last executing test programs: 54.584675628s ago: executing program 0 (id=1561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100be14140c0000000000000000000000007f000001000000000000000000000000fe88000000000088ff00000000000101fe8000000000000000000000000000aa3c0400000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200008302000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 54.376042035s ago: executing program 0 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7050005000000007910a800000000001d0a0000000010009500000000000000a901fe7c5a18ce0309db8238886adc9d31ee6dab45c052020000000000001066d2b060264fa16e5b9ca0a64a3d0b7bd477b99dd81e7179ffaa4ff8516f3b3715a884ba166c5a1c0b3e9dffd3c77ecf8de4a3cb7b1230dadd0c291639835fa8ff09963e023f51ed9b5932ded357c4bd5ea9f4b91ab10248f65d3e5034eb8ae1aa5cde46a91277773f8d15ce50d7e9f5aecfc518a31f01862d5ba4d58e39234b0da7aa77cb4eba7859c72197daa535760f7ee40661f989211cd36231ca25aab7e7a865f1d62cffd3910695d57c813505ef82b4cae582ed4d845c2dcefb"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x81, 0x2, 0x20, @private0, @private1, 0x7, 0x10, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000440)={@empty, 0x21, r2}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9f3, 0xce, 0x0, 0x800, 0xffffffffffffffff, 0xc687, '\x00', 0x0, r3, 0x3, 0x5, 0x0, 0x8, @void, @value, @void, @value}, 0x50) 44.235601569s ago: executing program 0 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x81, 0x2, 0x20, @private0, @private1, 0x7, 0x10, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000440)={@empty, 0x21, r2}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9f3, 0xce, 0x0, 0x800, 0xffffffffffffffff, 0xc687, '\x00', 0x0, r3, 0x3, 0x5, 0x0, 0x8, @void, @value, @void, @value}, 0x50) 32.922342385s ago: executing program 0 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x81, 0x2, 0x20, @private0, @private1, 0x7, 0x10, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000440)={@empty, 0x21, r2}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9f3, 0xce, 0x0, 0x800, 0xffffffffffffffff, 0xc687, '\x00', 0x0, r3, 0x3, 0x5, 0x0, 0x8, @void, @value, @void, @value}, 0x50) 21.416085697s ago: executing program 0 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x81, 0x2, 0x20, @private0, @private1, 0x7, 0x10, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000440)={@empty, 0x21, r2}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9f3, 0xce, 0x0, 0x800, 0xffffffffffffffff, 0xc687, '\x00', 0x0, r3, 0x3, 0x5, 0x0, 0x8, @void, @value, @void, @value}, 0x50) 9.721999645s ago: executing program 0 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7050005000000007910a800000000001d0a0000000010009500000000000000a901fe7c5a18ce0309db8238886adc9d31ee6dab45c052020000000000001066d2b060264fa16e5b9ca0a64a3d0b7bd477b99dd81e7179ffaa4ff8516f3b3715a884ba166c5a1c0b3e9dffd3c77ecf8de4a3cb7b1230dadd0c291639835fa8ff09963e023f51ed9b5932ded357c4bd5ea9f4b91ab10248f65d3e5034eb8ae1aa5cde46a91277773f8d15ce50d7e9f5aecfc518a31f01862d5ba4d58e39234b0da7aa77cb4eba7859c72197daa535760f7ee40661f989211cd36231ca25aab7e7a865f1d62cffd3910695d57c813505ef82b4cae582ed4d845c2dcefb"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x81, 0x2, 0x20, @private0, @private1, 0x7, 0x10, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000440)={@empty, 0x21, r2}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000001c0)=0x6, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9f3, 0xce, 0x0, 0x800, 0xffffffffffffffff, 0xc687, '\x00', 0x0, r3, 0x3, 0x5, 0x0, 0x8, @void, @value, @void, @value}, 0x50) 3.849686772s ago: executing program 4 (id=1975): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c2", 0x24) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x2e, 0x20, 0x0, @void, @void, @void, @value}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04"], 0xa8}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 3.703718661s ago: executing program 4 (id=1977): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000000)="02f1a733f020a2a5b70fd0993b8e634570dbdfd3d94a23671912060b6ba7a3b02739ec146e1b1927e7ac1a3ccd00b2e90a349bbd4e171e87cf5a8b1205a745338c15bbc2a2b9eba2728d790dada9974c11ac557c7bda51adeb547905fe0c17c936738a15a6dda6fbb15f9a3cc38b1e5b04893c8184a4ddfec08abb08e2ad54bb3dcb964bb8396b697a07ee4d037e966bca964f254740798d945653633dee2e970331ef1dbc08bd701ec773043f", 0xad, 0x80010, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x33, @empty, 0x4e21, 0x3, 'dh\x00', 0x0, 0x9, 0x61}, 0x2c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x0, 0xc, "b1813f", 0xd, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.kill\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000180)={0x2, 'pimreg0\x00', 0x1}, 0x18) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000001c0)={{r0}, "99b553b607b02d3495966f66c37658c74e63047babd1f39a245ff571cb68f35f367fc797499e899178b089cf2773fecbef5ee49612bde48c194a7fa4badce0dea483da57d02500db613d427f7e1f110ab6e41cce060595c75988f2d4a7b0b4fa624472efdbc3bce0d770ca89a58be0a662eb3d99b86342d52f37938d427480501ba89f0f59222b2be55eacb51e91382d969906ed51a76e93f3a99cf3949fda9f4b2a190de54ecc03972055b4bb36045fe6c03ff726a541a88fde5595f288dfbf6d88b4795d9809967e57ef9431d15e8a2ca084aaedb220fa78cdf95d01bdc13253fa68fa825b1c329ba59462bac0ead96e606c3c543a88140e3a753ca03c370175f7828fdb7c239a53645c94dcdf1d54f29e0904a341187a28035c30abe6235bb8f596f49c4d77aaaaf4f831ff2eae633b1553a0e16d06a3a37ebcf577ca242505db7252b12be4cb3834864da46dc6ea124040286fefaccf36ed504726c3529e1f71a6bf88f1a80854d2969f7d3ffdc5a6b8c0eec92c70a8355075c995bc54161aec01e3775f5ff334c973571861d085d9572924b33721ebb5a1678f63724d75f92ce5be27bd10e99be1f79f712a0aa4359a4f604d5edb615aeb8392a2eace0791d5ddfb00e3155f7002e3940b100eebb3690818bd15fc65204896772317fb17e911b799ce9170c8386d003c1f606f5070d0e7f934ffb6a46e729016c3368f149f16b3d9f31d2623350ba9d37793c3292cc4eee731f080f22dfbd1c383e51fe0a656ea17a1eef39abae8505d67cf081bb7bdfe4c264c0b39a590847a02aead70557de2b0c5e226b5a408f4128a893e9e8d3811bf004ae7b4432cd0045066ac5fa066f647d99d234266a55313be7e8ba10123ed51917b8ccd674a436108709e33456d4f098d52bee859be209d3d93884474fe8313a05beb783eb46d2e33f93f7408b3affa49b3128228f720e5ae757d035915fbebc4bd846a718db69f5026256de8a8892a23093fb2d12574281d829130f3cf6e955f42b84497038f25098b6029945378613ae840e2c3cdfeb4095b4492b1efff09413d256372d46095dbf9ffba7a89decc4801034dc4c3264c4dc89675d4df0ed97f34c6b5028aa19c5c575230b2e03d4b7f3a87ff491d8f0395e16f4b802a01d8cac2e96b67b446511b28015c1520b881a8427fa7df3af23f3aed871bd1c1b936eb4ef635f01944954ec28bb39610c7ed3c24e43a18a0c1ade46dba9efdaa6a9988f1184c45c2d5fffae1da439697188a9f082636c2607b4390b6d4da49980d317793f5626715b3976861b98d1fe751343f852624acc401129cf9e351b448dc1feaf683486f783f46a901139c7500d583dd6dc5d83c072c33de4deccb26a996525793b2740346ee0ae57299ab1df5b2e6f4bf35ec0e0a5aa887d9103981be772b985bd4f5832b5c612756d13dbe97ad26c65226c0456a73d2c0e69e3555caea2b2b23625d384856c9361bcf274bb1db0ebc949436b7e51fadac6a420599baf8fb607c9fa847e095b31a90f9585d37c4cf6a3a8a21d968f065b28a78722dfc19ec805ee6ee196f50b675c9012732849aac5411712c4199edbc2812ebb77884f7f9debc161236ea634492034e61f4e8c20b887b8cd33496203dce02fc910195e43ed7ab41ccc647db7ef13e2729572b48d2149d49996a5b283d21a6ff47c531a6527f263969517dc95278485984b7ab90b5bd0d38e9edc38cfdc434a214c0635266ff693a2c23806935a47d81313876b223a5157c0b3323e42b9e6db60daaa0085341e03773a17c398da1c64e19ed30b8c1dfabdefdeda3110ad6a45a2b53ba8372e34abc984efb09c4f9e55487dddef50d356bd63382ad70734bc84bc3f7ba463b5175d92b3a460b28380c94d759111b33e4a05e637545959e0f5f23ab475c41050c8f9dfcf63afdcc5fb245f3fb0bc961ed83acabb23fbb9d7e0b3fd507415e19e11bc674b6e3364a137a429d97b5cf763366bc6030c6edf926024fce8bf5c08ccd72e7f3877be83b65d05e12b2b9168d8156522006b986156b795af8ea116234210bd339b3aff07700ad5a95578d1fe2766461510a122aadc032e6572f224519a7d55a7eacc3c286df9e7839acd9edf26e25a0fc8d9fc3faeb7957cbca45a82ab79b78e321e6bb4c8d57fbd6f4fcd548d86804e438a28ed58785180262c950a3b762f44e762de9ba0be941d02c283d61dfa923f99f7b2fe711e5b07b3074314ca1e7e0da7a71b756e6e57369b8aaa03bfa8762e73694ee920249461595d03db48fb896e18fd2a7bcf4e09de242f58207583250e3666a0cbdb3fde79abde636f4854fe1e5f30808f2b94e338b86e24f1bae76527d59d590e2b55680dc5790b12ff3d30e0341c579078a205aac0650c42ac75893c05c78e09ac5de428c0fcca597eb68446c90576ffcdf6ca18c7d85beb745933714d3a06c1889eb64d2194f86fe9f8d76973c6e57bdb10e93da3ff12dce9533a88e15cc019189db307ace9118c59eb0f16743681eb43813a2aef71318bcc70035e23f4924dcf28c9ec0089b4e546f12d2566102f5061de009d0aef27e0db0f04ce211022baeefadfe02347e8e3dcb19d6477909b0d4659317e8f1e398d7621df213fd5e9d55c39df21d09c1fde11c31fb03646f229058506233464e911c606db68485a0dc7d614f0cf19cc668665215cb9fde702e06a20885c579b3f36b605c826392647c54ba04112a45cd1ea19088a18cc465fec8ef492ed9ee73c495d051378449d6648967adcba2094756d1ba65548afb5a443f4d0bd23e97d82e931a9813f6ac4cf5ee071f42a8cddb9e9fd30b07edf809ea8093cc89fc88e8c6ba645beea75d29677ebf01dc1fd0007efb407c272f0afd076761e8eee333e41e9a1bf1d1f820ca7e892e930b8dbf5a4739c79b39e8922fc0248a4c21f64e277ec5b8d064dc688cb0b539033838f2f30b26e20a6ef8a6d4890a4d68e7aadb2271fd626b1663e63c049b4dbc5ee12e9a0d4f72da0013fab8aa2aacbe73e619df0ad649211633a6f244aa157153c4fc96f1497f54bc2cb26e5be867a31f3819da27470f760e6b1a0d573feb5383b53aab0094534036fcd54aba62392d6ecad4e6091828f26fd821b3f70012355fc3aa2b28534e6733c756f093586a048f0e988b4fae040b48bbf40717f83d34a69024cdcdb4e3fc7d07ffb43eae3c3baac98b1df64d15268961c388eb9fd713a9e08d3918b98e735f2f6dd731f19e1aaee26f952a4553d43d83a8ea98cd45a374fdb0d97c0a02605d615090c65ef6cf1f88127d128cccffb00d88ff484a10ee1f3b45d4261d532f68a04ac04a61c3cdde772a20c1a0598b9983c5a76512e67ee2b53cf4e710ad54d25acc05f13cafef6a56f44757d550a7bd3f5d1e959db64b7f7b8168337ae91c7778369bf9628a1f4102b77ba4a239cc37ce2fdd1d4b9666a553b7a817f261e5bd8874cae1bcd3023c7599d28263b24653345b729f7eff2c4b778cd2c8254a23f6d447434350517568a6113b4889c104ecb867336ef5a876f62cd400f2a1c3cfaa262b220dba01c2fa1f4317392d11665f106b7b09f9b34e66f096a9bf87d5b7b24ec6c251dbe905ed975451cee80bc6f8a906d160989e6abdb72ac666e5aaa85e38dded2ae5d817e10bd6de6c97a2165709ad457ece7e3878ed64b11de598d4eda816737fdc1799eba7230c8f8a7941d7c5cab13e0a62a0ecae77a81c021d80bba381cd0ec6fbd461159a5a8e03017e4df2244b8e1fcfba7c2ab03b811e708a90506f1e431fead842cda3ff2dec4a4df8e005e6513266c25734f5c3a187aca8c5dda2b8e76ab37d11817528a57a5d7849a4c578662f7931e36b10a622f53eb35a4dec069c4c3d7312655796a9124661579cc68ced59c1a53a653d0285c8dd7d309e27c21bd598c7ae0f06fc480218d23ac5348362f90e847834cb43ac8c6d4863345a26dd432721183bd6a0c2e779458fd401bdc2631048c897c27ca41d503e8d4f999929ca9d2d79554379746bf1f3635240f5e5681a7fa705d9a3934f93201d56beecf3ba092801030b5bfe320b2235b031021256f0c07a78e13cc51efed971449dfba2dd2411835c44a2ed6fd65b03638e199a546a70d211ef166490635fe09d83eaa985efef438ea8c2c84d1e2097194fb868530e0a1388a2c91d801cb3ee42a04f4814ff443a8254b763fb12462b8a8407cbcee896324d755d3853ce30d215a9b6b5151ee488d8b2677b729dfcf2b76c81a45398bcef94cd8a10922ebed98d38bfee787803a7f1e1e1a4be94144b607b440eb13b3d1b65b81eeea9e8d55aaf8f164035fb4afa11064ea75fd3c07cbea7faa4dd6f7299a50e9ec50c0a7019d717450e14d879eedad30a0666213cf6f482078ed240935a4d55351b383a9b1a8e744eb0e62b149feb1d13d1a4b5f33089d1c8e5a609701998adcae2d3eabe70fc7282ddfb5cdd57cec9af25d0e4f6827715fd944047e2c8ad22ab8898183494e150b9ff736c4b7ba8f05bad07a7bb688ee201b828be68dda83fc5a861220bc9ae8ccf947fedf9b13794325497c2f478b8f3df59aab5ecf3b22a71ba817bcdeaad5793cec7a24aaccda703603ad21c23f76038d685d09b0e38133386ecfd2d4c62d6afa18e2bda8a9294fb775bdf269ede7389f2543bd0379db48368516659f2ee1863aec22f4cbe918e5e984b21317a1f27f645b967dfb50ab82943e5122d0e69c44347e15182d7f03bb7b10c6d620ce063059ecfb912de2cdd58d2e3e352da1db79ddd279aefa3604a9d37330b75614e12d748be6ba3496a2fc99f3eec19288bafaf0b0cc722abf0386fb15c19799272b935e6ee4424751a4b6ecc750f71451c113fc8316ec0370b279716798b7b87d4d6362119f21450554c83ab4127c411277ad6bbc250c06be8033ef8b38458bcfab09f258540677292735a505271343816b396bc7ebc3849375518e090dd7f3179c6f2e73837755c9be40c94c399b2b9a6e10abdc675132ab7fbdc81a40d94479c1b3e03af983f632d5bb27b940ece683e2ebb9ef19976528c55187e7a9892e476f6e4319758619934eec7b2677cf44723d6dd0b649defb76871339ce1e105e57aeb6897e09e4017a47b4c49dfcb47ef449f527d16d26004c00d821767f82fb25562c64f1865b5555c7e384720096524f065520c430866b550b9d62873ff69d7cf86548d7b7f60c7b98efe7cbccc3251aab7c74abf6733ff492451d4eeb10566c823a01108c5c80e8d4043d05115a50afc23861d4c2e91ff6d681e276134584ee3ef607cc5326a5819b3e512e372f4542f7d8e9b816397363c42982b3449f4ab4e1347d7036084e66ce2ddb1f9c571608232c5665384b21e4cf792133b7f01409ca79a327c2e52bc6a7da33da3afd742d46bb0bef1a94a76f75fb04a3e8887865c1d876653dd8d287cfd0f9afa48833f3c09c4abd4e1052f41374e0184839feba85bad62db00ac28cb9bf720990f2e67bb2a8cf7c3bb28d2ab9ff2a82905692663ce91a7b9e709fdb94476d47dc0ea1dcbb910887e652347e3ba1784695183854ce6ab0b7423be706d79fcbc3ba00ed29c13ce35defd565002703f0bea1fd912b4af569703d1465fdca2f735b8408c231e6600c7acf86929582b7876dbc676f41cd36b4588f077fc2e37085d147a5ce3fd93fb6c44e7de5a918965422b5c04670d64637ce0a6d8b182aa0f0e3aa68f10bd8ddb7945c4988f0d03f9563c744c4537b854df5867d4086acfa2d33aff9029bb"}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000011c0)={@multicast2, @private}, &(0x7f0000001200)=0xc) sendmsg$nl_route(r2, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)=@delnexthop={0x58, 0x69, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4040080) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000001380)=0x1, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000013c0)={0x0, 0x9a0}, &(0x7f0000001400)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000001440)={r4, 0x1}, &(0x7f0000001480)=0x8) r5 = openat$cgroup_ro(r2, &(0x7f00000014c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000001500)=""/63) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001540)={0x9, [0xfff8, 0x1, 0x4, 0x5, 0x6, 0x2, 0x2, 0x4, 0x2]}, 0x16) syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$inet(r5, &(0x7f0000001580)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1000}}, 0x0, 0x0, 0x35, 0x0, "ce58b693616cbc39f04fe16bd85abe8ae610418f84acf1019f494103098cce10558ba6c3dac1afedcca741b34afc6d6afcf1c09bbef7e4253f5872eb44afe65373618f4ae332361f1906be9b966d347f"}, 0xd8) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000017c0)={r5, r5, 0x9f63, 0xff, &(0x7f00000016c0)="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", 0x4, 0x9, 0xa6af, 0x8, 0x4, 0x1, 0x1, 'syz0\x00'}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x24, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) bpf$LINK_DETACH(0x22, &(0x7f00000019c0)=r2, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000001) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001b00)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}, 0x0, 0x0, 0x4, 0x0, "ee0e25794355f61d75067f2c84e4a759f05652580f48da80f8a86db17bc2f1681a72354a785a7bc313b44d5127f1ca7f7ea8cda3575cee9fd29fcc4cb73497368551575eac4a8e4f5d7711aedabfce19"}, 0xd8) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) accept4$ax25(r7, &(0x7f0000001c00)={{0x3, @null}, [@netrom, @remote, @null, @remote, @null, @default, @bcast, @bcast]}, &(0x7f0000001c80)=0x48, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x4c, 0x0, 0x1013, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x69}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x25}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x4c}}, 0x40081) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r2) 3.61511785s ago: executing program 4 (id=1979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x37, 0x0, &(0x7f0000000080)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e0000000000009b012e480883d6a056df64133990ed509361350702", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x6}, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x21, 0x14, 0x66, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010102, @multicast1}}}}}}, 0x2a) 3.063947933s ago: executing program 4 (id=1984): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000140)={0x0, 0x3, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'ipvlan1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async, rerun: 32) write(r2, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) (rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xfff, 0x0, 0x0, 0xa, 0x91, 0x5c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000b40)={0xcc, &(0x7f0000000c40)=[{}, {@fixed}]}) 2.867852304s ago: executing program 4 (id=1987): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "7328cedb", "bb10000000000001"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x6, @mcast1, 0x6}}, 0x0, 0x0, 0x2, 0x0, "bf193bfca0e551cbadbf4fbd1c005a56d4c21ffd953289a884f2b0909e813facf66098a50f0dd8fee8349abd416f07f2827df539f9d8cb39a45a13e6e090392b116c6495514d2c96e50fd1e31980f251"}, 0xd8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000580)="03", 0x1, 0x20000800, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.675659261s ago: executing program 3 (id=1991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@multicast2, @empty, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @dev, 0x0, 0x0, 'veth0\x00', 'tunl0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r2, r3, 0x0, 0xf03a0005) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000040003000100000008000200010000000800020001000000a00008"], 0xe0}}, 0x0) 2.246907572s ago: executing program 2 (id=1997): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0900c300fd30214fdbc562ac8d02474bf93b9c6d23d76bbbe3927da2320df6c19496d6935725b2290f7c83cf5b5ff87f3ad2280caa316e3c8110aa067482a09aefdf8bae5553553ac1a9cd030355f436ec26ba9597d5a213449f94848fabb26a3922dc6f7da9bf0296cdba5043c7f6294ade73c48c88fda9f0e5474ed310d327080e7407b3ea9dfa87f34790ad8db8eb463657a3c91b30fc4c2238cfe1927fae3979d2a2c551f923f511f276a26632bc034aab6ee17e69d785aa53d606cc3ec957c0b72bfae78e"], 0xcb) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x27) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fa, 0x0, 0x32, 0x2}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200000, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000e00)="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", 0x3b5}], 0x1}}], 0x1, 0x84004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000450) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000006000000005000000700000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="f600000000000000b7080000000000027b8af9ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r8, &(0x7f00000002c0)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0xfffffffffffffcee) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7af2, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.98218719s ago: executing program 4 (id=2000): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.787772849s ago: executing program 3 (id=2002): r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="417bd2", 0x3}], 0x2, 0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private=0x1, @in6=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x1, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) pipe(&(0x7f0000000000)) (async) vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="417bd2", 0x3}], 0x2, 0x5) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0) (async) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private=0x1, @in6=@local}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x1, 0x0, @loopback}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0) (async) 1.586655235s ago: executing program 1 (id=2003): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [0x11, 0xfffffffffffffeff, 0xe982, 0x0, 0x6, 0x6]}, &(0x7f0000000200)=0x78) (async, rerun: 64) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}], 0x30) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0xfffffe00) tee(r2, r3, 0x6, 0x18) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x84}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, 0xfffffffffffffffd, 0x0) r7 = accept(r3, 0x0, &(0x7f0000000140)) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000000)={r10}, &(0x7f0000000080)=0x8) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000180)={r10, 0xc, 0x2}, 0x8) 1.468077224s ago: executing program 3 (id=2004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = getpid() sendmsg$AUDIT_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0x8, 0x70bd29, 0x25dfdbfc, {0x74, 0x0, 0x0, r2, 0x9, 0x2, 0xcbd, 0x0, 0x0, 0x4, 0x7}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r3, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x8010) 1.467705794s ago: executing program 1 (id=2005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10, 0x800) getsockname$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e22, 0x3ff, @local, 0x4}}, 0xf, 0x4, 0x10, 0x7, 0x16, 0x5, 0x8}, &(0x7f0000000080)=0x9c) 1.342208722s ago: executing program 3 (id=2006): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000100)=""/12, 0xc) pipe(&(0x7f0000000040)) 1.262334247s ago: executing program 2 (id=2007): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000280), &(0x7f0000000080)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x34e, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) 1.167970135s ago: executing program 3 (id=2008): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000380)=""/58, 0x3a}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000140)=0x7, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000000)) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0300"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c40000000000000000000000c001d"], 0x2c}], 0x1}, 0x0) 1.137083813s ago: executing program 2 (id=2009): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x54}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 819.19599ms ago: executing program 2 (id=2010): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c0400000200000002000a00000000a8010000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc02000083"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 628.095057ms ago: executing program 2 (id=2011): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) close(r0) 579.073716ms ago: executing program 1 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=[@cred={{0x20, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0x20044084}}], 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x0, 0x0, 0x1c0, 0xd0, 0x258, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 507.185742ms ago: executing program 2 (id=2013): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x20000b) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff01, 0xfffffffffffffffe) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001100", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d22b000000fe80000000000000000000000000003a0400000000000000000000000000000008000000000000000000000001000000001000000000000006000000000000000600000000000000ffffffffffffffff0300000000000000b9d30000000000000a0000000000000003000000000000000000000000000000e100000028bd7000000000000a000009800000000000000008001800080000000a0010000000000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) bind$packet(r10, &(0x7f0000000140)={0x11, 0x3, r11, 0x1, 0x3, 0x6, @broadcast}, 0x14) sendmmsg$sock(r10, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r12], 0x4c}}, 0x0) 380.115102ms ago: executing program 1 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) 280.631043ms ago: executing program 1 (id=2015): socket(0x11, 0x4, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r1, 0x0, 0x0, 0x2043, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, 0x0, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000090641020000000000000200070000000900020073797a551f8000fcb81c31000000000500010007"], 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[], 0x280}}, 0x200400d1) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x180c00) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000000c0)=0xfff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 238.394625ms ago: executing program 3 (id=2016): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='J', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x890b, &(0x7f0000001480)={{0x0, 0x100000000000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x100000000}}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000800"], 0x54}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000006c0)={0x40, r7, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x4}, {0x18, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x41}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 1 (id=2017): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0xca, 0x30, 0x53b, 0x70bd2c, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x1f}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x880) kernel console output (not intermixed with test programs): ] type 2 family 0 port 6081 - 0 [ 211.485720][ T9617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1049'. [ 211.521994][ T9617] netem: incorrect ge model size [ 211.527323][ T9617] netem: change failed [ 211.581265][ T9620] FAULT_INJECTION: forcing a failure. [ 211.581265][ T9620] name failslab, interval 1, probability 0, space 0, times 0 [ 211.596649][ T9620] CPU: 1 UID: 0 PID: 9620 Comm: syz.1.1051 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 211.596679][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.596691][ T9620] Call Trace: [ 211.596699][ T9620] [ 211.596707][ T9620] dump_stack_lvl+0x189/0x250 [ 211.596745][ T9620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.596775][ T9620] ? __pfx__printk+0x10/0x10 [ 211.596801][ T9620] ? __pfx___might_resched+0x10/0x10 [ 211.596818][ T9620] ? fs_reclaim_acquire+0x7d/0x100 [ 211.596854][ T9620] should_fail_ex+0x414/0x560 [ 211.596879][ T9620] should_failslab+0xa8/0x100 [ 211.596907][ T9620] kmem_cache_alloc_noprof+0x73/0x3c0 [ 211.596931][ T9620] ? _sctp_make_chunk+0x14e/0x430 [ 211.596960][ T9620] _sctp_make_chunk+0x14e/0x430 [ 211.596987][ T9620] sctp_make_datafrag_empty+0x122/0x230 [ 211.597013][ T9620] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 211.597039][ T9620] ? sctp_user_addto_chunk+0xa8/0x240 [ 211.597073][ T9620] sctp_datamsg_from_user+0x726/0xef0 [ 211.597115][ T9620] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 211.597140][ T9620] ? __asan_memcpy+0x40/0x70 [ 211.597168][ T9620] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 211.597218][ T9620] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 211.597244][ T9620] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 211.597272][ T9620] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 211.597299][ T9620] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 211.597323][ T9620] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 211.597350][ T9620] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 211.597375][ T9620] ? security_sctp_bind_connect+0x7e/0x2e0 [ 211.597409][ T9620] sctp_sendmsg+0x1941/0x2810 [ 211.597448][ T9620] ? __pfx_sctp_sendmsg+0x10/0x10 [ 211.597478][ T9620] ? aa_sk_perm+0x81e/0x950 [ 211.597503][ T9620] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.597527][ T9620] ? sock_rps_record_flow+0x19/0x410 [ 211.597550][ T9620] ? inet_sendmsg+0x2f4/0x370 [ 211.597567][ T9620] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.597594][ T9620] __sock_sendmsg+0x19c/0x270 [ 211.597619][ T9620] __sys_sendto+0x3bd/0x520 [ 211.597647][ T9620] ? __pfx___sys_sendto+0x10/0x10 [ 211.597669][ T9620] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 211.597704][ T9620] ? __fget_files+0x3a0/0x420 [ 211.597741][ T9620] ? ksys_write+0x1f0/0x250 [ 211.597762][ T9620] ? rcu_is_watching+0x15/0xb0 [ 211.597799][ T9620] __x64_sys_sendto+0xde/0x100 [ 211.597828][ T9620] do_syscall_64+0xf6/0x210 [ 211.597849][ T9620] ? clear_bhb_loop+0x45/0xa0 [ 211.597874][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.597893][ T9620] RIP: 0033:0x7fc194d8e969 [ 211.597911][ T9620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.597929][ T9620] RSP: 002b:00007fc195c6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 211.597949][ T9620] RAX: ffffffffffffffda RBX: 00007fc194fb5fa0 RCX: 00007fc194d8e969 [ 211.597964][ T9620] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000005 [ 211.597976][ T9620] RBP: 00007fc195c6a090 R08: 000020000005ffe4 R09: 000000000000001c [ 211.597990][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.598001][ T9620] R13: 0000000000000000 R14: 00007fc194fb5fa0 R15: 00007fff46330958 [ 211.598034][ T9620] [ 211.930964][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 211.937142][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 211.943475][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 211.960335][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 211.973107][ T9626] Cannot find add_set index 0 as target [ 212.216321][ T9640] xt_hashlimit: size too large, truncated to 1048576 [ 212.229702][ T9639] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1055'. [ 212.250864][ T9641] xt_hashlimit: size too large, truncated to 1048576 [ 212.358217][ T9646] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1057'. [ 212.625274][ T9660] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 212.679116][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 212.688618][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 212.769519][ T9668] FAULT_INJECTION: forcing a failure. [ 212.769519][ T9668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.809043][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.1.1063 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 212.809073][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.809086][ T9668] Call Trace: [ 212.809093][ T9668] [ 212.809102][ T9668] dump_stack_lvl+0x189/0x250 [ 212.809143][ T9668] ? __lock_acquire+0xaac/0xd20 [ 212.809174][ T9668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.809204][ T9668] ? __pfx__printk+0x10/0x10 [ 212.809224][ T9668] ? __might_fault+0xb0/0x130 [ 212.809262][ T9668] should_fail_ex+0x414/0x560 [ 212.809288][ T9668] _copy_from_iter+0x1db/0x15a0 [ 212.809316][ T9668] ? sctp_addto_chunk+0xf2/0x230 [ 212.809338][ T9668] ? __asan_memcpy+0x40/0x70 [ 212.809361][ T9668] ? __pfx__copy_from_iter+0x10/0x10 [ 212.809384][ T9668] ? __asan_memcpy+0x40/0x70 [ 212.809403][ T9668] ? sctp_make_datafrag_empty+0x17c/0x230 [ 212.809423][ T9668] ? sctp_datamsg_from_user+0x88/0xef0 [ 212.809444][ T9668] ? skb_put+0x11b/0x210 [ 212.809473][ T9668] sctp_user_addto_chunk+0x87/0x240 [ 212.809504][ T9668] sctp_datamsg_from_user+0x748/0xef0 [ 212.809547][ T9668] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 212.809572][ T9668] ? __asan_memcpy+0x40/0x70 [ 212.809600][ T9668] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 212.809643][ T9668] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 212.809669][ T9668] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 212.809696][ T9668] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 212.809721][ T9668] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 212.809745][ T9668] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 212.809771][ T9668] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 212.809796][ T9668] ? security_sctp_bind_connect+0x7e/0x2e0 [ 212.809830][ T9668] sctp_sendmsg+0x1941/0x2810 [ 212.809870][ T9668] ? __pfx_sctp_sendmsg+0x10/0x10 [ 212.809899][ T9668] ? aa_sk_perm+0x81e/0x950 [ 212.809925][ T9668] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.809948][ T9668] ? sock_rps_record_flow+0x19/0x410 [ 212.809971][ T9668] ? inet_sendmsg+0x2f4/0x370 [ 212.809989][ T9668] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.810014][ T9668] __sock_sendmsg+0x19c/0x270 [ 212.810040][ T9668] __sys_sendto+0x3bd/0x520 [ 212.810067][ T9668] ? __pfx___sys_sendto+0x10/0x10 [ 212.810090][ T9668] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 212.810125][ T9668] ? __fget_files+0x3a0/0x420 [ 212.810171][ T9668] ? ksys_write+0x1f0/0x250 [ 212.810192][ T9668] ? rcu_is_watching+0x15/0xb0 [ 212.810231][ T9668] __x64_sys_sendto+0xde/0x100 [ 212.810260][ T9668] do_syscall_64+0xf6/0x210 [ 212.810282][ T9668] ? clear_bhb_loop+0x45/0xa0 [ 212.810307][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.810326][ T9668] RIP: 0033:0x7fc194d8e969 [ 212.810344][ T9668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.810360][ T9668] RSP: 002b:00007fc195c6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 212.810381][ T9668] RAX: ffffffffffffffda RBX: 00007fc194fb5fa0 RCX: 00007fc194d8e969 [ 212.810395][ T9668] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000005 [ 212.810408][ T9668] RBP: 00007fc195c6a090 R08: 000020000005ffe4 R09: 000000000000001c [ 212.810420][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.810431][ T9668] R13: 0000000000000000 R14: 00007fc194fb5fa0 R15: 00007fff46330958 [ 212.810463][ T9668] [ 213.359064][ T9681] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 213.405408][ T9685] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1066'. [ 213.447472][ T9685] netlink: zone id is out of range [ 213.452684][ T9685] netlink: get zone limit has 8 unknown bytes [ 213.812369][ T9710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1073'. [ 213.838929][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 214.543802][ T9751] FAULT_INJECTION: forcing a failure. [ 214.543802][ T9751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.557551][ T9751] CPU: 0 UID: 0 PID: 9751 Comm: syz.2.1085 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 214.557580][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.557592][ T9751] Call Trace: [ 214.557600][ T9751] [ 214.557608][ T9751] dump_stack_lvl+0x189/0x250 [ 214.557641][ T9751] ? __lock_acquire+0xaac/0xd20 [ 214.557670][ T9751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.557699][ T9751] ? __pfx__printk+0x10/0x10 [ 214.557719][ T9751] ? __might_fault+0xb0/0x130 [ 214.557756][ T9751] should_fail_ex+0x414/0x560 [ 214.557781][ T9751] _copy_from_iter+0x3f5/0x15a0 [ 214.557828][ T9751] ? __pfx__copy_from_iter+0x10/0x10 [ 214.557862][ T9751] ? raw_sendmsg+0x621/0x18a0 [ 214.557896][ T9751] raw_sendmsg+0xfc8/0x18a0 [ 214.557941][ T9751] ? __pfx_raw_sendmsg+0x10/0x10 [ 214.557987][ T9751] ? aa_sk_perm+0x81e/0x950 [ 214.558015][ T9751] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 214.558044][ T9751] ? sock_rps_record_flow+0x19/0x410 [ 214.558066][ T9751] ? inet_sendmsg+0x2f4/0x370 [ 214.558084][ T9751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.558110][ T9751] __sock_sendmsg+0x19c/0x270 [ 214.558134][ T9751] ____sys_sendmsg+0x505/0x830 [ 214.558166][ T9751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.558203][ T9751] ? import_iovec+0x74/0xa0 [ 214.558232][ T9751] ___sys_sendmsg+0x21f/0x2a0 [ 214.558262][ T9751] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.558324][ T9751] ? __fget_files+0x2a/0x420 [ 214.558349][ T9751] ? __fget_files+0x3a0/0x420 [ 214.558386][ T9751] __x64_sys_sendmsg+0x19b/0x260 [ 214.558418][ T9751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.558464][ T9751] ? do_syscall_64+0xba/0x210 [ 214.558488][ T9751] do_syscall_64+0xf6/0x210 [ 214.558509][ T9751] ? clear_bhb_loop+0x45/0xa0 [ 214.558534][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.558554][ T9751] RIP: 0033:0x7f09ccb8e969 [ 214.558571][ T9751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.558589][ T9751] RSP: 002b:00007f09cd920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.558611][ T9751] RAX: ffffffffffffffda RBX: 00007f09ccdb5fa0 RCX: 00007f09ccb8e969 [ 214.558625][ T9751] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 214.558637][ T9751] RBP: 00007f09cd920090 R08: 0000000000000000 R09: 0000000000000000 [ 214.558649][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.558660][ T9751] R13: 0000000000000000 R14: 00007f09ccdb5fa0 R15: 00007ffe98903158 [ 214.558692][ T9751] [ 214.947776][ T9758] netlink: 'syz.2.1086': attribute type 8 has an invalid length. [ 214.965601][ T9758] bridge0: entered allmulticast mode [ 215.024961][ T9724] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 215.191849][ T9771] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 215.365754][ T9783] FAULT_INJECTION: forcing a failure. [ 215.365754][ T9783] name failslab, interval 1, probability 0, space 0, times 0 [ 215.386152][ T9783] CPU: 0 UID: 0 PID: 9783 Comm: syz.3.1096 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 215.386183][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.386195][ T9783] Call Trace: [ 215.386203][ T9783] [ 215.386212][ T9783] dump_stack_lvl+0x189/0x250 [ 215.386249][ T9783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.386279][ T9783] ? __pfx__printk+0x10/0x10 [ 215.386300][ T9783] ? ip4_addr_string+0x1ad/0x200 [ 215.386342][ T9783] should_fail_ex+0x414/0x560 [ 215.386368][ T9783] should_failslab+0xa8/0x100 [ 215.386397][ T9783] kmem_cache_alloc_noprof+0x73/0x3c0 [ 215.386421][ T9783] ? dst_alloc+0x105/0x170 [ 215.386455][ T9783] dst_alloc+0x105/0x170 [ 215.386489][ T9783] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 215.386531][ T9783] ? ip_route_output_key_hash+0xde/0x2e0 [ 215.386562][ T9783] ip_route_output_key_hash+0x1b9/0x2e0 [ 215.386596][ T9783] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 215.386630][ T9783] ? __pfx__copy_from_iter+0x10/0x10 [ 215.386666][ T9783] ip_route_output_flow+0x2a/0x150 [ 215.386692][ T9783] ? security_sk_classify_flow+0x70/0x180 [ 215.386724][ T9783] raw_sendmsg+0x1030/0x18a0 [ 215.386782][ T9783] ? __pfx_raw_sendmsg+0x10/0x10 [ 215.386827][ T9783] ? aa_sk_perm+0x81e/0x950 [ 215.386853][ T9783] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 215.386881][ T9783] ? sock_rps_record_flow+0x19/0x410 [ 215.386906][ T9783] ? inet_sendmsg+0x2f4/0x370 [ 215.386923][ T9783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.386950][ T9783] __sock_sendmsg+0x19c/0x270 [ 215.386974][ T9783] ____sys_sendmsg+0x505/0x830 [ 215.387008][ T9783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.387047][ T9783] ? import_iovec+0x74/0xa0 [ 215.387080][ T9783] ___sys_sendmsg+0x21f/0x2a0 [ 215.387110][ T9783] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.387179][ T9783] ? __fget_files+0x2a/0x420 [ 215.387204][ T9783] ? __fget_files+0x3a0/0x420 [ 215.387242][ T9783] __x64_sys_sendmsg+0x19b/0x260 [ 215.387272][ T9783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.387320][ T9783] ? do_syscall_64+0xba/0x210 [ 215.387345][ T9783] do_syscall_64+0xf6/0x210 [ 215.387366][ T9783] ? clear_bhb_loop+0x45/0xa0 [ 215.387390][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.387410][ T9783] RIP: 0033:0x7fbf2518e969 [ 215.387427][ T9783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.387444][ T9783] RSP: 002b:00007fbf25fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.387466][ T9783] RAX: ffffffffffffffda RBX: 00007fbf253b5fa0 RCX: 00007fbf2518e969 [ 215.387481][ T9783] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 215.387493][ T9783] RBP: 00007fbf25fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 215.387505][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.387517][ T9783] R13: 0000000000000000 R14: 00007fbf253b5fa0 R15: 00007ffc8b774ef8 [ 215.387549][ T9783] [ 215.785292][ T30] audit: type=1804 audit(1746975242.030:3): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1097" name="/newroot/239/cgroup.controllers" dev="tmpfs" ino=1232 res=1 errno=0 [ 215.817179][ T30] audit: type=1800 audit(1746975242.030:4): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1097" name="cgroup.controllers" dev="tmpfs" ino=1232 res=0 errno=0 [ 216.286320][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 216.392540][ T9818] __nla_validate_parse: 5 callbacks suppressed [ 216.392559][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 216.491071][ T9822] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1108'. [ 216.528511][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 216.734960][ T9832] syzkaller1: entered promiscuous mode [ 216.760381][ T9832] syzkaller1: entered allmulticast mode [ 216.996886][ T9837] x_tables: duplicate underflow at hook 1 [ 217.103104][ T9840] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1112'. [ 217.120143][ T9845] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1110'. [ 217.468431][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 217.502740][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 217.771835][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 218.054041][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 218.078884][ T9886] Unsupported ieee802154 address type: 0 [ 218.219106][ T9876] TCP: TCP_TX_DELAY enabled [ 218.555175][ T9903] FAULT_INJECTION: forcing a failure. [ 218.555175][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 218.569086][ T9903] CPU: 0 UID: 0 PID: 9903 Comm: syz.0.1128 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 218.569116][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.569128][ T9903] Call Trace: [ 218.569136][ T9903] [ 218.569145][ T9903] dump_stack_lvl+0x189/0x250 [ 218.569183][ T9903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.569213][ T9903] ? __pfx__printk+0x10/0x10 [ 218.569236][ T9903] ? __pfx___might_resched+0x10/0x10 [ 218.569255][ T9903] ? fs_reclaim_acquire+0x7d/0x100 [ 218.569295][ T9903] should_fail_ex+0x414/0x560 [ 218.569321][ T9903] should_failslab+0xa8/0x100 [ 218.569349][ T9903] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 218.569375][ T9903] ? _copy_from_iter+0x24c/0x15a0 [ 218.569397][ T9903] ? __alloc_skb+0x112/0x2d0 [ 218.569427][ T9903] __alloc_skb+0x112/0x2d0 [ 218.569457][ T9903] _sctp_make_chunk+0x5e/0x430 [ 218.569486][ T9903] sctp_make_datafrag_empty+0x122/0x230 [ 218.569513][ T9903] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 218.569540][ T9903] ? sctp_user_addto_chunk+0xa8/0x240 [ 218.569569][ T9903] sctp_datamsg_from_user+0x726/0xef0 [ 218.569618][ T9903] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 218.569643][ T9903] ? __asan_memcpy+0x40/0x70 [ 218.569672][ T9903] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 218.569715][ T9903] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 218.569742][ T9903] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 218.569771][ T9903] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 218.569798][ T9903] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 218.569823][ T9903] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 218.569850][ T9903] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 218.569876][ T9903] ? security_sctp_bind_connect+0x7e/0x2e0 [ 218.569910][ T9903] sctp_sendmsg+0x1941/0x2810 [ 218.569950][ T9903] ? __pfx_sctp_sendmsg+0x10/0x10 [ 218.569980][ T9903] ? aa_sk_perm+0x81e/0x950 [ 218.570005][ T9903] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.570028][ T9903] ? sock_rps_record_flow+0x19/0x410 [ 218.570052][ T9903] ? inet_sendmsg+0x2f4/0x370 [ 218.570070][ T9903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.570096][ T9903] __sock_sendmsg+0x19c/0x270 [ 218.570119][ T9903] __sys_sendto+0x3bd/0x520 [ 218.570146][ T9903] ? __pfx___sys_sendto+0x10/0x10 [ 218.570168][ T9903] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 218.570203][ T9903] ? __fget_files+0x3a0/0x420 [ 218.570242][ T9903] ? ksys_write+0x1f0/0x250 [ 218.570263][ T9903] ? rcu_is_watching+0x15/0xb0 [ 218.570304][ T9903] __x64_sys_sendto+0xde/0x100 [ 218.570333][ T9903] do_syscall_64+0xf6/0x210 [ 218.570356][ T9903] ? clear_bhb_loop+0x45/0xa0 [ 218.570381][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.570400][ T9903] RIP: 0033:0x7f6680d8e969 [ 218.570418][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.570434][ T9903] RSP: 002b:00007f6681c62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.570455][ T9903] RAX: ffffffffffffffda RBX: 00007f6680fb5fa0 RCX: 00007f6680d8e969 [ 218.570469][ T9903] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000005 [ 218.570482][ T9903] RBP: 00007f6681c62090 R08: 000020000005ffe4 R09: 000000000000001c [ 218.570495][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.570506][ T9903] R13: 0000000000000000 R14: 00007f6680fb5fa0 R15: 00007ffdf5287c38 [ 218.570537][ T9903] [ 219.034189][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1131'. [ 219.087276][ T9917] bond0: Unable to set down delay as MII monitoring is disabled [ 219.168966][ T9922] syzkaller1: entered promiscuous mode [ 219.174603][ T9922] syzkaller1: entered allmulticast mode [ 220.268252][ T9969] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 220.291511][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.332267][ T9973] pim6reg1: entered promiscuous mode [ 220.337929][ T9973] pim6reg1: entered allmulticast mode [ 220.411004][ T9978] xt_ecn: cannot match TCP bits for non-tcp packets [ 220.860940][ T9989] xt_TPROXY: Can be used only with -p tcp or -p udp [ 221.430368][T10007] ip6tnl1: entered promiscuous mode [ 221.435876][T10007] ip6tnl1: entered allmulticast mode [ 222.040357][T10033] xt_hashlimit: size too large, truncated to 1048576 [ 222.092346][T10034] __nla_validate_parse: 8 callbacks suppressed [ 222.092367][T10034] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1163'. [ 222.540510][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'. [ 222.576060][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'. [ 222.603850][T10045] gretap0: entered promiscuous mode [ 222.631988][T10045] gretap0: left promiscuous mode [ 222.690666][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1172'. [ 222.929517][T10063] batadv_slave_1: entered promiscuous mode [ 223.064780][T10062] batadv_slave_1: left promiscuous mode [ 223.554390][T10096] No such timeout policy "syz1" [ 223.561892][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 223.624926][T10099] netlink: 'syz.3.1179': attribute type 11 has an invalid length. [ 223.654217][T10099] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1179'. [ 223.836853][T10109] netlink: 'syz.4.1180': attribute type 10 has an invalid length. [ 223.856478][T10109] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 224.160170][T10118] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 224.380294][T10130] netlink: 'syz.4.1184': attribute type 12 has an invalid length. [ 224.494714][T10136] netlink: 'syz.0.1186': attribute type 27 has an invalid length. [ 224.747784][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1187'. [ 224.777272][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 224.963937][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1191'. [ 225.182004][T10164] tun0: tun_chr_ioctl cmd 1074025677 [ 225.206862][T10164] tun0: linktype set to 5 [ 225.334513][T10170] netlink: 'syz.4.1195': attribute type 2 has an invalid length. [ 225.381582][T10170] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 225.424541][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 225.760295][T10186] netlink: 'syz.1.1199': attribute type 8 has an invalid length. [ 226.618991][T10218] x_tables: duplicate underflow at hook 2 [ 226.712397][T10230] netlink: 'syz.2.1206': attribute type 27 has an invalid length. [ 227.057285][T10240] openvswitch: netlink: Key type 1808 is out of range max 32 [ 227.634895][T10230] macsec0: left allmulticast mode [ 227.651083][T10230] macsec1: left promiscuous mode [ 227.656770][T10230] macsec1: left allmulticast mode [ 227.662787][T10230] geneve2: left promiscuous mode [ 227.682864][T10230] bridge0: left allmulticast mode [ 227.696694][T10230] ip6tnl1: left promiscuous mode [ 227.701695][T10230] ip6tnl1: left allmulticast mode [ 228.037757][T10281] openvswitch: netlink: IP tunnel dst address not specified [ 228.160042][T10275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.171073][T10275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.181049][T10275] bond0 (unregistering): Released all slaves [ 228.418040][T10301] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1230'. [ 228.441359][T10301] ip6gretap0: entered promiscuous mode [ 228.451661][T10301] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1230'. [ 228.475696][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 228.565014][T10306] ip6tnl2: entered promiscuous mode [ 228.597845][T10306] ip6tnl2: entered allmulticast mode [ 228.709562][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'. [ 228.797660][T10316] syz.3.1232: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 228.860679][T10316] CPU: 1 UID: 0 PID: 10316 Comm: syz.3.1232 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 228.860710][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.860723][T10316] Call Trace: [ 228.860731][T10316] [ 228.860740][T10316] dump_stack_lvl+0x189/0x250 [ 228.860777][T10316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.860807][T10316] ? __pfx__printk+0x10/0x10 [ 228.860827][T10316] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 228.860848][T10316] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 228.860871][T10316] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 228.860895][T10316] warn_alloc+0x214/0x310 [ 228.860938][T10316] ? __pfx_warn_alloc+0x10/0x10 [ 228.860977][T10316] ? __get_vm_area_node+0x1c5/0x2d0 [ 228.861002][T10316] ? __get_vm_area_node+0x25a/0x2d0 [ 228.861035][T10316] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 228.861096][T10316] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.861129][T10316] ? __kasan_kmalloc+0x93/0xb0 [ 228.861159][T10316] vmalloc_user_noprof+0x74/0x80 [ 228.861188][T10316] ? xskq_create+0xbf/0x170 [ 228.861218][T10316] xskq_create+0xbf/0x170 [ 228.861252][T10316] xsk_init_queue+0xb0/0x110 [ 228.861284][T10316] xsk_setsockopt+0x4de/0x710 [ 228.861315][T10316] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.861351][T10316] ? aa_sock_opt_perm+0x74/0x110 [ 228.861376][T10316] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 228.861397][T10316] ? __pfx_xsk_setsockopt+0x10/0x10 [ 228.861427][T10316] do_sock_setsockopt+0x257/0x3e0 [ 228.861457][T10316] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 228.861481][T10316] ? __fget_files+0x2a/0x420 [ 228.861511][T10316] ? __fget_files+0x3a0/0x420 [ 228.861535][T10316] ? __fget_files+0x2a/0x420 [ 228.861569][T10316] __x64_sys_setsockopt+0x18b/0x220 [ 228.861603][T10316] do_syscall_64+0xf6/0x210 [ 228.861625][T10316] ? clear_bhb_loop+0x45/0xa0 [ 228.861651][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.861670][T10316] RIP: 0033:0x7fbf2518e969 [ 228.861689][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.861706][T10316] RSP: 002b:00007fbf25fc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 228.861726][T10316] RAX: ffffffffffffffda RBX: 00007fbf253b6080 RCX: 00007fbf2518e969 [ 228.861741][T10316] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 228.861753][T10316] RBP: 00007fbf25210ab1 R08: 0000000000000004 R09: 0000000000000000 [ 228.861765][T10316] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 228.861778][T10316] R13: 0000000000000000 R14: 00007fbf253b6080 R15: 00007ffc8b774ef8 [ 228.861809][T10316] [ 228.861830][T10316] Mem-Info: [ 229.137288][T10316] active_anon:9338 inactive_anon:0 isolated_anon:0 [ 229.137288][T10316] active_file:1904 inactive_file:39888 isolated_file:0 [ 229.137288][T10316] unevictable:768 dirty:185 writeback:0 [ 229.137288][T10316] slab_reclaimable:11092 slab_unreclaimable:119355 [ 229.137288][T10316] mapped:29585 shmem:1418 pagetables:906 [ 229.137288][T10316] sec_pagetables:0 bounce:0 [ 229.137288][T10316] kernel_misc_reclaimable:0 [ 229.137288][T10316] free:1315435 free_pcp:773 free_cma:0 [ 229.184862][T10316] Node 0 active_anon:37352kB inactive_anon:0kB active_file:7616kB inactive_file:159348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118240kB dirty:736kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11000kB pagetables:3524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 229.220048][T10316] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 229.251980][T10316] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.298178][T10316] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 229.305374][T10316] Node 0 DMA32 free:1336184kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:37144kB inactive_anon:0kB active_file:7616kB inactive_file:159248kB unevictable:1536kB writepending:736kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:1216kB local_pcp:1100kB free_cma:0kB [ 229.342191][T10316] lowmem_reserve[]: 0 0 0 0 0 [ 229.348908][T10316] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.392515][T10316] lowmem_reserve[]: 0 0 0 0 0 [ 229.416205][T10316] Node 1 Normal free:3912900kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.450422][T10316] lowmem_reserve[]: 0 0 0 0 0 [ 229.455212][T10316] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.490741][T10316] Node 0 DMA32: 36*4kB (M) 209*8kB (UME) 162*16kB (ME) 311*32kB (UME) 254*64kB (UME) 112*128kB (UME) 73*256kB (UM) 42*512kB (UME) 29*1024kB (UME) 10*2048kB (UME) 293*4096kB (M) = 1335448kB [ 229.551854][T10316] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 229.564309][T10316] Node 1 Normal: 213*4kB (UME) 42*8kB (UME) 36*16kB (UME) 215*32kB (UME) 82*64kB (UME) 33*128kB (UME) 10*256kB (UM) 6*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 946*4096kB (M) = 3912900kB [ 229.626159][T10316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.636037][T10316] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.650242][T10316] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.683462][T10316] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.694618][T10316] 43156 total pagecache pages [ 229.719836][T10316] 0 pages in swap cache [ 229.724050][T10316] Free swap = 124996kB [ 229.735019][T10316] Total swap = 124996kB [ 229.744841][T10316] 2097051 pages RAM [ 229.766103][T10316] 0 pages HighMem/MovableOnly [ 229.771360][T10316] 424379 pages reserved [ 229.776715][T10316] 0 pages cma reserved [ 229.796408][T10352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1245'. [ 229.860357][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1247'. [ 230.022999][T10365] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1250'. [ 230.037698][T10365] netlink: zone id is out of range [ 230.042967][T10365] netlink: zone id is out of range [ 230.051498][T10365] netlink: zone id is out of range [ 230.059727][T10365] netlink: zone id is out of range [ 230.064969][T10365] netlink: zone id is out of range [ 230.124710][T10365] netlink: zone id is out of range [ 230.184435][T10369] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1250'. [ 230.193725][T10365] netlink: zone id is out of range [ 230.203608][T10365] netlink: zone id is out of range [ 230.261923][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 230.340093][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1253'. [ 230.612956][T10355] tipc: Started in network mode [ 230.624721][T10355] tipc: Node identity ac1414aa, cluster identity 4711 [ 230.655690][T10355] tipc: Enabled bearer , priority 10 [ 230.895380][T10394] netlink: 'syz.0.1257': attribute type 303 has an invalid length. [ 231.646961][ T47] tipc: Node number set to 2886997162 [ 231.694284][T10432] xt_socket: unknown flags 0xfc [ 231.768612][T10435] FAULT_INJECTION: forcing a failure. [ 231.768612][T10435] name failslab, interval 1, probability 0, space 0, times 0 [ 231.842589][T10435] CPU: 0 UID: 0 PID: 10435 Comm: syz.0.1275 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 231.842619][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.842632][T10435] Call Trace: [ 231.842640][T10435] [ 231.842648][T10435] dump_stack_lvl+0x189/0x250 [ 231.842687][T10435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.842716][T10435] ? __pfx__printk+0x10/0x10 [ 231.842743][T10435] ? __pfx___might_resched+0x10/0x10 [ 231.842761][T10435] ? fs_reclaim_acquire+0x7d/0x100 [ 231.842796][T10435] should_fail_ex+0x414/0x560 [ 231.842822][T10435] should_failslab+0xa8/0x100 [ 231.842851][T10435] kmem_cache_alloc_noprof+0x73/0x3c0 [ 231.842876][T10435] ? _sctp_make_chunk+0x14e/0x430 [ 231.842905][T10435] _sctp_make_chunk+0x14e/0x430 [ 231.842933][T10435] sctp_make_datafrag_empty+0x122/0x230 [ 231.842960][T10435] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 231.842987][T10435] ? sctp_user_addto_chunk+0xa8/0x240 [ 231.843016][T10435] sctp_datamsg_from_user+0x726/0xef0 [ 231.843067][T10435] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 231.843093][T10435] ? __asan_memcpy+0x40/0x70 [ 231.843122][T10435] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 231.843166][T10435] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 231.843193][T10435] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 231.843222][T10435] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 231.843248][T10435] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 231.843273][T10435] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 231.843301][T10435] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 231.843325][T10435] ? security_sctp_bind_connect+0x7e/0x2e0 [ 231.843360][T10435] sctp_sendmsg+0x1941/0x2810 [ 231.843400][T10435] ? __pfx_sctp_sendmsg+0x10/0x10 [ 231.843431][T10435] ? aa_sk_perm+0x81e/0x950 [ 231.843456][T10435] ? __pfx_aa_sk_perm+0x10/0x10 [ 231.843479][T10435] ? sock_rps_record_flow+0x19/0x410 [ 231.843503][T10435] ? inet_sendmsg+0x2f4/0x370 [ 231.843521][T10435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 231.843548][T10435] __sock_sendmsg+0x19c/0x270 [ 231.843574][T10435] __sys_sendto+0x3bd/0x520 [ 231.843602][T10435] ? __pfx___sys_sendto+0x10/0x10 [ 231.843629][T10435] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 231.843663][T10435] ? __fget_files+0x3a0/0x420 [ 231.843702][T10435] ? ksys_write+0x1f0/0x250 [ 231.843723][T10435] ? rcu_is_watching+0x15/0xb0 [ 231.843763][T10435] __x64_sys_sendto+0xde/0x100 [ 231.843793][T10435] do_syscall_64+0xf6/0x210 [ 231.843815][T10435] ? clear_bhb_loop+0x45/0xa0 [ 231.843840][T10435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.843860][T10435] RIP: 0033:0x7f6680d8e969 [ 231.843878][T10435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.843895][T10435] RSP: 002b:00007f6681c62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.843918][T10435] RAX: ffffffffffffffda RBX: 00007f6680fb5fa0 RCX: 00007f6680d8e969 [ 231.843933][T10435] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000005 [ 231.843946][T10435] RBP: 00007f6681c62090 R08: 000020000005ffe4 R09: 000000000000001c [ 231.843960][T10435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.843971][T10435] R13: 0000000000000000 R14: 00007f6680fb5fa0 R15: 00007ffdf5287c38 [ 231.844004][T10435] [ 232.474085][T10460] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 232.596048][ C1] net_ratelimit: 21 callbacks suppressed [ 232.596083][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.772522][T10474] netlink: 'syz.4.1287': attribute type 4 has an invalid length. [ 232.831326][T10474] netlink: 'syz.4.1287': attribute type 4 has an invalid length. [ 232.961913][T10471] sctp: [Deprecated]: syz.3.1285 (pid 10471) Use of int in max_burst socket option. [ 232.961913][T10471] Use struct sctp_assoc_value instead [ 233.302882][T10497] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.326917][T10500] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 233.341576][T10500] netlink: 'syz.4.1297': attribute type 2 has an invalid length. [ 233.382801][T10497] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.429583][T10507] xt_hashlimit: size too large, truncated to 1048576 [ 233.478359][T10497] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.564252][T10497] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.574491][T10514] xt_hashlimit: size too large, truncated to 1048576 [ 233.656096][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.745126][T10497] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.901439][T10497] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.952192][T10497] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.002902][T10497] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.063539][T10530] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 234.075519][T10530] __nla_validate_parse: 14 callbacks suppressed [ 234.075537][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 234.237831][T10538] netlink: 'syz.1.1308': attribute type 25 has an invalid length. [ 234.362945][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1311'. [ 234.685972][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.914356][T10574] xt_TCPMSS: Only works on TCP SYN packets [ 235.106952][T10577] netlink: 'syz.4.1319': attribute type 29 has an invalid length. [ 235.152576][T10577] netlink: 'syz.4.1319': attribute type 29 has an invalid length. [ 235.183292][T10584] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1321'. [ 235.232455][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'. [ 235.314752][T10584] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 235.470730][T10592] xt_CT: No such helper "snmp" [ 235.725969][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.156790][T10638] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.497960][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 236.715240][T10669] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1348'. [ 236.749993][T10669] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1348'. [ 236.759329][T10669] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1348'. [ 236.775980][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.877820][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1352'. [ 237.002407][T10679] gre1: entered allmulticast mode [ 237.035844][T10684] ip6gre1: entered allmulticast mode [ 237.177637][T10691] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 237.566544][T10714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 237.635523][T10714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.806085][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.828746][T10717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.860288][T10717] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 237.892438][T10717] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 238.502718][T10756] FAULT_INJECTION: forcing a failure. [ 238.502718][T10756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.526942][T10756] CPU: 1 UID: 0 PID: 10756 Comm: syz.3.1372 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 238.526974][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.526992][T10756] Call Trace: [ 238.527000][T10756] [ 238.527009][T10756] dump_stack_lvl+0x189/0x250 [ 238.527042][T10756] ? __lock_acquire+0xaac/0xd20 [ 238.527074][T10756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.527103][T10756] ? __pfx__printk+0x10/0x10 [ 238.527124][T10756] ? __might_fault+0xb0/0x130 [ 238.527162][T10756] should_fail_ex+0x414/0x560 [ 238.527188][T10756] _copy_from_iter+0x1db/0x15a0 [ 238.527216][T10756] ? sctp_addto_chunk+0xf2/0x230 [ 238.527238][T10756] ? __asan_memcpy+0x40/0x70 [ 238.527261][T10756] ? __pfx__copy_from_iter+0x10/0x10 [ 238.527285][T10756] ? __asan_memcpy+0x40/0x70 [ 238.527311][T10756] ? sctp_make_datafrag_empty+0x17c/0x230 [ 238.527332][T10756] ? sctp_datamsg_from_user+0x88/0xef0 [ 238.527352][T10756] ? skb_put+0x11b/0x210 [ 238.527383][T10756] sctp_user_addto_chunk+0x87/0x240 [ 238.527412][T10756] sctp_datamsg_from_user+0x748/0xef0 [ 238.527454][T10756] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 238.527480][T10756] ? __asan_memcpy+0x40/0x70 [ 238.527508][T10756] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 238.527551][T10756] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 238.527577][T10756] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 238.527605][T10756] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 238.527638][T10756] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 238.527662][T10756] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 238.527690][T10756] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 238.527714][T10756] ? security_sctp_bind_connect+0x7e/0x2e0 [ 238.527749][T10756] sctp_sendmsg+0x1941/0x2810 [ 238.527788][T10756] ? __pfx_sctp_sendmsg+0x10/0x10 [ 238.527818][T10756] ? aa_sk_perm+0x81e/0x950 [ 238.527844][T10756] ? __pfx_aa_sk_perm+0x10/0x10 [ 238.527867][T10756] ? sock_rps_record_flow+0x19/0x410 [ 238.527890][T10756] ? inet_sendmsg+0x2f4/0x370 [ 238.527908][T10756] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.527935][T10756] __sock_sendmsg+0x19c/0x270 [ 238.527960][T10756] __sys_sendto+0x3bd/0x520 [ 238.527988][T10756] ? __pfx___sys_sendto+0x10/0x10 [ 238.528010][T10756] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 238.528045][T10756] ? __fget_files+0x3a0/0x420 [ 238.528083][T10756] ? ksys_write+0x1f0/0x250 [ 238.528104][T10756] ? rcu_is_watching+0x15/0xb0 [ 238.528145][T10756] __x64_sys_sendto+0xde/0x100 [ 238.528174][T10756] do_syscall_64+0xf6/0x210 [ 238.528195][T10756] ? clear_bhb_loop+0x45/0xa0 [ 238.528220][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.528239][T10756] RIP: 0033:0x7fbf2518e969 [ 238.528257][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.528274][T10756] RSP: 002b:00007fbf25fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 238.528295][T10756] RAX: ffffffffffffffda RBX: 00007fbf253b5fa0 RCX: 00007fbf2518e969 [ 238.528309][T10756] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000005 [ 238.528321][T10756] RBP: 00007fbf25fe9090 R08: 000020000005ffe4 R09: 000000000000001c [ 238.528333][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.528344][T10756] R13: 0000000000000000 R14: 00007fbf253b5fa0 R15: 00007ffc8b774ef8 [ 238.528376][T10756] [ 238.862514][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.227279][T10779] __nla_validate_parse: 3 callbacks suppressed [ 239.227301][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1379'. [ 239.436530][T10798] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1381'. [ 239.501092][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1379'. [ 239.833786][T10814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1385'. [ 240.002756][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.562769][T10842] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.576795][T10847] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 240.580857][T10842] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.593947][T10842] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.604088][T10842] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.632135][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1393'. [ 240.731323][T10855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1396'. [ 241.006008][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.152774][T10861] raw_sendmsg: syz.3.1398 forgot to set AF_INET. Fix it! [ 241.321319][T10880] ieee802154 phy1 wpan1: encryption failed: -90 [ 241.366260][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1404'. [ 241.512201][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 241.559450][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 241.584946][T10889] netlink: 'syz.2.1406': attribute type 12 has an invalid length. [ 242.045991][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.131304][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 242.426427][T10932] gretap0: entered promiscuous mode [ 242.432684][T10932] vlan2: entered promiscuous mode [ 242.484941][T10936] !: renamed from dummy0 [ 242.763055][T10955] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 242.945254][T10958] xt_CT: No such helper "snmp" [ 242.984614][T10967] FAULT_INJECTION: forcing a failure. [ 242.984614][T10967] name failslab, interval 1, probability 0, space 0, times 0 [ 243.015606][T10967] CPU: 0 UID: 0 PID: 10967 Comm: syz.3.1427 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 243.015639][T10967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.015664][T10967] Call Trace: [ 243.015673][T10967] [ 243.015681][T10967] dump_stack_lvl+0x189/0x250 [ 243.015719][T10967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.015750][T10967] ? __pfx__printk+0x10/0x10 [ 243.015773][T10967] ? __pfx___might_resched+0x10/0x10 [ 243.015793][T10967] ? fs_reclaim_acquire+0x7d/0x100 [ 243.015829][T10967] should_fail_ex+0x414/0x560 [ 243.015855][T10967] should_failslab+0xa8/0x100 [ 243.015888][T10967] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 243.015912][T10967] ? _copy_from_iter+0x24c/0x15a0 [ 243.015934][T10967] ? __alloc_skb+0x112/0x2d0 [ 243.015962][T10967] __alloc_skb+0x112/0x2d0 [ 243.015990][T10967] _sctp_make_chunk+0x5e/0x430 [ 243.016017][T10967] sctp_make_datafrag_empty+0x122/0x230 [ 243.016036][T10967] ? sctp_datamsg_from_user+0x88/0xef0 [ 243.016057][T10967] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 243.016082][T10967] ? sctp_user_addto_chunk+0xa8/0x240 [ 243.016108][T10967] sctp_datamsg_from_user+0x726/0xef0 [ 243.016148][T10967] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 243.016172][T10967] ? __asan_memcpy+0x40/0x70 [ 243.016199][T10967] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 243.016239][T10967] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 243.016266][T10967] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 243.016295][T10967] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 243.016320][T10967] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 243.016344][T10967] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 243.016370][T10967] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 243.016394][T10967] ? security_sctp_bind_connect+0x7e/0x2e0 [ 243.016436][T10967] sctp_sendmsg+0x1941/0x2810 [ 243.016476][T10967] ? __pfx_sctp_sendmsg+0x10/0x10 [ 243.016505][T10967] ? aa_sk_perm+0x81e/0x950 [ 243.016530][T10967] ? __pfx_aa_sk_perm+0x10/0x10 [ 243.016553][T10967] ? sock_rps_record_flow+0x19/0x410 [ 243.016577][T10967] ? inet_sendmsg+0x2f4/0x370 [ 243.016595][T10967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.016621][T10967] __sock_sendmsg+0x19c/0x270 [ 243.016646][T10967] __sys_sendto+0x3bd/0x520 [ 243.016675][T10967] ? __pfx___sys_sendto+0x10/0x10 [ 243.016696][T10967] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 243.016724][T10967] ? __fget_files+0x3a0/0x420 [ 243.016761][T10967] ? ksys_write+0x1f0/0x250 [ 243.016781][T10967] ? rcu_is_watching+0x15/0xb0 [ 243.016819][T10967] __x64_sys_sendto+0xde/0x100 [ 243.016848][T10967] do_syscall_64+0xf6/0x210 [ 243.016870][T10967] ? clear_bhb_loop+0x45/0xa0 [ 243.016896][T10967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.016915][T10967] RIP: 0033:0x7fbf2518e969 [ 243.016934][T10967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.016950][T10967] RSP: 002b:00007fbf25fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 243.016972][T10967] RAX: ffffffffffffffda RBX: 00007fbf253b5fa0 RCX: 00007fbf2518e969 [ 243.016986][T10967] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000005 [ 243.016999][T10967] RBP: 00007fbf25fe9090 R08: 000020000005ffe4 R09: 000000000000001c [ 243.017012][T10967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.017024][T10967] R13: 0000000000000000 R14: 00007fbf253b5fa0 R15: 00007ffc8b774ef8 [ 243.017055][T10967] [ 243.126006][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.465407][T10984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.502423][T10989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.543510][T10985] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 243.745075][T10996] vlan3: entered promiscuous mode [ 243.760217][T10996] gretap0: entered promiscuous mode [ 244.205965][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.281989][T11018] xt_hashlimit: max too large, truncated to 1048576 [ 244.297798][T11018] xt_hashlimit: overflow, try lower: 241/0 [ 244.598970][T11032] __nla_validate_parse: 9 callbacks suppressed [ 244.598990][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1441'. [ 244.738525][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1442'. [ 245.245967][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.284001][ T47] IPVS: starting estimator thread 0... [ 245.372427][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 245.383191][T11077] IPVS: using max 25 ests per chain, 60000 per kthread [ 245.554186][T11092] netlink: 'syz.3.1457': attribute type 3 has an invalid length. [ 245.564529][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1457'. [ 245.577864][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 245.589796][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 245.602486][T11095] Bluetooth: MGMT ver 1.23 [ 245.763383][T11092] netlink: 'syz.3.1457': attribute type 3 has an invalid length. [ 245.773017][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1457'. [ 245.853477][T11102] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1460'. [ 245.895192][T11104] netlink: 'syz.0.1459': attribute type 9 has an invalid length. [ 245.903617][T11104] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.1459'. [ 246.206496][T11116] netlink: 'syz.1.1464': attribute type 4 has an invalid length. [ 246.286197][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.318696][T11120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1466'. [ 246.429152][T11127] : renamed from bond0 [ 246.460449][T11129] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.469778][T11129] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.478555][T11129] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.487381][T11129] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.499524][T11129] vxlan0: entered promiscuous mode [ 246.505098][T11129] vxlan0: entered allmulticast mode [ 246.979069][T11155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.326062][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.779826][T11213] FAULT_INJECTION: forcing a failure. [ 247.779826][T11213] name failslab, interval 1, probability 0, space 0, times 0 [ 247.795109][T11213] CPU: 0 UID: 0 PID: 11213 Comm: syz.2.1496 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 247.795139][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.795152][T11213] Call Trace: [ 247.795160][T11213] [ 247.795168][T11213] dump_stack_lvl+0x189/0x250 [ 247.795205][T11213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.795235][T11213] ? __pfx__printk+0x10/0x10 [ 247.795271][T11213] should_fail_ex+0x414/0x560 [ 247.795297][T11213] should_failslab+0xa8/0x100 [ 247.795327][T11213] __kmalloc_noprof+0xcb/0x4f0 [ 247.795351][T11213] ? sctp_bind_addrs_to_raw+0xff/0x350 [ 247.795379][T11213] sctp_bind_addrs_to_raw+0xff/0x350 [ 247.795408][T11213] ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10 [ 247.795446][T11213] sctp_make_init+0x150/0xd30 [ 247.795468][T11213] ? is_bpf_text_address+0x292/0x2b0 [ 247.795497][T11213] ? is_bpf_text_address+0x26/0x2b0 [ 247.795528][T11213] ? kernel_text_address+0xa5/0xe0 [ 247.795556][T11213] ? __pfx_sctp_make_init+0x10/0x10 [ 247.795578][T11213] ? arch_stack_walk+0xfc/0x150 [ 247.795618][T11213] ? stack_trace_save+0x9c/0xe0 [ 247.795643][T11213] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 247.795676][T11213] sctp_do_sm+0x1e4/0x5a20 [ 247.795693][T11213] ? __pfx_sctp_pname+0x10/0x10 [ 247.795713][T11213] ? kasan_save_track+0x3e/0x80 [ 247.795735][T11213] ? sctp_stream_init_ext+0x57/0x180 [ 247.795752][T11213] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 247.795776][T11213] ? sctp_sendmsg+0x1941/0x2810 [ 247.795798][T11213] ? __sock_sendmsg+0x19c/0x270 [ 247.795816][T11213] ? __sys_sendto+0x3bd/0x520 [ 247.795839][T11213] ? do_syscall_64+0xf6/0x210 [ 247.795864][T11213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.795891][T11213] ? __pfx_sctp_do_sm+0x10/0x10 [ 247.795949][T11213] ? __sk_mem_raise_allocated+0xb14/0x1300 [ 247.795980][T11213] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 247.796013][T11213] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 247.796037][T11213] ? __asan_memcpy+0x40/0x70 [ 247.796066][T11213] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 247.796108][T11213] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 247.796135][T11213] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 247.796161][T11213] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.796187][T11213] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 247.796212][T11213] ? security_sctp_bind_connect+0x7e/0x2e0 [ 247.796247][T11213] sctp_sendmsg+0x1941/0x2810 [ 247.796286][T11213] ? __pfx_sctp_sendmsg+0x10/0x10 [ 247.796315][T11213] ? aa_sk_perm+0x81e/0x950 [ 247.796341][T11213] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.796364][T11213] ? sock_rps_record_flow+0x19/0x410 [ 247.796388][T11213] ? inet_sendmsg+0x2f4/0x370 [ 247.796412][T11213] __sock_sendmsg+0x19c/0x270 [ 247.796437][T11213] __sys_sendto+0x3bd/0x520 [ 247.796464][T11213] ? __pfx___sys_sendto+0x10/0x10 [ 247.796504][T11213] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 247.796562][T11213] __x64_sys_sendto+0xde/0x100 [ 247.796592][T11213] do_syscall_64+0xf6/0x210 [ 247.796614][T11213] ? clear_bhb_loop+0x45/0xa0 [ 247.796639][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.796658][T11213] RIP: 0033:0x7f09ccb8e969 [ 247.796685][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.796703][T11213] RSP: 002b:00007f09cd920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 247.796725][T11213] RAX: ffffffffffffffda RBX: 00007f09ccdb5fa0 RCX: 00007f09ccb8e969 [ 247.796739][T11213] RDX: 000000000000cf88 RSI: 0000200000847fff RDI: 0000000000000005 [ 247.796752][T11213] RBP: 00007f09cd920090 R08: 000020000005ffe4 R09: 000000000000001c [ 247.796765][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.796777][T11213] R13: 0000000000000000 R14: 00007f09ccdb5fa0 R15: 00007ffe98903158 [ 247.796809][T11213] [ 248.365966][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.786019][T11234] netlink: 'syz.2.1502': attribute type 29 has an invalid length. [ 249.058002][T11245] Cannot find del_set index 1 as target [ 249.235996][T11249] x_tables: duplicate underflow at hook 3 [ 249.364390][T11253] netlink: 'syz.0.1507': attribute type 8 has an invalid length. [ 249.405975][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.893501][T11273] netlink: 'syz.0.1512': attribute type 23 has an invalid length. [ 250.111239][T11276] __nla_validate_parse: 15 callbacks suppressed [ 250.111262][T11276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1512'. [ 250.164899][T11278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1514'. [ 250.212216][T11279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1514'. [ 250.445960][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.496266][T11293] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.820151][T11300] xt_bpf: check failed: parse error [ 250.850128][T11300] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 251.485973][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.866761][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1531'. [ 251.919871][T11344] netlink: zone id is out of range [ 251.925064][T11344] netlink: zone id is out of range [ 251.956337][T11344] netlink: zone id is out of range [ 251.986621][T11344] netlink: zone id is out of range [ 251.991822][T11344] netlink: zone id is out of range [ 253.116915][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1538'. [ 253.136819][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 253.154989][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'. [ 253.565962][ C1] net_ratelimit: 8 callbacks suppressed [ 253.565983][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.573165][T11385] netlink: 'syz.3.1539': attribute type 10 has an invalid length. [ 254.101352][T11385] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 254.162668][T11382] x_tables: duplicate underflow at hook 2 [ 254.463529][T11400] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1542'. [ 254.473869][T11400] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 254.491501][T11400] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 254.574349][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 254.615958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.684453][T11412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.702064][T11412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.713377][T11412] batadv_slave_0: entered promiscuous mode [ 254.724702][T11412] batadv_slave_0: left promiscuous mode [ 255.205417][T11438] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1553'. [ 255.651490][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.737798][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.526962][T11481] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1568'. [ 256.545567][T11481] netlink: 'syz.4.1568': attribute type 3 has an invalid length. [ 256.695962][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.803482][T11499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.287523][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.298049][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.307076][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.317792][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.345713][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.726047][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.950403][T11549] netlink: 'syz.3.1579': attribute type 39 has an invalid length. [ 258.073943][T11525] chnl_net:caif_netlink_parms(): no params data found [ 258.139631][T11547] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1578'. [ 258.586498][T11525] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.593710][T11525] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.621137][T11525] bridge_slave_0: entered allmulticast mode [ 258.631301][T11525] bridge_slave_0: entered promiscuous mode [ 258.644423][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.654752][T11525] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.683946][T11525] bridge_slave_1: entered allmulticast mode [ 258.699325][T11525] bridge_slave_1: entered promiscuous mode [ 258.765960][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.839049][T11525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.861426][T11589] netlink: 'syz.4.1591': attribute type 1 has an invalid length. [ 258.876836][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 258.920579][T11589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.937864][T11525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.029690][T11589] bond1: (slave gretap1): making interface the new active one [ 259.042084][T11589] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 259.056485][T11525] team0: Port device team_slave_0 added [ 259.066651][T11525] team0: Port device team_slave_1 added [ 259.196187][T11525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.213601][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.260772][T11525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.311077][T11525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.336075][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.401578][T11525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.412731][ T5833] Bluetooth: hci4: command tx timeout [ 259.457371][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1595'. [ 259.518605][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1595'. [ 259.589805][T11525] hsr_slave_0: entered promiscuous mode [ 259.608873][T11525] hsr_slave_1: entered promiscuous mode [ 259.623722][T11525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.640965][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1596'. [ 259.650283][T11525] Cannot create hsr debugfs directory [ 259.666367][T11619] netlink: 'syz.4.1595': attribute type 10 has an invalid length. [ 259.805974][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.853735][T11621] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.876997][T11630] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.125647][T11621] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.371038][T11621] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.460464][T11621] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.534039][T11625] IPVS: length: 78 != 98912 [ 260.614188][T11621] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.647687][T11621] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.682980][T11621] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.772431][T11621] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.845983][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.875009][T11648] team0: Port device team_slave_1 removed [ 260.884609][T11648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.900076][T11648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.915080][T11649] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 260.994211][T11649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.012731][T11649] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 261.489607][ T5833] Bluetooth: hci4: command tx timeout [ 261.516986][T11673] bond0: (slave batadv0): Releasing backup interface [ 261.632688][T11673] bond0: (slave wlan1): Releasing backup interface [ 261.813500][T11525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.886075][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.996221][T11525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.034790][T11525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.282520][T11525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 262.465437][T11703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.472739][T11703] IPv6: NLM_F_CREATE should be set when creating new route [ 262.480093][T11703] IPv6: NLM_F_CREATE should be set when creating new route [ 262.487386][T11703] IPv6: NLM_F_CREATE should be set when creating new route [ 262.623299][T11706] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 262.935975][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.963686][T11706] wg1: entered promiscuous mode [ 262.974448][T11706] wg1: entered allmulticast mode [ 263.452264][T11525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.518390][T11525] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.554655][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.561906][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.576615][ T5833] Bluetooth: hci4: command tx timeout [ 263.634351][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.641557][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.785663][T11525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.804000][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1624'. [ 263.966009][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 264.038538][ T5833] block nbd0: Receive control failed (result -104) [ 264.382942][T11525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.480102][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 264.504310][T11762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1633'. [ 264.553591][T11525] veth0_vlan: entered promiscuous mode [ 264.607480][T11525] veth1_vlan: entered promiscuous mode [ 264.774544][T11525] veth0_macvtap: entered promiscuous mode [ 264.818597][T11525] veth1_macvtap: entered promiscuous mode [ 264.896391][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.927079][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.961764][T11525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.992917][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.006247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.040987][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.077815][T11525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.108154][T11525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.128379][T11525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.142217][T11525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.152032][T11525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.207489][T11784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1639'. [ 265.219715][T11784] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1639'. [ 265.481316][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.513725][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.646532][ T5833] Bluetooth: hci4: command tx timeout [ 265.665331][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.701071][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.950312][T11799] netlink: 'syz.3.1642': attribute type 4 has an invalid length. [ 265.977087][T11799] netlink: 'syz.3.1642': attribute type 4 has an invalid length. [ 266.056121][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.254426][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 266.376363][T11805] openvswitch: netlink: IP tunnel dst address not specified [ 266.421112][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.599924][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.713070][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.974401][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.085965][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.387327][ T53] bridge_slave_1: left allmulticast mode [ 267.393251][ T53] bridge_slave_1: left promiscuous mode [ 267.407643][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.447130][ T53] bridge_slave_0: left allmulticast mode [ 267.465408][ T53] bridge_slave_0: left promiscuous mode [ 267.485348][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.525245][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.537431][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.545720][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.555124][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.564595][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.059711][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.072420][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.084176][ T53] bond0 (unregistering): Released all slaves [ 268.098963][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1652'. [ 268.125957][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.494898][T11869] pim6reg: entered allmulticast mode [ 268.519001][T11872] pim6reg: left allmulticast mode [ 269.089307][ T53] hsr_slave_0: left promiscuous mode [ 269.109323][ T53] hsr_slave_1: left promiscuous mode [ 269.115692][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.137838][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.166097][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.187193][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.200387][T11900] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 269.209856][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.288363][ T53] veth1_macvtap: left promiscuous mode [ 269.294828][ T53] veth0_macvtap: left promiscuous mode [ 269.303764][ T53] veth1_vlan: left promiscuous mode [ 269.313621][ T53] veth0_vlan: left promiscuous mode [ 269.424107][T11909] netlink: 'syz.4.1672': attribute type 2 has an invalid length. [ 269.649973][ T5833] Bluetooth: hci4: command tx timeout [ 269.972898][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 270.100295][ T53] team0 (unregistering): Port device team_slave_1 removed [ 270.140230][ T53] team0 (unregistering): Port device team_slave_0 removed [ 270.215969][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.528628][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 270.555993][T11929] veth0_to_bridge: entered promiscuous mode [ 270.600457][T11846] chnl_net:caif_netlink_parms(): no params data found [ 270.653635][ T30] audit: type=1804 audit(1746975296.930:5): pid=11932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1676" name="/newroot/317/cgroup.controllers" dev="tmpfs" ino=1646 res=1 errno=0 [ 270.677219][T11930] veth0_to_bridge: left promiscuous mode [ 270.688252][T11932] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1676'. [ 270.723987][ T30] audit: type=1800 audit(1746975296.930:6): pid=11932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1676" name="cgroup.controllers" dev="tmpfs" ino=1646 res=0 errno=0 [ 270.741225][T11934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1677'. [ 270.804379][T11937] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 271.045813][T11945] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 271.206926][T11846] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.231566][T11846] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.244573][T11846] bridge_slave_0: entered allmulticast mode [ 271.255952][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.256516][T11846] bridge_slave_0: entered promiscuous mode [ 271.350762][T11846] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.378342][T11846] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.385629][T11846] bridge_slave_1: entered allmulticast mode [ 271.423823][T11846] bridge_slave_1: entered promiscuous mode [ 271.554368][T11957] xt_CT: No such helper "snmp" [ 271.619800][T11846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.659559][T11846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.726122][ T5833] Bluetooth: hci4: command tx timeout [ 271.784675][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 271.930194][T11846] team0: Port device team_slave_0 added [ 271.962581][T11846] team0: Port device team_slave_1 added [ 271.993819][T11974] veth1_to_team: entered promiscuous mode [ 272.009517][T11974] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 272.243096][T11846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.260649][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.296319][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.344533][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1692'. [ 272.346511][T11846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.411032][T11846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.426376][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.454716][T11846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.486861][T11991] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1692'. [ 272.621351][T11846] hsr_slave_0: entered promiscuous mode [ 272.632144][T11846] hsr_slave_1: entered promiscuous mode [ 272.646937][T11846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.664791][T11846] Cannot create hsr debugfs directory [ 272.684387][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 272.719110][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 273.326059][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.521355][T12034] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 273.806315][ T5833] Bluetooth: hci4: command tx timeout [ 273.810658][T12038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.852674][T11846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.884617][T11846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.911593][T11846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.939978][T11846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.942857][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 273.988996][T12038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.166335][T12038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.305672][T12038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.365953][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.562649][T12072] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.592962][T12072] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.688317][T12078] netlink: 'syz.4.1712': attribute type 2 has an invalid length. [ 274.700322][T11846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.748046][T11846] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.785287][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.792581][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.833001][T12082] dummy0: entered allmulticast mode [ 274.884278][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.891491][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.925023][T12085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.940279][T12086] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 275.187693][T12099] __nla_validate_parse: 5 callbacks suppressed [ 275.187713][T12099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1718'. [ 275.294906][T12099] netlink: 20556 bytes leftover after parsing attributes in process `syz.2.1718'. [ 275.296219][T12100] netlink: 20556 bytes leftover after parsing attributes in process `syz.2.1718'. [ 275.392523][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 275.406289][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.598930][T11846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.649680][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 275.686068][T12115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1722'. [ 275.796357][T12115] geneve3: entered promiscuous mode [ 275.801786][T12115] geneve3: entered allmulticast mode [ 275.807617][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 275.836265][T12121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1725'. [ 275.886125][ T5833] Bluetooth: hci4: command tx timeout [ 275.906606][T12125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.945089][T12123] netlink: 'syz.2.1724': attribute type 64 has an invalid length. [ 276.015701][T12123] netlink: 'syz.2.1724': attribute type 4 has an invalid length. [ 276.038642][T11846] veth0_vlan: entered promiscuous mode [ 276.075770][T11846] veth1_vlan: entered promiscuous mode [ 276.205750][T11846] veth0_macvtap: entered promiscuous mode [ 276.241764][T11846] veth1_macvtap: entered promiscuous mode [ 276.292071][T11846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.323036][T11846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.346980][T11846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.383350][T11846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.396217][T11846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.427826][T11846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.446128][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.470066][T11846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.501503][T11846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.523077][T11846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.542598][T11846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.720574][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.741037][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.826385][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.835063][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.244679][T12155] x_tables: duplicate underflow at hook 1 [ 277.485991][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.514790][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 277.655646][T12164] netlink: 'syz.1.1735': attribute type 2 has an invalid length. [ 277.667278][ T2977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.674294][T12164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1735'. [ 277.799406][ T2977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.015773][ T2977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.185785][ T2977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.235594][T12175] x_tables: duplicate underflow at hook 3 [ 278.526058][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.645333][T12190] veth0_to_bridge: entered promiscuous mode [ 278.709960][T12186] veth0_to_bridge: left promiscuous mode [ 278.722082][ T2977] bridge_slave_1: left allmulticast mode [ 278.728421][ T2977] bridge_slave_1: left promiscuous mode [ 278.734233][ T2977] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.837116][ T2977] bridge_slave_0: left allmulticast mode [ 278.853297][ T2977] bridge_slave_0: left promiscuous mode [ 278.866234][ T2977] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.994428][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.003075][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.014035][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.050623][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.058577][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.189539][T12211] netlink: 'syz.2.1745': attribute type 4 has an invalid length. [ 279.564042][T12216] netlink: 'syz.2.1745': attribute type 4 has an invalid length. [ 279.576021][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.708125][ T2977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.722220][ T2977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.734087][ T2977] bond0 (unregistering): Released all slaves [ 279.782176][T12208] ipvlan2: entered promiscuous mode [ 279.790958][T12208] bridge0: port 1(ipvlan2) entered blocking state [ 279.804091][T12208] bridge0: port 1(ipvlan2) entered disabled state [ 279.812623][T12208] ipvlan2: entered allmulticast mode [ 279.831370][T12208] bridge0: entered allmulticast mode [ 279.841488][T12208] ipvlan2: left allmulticast mode [ 279.852955][T12208] bridge0: left allmulticast mode [ 280.476214][ T2977] hsr_slave_0: left promiscuous mode [ 280.488059][ T2977] hsr_slave_1: left promiscuous mode [ 280.507350][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.520435][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.530391][ T2977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.543934][ T2977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.606070][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.613023][ T2977] veth1_macvtap: left promiscuous mode [ 280.629258][ T2977] veth0_macvtap: left promiscuous mode [ 280.634961][ T2977] veth1_vlan: left promiscuous mode [ 280.650592][ T2977] veth0_vlan: left promiscuous mode [ 281.169999][ T5833] Bluetooth: hci4: command tx timeout [ 281.270981][ T2977] team0 (unregistering): Port device team_slave_1 removed [ 281.313135][ T2977] team0 (unregistering): Port device team_slave_0 removed [ 281.650300][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.731096][T12247] macvlan1: entered promiscuous mode [ 281.747796][T12247] bridge_slave_0: entered promiscuous mode [ 282.040428][T12268] netlink: 'syz.4.1763': attribute type 10 has an invalid length. [ 282.048500][T12268] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1763'. [ 282.072589][T12268] team0: entered promiscuous mode [ 282.078356][T12268] team_slave_0: entered promiscuous mode [ 282.084447][T12268] team_slave_1: entered promiscuous mode [ 282.093665][T12268] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.118533][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 282.127842][T12270] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1762'. [ 282.146082][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 282.172367][T12202] chnl_net:caif_netlink_parms(): no params data found [ 282.179510][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 282.320580][T12278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1764'. [ 282.510933][T12292] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 282.595142][T12202] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.626396][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.637268][T12202] bridge_slave_0: entered allmulticast mode [ 282.645080][T12202] bridge_slave_0: entered promiscuous mode [ 282.685957][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.689777][T12202] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.715807][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.723741][T12202] bridge_slave_1: entered allmulticast mode [ 282.740383][T12202] bridge_slave_1: entered promiscuous mode [ 282.876997][T12307] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 282.902501][T12202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.923431][T12202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.063411][T12202] team0: Port device team_slave_0 added [ 283.089530][T12202] team0: Port device team_slave_1 added [ 283.112624][T12323] netlink: 'syz.3.1779': attribute type 11 has an invalid length. [ 283.126249][T12323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1779'. [ 283.188341][T12202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.198538][T12202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.240024][T12202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.241870][T12329] netlink: 'syz.3.1781': attribute type 7 has an invalid length. [ 283.262057][ T5833] Bluetooth: hci4: command tx timeout [ 283.284207][T12202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.295336][T12202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.328894][T12202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.427193][T12202] hsr_slave_0: entered promiscuous mode [ 283.444230][T12202] hsr_slave_1: entered promiscuous mode [ 283.454550][T12202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.470154][T12202] Cannot create hsr debugfs directory [ 283.616230][T12346] IPv6: NLM_F_REPLACE set, but no existing node found! [ 283.725955][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.793402][T12355] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1790'. [ 284.103491][T12360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.212576][T12358] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 284.220555][T12358] netlink: 'syz.4.1789': attribute type 2 has an invalid length. [ 284.236665][T12366] sctp: [Deprecated]: syz.1.1791 (pid 12366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.236665][T12366] Use struct sctp_sack_info instead [ 284.273019][T12363] hsr0: entered promiscuous mode [ 284.323549][T12363] macsec1: entered allmulticast mode [ 284.332912][T12363] hsr0: entered allmulticast mode [ 284.341834][T12363] hsr_slave_0: entered allmulticast mode [ 284.353185][T12363] hsr_slave_1: entered allmulticast mode [ 284.461426][T12363] hsr0: left allmulticast mode [ 284.466920][T12363] hsr_slave_0: left allmulticast mode [ 284.474802][T12363] hsr_slave_1: left allmulticast mode [ 284.766604][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.838102][T12384] netlink: del zone limit has 4 unknown bytes [ 284.863300][T12379] veth1_to_team: left promiscuous mode [ 284.876972][T12379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.895259][T12379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.922580][T12379] hsr0: left promiscuous mode [ 284.975352][T12379] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.984821][T12379] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.993503][T12379] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.002050][T12379] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.057995][T12379] gre1: left allmulticast mode [ 285.307861][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1796'. [ 285.327771][ T5833] Bluetooth: hci4: command tx timeout [ 285.546776][T12398] netlink: 'syz.3.1798': attribute type 7 has an invalid length. [ 285.554643][T12398] netlink: 'syz.3.1798': attribute type 8 has an invalid length. [ 285.585445][T12402] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1799'. [ 285.596365][T12398] netlink: 'syz.3.1798': attribute type 15 has an invalid length. [ 285.728332][T12202] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.765802][T12202] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.806010][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.806821][T12202] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.856397][T12202] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 285.889690][T12415] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 286.281738][T12202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.371465][T12202] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.459229][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.466489][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.509667][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.516899][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.846009][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.188412][T12457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.333162][T12202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.359707][T12465] __nla_validate_parse: 4 callbacks suppressed [ 287.359727][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 287.406630][ T5833] Bluetooth: hci4: command tx timeout [ 287.451424][T12202] veth0_vlan: entered promiscuous mode [ 287.493700][T12202] veth1_vlan: entered promiscuous mode [ 287.561390][T12202] veth0_macvtap: entered promiscuous mode [ 287.596621][T12202] veth1_macvtap: entered promiscuous mode [ 287.629360][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1819'. [ 287.664225][T12202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.697915][T12202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.719917][T12202] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.735106][T12202] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.744678][T12202] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.784732][T12202] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.886358][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.983146][T12489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1825'. [ 288.061050][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.089792][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.217247][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.238975][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.510330][T12514] netlink: 'syz.3.1834': attribute type 7 has an invalid length. [ 288.518525][T12514] netlink: 'syz.3.1834': attribute type 8 has an invalid length. [ 288.720905][T12527] €Â: renamed from bond_slave_0 [ 288.728962][T12524] netlink: 'syz.3.1837': attribute type 6 has an invalid length. [ 288.765616][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 288.926148][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.131809][T12547] netlink: 'syz.1.1845': attribute type 23 has an invalid length. [ 289.230342][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.282249][T12549] netlink: 'syz.3.1846': attribute type 4 has an invalid length. [ 289.369012][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.610033][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.783145][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.872475][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 289.928091][T12560] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1850'. [ 289.966157][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.192555][T12573] syz.4.1852: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 290.253676][T12573] CPU: 0 UID: 0 PID: 12573 Comm: syz.4.1852 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 290.253709][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.253724][T12573] Call Trace: [ 290.253733][T12573] [ 290.253742][T12573] dump_stack_lvl+0x189/0x250 [ 290.253784][T12573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.253813][T12573] ? __pfx__printk+0x10/0x10 [ 290.253834][T12573] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.253856][T12573] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.253879][T12573] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 290.253903][T12573] warn_alloc+0x214/0x310 [ 290.253939][T12573] ? __pfx_warn_alloc+0x10/0x10 [ 290.253967][T12573] ? kasan_save_track+0x4f/0x80 [ 290.253990][T12573] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 290.254015][T12573] ? xskq_create+0x56/0x170 [ 290.254047][T12573] ? __x64_sys_setsockopt+0x18b/0x220 [ 290.254072][T12573] ? do_syscall_64+0xf6/0x210 [ 290.254090][T12573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.254123][T12573] __vmalloc_node_range_noprof+0x125/0x12c0 [ 290.254186][T12573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.254213][T12573] ? xskq_create+0x56/0x170 [ 290.254247][T12573] ? __kasan_kmalloc+0x93/0xb0 [ 290.254278][T12573] vmalloc_user_noprof+0x74/0x80 [ 290.254308][T12573] ? xskq_create+0xbf/0x170 [ 290.254336][T12573] xskq_create+0xbf/0x170 [ 290.254371][T12573] xsk_init_queue+0xb0/0x110 [ 290.254404][T12573] xsk_setsockopt+0x43f/0x710 [ 290.254445][T12573] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.254488][T12573] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 290.254511][T12573] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.254543][T12573] do_sock_setsockopt+0x257/0x3e0 [ 290.254574][T12573] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.254598][T12573] ? __fget_files+0x2a/0x420 [ 290.254630][T12573] ? __fget_files+0x3a0/0x420 [ 290.254655][T12573] ? __fget_files+0x2a/0x420 [ 290.254690][T12573] __x64_sys_setsockopt+0x18b/0x220 [ 290.254725][T12573] do_syscall_64+0xf6/0x210 [ 290.254746][T12573] ? clear_bhb_loop+0x45/0xa0 [ 290.254772][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.254792][T12573] RIP: 0033:0x7f8158b8e969 [ 290.254811][T12573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.254829][T12573] RSP: 002b:00007f8159a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.254850][T12573] RAX: ffffffffffffffda RBX: 00007f8158db5fa0 RCX: 00007f8158b8e969 [ 290.254865][T12573] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 290.254877][T12573] RBP: 00007f8158c10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 290.254890][T12573] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.254903][T12573] R13: 0000000000000000 R14: 00007f8158db5fa0 R15: 00007ffd67aa1fe8 [ 290.254937][T12573] [ 290.255041][T12573] Mem-Info: [ 290.576173][T12573] active_anon:10055 inactive_anon:0 isolated_anon:0 [ 290.576173][T12573] active_file:1936 inactive_file:39920 isolated_file:0 [ 290.576173][T12573] unevictable:768 dirty:130 writeback:0 [ 290.576173][T12573] slab_reclaimable:11522 slab_unreclaimable:123624 [ 290.576173][T12573] mapped:32348 shmem:2092 pagetables:816 [ 290.576173][T12573] sec_pagetables:0 bounce:0 [ 290.576173][T12573] kernel_misc_reclaimable:0 [ 290.576173][T12573] free:1310486 free_pcp:1303 free_cma:0 [ 290.689273][T12573] Node 0 active_anon:41820kB inactive_anon:0kB active_file:7744kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135292kB dirty:516kB writeback:0kB shmem:8532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11332kB pagetables:3268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.722345][ T13] bridge_slave_1: left allmulticast mode [ 290.730570][T12573] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.783598][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.791394][ T13] bridge_slave_1: left promiscuous mode [ 290.806998][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.815176][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.815465][T12573] Node 0 [ 290.824781][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.836486][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.844976][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.854230][T12573] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.882274][T12573] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 290.888546][T12573] Node 0 DMA32 free:1310444kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:43224kB inactive_anon:0kB active_file:7744kB inactive_file:159376kB unevictable:1536kB writepending:512kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:4136kB local_pcp:2636kB free_cma:0kB [ 290.921465][ T13] bridge_slave_0: left allmulticast mode [ 290.926094][T12573] lowmem_reserve[]: 0 0 0 0 0 [ 290.927267][ T13] bridge_slave_0: left promiscuous mode [ 290.931918][T12573] Node 0 [ 290.937835][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.947843][T12573] Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 291.006072][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.034915][T12573] lowmem_reserve[]: 0 0 0 0 0 [ 291.077053][T12573] Node 1 Normal free:3912632kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 291.146369][T12573] lowmem_reserve[]: 0 0 0 0 0 [ 291.151196][T12573] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.191889][T12573] Node 0 DMA32: 3*4kB (UME) 1*8kB (M) 2*16kB (UE) 1*32kB (U) 64*64kB (UM) 142*128kB (UME) 118*256kB (UME) 42*512kB (UME) 39*1024kB (UME) 14*2048kB (UM) 283*4096kB (UM) = 1301844kB [ 291.226500][T12573] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 291.252951][T12573] Node 1 Normal: 151*4kB (UME) 42*8kB (UME) 36*16kB (UME) 214*32kB (UME) 83*64kB (UME) 33*128kB (UME) 10*256kB (UM) 6*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 946*4096kB (M) = 3912684kB [ 291.304802][T12573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.341410][T12573] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.356293][T12573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.373556][T12573] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.383378][T12573] 43222 total pagecache pages [ 291.401435][T12573] 0 pages in swap cache [ 291.406081][T12573] Free swap = 124996kB [ 291.410275][T12573] Total swap = 124996kB [ 291.426748][T12573] 2097051 pages RAM [ 291.430611][T12573] 0 pages HighMem/MovableOnly [ 291.435314][T12573] 424379 pages reserved [ 291.454415][T12573] 0 pages cma reserved [ 291.635142][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.649819][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.660458][ T13] bond0 (unregistering): Released all slaves [ 291.682284][T12594] netlink: 'syz.1.1857': attribute type 4 has an invalid length. [ 292.036517][T12604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1859'. [ 292.045949][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.110095][ T13] hsr_slave_0: left promiscuous mode [ 292.117417][ T13] hsr_slave_1: left promiscuous mode [ 292.126424][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.142180][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.158034][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.165847][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.202057][ T13] veth1_macvtap: left promiscuous mode [ 292.209337][ T13] veth0_macvtap: left promiscuous mode [ 292.214958][ T13] veth1_vlan: left promiscuous mode [ 292.223931][ T13] veth0_vlan: left promiscuous mode [ 292.642082][ T13] team0 (unregistering): Port device team_slave_1 removed [ 292.681728][ T13] team0 (unregistering): Port device team_slave_0 removed [ 293.009111][ T5846] Bluetooth: hci4: command tx timeout [ 293.085958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.426340][T12632] netlink: 'syz.1.1868': attribute type 10 has an invalid length. [ 293.434597][T12634] ipt_ECN: cannot use operation on non-tcp rule [ 293.491208][T12629] syzkaller0: entered allmulticast mode [ 293.503590][T12632] lo: entered promiscuous mode [ 294.108875][T12584] chnl_net:caif_netlink_parms(): no params data found [ 294.125987][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.553320][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1874'. [ 294.723786][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.753744][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.761671][T12584] bridge_slave_0: entered allmulticast mode [ 294.774102][T12584] bridge_slave_0: entered promiscuous mode [ 294.815851][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.823480][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.838845][T12584] bridge_slave_1: entered allmulticast mode [ 294.850649][T12584] bridge_slave_1: entered promiscuous mode [ 295.003317][T12692] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1881'. [ 295.029427][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.050882][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 295.083155][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.096042][ T5846] Bluetooth: hci4: command tx timeout [ 295.166107][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.355461][T12702] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 295.561138][T12584] team0: Port device team_slave_0 added [ 295.707721][T12584] team0: Port device team_slave_1 added [ 295.990654][T12584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.008594][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.063592][T12584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.097811][T12584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.104818][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.168730][T12584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.206001][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.308455][T12733] netlink: 'syz.2.1889': attribute type 10 has an invalid length. [ 296.424903][T12584] hsr_slave_0: entered promiscuous mode [ 296.449993][T12584] hsr_slave_1: entered promiscuous mode [ 296.459174][T12584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.484780][T12584] Cannot create hsr debugfs directory [ 296.508751][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 297.035187][T12761] sctp: [Deprecated]: syz.4.1898 (pid 12761) Use of int in maxseg socket option. [ 297.035187][T12761] Use struct sctp_assoc_value instead [ 297.166242][ T5846] Bluetooth: hci4: command tx timeout [ 297.228182][T12773] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 297.240948][T12773] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 297.255947][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.303457][T12777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1900'. [ 297.771086][T12584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.784459][T12584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 297.794971][T12584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 297.808484][T12584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.924114][T12790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1905'. [ 297.941179][T12584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.980566][T12584] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.011510][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.018725][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.048763][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.056008][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.286015][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.470789][T12806] macsec4: entered promiscuous mode [ 298.495031][T12806] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 298.522249][T12806] macsec4: entered allmulticast mode [ 298.541598][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1909'. [ 298.546162][T12806] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 298.569447][T12809] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 298.771081][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.891642][T12584] veth0_vlan: entered promiscuous mode [ 298.918130][T12584] veth1_vlan: entered promiscuous mode [ 298.973301][T12584] veth0_macvtap: entered promiscuous mode [ 299.003766][T12584] veth1_macvtap: entered promiscuous mode [ 299.055070][T12584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.083973][T12584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.121927][T12584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.131578][T12833] netlink: 'syz.1.1916': attribute type 10 has an invalid length. [ 299.145347][T12584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.154222][T12584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.172180][T12584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.250788][ T5846] Bluetooth: hci4: command tx timeout [ 299.326075][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.345585][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 299.435941][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.443817][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.533651][T12843] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1921'. [ 299.561074][ T4598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.591378][ T4598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.698940][T12855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'. [ 299.709890][T12856] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 299.716791][T12855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'. [ 300.071234][T12875] delete_channel: no stack [ 300.366035][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.710512][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.373309][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.406103][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.603993][T12903] tipc: Started in network mode [ 301.609067][T12903] tipc: Node identity -, cluster identity 4711 [ 301.678425][T12903] tipc: Enabling of bearer rejected, failed to enable media [ 301.736844][T12911] netlink: 'syz.2.1936': attribute type 4 has an invalid length. [ 301.977559][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.444972][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.455305][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.456071][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.463949][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.479584][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.489361][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.524139][T12916] syzkaller1: entered allmulticast mode [ 302.614264][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.691755][T12927] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 302.969951][T12938] netlink: 'syz.2.1945': attribute type 4 has an invalid length. [ 303.053891][ T53] bridge_slave_1: left allmulticast mode [ 303.060487][ T53] bridge_slave_1: left promiscuous mode [ 303.070375][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.081058][ T53] bridge_slave_0: left allmulticast mode [ 303.087662][ T53] bridge_slave_0: left promiscuous mode [ 303.093714][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.175488][T12943] netlink: 'syz.4.1947': attribute type 8 has an invalid length. [ 303.447542][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.460925][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.471301][ T53] bond0 (unregistering): Released all slaves [ 303.486114][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.518064][T12949] team0: Device gtp0 is of different type [ 303.792014][T12924] chnl_net:caif_netlink_parms(): no params data found [ 303.853944][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1952'. [ 303.999640][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 304.086444][T12966] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1952'. [ 304.123670][T12966] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1952'. [ 304.171865][T12966] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1952'. [ 304.334229][ T53] hsr_slave_0: left promiscuous mode [ 304.371449][ T53] hsr_slave_1: left promiscuous mode [ 304.378087][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.385550][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.448399][T12999] netlink: 'syz.4.1962': attribute type 7 has an invalid length. [ 304.450318][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.467031][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.476393][T12999] netlink: 'syz.4.1962': attribute type 8 has an invalid length. [ 304.525589][ T53] veth1_macvtap: left promiscuous mode [ 304.530287][ T5846] Bluetooth: hci4: command tx timeout [ 304.531186][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.592598][ T53] veth0_macvtap: left promiscuous mode [ 304.601853][ T53] veth1_vlan: left promiscuous mode [ 304.610205][ T53] veth0_vlan: left promiscuous mode [ 305.384645][ T53] team0 (unregistering): Port device team_slave_1 removed [ 305.425226][ T53] team0 (unregistering): Port device team_slave_0 removed [ 305.570197][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.902503][T13006] batadv_slave_0: entered promiscuous mode [ 305.950475][T13023] sctp: [Deprecated]: syz.1.1968 (pid 13023) Use of int in max_burst socket option. [ 305.950475][T13023] Use struct sctp_assoc_value instead [ 306.005444][T12924] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.037055][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 306.042085][T12924] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.066446][T12924] bridge_slave_0: entered allmulticast mode [ 306.074395][T12924] bridge_slave_0: entered promiscuous mode [ 306.131770][T12924] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.152629][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.165050][T12924] bridge_slave_1: entered allmulticast mode [ 306.174377][T12924] bridge_slave_1: entered promiscuous mode [ 306.221344][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 306.283123][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1971'. [ 306.321525][T13035] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 306.342000][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1971'. [ 306.384643][T12924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.399928][T12924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.442737][T13038] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1972'. [ 306.493498][T13035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.549804][T13037] bond0: (slave ip6gretap1): making interface the new active one [ 306.562687][T13037] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 306.606059][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.606452][ T5846] Bluetooth: hci4: command tx timeout [ 306.720754][T12924] team0: Port device team_slave_0 added [ 306.731480][T12924] team0: Port device team_slave_1 added [ 306.828237][T13055] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 306.838202][T12924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.853851][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.883385][T12924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.973300][T13056] veth1_to_team: left promiscuous mode [ 306.990980][T13056] ip6gre1: left allmulticast mode [ 307.004882][T13056] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 307.017820][T13056] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 307.025323][T13056] macsec4: left promiscuous mode [ 307.033014][T13056] macsec4: left allmulticast mode [ 307.064957][T12924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.075379][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.110665][T12924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.320803][T12924] hsr_slave_0: entered promiscuous mode [ 307.331957][T12924] hsr_slave_1: entered promiscuous mode [ 307.349652][T12924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.384988][T12924] Cannot create hsr debugfs directory [ 307.515424][T13083] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 307.646037][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.666567][T13095] sctp: [Deprecated]: syz.4.1987 (pid 13095) Use of int in max_burst socket option deprecated. [ 307.666567][T13095] Use struct sctp_assoc_value instead [ 307.834597][T13107] xt_TCPMSS: Only works on TCP SYN packets [ 307.918423][T13112] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1991'. [ 307.944413][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 307.953110][T13112] netlink: 'syz.3.1991': attribute type 3 has an invalid length. [ 308.192109][T12924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.221639][T12924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.243302][T12924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.285279][T12924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.438964][T12924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.489328][T13131] sctp: [Deprecated]: syz.1.1999 (pid 13131) Use of int in max_burst socket option. [ 308.489328][T13131] Use struct sctp_assoc_value instead [ 308.504592][T12924] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.533699][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.541045][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.579493][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.586828][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.685981][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.686221][ T5846] Bluetooth: hci4: command tx timeout [ 308.846716][ T5846] Bluetooth: hci0: command tx timeout [ 309.121421][T13155] netlink: 'syz.3.2004': attribute type 62 has an invalid length. [ 309.370128][T12924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.473240][T13168] macsec5: entered promiscuous mode [ 309.493352][T13168] gretap0: entered promiscuous mode [ 309.523129][T13168] gretap0: left promiscuous mode [ 309.575501][T13170] netlink: 'syz.3.2008': attribute type 29 has an invalid length. [ 309.597303][T12924] veth0_vlan: entered promiscuous mode [ 309.612584][T12924] veth1_vlan: entered promiscuous mode [ 309.684002][T12924] veth0_macvtap: entered promiscuous mode [ 309.699554][T12924] veth1_macvtap: entered promiscuous mode [ 309.726042][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.748227][T12924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.769016][T12924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.780735][T12924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.790534][T12924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.799468][T12924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.809337][T12924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.030099][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.040306][T13177] xt_TPROXY: Can be used only with -p tcp or -p udp [ 310.080754][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.154295][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.163991][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.197056][T13182] netlink: 'syz.2.2013': attribute type 4 has an invalid length. [ 310.214421][T13182] netlink: 'syz.2.2013': attribute type 17 has an invalid length. [ 310.383277][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2016'. [ 310.431881][T13187] ------------[ cut here ]------------ [ 310.437775][T13187] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 310.472419][T13187] WARNING: CPU: 1 PID: 13187 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 310.485602][T13187] Modules linked in: [ 310.489947][T13187] CPU: 1 UID: 0 PID: 13187 Comm: syz.3.2016 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 310.502162][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.512377][T13187] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 310.519210][T13187] Code: 71 17 00 00 48 c7 c7 60 f8 0b 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 90 48 9c fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 2d ec d7 fa 90 0f 0b 90 e9 fe fe ff [ 310.538941][T13187] RSP: 0018:ffffc900045eefb0 EFLAGS: 00010282 [ 310.545063][T13187] RAX: 716e5ed90bcb6b00 RBX: 0000000000000014 RCX: 0000000000080000 [ 310.553175][T13187] RDX: ffffc9000d93e000 RSI: 000000000000579f RDI: 00000000000057a0 [ 310.561248][T13187] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 310.569839][T13187] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000000 [ 310.578235][T13187] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 310.586318][T13187] FS: 00007fbf25fc86c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 310.595297][T13187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.601982][T13187] CR2: 00007fc195ae56c0 CR3: 000000006034c000 CR4: 00000000003526f0 [ 310.610479][T13187] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 310.618560][T13187] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.626633][T13187] Call Trace: [ 310.629957][T13187] [ 310.632924][T13187] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 310.639057][T13187] mac80211_hwsim_sta_add+0xa3/0x310 [ 310.644405][T13187] drv_sta_state+0x8be/0x1840 [ 310.649270][T13187] sta_info_insert_rcu+0xd32/0x1940 [ 310.654516][T13187] ? sta_info_insert_rcu+0x2ce/0x1940 [ 310.660058][T13187] sta_info_insert+0x16/0xc0 [ 310.664696][T13187] rdev_add_station+0x105/0x290 [ 310.669686][T13187] nl80211_new_station+0x1723/0x1b40 [ 310.675456][T13187] ? __pfx_nl80211_new_station+0x10/0x10 [ 310.681454][T13187] ? netdev_run_todo+0xe1d/0xea0 [ 310.686781][T13187] ? nl80211_pre_doit+0x4f1/0x930 [ 310.691877][T13187] genl_family_rcv_msg_doit+0x212/0x300 [ 310.697531][T13187] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 310.703666][T13187] ? bpf_lsm_capable+0x9/0x20 [ 310.708548][T13187] ? security_capable+0x7e/0x2e0 [ 310.713570][T13187] genl_rcv_msg+0x60e/0x790 [ 310.718204][T13187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.723284][T13187] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 310.728940][T13187] ? __pfx_nl80211_new_station+0x10/0x10 [ 310.734613][T13187] ? __pfx_nl80211_post_doit+0x10/0x10 [ 310.740171][T13187] ? ref_tracker_free+0x63a/0x7d0 [ 310.745233][T13187] ? __copy_skb_header+0xa7/0x550 [ 310.750587][T13187] netlink_rcv_skb+0x219/0x490 [ 310.755403][T13187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 310.760602][T13187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.766055][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.773645][T13187] ? down_read+0x1ad/0x2e0 [ 310.778528][T13187] genl_rcv+0x28/0x40 [ 310.782568][T13187] netlink_unicast+0x758/0x8d0 [ 310.787491][T13187] netlink_sendmsg+0x805/0xb30 [ 310.792320][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.797724][T13187] ? aa_sock_msg_perm+0x94/0x160 [ 310.802709][T13187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.808120][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.813458][T13187] __sock_sendmsg+0x219/0x270 [ 310.818234][T13187] ____sys_sendmsg+0x505/0x830 [ 310.823054][T13187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.828473][T13187] ? import_iovec+0x74/0xa0 [ 310.833030][T13187] ___sys_sendmsg+0x21f/0x2a0 [ 310.837826][T13187] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.843123][T13187] ? __fget_files+0x2a/0x420 [ 310.848312][T13187] ? __fget_files+0x3a0/0x420 [ 310.853100][T13187] __x64_sys_sendmsg+0x19b/0x260 [ 310.858159][T13187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.863687][T13187] ? do_syscall_64+0xba/0x210 [ 310.868469][T13187] do_syscall_64+0xf6/0x210 [ 310.873013][T13187] ? clear_bhb_loop+0x45/0xa0 [ 310.878144][T13187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.884080][T13187] RIP: 0033:0x7fbf2518e969 [ 310.888815][T13187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.908565][T13187] RSP: 002b:00007fbf25fc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.917090][T13187] RAX: ffffffffffffffda RBX: 00007fbf253b6080 RCX: 00007fbf2518e969 [ 310.925112][T13187] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000a [ 310.933233][T13187] RBP: 00007fbf25210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 310.941366][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.949467][T13187] R13: 0000000000000000 R14: 00007fbf253b6080 R15: 00007ffc8b774ef8 [ 310.957623][T13187] [ 310.960690][T13187] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 310.968008][T13187] CPU: 1 UID: 0 PID: 13187 Comm: syz.3.2016 Not tainted 6.15.0-rc5-syzkaller-01021-g0b28182c73a3 #0 PREEMPT(full) [ 310.980105][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.990196][T13187] Call Trace: [ 310.993508][T13187] [ 310.996465][T13187] dump_stack_lvl+0x99/0x250 [ 311.001097][T13187] ? __asan_memcpy+0x40/0x70 [ 311.005718][T13187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.010960][T13187] ? __pfx__printk+0x10/0x10 [ 311.015604][T13187] panic+0x2db/0x790 [ 311.019550][T13187] ? __pfx_panic+0x10/0x10 [ 311.024029][T13187] __warn+0x31b/0x4b0 [ 311.028046][T13187] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 311.034158][T13187] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 311.040295][T13187] report_bug+0x2be/0x4f0 [ 311.044665][T13187] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 311.050772][T13187] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 311.056879][T13187] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 311.062981][T13187] handle_bug+0x84/0x160 [ 311.067266][T13187] exc_invalid_op+0x1a/0x50 [ 311.071814][T13187] asm_exc_invalid_op+0x1a/0x20 [ 311.076797][T13187] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 311.083528][T13187] Code: 71 17 00 00 48 c7 c7 60 f8 0b 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 90 48 9c fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 2d ec d7 fa 90 0f 0b 90 e9 fe fe ff [ 311.103180][T13187] RSP: 0018:ffffc900045eefb0 EFLAGS: 00010282 [ 311.109273][T13187] RAX: 716e5ed90bcb6b00 RBX: 0000000000000014 RCX: 0000000000080000 [ 311.117269][T13187] RDX: ffffc9000d93e000 RSI: 000000000000579f RDI: 00000000000057a0 [ 311.125267][T13187] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 311.133275][T13187] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000000 [ 311.141272][T13187] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 311.149285][T13187] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 311.155304][T13187] mac80211_hwsim_sta_add+0xa3/0x310 [ 311.160604][T13187] drv_sta_state+0x8be/0x1840 [ 311.165303][T13187] sta_info_insert_rcu+0xd32/0x1940 [ 311.170560][T13187] ? sta_info_insert_rcu+0x2ce/0x1940 [ 311.175974][T13187] sta_info_insert+0x16/0xc0 [ 311.180606][T13187] rdev_add_station+0x105/0x290 [ 311.185490][T13187] nl80211_new_station+0x1723/0x1b40 [ 311.190806][T13187] ? __pfx_nl80211_new_station+0x10/0x10 [ 311.196456][T13187] ? netdev_run_todo+0xe1d/0xea0 [ 311.201445][T13187] ? nl80211_pre_doit+0x4f1/0x930 [ 311.206495][T13187] genl_family_rcv_msg_doit+0x212/0x300 [ 311.212072][T13187] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.218167][T13187] ? bpf_lsm_capable+0x9/0x20 [ 311.222855][T13187] ? security_capable+0x7e/0x2e0 [ 311.227807][T13187] genl_rcv_msg+0x60e/0x790 [ 311.232333][T13187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.237377][T13187] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 311.242769][T13187] ? __pfx_nl80211_new_station+0x10/0x10 [ 311.248412][T13187] ? __pfx_nl80211_post_doit+0x10/0x10 [ 311.253883][T13187] ? ref_tracker_free+0x63a/0x7d0 [ 311.258923][T13187] ? __copy_skb_header+0xa7/0x550 [ 311.263975][T13187] netlink_rcv_skb+0x219/0x490 [ 311.268754][T13187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.273792][T13187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.279119][T13187] ? down_read+0x1ad/0x2e0 [ 311.283548][T13187] genl_rcv+0x28/0x40 [ 311.287547][T13187] netlink_unicast+0x758/0x8d0 [ 311.292336][T13187] netlink_sendmsg+0x805/0xb30 [ 311.297121][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.302434][T13187] ? aa_sock_msg_perm+0x94/0x160 [ 311.307384][T13187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.312699][T13187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.317996][T13187] __sock_sendmsg+0x219/0x270 [ 311.322687][T13187] ____sys_sendmsg+0x505/0x830 [ 311.327470][T13187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.332864][T13187] ? import_iovec+0x74/0xa0 [ 311.337385][T13187] ___sys_sendmsg+0x21f/0x2a0 [ 311.342088][T13187] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.347338][T13187] ? __fget_files+0x2a/0x420 [ 311.351941][T13187] ? __fget_files+0x3a0/0x420 [ 311.356642][T13187] __x64_sys_sendmsg+0x19b/0x260 [ 311.361606][T13187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.367093][T13187] ? do_syscall_64+0xba/0x210 [ 311.371793][T13187] do_syscall_64+0xf6/0x210 [ 311.376305][T13187] ? clear_bhb_loop+0x45/0xa0 [ 311.380992][T13187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.386890][T13187] RIP: 0033:0x7fbf2518e969 [ 311.391328][T13187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.410951][T13187] RSP: 002b:00007fbf25fc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.419465][T13187] RAX: ffffffffffffffda RBX: 00007fbf253b6080 RCX: 00007fbf2518e969 [ 311.427442][T13187] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000a [ 311.435422][T13187] RBP: 00007fbf25210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 311.443401][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.451382][T13187] R13: 0000000000000000 R14: 00007fbf253b6080 R15: 00007ffc8b774ef8 [ 311.459381][T13187] [ 311.462730][T13187] Kernel Offset: disabled [ 311.467060][T13187] Rebooting in 86400 seconds..