T7562] ? __pfx__printk+0x10/0x10 [ 120.162192][ T7562] panic+0x2db/0x790 [ 120.166094][ T7562] ? __pfx_panic+0x10/0x10 [ 120.170508][ T7562] ? show_trace_log_lvl+0x4fb/0x550 [ 120.175720][ T7562] __warn+0x31b/0x4b0 [ 120.179707][ T7562] ? ipv6_addr_prefix+0x124/0x1d0 [ 120.184740][ T7562] ? ipv6_addr_prefix+0x124/0x1d0 [ 120.189774][ T7562] report_bug+0x2be/0x4f0 [ 120.194105][ T7562] ? ipv6_addr_prefix+0x124/0x1d0 [ 120.199135][ T7562] ? ipv6_addr_prefix+0x124/0x1d0 [ 120.204169][ T7562] ? ipv6_addr_prefix+0x126/0x1d0 [ 120.209202][ T7562] handle_bug+0x84/0x160 [ 120.213480][ T7562] exc_invalid_op+0x1a/0x50 [ 120.217989][ T7562] asm_exc_invalid_op+0x1a/0x20 [ 120.222831][ T7562] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 120.228470][ T7562] Code: cc e8 a0 56 b2 f7 c6 05 1e cd 5b 05 01 90 b9 10 00 00 00 48 c7 c7 a0 59 7d 8c 4c 89 fe 48 c7 c2 c0 60 7d 8c e8 cd b2 76 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 6e 56 b2 f7 44 89 e6 48 c7 c7 c0 10 [ 120.248081][ T7562] RSP: 0018:ffffc9000515f920 EFLAGS: 00010246 [ 120.254149][ T7562] RAX: fa7c4ef018175600 RBX: ffff888028554c68 RCX: 0000000000080000 [ 120.262123][ T7562] RDX: ffffc900049da000 RSI: 00000000000062ee RDI: 00000000000062ef [ 120.270092][ T7562] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 120.278060][ T7562] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000001fff [ 120.286039][ T7562] R13: 1ffff92000a2bf4e R14: ffffc9000515fa94 R15: 0000000000001fff [ 120.294036][ T7562] ip6_route_info_create+0x629/0xa70 [ 120.299334][ T7562] ip6_route_add+0x29/0x2f0 [ 120.303840][ T7562] ? ipv6_route_ioctl+0x313/0x480 [ 120.308870][ T7562] ipv6_route_ioctl+0x35c/0x480 [ 120.313735][ T7562] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 120.319144][ T7562] inet6_ioctl+0x219/0x280 [ 120.323607][ T7562] ? __pfx_inet6_ioctl+0x10/0x10 [ 120.328652][ T7562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.334649][ T7562] sock_do_ioctl+0xd9/0x300 [ 120.339161][ T7562] ? __pfx_sock_do_ioctl+0x10/0x10 [ 120.344324][ T7562] ? __lock_acquire+0xaac/0xd20 [ 120.349192][ T7562] sock_ioctl+0x576/0x790 [ 120.353540][ T7562] ? __pfx_sock_ioctl+0x10/0x10 [ 120.358412][ T7562] ? __fget_files+0x3a0/0x420 [ 120.363100][ T7562] ? __fget_files+0x2a/0x420 [ 120.367705][ T7562] ? bpf_lsm_file_ioctl+0x9/0x20 [ 120.372643][ T7562] ? __pfx_sock_ioctl+0x10/0x10 [ 120.377500][ T7562] __se_sys_ioctl+0xf9/0x170 [ 120.382175][ T7562] do_syscall_64+0xf6/0x210 [ 120.386684][ T7562] ? clear_bhb_loop+0x45/0xa0 [ 120.391378][ T7562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.397266][ T7562] RIP: 0033:0x7f2a8378e969 [ 120.401699][ T7562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.421305][ T7562] RSP: 002b:00007f2a845e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.429718][ T7562] RAX: ffffffffffffffda RBX: 00007f2a839b5fa0 RCX: 00007f2a8378e969 [ 120.437696][ T7562] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000005 [ 120.445681][ T7562] RBP: 00007f2a83810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 120.453657][ T7562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.461625][ T7562] R13: 0000000000000000 R14: 00007f2a839b5fa0 R15: 00007fffad7e1558 [ 120.469609][ T7562] [ 120.472937][ T7562] Kernel Offset: disabled [ 120.477264][ T7562] Rebooting in 86400 seconds..