last executing test programs: 3.32376974s ago: executing program 0 (id=1764): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001400"/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x537}], 0x1}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a80), 0x1007, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r3, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x10001, @empty}, 0x1c) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) unshare(0x22020400) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x23, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, &(0x7f0000000000)={r5}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a009157e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!', 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0xb0, &(0x7f0000000240)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x1b79, @private2, 0x10}, @in6={0xa, 0x4e22, 0x4, @local, 0x8}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x402}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x4, @loopback, 0x2}]}, &(0x7f0000000340)=0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3.008629159s ago: executing program 0 (id=1770): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 2.760960296s ago: executing program 4 (id=1775): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = accept4$tipc(r0, 0x0, 0x0, 0x180000) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100200070"], 0x64}}, 0x0) 2.414774598s ago: executing program 4 (id=1779): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x3, 0xfffff00c}, {0x6, 0x0, 0x7}]}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd2a, 0x255fdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x24040848) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x3, 0xfffff00c}, {0x6, 0x0, 0x7}]}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd2a, 0x255fdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x24040848) (async) 2.010354219s ago: executing program 1 (id=1785): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000007fffffe00ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffff00feffffff00000000000000"]}, 0x108) 1.881250753s ago: executing program 1 (id=1787): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x48, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x6c}}, 0x4000010) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x820b, 0x5}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) 1.85132829s ago: executing program 2 (id=1788): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x0, 0x5f, 0x30]}}, &(0x7f0000000700)=""/232, 0x48, 0xe8, 0x1, 0x3, 0xb57a3af82b313b49, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x7c}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0x47, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) shutdown(r6, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000180)={@none}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001}, @generic={0x8, 0x0, 0x9, 0x5}, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x9c}}, 0x0) r8 = socket$inet(0x2, 0x5, 0x400080) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x40, 0x0, &(0x7f0000000040)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r9, 0x1, 0x1e, &(0x7f0000000180)=0x7f, 0x4) shutdown(r8, 0x0) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1, 0x3ff}}, {{0xa, 0x4e23, 0xfffffffd, @empty, 0x8}}}, 0x108) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}}}, 0x108) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.617775066s ago: executing program 3 (id=1790): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.500534472s ago: executing program 2 (id=1791): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x2c, 0x803, 0x0) socket$tipc(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000010000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1.441439211s ago: executing program 3 (id=1792): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.347142805s ago: executing program 3 (id=1793): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001180), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd21, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) 1.266092206s ago: executing program 2 (id=1794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x4008005, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf25030000000c0004000000000000000000080001000000000006000a00282b00001c000780180001"], 0x4c}, 0x1, 0x20, 0x0, 0x4000000}, 0x20000000) 1.129365336s ago: executing program 2 (id=1795): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x22, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x100042, 0x1, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {0x6400}}}, 0x24}}, 0x0) 1.037576174s ago: executing program 0 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x7ffffffc}], 0x4, 0x4022, 0x0) 947.735961ms ago: executing program 1 (id=1797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="5000000010003704000000000000ffef00000000", @ANYRES32=r0, @ANYBLOB="8b04040000000000300012800b00010065727370616e0000200002800400120006001800000040000500160002000000050017"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 845.513189ms ago: executing program 3 (id=1798): socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) socket(0x23, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 796.702781ms ago: executing program 1 (id=1799): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x931766f6319eed40) (async) shutdown(r5, 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100) (async) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4) unshare(0x36000080) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0), 0x4) (async, rerun: 32) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendto$inet6(r6, 0x0, 0x0, 0x20010004, 0x0, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44090}, 0x800) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001900)={{}, "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"}) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)={[{0x2b, 'rlimit'}, {0x2d, 'memory'}, {0x6, 'memory'}]}, 0x18) (rerun: 32) 746.787073ms ago: executing program 0 (id=1800): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1008, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x38}, 0x300}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000002e40)={0x0, {0x2, 0x4e22, @rand_addr=0x64010100}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @local}, 0x2e, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002e00)='ip6gretap0\x00', 0x7ff, 0x9, 0x40}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2712, &(0x7f00000003c0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000002bc0)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x28, r1, 0x801, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}]}, 0x28}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000003040), r2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000003140)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x70, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_TID={0xc}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40010) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @broadcast, 0xff, 0xffffffff, 'ipvlan0\x00', 'tunl0\x00', {}, {0xff}, 0x2e, 0x0, 0x45}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x158, 0x180, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2fa4bbcb6a91c1f280c199982d234b5ec32acf40242838b14641ee58ffb2807b1455049d59591426d860c0500d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab79300000000f2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea558400", 0x7d, 0x2, {0xf}}}, @common=@unspec=@connlabel={{0x28}, {0x7fff, 0x700}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x6}, {}, 0x360, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0xe8, 0x0, 0x2e0, 0x2e0, 0x3c8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x3ed}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010101, 0xffffff00, 0x0, 0xff, 0x1, {@mac=@link_local}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'bridge0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @broadcast, @broadcast, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x418) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r9, &(0x7f0000000180)="2e0b00f72c9ff6efd05f146608", 0x0}, 0x20) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f0000002fc0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f80)={&(0x7f0000001480)={0x38, r8, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000d1}, 0x48000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x10010, r7, 0xc9b11000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r10, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wg0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @loopback, 0x5, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000140)="33b23ce396e575e91dc4da06e58845ad9af2e1a69d12cd13a84eaf4232b01ea3164a7813169fa92ebcb022fa416822545fe127a1d65bab5e5de30b748772a85cff3fd8c99f828ef37972c79d9024085f3bf632f6bdb18aa9f8fcaeb42f8dfa5a30b0dc0bf38cbcc7a64145957b3d5133a06e50", 0x73}, {&(0x7f0000000300)="fd20bab8c096d71b351e34370dc5d0b41e0c3b37c5e8d9701a9ebd08ad85f1580dd7507926ab640245d33c5072eab0432811adb9d7e7042afdf36102736ce88909b9d74dbf2373d71f2aaeb3e44b5296d9cc8e1b902fdcb1c835ef3ffe9133c720e221e5f0b659dba8b1b6946e8a6e6e5c7d911475971b332a351803b174a4e85dfe53e274e3db4c188e56cae13c87c64b59c274bff1b8bcac45c06b91ef8d8bab58ef779c9647199a912f909af22078925d3b439a779c6d59fcaad8e8435359d330602824b1aef6f75738f0a92b5537fbdbdeb165e0ea39911bcca4af84bbca7e18ca4208ff", 0xe6}, {&(0x7f0000000240)="8f6ce8a0cdf654c9b0dbf43f8768d5233166cb80c2696948292a7f48ad7d3119da63c18f1781f0060894842a6e0abaf9929134791d730e97cb85a9778a0cd40d388c3df74f078a4386433e6aee2fd46dc91587ba1c378b095f789bcbc4", 0x5d}, {&(0x7f00000001c0)="cc7262ef789ca3f3d60a4168802c539a0bd32b86b962782afea3be26fb6145d80954ceb3d83ac5101a9c528f6840e9a5b156f1e0ce10dd", 0x37}, {&(0x7f0000000400)="f90405d6b722bd985cf464f3bfc77bddd18e835a47737e24a8cfabf175ab7085a6e39631303999fc604c63cee0d96b182ac4eecfb50620271ca6678f090cc7b9012b8428c550dea4f50dc16108b0ee9a220f250ba90826332f1870789f7b4d322eb44849aaacc5ce0887466a30b39cdda549ee882726f8824d8f3de0c36772fe8b3672378778397bdedf9661129804da4d798a169f8679bb8a6366732d4f63eb9ff9b1e0b317f9d16afd199f0101103d4d4708af1434482fbe33b40192333b83f1f2997b292f9e7af192aea9f352afa0bd314602dec0d83ac32a885f9ac4ae8fcbd8409b6271ce43e1f0576d", 0xec}, {&(0x7f0000000500)="3668a6ff6c7be396110254a530479c6094c3fdf46a85bce201c8dc911238ef0f62c4e0092fd4ab83bf0cc8ddedfd789ec89cf4025a7972213109f42141ca42398c15d6c048fa6529d8fbf2802befc2fa5008e01dc97867bdb595a714d6eb879ddc2f9847b7", 0x65}], 0x6, &(0x7f0000000a40)=[{0x20, 0x10d, 0x3, "05ea7224385ff0156b9f37c4f83e"}, {0x70, 0x3a, 0x5, "f714d11589a213793b900822b856891c3fb0b67220a3b59802d3e090832212642232ef3543f92cfffe28810ef7be6a65b6b89d6e082e155180e3ea72cee49d81efb9e41e1acc53464d29810da4a031cf8c2908cb420f30c3795b6f9e5b956a"}, {0x80, 0x6, 0x1, "af781bb8239ac9daab7865a25932ba39e3fb95f40302bdff6465054c0a0eaef3b2d479b470d308515b2f74cedf9ffeb12dc8d84ed169bce4131c1c9867aa2e896d9567a01de5af856581e1d383e0311d2155f585464db8c3569a6bc8e5f8b21138062003b9f88cd32d463b"}, {0xd0, 0x10e, 0x0, "ae9664b8f137947496e0356fffda1193c4d6ba5d72713ae4d65f926032e6a35c07bfc15d15e2347ee5a688509e3e8eeccd7dc3c6f4ab80a2cdd7680b460e43df733083cebac239daa4e11d2b98306f27182026843aa023dd1b3b240ad28a342aee82d52f5719bc3a5dca9ac98e97379dec24c75aea97bbf8719c35d551a80526eec00c6ced703d409a6735b0e3e7d8d6744990160eb0f5f7caa974814efe9574adfd304ed9c8c98ef82c6b1996138ec66e00d69f6667158a5856b6a2c7"}, {0xf8, 0x30, 0x6, "ff4690634fb871b983c7c3c9273d1030d61fd1fe4e9fb27eb4e9b614bb4c320474e29c9d224ad4daa6c3512a868b2776f0e046f73877ea6543aa5dd19f8db4a85aeb100381ca61edd9a408d566fce10328571cc193bb66d04b036867e7c0feefb6b7a5d1aaaef53283adcbf9741a445ab9415f160a3d29d57f9399517d82d2cf4341a4f4ec2126972e0ae925405a220cf350587e2c7c379ebe7d0468fde4399970743ace71ad2d3df809fe8f422d71c2de0d13f2d99d3b1641660aea3b967b804c51a922f6c9d1f59046bd00da64b5cdbce1f7dedf7910568c65f72b475ebababd803368"}], 0x2d8}}, {{&(0x7f0000000d40)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x6, "eda70579dba5bbbbb04aa29fc31d899b6c4e77cbc58626a17635232adfac415186f7695a8a1d0da7627942c23b9cd4779db2f594bae76b9e44938948f125c1", 0x5}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000e80)="930de7791c54a879429eeec302e3500eb8a4527978a505067cd1e0b59297b4bf281e365c700d4849fad0eea388022a538d0632751bb6a49713daeb3c7a26d8d5099479133198ef89a3327fdc3d3ac65cc507dd4bad833663e4198fba4d8991da6194c62a9493cd3401ce9529be57b651f9a6b35ec36ece9a4c31d50dbfa952b809f27c1a92bea9a6576f7ea52812929e5a299b40ef8bb32523a756a76378ad26c06227c75d393d86f576bff2d7f105", 0xaf}, {&(0x7f0000000f40)="17d845ee6ee1a4f0d30c61c6ebdce13b305081a745b46c5bfd85a7cdedc605df8f0be962f98b8518d946b45192e4af60e5e9c2c1b69c0b3c2118355d8b0420b66ce42ef2f6fdcb4867df010ca5dd315ff8c5641ce784b202ad69e9b106a5bc875e40f848d1e018011cf22b00c78aa828198d48ea53324374dade44d5c52682062c4a4f49aa835f3b37f88ec499a6d4d957dc971180758da320a93c548a8ea3c67670f21011ffe02f97760884988017838811b37e29b69b938539ae0044c2a180c4390b", 0xc3}, {&(0x7f0000001040)="3bcd81230982ceadd478ca9f5ae6ff5a87f4374ee964640e6953941bddaf484513a6e74a6baf393414904cc6209ccd05ac1b10b1328086558839a4e903f90eb523a86b53adbe5ca4fce34d5fca6ab0536072d49c4fe2ebdd116b6a9f41b545326b4fbbe8da35f7404275d1cc1f5d08ecf8766796a7a80d8029da20fcdc74dc8598ade88c93c4375e3ab20422db2532a3267ad88f3d2944852272dd1e40b79b69dd2fd4145aceb3bddcacaf2d7d1dfd9eb6f64e86c511c172b8ec19", 0xbb}, {&(0x7f0000001100)}, {&(0x7f0000001140)="90b0c34f049bc251061f1403233f7357a6ecc51b9826b45cf44987a1f62c54190c679154bf041e9c8a3f92c49a8a549ecef29a5a599351246afd01b7b884a6887b4917d063c06de1d8dc344653f2d88b2a70092534d65cb306ede655fe7d12347330b275c1396ea3e267c5b4cd39eb7793832484310cff3cf2dbf9495600b11f3bd65d3ac35be7ea4e63397dd02e0f84b8d12aab6310554aaf4210cd9805fd8536809345a29b", 0xa6}, {&(0x7f0000001200)="86fc5eea5c9da1eaf4e4fa6dd35169deb5c058d3822b944f1dca0e54cecde251a17e3619fad1fb579fc07d987c8721518b4a104906d793fa873a55290526c153c35ec5866b08c5dab57ce24895b99d6bb7989077a983b78f3c02d857f671d29ed6dbf04b8bd048c8a8e521db08bc79bdeb4e07f9200bbbbf86edd1c076571354b9aea4887adf57c67651435b64c1", 0x8e}, {&(0x7f00000012c0)="38db957ba355bac11e9a21e33b793df845ec0aebc71b63598dec968942740d222b7ef1d75214c223ffcebedaaa360be385f7d5730ab5551c6d060050dc341a5259d6c6cc191b0f0a8ba91cb22382c5038f78730d9b45a474845e7f86fc67ae876fe15b8c6adc05dcdbac7911e4cd154e9cf6ccf28df1bd8569f8aab1044864aa63aca6306f438834609334a2e7e2b6a4d65d26d92f47a400504b94a95707873aa47744ce1d7a67ab4d7fda3d786a6eb155b5c09c67496796d61d410617912bf204140ab8d75780c390b1da", 0xcb}, {&(0x7f00000013c0)="6e38d7f59863a2f91f25e4aae6d7204bf39bb250ccd1237d31543baa593a436f7ee0c673399c4786934ec4161646", 0x2e}], 0x8, &(0x7f00000014c0)=[{0x28, 0x10f, 0x7b1, "416d54284855d8343199a341862f5b949c28936d8d34b016"}], 0x28}}, {{&(0x7f0000001540)=@xdp={0x2c, 0x1, r11, 0xd}, 0x80, &(0x7f0000001700)=[{&(0x7f00000015c0)="8d171de7712d0b1fed6774ac17f4611a6be80ea964e53d6ed68e80c6ba48fc1995178ebc45e81eec67d5", 0x2a}, {&(0x7f0000001600)="c3d33418944d0f020f82d5c5ebbbfba49a74de2700216ffb2b311854e6b02a5e30e592a802c6adb8929f33dfd9beb0ee2d5dd8f86a1d023b14a77b93a56bc0b775a65353d64c9156b08f2f8727ac7f7eeebabe229ec9fbdc79b836d6a5182851ef70a859c14c65befd842cf2b7e42f91ab78c3f7f217e9343978b3ba71ed71d2cc4a9ecd7b1df1d2d426e05c95fac8f10f7a1130410dcea4ed1b3c07eb8d4f387fd048b733c4a8be19b6b0b6ad24edb9bffe5cecc1d6a519de25cc673bfe6f5ed9bf815e5a00b149859a45d29834", 0xce}], 0x2, &(0x7f0000001740)=[{0x68, 0x107, 0xa94, "2e370df60381538d6e2acc92ccc4e832ac87ad70047025aa2c4486c879e71486c5b3c433c434f9711ca8dc71616075f86e61bf9a2548dab74cddc1e92c0cd1ce41f37a0e7f947c1d8f75fb7b0e4c6f390a0124fdffaeb70d"}, {0x50, 0x118, 0x8001, "f91e9cdfa160ba9aa4e2422ddaa11302103058b2273ed0c274fd9d7649764be047afdf2332f3862abc7e3a4f7bd4f820e0ebe1f5acf8f2a06c0e"}, {0x108, 0x10b, 0x3, "6735c8e3cfbb41ac92e9169a671935266a71ac119f4bcb46507eb2ace15a98d8e4ebe5f332ce33de92634238a7a037f6545998a18fdf25e5fce35123a1550be7ba50ffb645185ad6b0bf2aaae3fe90ae3c5ca2bfdeb55079fb5563bcb64fb33c43046f45a61677fe529378ff4f12ad2f5e8f21e5d33919117b0260e1a19e1366305b9f1a65a17b8214f963dbc51c00201aae31354caaf4971ebd1f23ca1e4962f6e4d23420cb8c6453bd17a49b97b1638ebc801b6975c11b51fe623f68e8bc60713794441b52366b9796247bd010ad5924897fa702792626fc9d75471aa57e67b537c0a68760b9981ae3ea2a0748d14e1e5d25"}, {0xd8, 0x102, 0x4, "e3b28fae3f98257f46cd5949e7eb907d12289e2e7bdc447775260164088f6aee3e65c67d1b01dc99c7f74ac53e3870cf7f2493b45da31bcad8e65b3081d4eb9169ec9db452dec59446c35576a75b151b936cf51bf4c8b370b706cca87d09c9775e1c82811083821c73af196a0bd074ecf85d81e03120ac4c92a3c736d264c0b782d755ee7745d29c805e06ca3b01bdcd6374b9800f816c81a0a0eae0edb9e43a201db269a0497707e4dfd5c13e2ce943b89d37bcf4f21ebbac23ba9c60b41b25ef25208e5b4f4cdf"}, {0xb8, 0xff, 0xfff, "f8000d2c30d8fb1e5ccae8afc981c90101fbe00778719587bb389b90f55dca457621edb2582efb8b94f26abe846560c31ad933ebeedd3866d2a9ba397ff005e584835bdb24241b81ab22e5ae1af1caffe8168027b9a300a2770a9f9b46f08d054ddd75d9373d40c0111f801faea356873a88609a0527622f28a1b4d7735e9995a7f34bd33ca27ee22e2c0320b786d42ae4d7986eb16399b5bf1871e3ac8587f32e2222cd"}], 0x350}}, {{&(0x7f0000001ac0)=@llc={0x1a, 0x204, 0x2, 0xd, 0x6, 0x3}, 0x80, &(0x7f0000003240)=[{&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="8de16fcd6f48e4bb7d4d28073ae0c81e10d81f6ac56c8b9fa9e6546b854b1f053ae0c56b4f8ef0aaf1292ff461616679634bf87d07a0ad7841ac0bdeec171e2c80195626123f79b0eecb5b", 0x4b}, {&(0x7f0000003180)="389781fa502bb79f240aca4fbe597b2d8a34032105f095fc12418ac4b8b02bdefcac7bd6a270489db9957386dae4d5c5a1e795b15dcb36ce8fce97daefa76e19cd02f35fb2ce88842ee1cbe730bf35980a21e47f1d0387f2e18befae1d7da628efc3ecdf6d7287a903b27ac01348133f01d370fe63e36638a8e46cf48154d5fffccb64547119e1307b74ef29dcceeed8415bb244eb218cd230f69696fc53c82640912e58dfcadac09601fa8dd0657f41391011111c7cb85fdac48180", 0xbc}], 0x3, &(0x7f0000002c00)=[{0x20, 0x10c, 0x4, "447b565c0d928a0730c2"}, {0xa8, 0x10b, 0x1, "e280ca1ae739156d4314057c8dde2075946c31cd0761be191ec8e0b73efc5240ebf3db815936841a0b5119ac1b96d1b52c419f47e93489c9736c418a3bf0b73803282c64b4cceba64c38c85949650d1d9e7edbb608698c22ed62e5b3dfd0e53465b00f1c28679d4065144b9287284a1a7a87b1b35662e609485a3acb02d5695923fdd23e86e5e60865711267ad716fa3ee5b3a602ea1"}], 0xc8}}], 0x4, 0x1) 645.419894ms ago: executing program 4 (id=1801): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000700001002af6bea170000000000007", @ANYRES32], 0x24}}, 0x0) r0 = socket(0x2, 0x80805, 0xcf9c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'sh\x00', 0x4, 0x8, 0x477}, {@loopback, 0x4e25, 0x1, 0xcb, 0x12d5f, 0x3}}, 0x44) 481.755074ms ago: executing program 3 (id=1802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000005f00000f0000001c0007800c000400002e3a3a000000400c0003"], 0x30}}, 0x20088004) 458.974728ms ago: executing program 2 (id=1803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe88000000000000000000000000010114003500776731"], 0x50}}, 0x0) 387.780472ms ago: executing program 4 (id=1804): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0xe8, 0x0, 0x2e0, 0x2e0, 0x3c8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x3ed}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010101, 0xffffff00, 0x0, 0xff, 0x1, {@mac=@link_local}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x2, 0x5, 0xe, 0xe8, 'bridge0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @broadcast, @broadcast, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x418) 386.9753ms ago: executing program 0 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2c, r2, 0x309, 0x2, 0x25dfdbfc, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) 309.343665ms ago: executing program 1 (id=1806): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='svcrdma_dma_map_rw_err\x00', 0xffffffffffffffff, 0x0, 0x400000000002}, 0x18) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0xb}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x0, 0x0, 0x10000}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @mcast2, 0x3}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000300)) 218.538738ms ago: executing program 3 (id=1807): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)={0xc0, 0x28, 0x200, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x136}, @generic="c3d0d49f498fa43684c7e0070b5afeff7f8cdb7fd6c7d2b02fb7cdd4d9b8b3eaf215cbdb74124171b9c0e53153da689f59e3c2aa6b1974be1f02872509f3fafaabb8076db526819a7e94a9087a8c7532a72d49dd4607e52891d4a2e3d8f29895067bea88841d4f5a6ea47c4997db05c8e1e07b7698477fb0c83874e2a730f6cdbfcf06d05c55c638240176ee76eead604b643ac012cf61a84a8f597e6d66098f31ea888afc88c607675836f9"]}, 0xc0}], 0x1, 0x0, 0x0, 0x4044880}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000000101040000eee7ffff000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140010"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x20008000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x45d7b7d}, {0x6, 0x11, 0x1bec}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000046}, 0x14004085) 216.098536ms ago: executing program 0 (id=1808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="005b1313b12b000000000000000000"], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r11, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) r14 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r16, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x8}}]}}]}, 0x3c}}, 0x20040054) (async) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r16, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x8}}]}}]}, 0x3c}}, 0x20040054) sendmsg$NL80211_CMD_START_NAN(r14, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', r16, 0x7, 0x10, 0x1, 0x6, {{0x1b, 0x4, 0x0, 0x9, 0x6c, 0x67, 0xf0e, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x3c, 0xaa, 0x1, 0xe, [{@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xa6}, {@multicast1, 0x3}, {@rand_addr=0x64010102}, {@remote, 0x80000000}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x1}]}, @noop, @rr={0x7, 0x1b, 0xf1, [@remote, @loopback, @rand_addr=0x64010102, @empty, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 169.504225ms ago: executing program 2 (id=1809): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010000304040000000200400000000000", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0xba01}, 0x810) 147.140259ms ago: executing program 4 (id=1810): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 146.854624ms ago: executing program 1 (id=1811): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0xec0, &(0x7f0000000240)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1}, 0x7ffffffc}, {{0x0, 0x0, 0x0}, 0x405}], 0x5, 0x4022, 0x0) 0s ago: executing program 4 (id=1812): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xd2d14efbcb72b976, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r5, &(0x7f0000000000)='\"', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000010001000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0077104e6c1e5009fe2c8f440664705805f600"/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r8) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc0000001206010829bd7000fbdbdf25030000044315d33ad55b34e3ff45a777568f7a8c7998356d0005c60f53f5c310009239aa04001d6fd7dd31de353681ae40656f38d6bee59ff520ffce7826ed9cb71280e351122e2296c55bcf913da08fe9d38d4006985c0042c7d88c85f8f2357eb5df36d9f7332d0e2cbc21e233875335439ad8cfb7e84caa408f15385247d299781e95bd7324b1"], 0xdc}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): etlink: 100 bytes leftover after parsing attributes in process `syz.4.361'. [ 131.647606][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 131.798298][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 131.956086][ T7059] macsec1: entered promiscuous mode [ 131.961791][ T7059] macsec1: entered allmulticast mode [ 131.967197][ T7059] veth1_macvtap: entered allmulticast mode [ 131.975349][ T7059] veth1_macvtap: left allmulticast mode [ 132.678749][ T7079] Unknown options in mask 700 [ 132.756613][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763393][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.973948][ T7089] dummy0: entered promiscuous mode [ 133.010927][ T7089] vlan2: entered promiscuous mode [ 133.403054][ T7108] bridge0: entered promiscuous mode [ 133.408674][ T7108] vlan2: entered promiscuous mode [ 134.058252][ T7131] Unknown options in mask 700 [ 134.169408][ T7135] FAULT_INJECTION: forcing a failure. [ 134.169408][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.217870][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.0.394 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 134.217900][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.217913][ T7135] Call Trace: [ 134.217921][ T7135] [ 134.217930][ T7135] dump_stack_lvl+0x189/0x250 [ 134.217965][ T7135] ? __lock_acquire+0xaac/0xd20 [ 134.217999][ T7135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.218029][ T7135] ? __pfx__printk+0x10/0x10 [ 134.218050][ T7135] ? __might_fault+0xb0/0x130 [ 134.218090][ T7135] should_fail_ex+0x414/0x560 [ 134.218118][ T7135] _copy_from_user+0x2d/0xb0 [ 134.218151][ T7135] ___sys_sendmsg+0x158/0x2a0 [ 134.218186][ T7135] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.218258][ T7135] ? __fget_files+0x2a/0x420 [ 134.218287][ T7135] ? __fget_files+0x3a0/0x420 [ 134.218328][ T7135] __sys_sendmmsg+0x227/0x430 [ 134.218366][ T7135] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.218408][ T7135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.218452][ T7135] ? ksys_write+0x1f0/0x250 [ 134.218487][ T7135] ? rcu_is_watching+0x15/0xb0 [ 134.218518][ T7135] __x64_sys_sendmmsg+0xa0/0xc0 [ 134.218552][ T7135] do_syscall_64+0xf6/0x210 [ 134.218579][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 134.218605][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.218625][ T7135] RIP: 0033:0x7fca3d58e969 [ 134.218644][ T7135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.218662][ T7135] RSP: 002b:00007fca3e3b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.218684][ T7135] RAX: ffffffffffffffda RBX: 00007fca3d7b5fa0 RCX: 00007fca3d58e969 [ 134.218699][ T7135] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: 0000000000000004 [ 134.218712][ T7135] RBP: 00007fca3e3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 134.218724][ T7135] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 134.218736][ T7135] R13: 0000000000000000 R14: 00007fca3d7b5fa0 R15: 00007ffdee8fb788 [ 134.218767][ T7135] [ 134.465787][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 134.528578][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 134.613374][ T7148] netlink: 48 bytes leftover after parsing attributes in process `syz.0.399'. [ 134.789614][ T7150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.399'. [ 134.867259][ T7154] team0: Port device team_slave_1 removed [ 134.879794][ T7148] netlink: 44 bytes leftover after parsing attributes in process `syz.0.399'. [ 135.177131][ T7167] Unknown options in mask 700 [ 135.336599][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 135.731846][ T7183] netlink: 'syz.0.414': attribute type 15 has an invalid length. [ 135.750203][ T7183] netlink: 'syz.0.414': attribute type 3 has an invalid length. [ 135.771908][ T7188] netlink: 280 bytes leftover after parsing attributes in process `syz.4.415'. [ 136.162283][ T7159] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 136.220296][ T7201] ip6erspan0: entered promiscuous mode [ 136.273701][ T7209] __nla_validate_parse: 2 callbacks suppressed [ 136.273721][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.423'. [ 136.325270][ T7205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.332918][ T7205] bridge0: port 3(bond3) entered blocking state [ 136.339471][ T7205] bridge0: port 3(bond3) entered disabled state [ 136.346689][ T7205] bond3: entered allmulticast mode [ 136.355051][ T7205] bond3: entered promiscuous mode [ 136.361324][ T7205] bridge0: port 3(bond3) entered blocking state [ 136.368547][ T7205] bridge0: port 3(bond3) entered forwarding state [ 136.419403][ T5885] IPVS: starting estimator thread 0... [ 136.462105][ T7210] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 136.519558][ T7215] IPVS: using max 25 ests per chain, 60000 per kthread [ 137.312219][ T6502] bridge0: port 3(bond3) entered disabled state [ 137.534622][ T7253] macsec1: entered promiscuous mode [ 137.548771][ T7253] macsec1: entered allmulticast mode [ 137.590925][ T7253] veth1_macvtap: entered allmulticast mode [ 137.611686][ T7253] veth1_macvtap: left allmulticast mode [ 137.885142][ T7270] netlink: 'syz.2.439': attribute type 11 has an invalid length. [ 138.063394][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 138.621440][ T7300] syz.0.448 (7300) used greatest stack depth: 20200 bytes left [ 139.478511][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.456'. [ 139.792316][ T6490] wlan1: Trigger new scan to find an IBSS to join [ 139.948431][ T7355] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 140.041648][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 140.171789][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 140.436572][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 140.459510][ T7355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.478983][ T7373] FAULT_INJECTION: forcing a failure. [ 140.478983][ T7373] name failslab, interval 1, probability 0, space 0, times 0 [ 140.547278][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.3.463 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 140.547308][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.547321][ T7373] Call Trace: [ 140.547329][ T7373] [ 140.547338][ T7373] dump_stack_lvl+0x189/0x250 [ 140.547379][ T7373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.547411][ T7373] ? __pfx__printk+0x10/0x10 [ 140.547440][ T7373] ? __pfx___might_resched+0x10/0x10 [ 140.547467][ T7373] should_fail_ex+0x414/0x560 [ 140.547497][ T7373] should_failslab+0xa8/0x100 [ 140.547530][ T7373] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 140.547560][ T7373] ? __alloc_skb+0x112/0x2d0 [ 140.547587][ T7373] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 140.547613][ T7373] __alloc_skb+0x112/0x2d0 [ 140.547647][ T7373] kcm_sendmsg+0x2571/0x29f0 [ 140.547682][ T7373] ? __lock_acquire+0xaac/0xd20 [ 140.547721][ T7373] ? __lock_acquire+0xaac/0xd20 [ 140.547757][ T7373] ? aa_sk_perm+0x81e/0x950 [ 140.547786][ T7373] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.547808][ T7373] ? __pfx_kcm_sendmsg+0x10/0x10 [ 140.547834][ T7373] ? aa_sock_msg_perm+0x94/0x160 [ 140.547861][ T7373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.547895][ T7373] ? __pfx_kcm_sendmsg+0x10/0x10 [ 140.547918][ T7373] __sock_sendmsg+0x21c/0x270 [ 140.547946][ T7373] ____sys_sendmsg+0x52d/0x830 [ 140.547985][ T7373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.548029][ T7373] ? import_iovec+0x74/0xa0 [ 140.548065][ T7373] ___sys_sendmsg+0x21f/0x2a0 [ 140.548101][ T7373] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.548176][ T7373] ? __fget_files+0x2a/0x420 [ 140.548206][ T7373] ? __fget_files+0x3a0/0x420 [ 140.548252][ T7373] __sys_sendmmsg+0x227/0x430 [ 140.548292][ T7373] ? __pfx___sys_sendmmsg+0x10/0x10 [ 140.548336][ T7373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.548384][ T7373] ? ksys_write+0x1f0/0x250 [ 140.548408][ T7373] ? rcu_is_watching+0x15/0xb0 [ 140.548441][ T7373] __x64_sys_sendmmsg+0xa0/0xc0 [ 140.548476][ T7373] do_syscall_64+0xf6/0x210 [ 140.548504][ T7373] ? clear_bhb_loop+0x60/0xb0 [ 140.548531][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.548551][ T7373] RIP: 0033:0x7f05d3f8e969 [ 140.548570][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.548587][ T7373] RSP: 002b:00007f05d4df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.548609][ T7373] RAX: ffffffffffffffda RBX: 00007f05d41b5fa0 RCX: 00007f05d3f8e969 [ 140.548624][ T7373] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: 0000000000000004 [ 140.548637][ T7373] RBP: 00007f05d4df9090 R08: 0000000000000000 R09: 0000000000000000 [ 140.548649][ T7373] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 140.548661][ T7373] R13: 0000000000000000 R14: 00007f05d41b5fa0 R15: 00007fff4a937c88 [ 140.548696][ T7373] [ 141.573755][ T7399] netlink: 48 bytes leftover after parsing attributes in process `syz.2.469'. [ 141.754972][ T7401] netlink: 'syz.0.471': attribute type 11 has an invalid length. [ 141.800536][ T7401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.471'. [ 142.073324][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 142.118761][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.135600][ T7415] FAULT_INJECTION: forcing a failure. [ 142.135600][ T7415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.210880][ T7415] CPU: 0 UID: 0 PID: 7415 Comm: syz.1.475 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 142.210909][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.210921][ T7415] Call Trace: [ 142.210929][ T7415] [ 142.210937][ T7415] dump_stack_lvl+0x189/0x250 [ 142.210971][ T7415] ? __lock_acquire+0xaac/0xd20 [ 142.211005][ T7415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.211034][ T7415] ? __pfx__printk+0x10/0x10 [ 142.211054][ T7415] ? __might_fault+0xb0/0x130 [ 142.211094][ T7415] should_fail_ex+0x414/0x560 [ 142.211122][ T7415] _copy_from_user+0x2d/0xb0 [ 142.211173][ T7415] ___sys_recvmsg+0x12e/0x510 [ 142.211213][ T7415] ? __pfx____sys_recvmsg+0x10/0x10 [ 142.211282][ T7415] ? __might_fault+0xb0/0x130 [ 142.211316][ T7415] do_recvmmsg+0x307/0x760 [ 142.211371][ T7415] ? __pfx_do_recvmmsg+0x10/0x10 [ 142.211417][ T7415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.211462][ T7415] __x64_sys_recvmmsg+0x190/0x240 [ 142.211511][ T7415] ? rcu_is_watching+0x15/0xb0 [ 142.211533][ T7415] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 142.211572][ T7415] ? do_syscall_64+0xba/0x210 [ 142.211603][ T7415] do_syscall_64+0xf6/0x210 [ 142.211629][ T7415] ? clear_bhb_loop+0x60/0xb0 [ 142.211656][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.211676][ T7415] RIP: 0033:0x7f2fda78e969 [ 142.211695][ T7415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.211713][ T7415] RSP: 002b:00007f2fdb67a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 142.211736][ T7415] RAX: ffffffffffffffda RBX: 00007f2fda9b5fa0 RCX: 00007f2fda78e969 [ 142.211751][ T7415] RDX: 03fffffffffffcbe RSI: 0000200000000480 RDI: 0000000000000004 [ 142.211773][ T7415] RBP: 00007f2fdb67a090 R08: 0000000000000000 R09: 0000000000000000 [ 142.211786][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.211798][ T7415] R13: 0000000000000000 R14: 00007f2fda9b5fa0 R15: 00007fff9280c098 [ 142.211831][ T7415] [ 142.541868][ T7421] netlink: 232 bytes leftover after parsing attributes in process `syz.0.476'. [ 142.912283][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.361135][ T7438] Cannot find map_set index 0 as target [ 143.662845][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 143.678001][ T7453] syzkaller1: entered promiscuous mode [ 143.701479][ T7453] syzkaller1: entered allmulticast mode [ 143.762197][ T7450] vlan2: entered promiscuous mode [ 143.791094][ T6500] wlan1: Trigger new scan to find an IBSS to join [ 143.799315][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 143.855437][ T7459] 8021q: VLANs not supported on ipvlan0 [ 144.195297][ T7472] Unknown options in mask 700 [ 144.506617][ T7482] ipvlan2: entered promiscuous mode [ 144.561136][ T7482] ipvlan2: entered allmulticast mode [ 144.581253][ T7482] macvlan0: entered allmulticast mode [ 144.595120][ T7482] veth1_vlan: entered allmulticast mode [ 144.614344][ T7491] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 144.702145][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 144.791147][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 144.802847][ T12] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 144.916148][ T7504] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.944766][ T7491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.095402][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 145.122952][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.502'. [ 145.674900][ T7536] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 145.984604][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.003339][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.217782][ T7529] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.228222][ T7529] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.261033][ T7529] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.269970][ T7529] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.383610][ T7529] dummy0: left allmulticast mode [ 146.403043][ T7529] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 146.422647][ T7536] team0: Device geneve0 is up. Set it down before adding it as a team port [ 146.441384][ T7536] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 146.733880][ T7554] ip6gretap0: entered promiscuous mode [ 147.006359][ T7555] wg1: entered promiscuous mode [ 147.014311][ T7555] wg1: entered allmulticast mode [ 147.045523][ T7563] __nla_validate_parse: 3 callbacks suppressed [ 147.045540][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 147.238352][ T7563] vlan2: entered promiscuous mode [ 147.247241][ T7563] batadv0: entered promiscuous mode [ 147.392284][ T7579] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 147.516346][ T7573] syz.4.526 (7573) used greatest stack depth: 16200 bytes left [ 147.551759][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 148.059053][ T7600] wireguard0: entered promiscuous mode [ 148.079381][ T7600] team0: Device wireguard0 is of different type [ 148.314111][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 148.357675][ T7614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.544'. [ 148.552558][ T7622] netlink: 'syz.0.546': attribute type 15 has an invalid length. [ 148.600387][ T7622] netlink: 'syz.0.546': attribute type 3 has an invalid length. [ 148.622186][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 148.671017][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 148.711189][ T6500] wlan1: Selected IBSS BSSID 00:00:00:8d:00:00 based on configured SSID [ 148.806104][ T7630] xt_HMARK: spi-set and port-set can't be combined [ 149.029501][ T7640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.556'. [ 149.567954][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.566'. [ 149.827387][ T7660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.938654][ T7678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'. [ 150.174146][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.571'. [ 150.284502][ T7688] macsec1: entered promiscuous mode [ 150.333950][ T7688] macsec1: entered allmulticast mode [ 150.339327][ T7688] veth1_macvtap: entered allmulticast mode [ 150.385244][ T7699] netlink: 'syz.2.576': attribute type 1 has an invalid length. [ 150.406480][ T7688] veth1_macvtap: left allmulticast mode [ 151.202858][ T5844] udevd[5844]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 151.654512][ T7741] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 151.808300][ T7741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.281972][ T7767] __nla_validate_parse: 4 callbacks suppressed [ 152.281991][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 152.426633][ T7767] dummy0: entered promiscuous mode [ 152.447674][ T7767] macsec2: entered promiscuous mode [ 152.461204][ T7767] macsec2: entered allmulticast mode [ 152.468099][ T7767] dummy0: entered allmulticast mode [ 152.543284][ T7771] ipvlan2: entered promiscuous mode [ 152.566209][ T7771] ipvlan2: entered allmulticast mode [ 152.572358][ T7771] macvlan0: entered allmulticast mode [ 152.634742][ T7780] FAULT_INJECTION: forcing a failure. [ 152.634742][ T7780] name failslab, interval 1, probability 0, space 0, times 0 [ 152.687649][ T7780] CPU: 0 UID: 0 PID: 7780 Comm: syz.4.600 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 152.687691][ T7780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.687708][ T7780] Call Trace: [ 152.687737][ T7780] [ 152.687746][ T7780] dump_stack_lvl+0x189/0x250 [ 152.687785][ T7780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.687817][ T7780] ? __pfx__printk+0x10/0x10 [ 152.687845][ T7780] ? __pfx___might_resched+0x10/0x10 [ 152.687864][ T7780] ? fs_reclaim_acquire+0x7d/0x100 [ 152.687909][ T7780] should_fail_ex+0x414/0x560 [ 152.687939][ T7780] should_failslab+0xa8/0x100 [ 152.687970][ T7780] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 152.687998][ T7780] ? __kasan_kmalloc+0x93/0xb0 [ 152.688023][ T7780] ? ip6_setup_cork+0x846/0x10e0 [ 152.688061][ T7780] kmemdup_noprof+0x2b/0x70 [ 152.688086][ T7780] ip6_setup_cork+0x846/0x10e0 [ 152.688130][ T7780] ip6_append_data+0x23d/0x380 [ 152.688165][ T7780] ? __pfx_raw6_getfrag+0x10/0x10 [ 152.688191][ T7780] rawv6_sendmsg+0x124b/0x17f0 [ 152.688231][ T7780] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 152.688265][ T7780] ? __lock_acquire+0xaac/0xd20 [ 152.688312][ T7780] ? __pfx_aa_sk_perm+0x10/0x10 [ 152.688339][ T7780] ? sock_rps_record_flow+0x19/0x410 [ 152.688367][ T7780] ? inet_sendmsg+0x2f4/0x370 [ 152.688389][ T7780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.688419][ T7780] __sock_sendmsg+0x19c/0x270 [ 152.688447][ T7780] ____sys_sendmsg+0x52d/0x830 [ 152.688486][ T7780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.688527][ T7780] ? import_iovec+0x74/0xa0 [ 152.688564][ T7780] ___sys_sendmsg+0x21f/0x2a0 [ 152.688598][ T7780] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.688676][ T7780] ? __fget_files+0x2a/0x420 [ 152.688705][ T7780] ? __fget_files+0x3a0/0x420 [ 152.688745][ T7780] __sys_sendmmsg+0x227/0x430 [ 152.688783][ T7780] ? __pfx___sys_sendmmsg+0x10/0x10 [ 152.688826][ T7780] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.688872][ T7780] ? ksys_write+0x1f0/0x250 [ 152.688904][ T7780] ? rcu_is_watching+0x15/0xb0 [ 152.688935][ T7780] __x64_sys_sendmmsg+0xa0/0xc0 [ 152.688970][ T7780] do_syscall_64+0xf6/0x210 [ 152.688996][ T7780] ? clear_bhb_loop+0x60/0xb0 [ 152.689022][ T7780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.689042][ T7780] RIP: 0033:0x7f3f82f8e969 [ 152.689061][ T7780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.689078][ T7780] RSP: 002b:00007f3f83e89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.689100][ T7780] RAX: ffffffffffffffda RBX: 00007f3f831b5fa0 RCX: 00007f3f82f8e969 [ 152.689115][ T7780] RDX: 0000000000000062 RSI: 0000200000002940 RDI: 0000000000000003 [ 152.689128][ T7780] RBP: 00007f3f83e89090 R08: 0000000000000000 R09: 0000000000000000 [ 152.689140][ T7780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.689152][ T7780] R13: 0000000000000000 R14: 00007f3f831b5fa0 R15: 00007ffe72f888d8 [ 152.689184][ T7780] [ 153.266427][ T7787] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 153.833164][ T7801] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 154.006982][ T7809] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.612'. [ 154.099665][ T7811] xt_CT: No such helper "snmp" [ 154.307186][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 154.388140][ T7816] bond_slave_0: entered promiscuous mode [ 154.393952][ T7816] bond_slave_1: entered promiscuous mode [ 154.420575][ T7816] macsec3: entered allmulticast mode [ 154.427970][ T7816] bond0: entered allmulticast mode [ 154.441231][ T7816] bond_slave_0: entered allmulticast mode [ 154.457419][ T7816] bond_slave_1: entered allmulticast mode [ 154.494548][ T7816] bond0: left allmulticast mode [ 154.534274][ T7816] bond_slave_0: left allmulticast mode [ 154.563307][ T7816] bond_slave_1: left allmulticast mode [ 154.568887][ T7816] bond_slave_0: left promiscuous mode [ 154.574490][ T7816] bond_slave_1: left promiscuous mode [ 154.602847][ T7828] Unknown options in mask 700 [ 154.668798][ T7823] wireguard0: entered promiscuous mode [ 154.676487][ T7823] team0: Device wireguard0 is of different type [ 154.857687][ T7834] netlink: 'syz.3.620': attribute type 15 has an invalid length. [ 154.884998][ T7834] netlink: 'syz.3.620': attribute type 3 has an invalid length. [ 154.909845][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 155.203137][ T7851] unknown channel width for channel at 909000KHz? [ 155.290402][ T7856] Unknown options in mask 700 [ 155.363088][ T7862] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 155.670415][ T7878] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 156.604650][ T7906] team0: Port device team_slave_1 removed [ 157.244955][ T7937] atomic_op ffff888023a40198 conn xmit_atomic 0000000000000000 [ 157.425060][ T7941] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.791825][ T6498] wlan1: Trigger new scan to find an IBSS to join [ 157.914939][ T7959] x_tables: duplicate underflow at hook 1 [ 158.017463][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 158.054906][ T7969] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 158.064673][ T7966] netlink: 'syz.4.655': attribute type 9 has an invalid length. [ 158.178579][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.652'. [ 158.295018][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.652'. [ 158.369359][ T7969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.390471][ T7966] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 158.399806][ T7966] macvlan2: entered allmulticast mode [ 158.410571][ T7966] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 158.704992][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 158.749729][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 158.852299][ T7994] ip6gretap0: entered promiscuous mode [ 158.859236][ T7994] syz_tun: entered promiscuous mode [ 159.201080][ T8015] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 159.295927][ T8017] dummy0: entered promiscuous mode [ 159.318736][ T8017] vlan2: entered promiscuous mode [ 159.445642][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 159.729354][ T8028] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.939596][ T8028] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.097660][ T8028] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.247015][ T8028] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.330232][ T8052] lo speed is unknown, defaulting to 1000 [ 160.355152][ T8052] lo speed is unknown, defaulting to 1000 [ 160.371102][ T8052] lo speed is unknown, defaulting to 1000 [ 160.385985][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 160.418559][ T8052] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.449800][ T8062] openvswitch: netlink: Missing key (keys=40, expected=100) [ 160.489135][ T8052] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 160.542968][ T8028] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.588362][ T8052] lo speed is unknown, defaulting to 1000 [ 160.617966][ T8028] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.675227][ T8052] lo speed is unknown, defaulting to 1000 [ 160.736317][ T8028] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.774345][ T8052] lo speed is unknown, defaulting to 1000 [ 160.799167][ T8028] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.874551][ T8052] lo speed is unknown, defaulting to 1000 [ 160.907758][ T8052] lo speed is unknown, defaulting to 1000 [ 160.969996][ T8080] FAULT_INJECTION: forcing a failure. [ 160.969996][ T8080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.985776][ T8080] CPU: 1 UID: 0 PID: 8080 Comm: syz.1.687 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 160.985804][ T8080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.985817][ T8080] Call Trace: [ 160.985825][ T8080] [ 160.985834][ T8080] dump_stack_lvl+0x189/0x250 [ 160.985869][ T8080] ? __lock_acquire+0xaac/0xd20 [ 160.985903][ T8080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.985934][ T8080] ? __pfx__printk+0x10/0x10 [ 160.985957][ T8080] ? __might_fault+0xb0/0x130 [ 160.985999][ T8080] should_fail_ex+0x414/0x560 [ 160.986028][ T8080] _copy_from_user+0x2d/0xb0 [ 160.986060][ T8080] ___sys_recvmsg+0x12e/0x510 [ 160.986100][ T8080] ? __pfx____sys_recvmsg+0x10/0x10 [ 160.986169][ T8080] ? __might_fault+0xb0/0x130 [ 160.986202][ T8080] do_recvmmsg+0x307/0x760 [ 160.986245][ T8080] ? __pfx_do_recvmmsg+0x10/0x10 [ 160.986299][ T8080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.986344][ T8080] __x64_sys_recvmmsg+0x190/0x240 [ 160.986377][ T8080] ? rcu_is_watching+0x15/0xb0 [ 160.986398][ T8080] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 160.986436][ T8080] ? do_syscall_64+0xba/0x210 [ 160.986466][ T8080] do_syscall_64+0xf6/0x210 [ 160.986492][ T8080] ? clear_bhb_loop+0x60/0xb0 [ 160.986519][ T8080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.986540][ T8080] RIP: 0033:0x7f2fda78e969 [ 160.986558][ T8080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.986576][ T8080] RSP: 002b:00007f2fdb67a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 160.986598][ T8080] RAX: ffffffffffffffda RBX: 00007f2fda9b5fa0 RCX: 00007f2fda78e969 [ 160.986613][ T8080] RDX: 03fffffffffffcbe RSI: 0000200000000480 RDI: 0000000000000004 [ 160.986627][ T8080] RBP: 00007f2fdb67a090 R08: 0000000000000000 R09: 0000000000000000 [ 160.986640][ T8080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.986652][ T8080] R13: 0000000000000000 R14: 00007f2fda9b5fa0 R15: 00007fff9280c098 [ 160.986685][ T8080] [ 161.264204][ T8087] Unknown options in mask 700 [ 161.303952][ T8090] netlink: 48 bytes leftover after parsing attributes in process `syz.1.691'. [ 161.565820][ T8099] xt_connbytes: Forcing CT accounting to be enabled [ 161.588437][ T8099] Cannot find del_set index 1 as target [ 161.622508][ T8097] ipvlan2: entered promiscuous mode [ 161.643780][ T8097] ipvlan2: entered allmulticast mode [ 161.650986][ T8097] macvlan0: entered allmulticast mode [ 161.657839][ T8097] veth1_vlan: entered allmulticast mode [ 161.690096][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 161.780306][ T8109] openvswitch: netlink: Multiple metadata blocks provided [ 161.822348][ T8099] bond0: option min_links: invalid value (18446744073709551609) [ 161.854003][ T8099] bond0: option min_links: allowed values 0 - 2147483647 [ 162.845559][ T12] wlan1: Trigger new scan to find an IBSS to join [ 163.285727][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 163.364767][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.716'. [ 163.449351][ T8171] macsec1: entered promiscuous mode [ 163.490069][ T8171] macsec1: entered allmulticast mode [ 163.503884][ T8171] dummy0: entered allmulticast mode [ 163.534258][ T8172] netlink: 'syz.1.714': attribute type 28 has an invalid length. [ 163.831581][ T6490] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 164.182619][ T8187] netlink: 260 bytes leftover after parsing attributes in process `syz.0.722'. [ 164.425634][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 164.442385][ T8194] vlan2: entered promiscuous mode [ 164.541802][ T8201] vlan2: entered promiscuous mode [ 164.711036][ T8198] lo speed is unknown, defaulting to 1000 [ 165.068591][ T8215] wg1: left promiscuous mode [ 165.075530][ T8215] wg1: left allmulticast mode [ 165.095041][ T8220] netlink: 'syz.3.732': attribute type 15 has an invalid length. [ 165.113520][ T8220] netlink: 'syz.3.732': attribute type 3 has an invalid length. [ 165.116469][ T8215] macsec1: left promiscuous mode [ 165.127404][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 165.137669][ T8220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.732'. [ 165.151592][ T8215] macsec1: left allmulticast mode [ 165.157328][ T8215] macvlan2: left allmulticast mode [ 165.684132][ T8245] rdma_op ffff88805d2c49f0 conn xmit_rdma 0000000000000000 [ 165.994596][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 166.013963][ T8260] netlink: 'syz.3.744': attribute type 11 has an invalid length. [ 166.170167][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.310913][ T8271] netlink: 'syz.3.746': attribute type 2 has an invalid length. [ 166.395595][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 166.440074][ T8271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.558562][ T8264] lo speed is unknown, defaulting to 1000 [ 166.568604][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 166.644171][ T8279] vlan2: entered promiscuous mode [ 166.794263][ T8281] team0: Port device team_slave_1 removed [ 167.032719][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.752'. [ 167.565842][ T8319] netlink: 'syz.3.758': attribute type 23 has an invalid length. [ 167.660268][ T8327] FAULT_INJECTION: forcing a failure. [ 167.660268][ T8327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.716662][ T8327] CPU: 0 UID: 0 PID: 8327 Comm: syz.4.759 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 167.716693][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.716706][ T8327] Call Trace: [ 167.716715][ T8327] [ 167.716724][ T8327] dump_stack_lvl+0x189/0x250 [ 167.716765][ T8327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.716797][ T8327] ? __pfx__printk+0x10/0x10 [ 167.716832][ T8327] should_fail_ex+0x414/0x560 [ 167.716862][ T8327] _copy_to_user+0x31/0xb0 [ 167.716896][ T8327] simple_read_from_buffer+0xe1/0x170 [ 167.716930][ T8327] proc_fail_nth_read+0x1df/0x250 [ 167.716967][ T8327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.717002][ T8327] ? rw_verify_area+0x258/0x650 [ 167.717026][ T8327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.717064][ T8327] vfs_read+0x1fd/0x980 [ 167.717096][ T8327] ? __pfx___mutex_lock+0x10/0x10 [ 167.717122][ T8327] ? __pfx_vfs_read+0x10/0x10 [ 167.717148][ T8327] ? __fget_files+0x2a/0x420 [ 167.717182][ T8327] ? __fget_files+0x3a0/0x420 [ 167.717211][ T8327] ? __fget_files+0x2a/0x420 [ 167.717250][ T8327] ksys_read+0x145/0x250 [ 167.717279][ T8327] ? __pfx_ksys_read+0x10/0x10 [ 167.717309][ T8327] ? do_syscall_64+0xba/0x210 [ 167.717339][ T8327] do_syscall_64+0xf6/0x210 [ 167.717366][ T8327] ? clear_bhb_loop+0x60/0xb0 [ 167.717392][ T8327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.717412][ T8327] RIP: 0033:0x7f3f82f8d37c [ 167.717431][ T8327] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.717448][ T8327] RSP: 002b:00007f3f83e68030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.717470][ T8327] RAX: ffffffffffffffda RBX: 00007f3f831b6080 RCX: 00007f3f82f8d37c [ 167.717486][ T8327] RDX: 000000000000000f RSI: 00007f3f83e680a0 RDI: 0000000000000008 [ 167.717498][ T8327] RBP: 00007f3f83e68090 R08: 0000000000000000 R09: 0000000000000000 [ 167.717511][ T8327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.717523][ T8327] R13: 0000000000000000 R14: 00007f3f831b6080 R15: 00007ffe72f888d8 [ 167.717554][ T8327] [ 167.937718][ T12] wlan1: Trigger new scan to find an IBSS to join [ 168.087569][ T8338] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 168.101345][ T8329] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.280926][ T8348] wg1: entered promiscuous mode [ 168.289691][ T8348] wg1: entered allmulticast mode [ 168.421660][ T8346] bridge_slave_0: left allmulticast mode [ 168.438535][ T8346] bridge_slave_0: left promiscuous mode [ 168.460792][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.570591][ T8346] bridge_slave_1: left allmulticast mode [ 168.579104][ T8346] bridge_slave_1: left promiscuous mode [ 168.595270][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.649388][ T8367] __nla_validate_parse: 6 callbacks suppressed [ 168.649406][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.772'. [ 168.670427][ T8346] bond0: (slave bond_slave_0): Releasing backup interface [ 168.680534][ T8346] bond_slave_0: left promiscuous mode [ 168.712090][ T8346] bond0: (slave bond_slave_1): Releasing backup interface [ 168.727044][ T8346] bond_slave_1: left promiscuous mode [ 168.751375][ T8346] team0: Port device team_slave_0 removed [ 168.762683][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.793903][ T8346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.901388][ T5885] lo speed is unknown, defaulting to 1000 [ 168.925601][ T8381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.774'. [ 168.939849][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 168.987799][ T8381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.774'. [ 169.022095][ T8378] macsec3: entered allmulticast mode [ 169.038045][ T8378] bond0: entered allmulticast mode [ 169.080862][ T8378] bond_slave_0: entered allmulticast mode [ 169.086889][ T8378] bond_slave_1: entered allmulticast mode [ 169.125968][ T8378] bond0: left allmulticast mode [ 169.134505][ T8378] bond_slave_0: left allmulticast mode [ 169.163288][ T8378] bond_slave_1: left allmulticast mode [ 169.396112][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 169.565380][ T8399] netlink: 72 bytes leftover after parsing attributes in process `syz.4.780'. [ 169.603658][ T8406] bridge0: entered promiscuous mode [ 169.609026][ T8406] vlan2: entered promiscuous mode [ 169.682401][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.780'. [ 170.416444][ T8432] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 170.613085][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 170.648237][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 170.683104][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 171.197143][ T8472] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 171.285719][ T8472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.059664][ T8501] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 172.499035][ T8509] macsec3: entered promiscuous mode [ 172.549806][ T8509] macsec3: entered allmulticast mode [ 172.592774][ T8509] veth1_macvtap: entered allmulticast mode [ 172.640574][ T8509] veth1_macvtap: left allmulticast mode [ 172.772503][ T8518] macsec1: entered promiscuous mode [ 172.781674][ T8518] macsec1: entered allmulticast mode [ 172.790388][ T8518] dummy0: entered allmulticast mode [ 172.833250][ T6498] wlan1: Trigger new scan to find an IBSS to join [ 173.407345][ T8536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.413589][ T8544] FAULT_INJECTION: forcing a failure. [ 173.413589][ T8544] name failslab, interval 1, probability 0, space 0, times 0 [ 173.442810][ T8544] CPU: 0 UID: 0 PID: 8544 Comm: syz.0.825 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 173.442839][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.442851][ T8544] Call Trace: [ 173.442859][ T8544] [ 173.442868][ T8544] dump_stack_lvl+0x189/0x250 [ 173.442907][ T8544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.442937][ T8544] ? __pfx__printk+0x10/0x10 [ 173.442965][ T8544] ? __pfx___might_resched+0x10/0x10 [ 173.442992][ T8544] should_fail_ex+0x414/0x560 [ 173.443020][ T8544] should_failslab+0xa8/0x100 [ 173.443050][ T8544] kmem_cache_alloc_noprof+0x73/0x3c0 [ 173.443077][ T8544] ? mas_alloc_nodes+0x2e9/0x8e0 [ 173.443105][ T8544] mas_alloc_nodes+0x2e9/0x8e0 [ 173.443137][ T8544] mas_preallocate+0x542/0x8b0 [ 173.443164][ T8544] ? __pfx_mas_preallocate+0x10/0x10 [ 173.443198][ T8544] ? __mas_set_range+0x12f/0x3c0 [ 173.443230][ T8544] __split_vma+0x315/0x9b0 [ 173.443265][ T8544] ? __pfx___split_vma+0x10/0x10 [ 173.443303][ T8544] ? process_measurement+0x1640/0x1a40 [ 173.443336][ T8544] vms_gather_munmap_vmas+0x2de/0x12b0 [ 173.443377][ T8544] ? mtree_range_walk+0x6a7/0x840 [ 173.443400][ T8544] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 173.443452][ T8544] mmap_region+0x5f5/0x1e50 [ 173.443492][ T8544] ? __pfx_mmap_region+0x10/0x10 [ 173.443580][ T8544] ? arch_get_unmapped_area_topdown+0x244/0xa80 [ 173.443612][ T8544] ? aa_get_newest_label+0xf7/0x5d0 [ 173.443639][ T8544] ? __pfx_aa_get_newest_label+0x10/0x10 [ 173.443674][ T8544] ? rcu_is_watching+0x15/0xb0 [ 173.443697][ T8544] ? apparmor_capable+0x137/0x1b0 [ 173.443731][ T8544] ? bpf_lsm_capable+0x9/0x20 [ 173.443761][ T8544] ? security_capable+0x7e/0x2e0 [ 173.443785][ T8544] ? shmem_mapping+0xd/0x50 [ 173.443806][ T8544] ? memfd_check_seals_mmap+0xc5/0x200 [ 173.443829][ T8544] do_mmap+0xc68/0x1100 [ 173.443870][ T8544] ? __pfx_do_mmap+0x10/0x10 [ 173.443893][ T8544] ? down_write_killable+0x178/0x230 [ 173.443921][ T8544] ? end_current_label_crit_section+0x152/0x180 [ 173.443946][ T8544] ? __pfx_down_write_killable+0x10/0x10 [ 173.443983][ T8544] vm_mmap_pgoff+0x31b/0x4c0 [ 173.444017][ T8544] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 173.444042][ T8544] ? __fget_files+0x2a/0x420 [ 173.444074][ T8544] ? __fget_files+0x2a/0x420 [ 173.444103][ T8544] ? __fget_files+0x2a/0x420 [ 173.444136][ T8544] ksys_mmap_pgoff+0x51f/0x760 [ 173.444172][ T8544] do_syscall_64+0xf6/0x210 [ 173.444216][ T8544] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.444238][ T8544] ? clear_bhb_loop+0x60/0xb0 [ 173.444264][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.444284][ T8544] RIP: 0033:0x7fca3d58e969 [ 173.444302][ T8544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.444320][ T8544] RSP: 002b:00007fca3e3b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 173.444342][ T8544] RAX: ffffffffffffffda RBX: 00007fca3d7b5fa0 RCX: 00007fca3d58e969 [ 173.444370][ T8544] RDX: 0000000002000001 RSI: 0000000000200000 RDI: 0000200000001000 [ 173.444383][ T8544] RBP: 00007fca3e3b3090 R08: 0000000000000003 R09: 0000000000000000 [ 173.444395][ T8544] R10: 0000000000002011 R11: 0000000000000246 R12: 0000000000000001 [ 173.444407][ T8544] R13: 0000000000000000 R14: 00007fca3d7b5fa0 R15: 00007ffdee8fb788 [ 173.444464][ T8544] [ 173.672116][ T8547] openvswitch: netlink: IPv4 tun info is not correct [ 173.739287][ T8555] __nla_validate_parse: 36 callbacks suppressed [ 173.739307][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'. [ 173.804027][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'. [ 173.827864][ T8540] netlink: 136 bytes leftover after parsing attributes in process `syz.4.823'. [ 173.887511][ T8540] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 173.963421][ T8547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 174.055324][ T6502] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 174.069828][ T8536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.214938][ T8536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.353378][ T8536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.501595][ T8571] xt_hashlimit: invalid rate [ 174.954802][ T8536] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.038831][ T8536] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.102400][ T8536] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.184084][ T8536] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.223740][ T8585] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 0, id = 0 [ 175.441103][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 175.932317][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'. [ 175.988550][ T8614] bond_slave_0: entered promiscuous mode [ 175.994376][ T8614] bond_slave_1: entered promiscuous mode [ 176.019287][ T8614] macsec2: entered allmulticast mode [ 176.031555][ T8614] bond0: entered allmulticast mode [ 176.036889][ T8614] bond_slave_0: entered allmulticast mode [ 176.047011][ T8614] bond_slave_1: entered allmulticast mode [ 176.092765][ T8614] bond0: left allmulticast mode [ 176.100752][ T8614] bond_slave_0: left allmulticast mode [ 176.119077][ T8614] bond_slave_1: left allmulticast mode [ 176.142365][ T8614] bond_slave_0: left promiscuous mode [ 176.147899][ T8614] bond_slave_1: left promiscuous mode [ 176.492549][ T8634] bond_slave_0: entered promiscuous mode [ 176.498408][ T8634] bond_slave_1: entered promiscuous mode [ 176.537816][ T8634] vlan2: entered promiscuous mode [ 176.568022][ T8634] bond0: entered promiscuous mode [ 177.027683][ T8658] Unknown options in mask 700 [ 177.642620][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 177.687344][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 177.724205][ T8696] block nbd0: not configured, cannot reconfigure [ 177.903932][ T8705] Unknown options in mask 700 [ 177.999318][ T8708] macsec1: entered promiscuous mode [ 178.018403][ T8708] macsec1: entered allmulticast mode [ 178.037372][ T8708] veth1_macvtap: entered allmulticast mode [ 178.058665][ T8708] veth1_macvtap: left allmulticast mode [ 178.300197][ T8721] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 178.414511][ T8728] ipvlan2: entered promiscuous mode [ 178.419805][ T8728] ipvlan2: entered allmulticast mode [ 178.666127][ T8734] xt_CT: No such helper "snmp" [ 178.824246][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 178.881558][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.888'. [ 178.882091][ T8747] lo speed is unknown, defaulting to 1000 [ 178.908001][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.888'. [ 178.941497][ T8748] gretap1: entered promiscuous mode [ 178.959189][ T8748] gretap1: entered allmulticast mode [ 179.310538][ T8763] wireguard0: entered promiscuous mode [ 179.361407][ T8763] team0: Device wireguard0 is of different type [ 179.528142][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 179.725556][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 180.005885][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 180.159136][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 180.216896][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 180.256733][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 180.265835][ T8796] netlink: 252 bytes leftover after parsing attributes in process `syz.0.899'. [ 180.853477][ T8816] Unknown options in mask 700 [ 182.357783][ T8871] Unknown options in mask 700 [ 183.097493][ T8900] lo speed is unknown, defaulting to 1000 [ 183.098150][ T8909] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 183.338984][ T8912] macsec2: entered promiscuous mode [ 183.344635][ T8912] macsec2: entered allmulticast mode [ 183.352218][ T8912] veth1_macvtap: entered allmulticast mode [ 183.383246][ T8912] veth1_macvtap: left allmulticast mode [ 183.559621][ T8920] Unknown options in mask 700 [ 184.204017][ T8954] FAULT_INJECTION: forcing a failure. [ 184.204017][ T8954] name failslab, interval 1, probability 0, space 0, times 0 [ 184.265417][ T8954] CPU: 1 UID: 0 PID: 8954 Comm: syz.0.947 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 184.265448][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.265461][ T8954] Call Trace: [ 184.265469][ T8954] [ 184.265478][ T8954] dump_stack_lvl+0x189/0x250 [ 184.265519][ T8954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.265551][ T8954] ? __pfx__printk+0x10/0x10 [ 184.265579][ T8954] ? __pfx___might_resched+0x10/0x10 [ 184.265606][ T8954] should_fail_ex+0x414/0x560 [ 184.265636][ T8954] should_failslab+0xa8/0x100 [ 184.265667][ T8954] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 184.265697][ T8954] ? __alloc_skb+0x112/0x2d0 [ 184.265731][ T8954] __alloc_skb+0x112/0x2d0 [ 184.265764][ T8954] __ip6_append_data+0x2b61/0x3dd0 [ 184.265818][ T8954] ? __lock_acquire+0xaac/0xd20 [ 184.265852][ T8954] ? __pfx_raw6_getfrag+0x10/0x10 [ 184.265901][ T8954] ? __pfx___ip6_append_data+0x10/0x10 [ 184.265932][ T8954] ? __pfx_ip6_mtu+0x10/0x10 [ 184.265975][ T8954] ip6_append_data+0x1c4/0x380 [ 184.266013][ T8954] ? __pfx_raw6_getfrag+0x10/0x10 [ 184.266040][ T8954] rawv6_sendmsg+0x124b/0x17f0 [ 184.266081][ T8954] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 184.266112][ T8954] ? kernel_text_address+0xa5/0xe0 [ 184.266143][ T8954] ? __kernel_text_address+0xd/0x40 [ 184.266189][ T8954] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.266216][ T8954] ? sock_rps_record_flow+0x19/0x410 [ 184.266245][ T8954] ? inet_sendmsg+0x2f4/0x370 [ 184.266268][ T8954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.266304][ T8954] __sock_sendmsg+0x19c/0x270 [ 184.266332][ T8954] sock_sendmsg+0x158/0x230 [ 184.266359][ T8954] ? __pfx_sock_sendmsg+0x10/0x10 [ 184.266411][ T8954] kcm_write_msgs+0xc3a/0x1570 [ 184.266464][ T8954] ? __pfx_kcm_write_msgs+0x10/0x10 [ 184.266504][ T8954] ? skb_page_frag_refill+0x1be/0x320 [ 184.266535][ T8954] kcm_sendmsg+0x243b/0x29f0 [ 184.266604][ T8954] ? __pfx_kcm_sendmsg+0x10/0x10 [ 184.266630][ T8954] ? aa_sock_msg_perm+0x94/0x160 [ 184.266658][ T8954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.266682][ T8954] ? __pfx_kcm_sendmsg+0x10/0x10 [ 184.266705][ T8954] __sock_sendmsg+0x21c/0x270 [ 184.266733][ T8954] ____sys_sendmsg+0x52d/0x830 [ 184.266772][ T8954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.266815][ T8954] ? import_iovec+0x74/0xa0 [ 184.266851][ T8954] ___sys_sendmsg+0x21f/0x2a0 [ 184.266886][ T8954] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.266973][ T8954] ? __might_fault+0xb0/0x130 [ 184.267007][ T8954] __sys_sendmmsg+0x227/0x430 [ 184.267046][ T8954] ? __pfx___sys_sendmmsg+0x10/0x10 [ 184.267090][ T8954] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.267138][ T8954] ? ksys_write+0x1f0/0x250 [ 184.267162][ T8954] ? rcu_is_watching+0x15/0xb0 [ 184.267194][ T8954] __x64_sys_sendmmsg+0xa0/0xc0 [ 184.267230][ T8954] do_syscall_64+0xf6/0x210 [ 184.267256][ T8954] ? clear_bhb_loop+0x60/0xb0 [ 184.267283][ T8954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.267310][ T8954] RIP: 0033:0x7fca3d58e969 [ 184.267329][ T8954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.267347][ T8954] RSP: 002b:00007fca3e3b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 184.267369][ T8954] RAX: ffffffffffffffda RBX: 00007fca3d7b5fa0 RCX: 00007fca3d58e969 [ 184.267384][ T8954] RDX: 0000000000000002 RSI: 00002000000005c0 RDI: 0000000000000004 [ 184.267397][ T8954] RBP: 00007fca3e3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 184.267410][ T8954] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000002 [ 184.267422][ T8954] R13: 0000000000000000 R14: 00007fca3d7b5fa0 R15: 00007ffdee8fb788 [ 184.267457][ T8954] [ 184.815314][ T8967] __nla_validate_parse: 12 callbacks suppressed [ 184.815336][ T8967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'. [ 184.846791][ T8969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.952'. [ 185.018008][ T8975] netlink: 136 bytes leftover after parsing attributes in process `syz.1.955'. [ 185.027292][ T8975] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 185.160060][ T8980] lo speed is unknown, defaulting to 1000 [ 185.207761][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 185.268655][ T8987] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 185.295985][ T8989] vlan2: entered promiscuous mode [ 185.413044][ T8987] veth1_macvtap: left promiscuous mode [ 185.566235][ T8998] Unknown options in mask 700 [ 185.632484][ T9002] Cannot find map_set index 0 as target [ 185.685585][ T9000] vlan2: entered promiscuous mode [ 185.740916][ T9008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.965'. [ 185.965632][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 186.156903][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 186.185389][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.970'. [ 186.975644][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 187.000006][ T9054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.978'. [ 187.011919][ T9050] macsec3: entered allmulticast mode [ 187.024833][ T9050] bond0: entered allmulticast mode [ 187.030231][ T9050] bond_slave_0: entered allmulticast mode [ 187.050804][ T9050] bond_slave_1: entered allmulticast mode [ 187.071065][ T9050] bond0: left allmulticast mode [ 187.085201][ T9050] bond_slave_0: left allmulticast mode [ 187.094807][ T9050] bond_slave_1: left allmulticast mode [ 187.327374][ T9059] lo speed is unknown, defaulting to 1000 [ 187.446700][ T9066] lo speed is unknown, defaulting to 1000 [ 188.057991][ T9102] Unsupported ieee802154 address type: 0 [ 188.106957][ T9097] lo speed is unknown, defaulting to 1000 [ 188.677671][ T9118] Unknown options in mask 700 [ 189.417563][ T9137] tipc: Started in network mode [ 189.441897][ T9137] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 189.513899][ T9137] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 189.563734][ T9137] tipc: Enabled bearer , priority 10 [ 189.590631][ T9141] tipc: Enabling of bearer rejected, already enabled [ 189.686205][ T9148] ipvlan2: entered promiscuous mode [ 189.732946][ T9148] ipvlan2: entered allmulticast mode [ 189.738300][ T9148] macvlan0: entered allmulticast mode [ 189.811278][ T9148] veth1_vlan: entered allmulticast mode [ 190.176026][ T9160] sctp: [Deprecated]: syz.4.1012 (pid 9160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.176026][ T9160] Use struct sctp_sack_info instead [ 190.461194][ T9174] __nla_validate_parse: 5 callbacks suppressed [ 190.461213][ T9174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1014'. [ 190.652315][ T1205] tipc: Node number set to 1 [ 190.872156][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'. [ 190.925813][ T9180] lo speed is unknown, defaulting to 1000 [ 191.064398][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 191.112466][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 191.333730][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 191.356282][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 191.411997][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 191.451591][ T9197] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1026'. [ 191.463695][ T9201] macsec2: entered allmulticast mode [ 191.469038][ T9201] bridge0: entered allmulticast mode [ 191.499466][ T9201] bridge0: left allmulticast mode [ 191.502080][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 191.544988][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 192.657132][ T9251] Unknown options in mask 700 [ 193.014265][ T9268] netlink: 'syz.2.1047': attribute type 15 has an invalid length. [ 193.049833][ T9268] netlink: 'syz.2.1047': attribute type 3 has an invalid length. [ 193.244015][ T9277] netlink: 'syz.0.1052': attribute type 11 has an invalid length. [ 193.576218][ T9293] Bluetooth: MGMT ver 1.23 [ 193.577077][ T9296] ipvlan2: entered promiscuous mode [ 193.592154][ T9296] ipvlan2: entered allmulticast mode [ 193.805820][ T9304] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 193.928964][ T9304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.018052][ T9308] bond5: (slave veth0_to_bond): making interface the new active one [ 194.057806][ T9308] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 194.115827][ T9316] vlan2: entered allmulticast mode [ 194.129335][ T9316] veth1: entered allmulticast mode [ 194.146257][ T9316] veth1: entered promiscuous mode [ 194.163301][ T9316] veth1: left promiscuous mode [ 194.181966][ T9316] bond5: (slave vlan2): Enslaving as an active interface with an up link [ 194.205792][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.290607][ T9369] Unknown options in mask 700 [ 195.403277][ T9373] Unknown options in mask 700 [ 195.562370][ T9381] wg1: entered promiscuous mode [ 195.577638][ T9381] wg1: entered allmulticast mode [ 195.654262][ T9386] __nla_validate_parse: 8 callbacks suppressed [ 195.654280][ T9386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1088'. [ 195.676385][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1088'. [ 195.688435][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1088'. [ 195.710935][ T9386] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1088'. [ 195.813157][ T9388] lo speed is unknown, defaulting to 1000 [ 195.864180][ T9390] lo speed is unknown, defaulting to 1000 [ 196.295024][ T9407] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 196.308784][ T9404] bridge0: entered allmulticast mode [ 196.334385][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 196.613215][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 196.957270][ T9414] unknown channel width for channel at 909000KHz? [ 197.299549][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 197.691954][ T9446] Unknown options in mask 700 [ 197.926099][ T9455] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 197.988961][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 198.043398][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 198.168507][ T9455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.229866][ T5885] IPVS: starting estimator thread 0... [ 198.241837][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1110'. [ 198.287743][ T9470] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.350904][ T9471] IPVS: using max 28 ests per chain, 67200 per kthread [ 198.404084][ T9479] No such timeout policy "syz1" [ 198.504316][ T9470] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.646919][ T9488] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 198.714934][ T9470] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.945824][ T9470] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.269984][ T9470] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.369464][ T9470] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.445256][ T9470] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.502467][ T9526] atomic_op ffff8880592ac198 conn xmit_atomic 0000000000000000 [ 199.520554][ T9470] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.577240][ T9526] x_tables: ip_tables: SECMARK.0 target: invalid size 264 (kernel) != (user) 256 [ 199.591846][ T9473] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.620422][ T9473] tipc: Enabled bearer , priority 10 [ 199.731139][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.901947][ T9531] syzkaller0: entered allmulticast mode [ 199.930387][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027587400: rx timeout, send abort [ 200.000748][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.253394][ T9543] lo speed is unknown, defaulting to 1000 [ 200.263124][ T9548] netlink: 'syz.3.1135': attribute type 7 has an invalid length. [ 200.288451][ T30] audit: type=1107 audit(1747371104.442:3): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 200.439566][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027587400: abort rx timeout. Force session deactivation [ 200.540836][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.785517][ T9543] __nla_validate_parse: 4 callbacks suppressed [ 200.785536][ T9543] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1134'. [ 200.818429][ T9543] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1134'. [ 200.867211][ T9573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.947099][ T9575] ip6t_srh: unknown srh match flags 4000 [ 200.968801][ T9577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1144'. [ 201.167279][ T9582] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.327900][ T9582] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.392133][ T9590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1150'. [ 201.416229][ T9582] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.550822][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.770213][ T9582] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.855482][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'. [ 202.224736][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 202.254269][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 202.263391][ T9613] lo speed is unknown, defaulting to 1000 [ 202.274705][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 202.316447][ T9616] netlink: 'syz.0.1156': attribute type 20 has an invalid length. [ 202.379602][ T9621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1158'. [ 202.600835][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.864002][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 203.007765][ T9582] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.058010][ T9582] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.134277][ T9582] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.177003][ T9645] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 203.199680][ T9582] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.225240][ T9647] Unknown options in mask 700 [ 203.240342][ T9645] pimreg3: entered allmulticast mode [ 203.301848][ T9645] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 203.345512][ T9648] netlink: 'syz.3.1166': attribute type 1 has an invalid length. [ 203.630774][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.767392][ T9663] lo speed is unknown, defaulting to 1000 [ 203.831407][ T9668] netlink: 'syz.1.1175': attribute type 7 has an invalid length. [ 203.864349][ T30] audit: type=1107 audit(1747371108.022:4): pid=9667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 203.893342][ T9670] vlan2: entered promiscuous mode [ 203.953067][ T9674] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 203.964664][ T9668] vlan0: entered promiscuous mode [ 203.984609][ T9668] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 204.087413][ T6498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 204.235933][ T9676] lo speed is unknown, defaulting to 1000 [ 204.399890][ T9691] lo speed is unknown, defaulting to 1000 [ 204.670895][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.202847][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cecac00: rx timeout, send abort [ 205.374411][ T9722] geneve1: entered promiscuous mode [ 205.396777][ T9723] vlan2: entered promiscuous mode [ 205.402486][ T9723] batadv0: entered promiscuous mode [ 205.681484][ T9734] Unknown options in mask 700 [ 205.710834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.718169][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cecac00: abort rx timeout. Force session deactivation [ 206.005889][ T9745] netlink: 'syz.0.1203': attribute type 7 has an invalid length. [ 206.017445][ T9747] netlink: 'syz.3.1204': attribute type 10 has an invalid length. [ 206.040596][ T9745] __nla_validate_parse: 14 callbacks suppressed [ 206.040614][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 206.084916][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1204'. [ 206.104468][ T9747] team0: Device geneve0 is up. Set it down before adding it as a team port [ 206.129992][ T9747] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 206.488891][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1207'. [ 206.551334][ T9755] FAULT_INJECTION: forcing a failure. [ 206.551334][ T9755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.608840][ T9755] CPU: 1 UID: 0 PID: 9755 Comm: syz.3.1206 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 206.608869][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.608882][ T9755] Call Trace: [ 206.608890][ T9755] [ 206.608899][ T9755] dump_stack_lvl+0x189/0x250 [ 206.608934][ T9755] ? __lock_acquire+0xaac/0xd20 [ 206.608969][ T9755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.609000][ T9755] ? __pfx__printk+0x10/0x10 [ 206.609022][ T9755] ? __might_fault+0xb0/0x130 [ 206.609063][ T9755] should_fail_ex+0x414/0x560 [ 206.609091][ T9755] _copy_from_user+0x2d/0xb0 [ 206.609124][ T9755] xsk_setsockopt+0x378/0x710 [ 206.609149][ T9755] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.609176][ T9755] ? aa_sock_opt_perm+0x74/0x110 [ 206.609204][ T9755] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 206.609229][ T9755] ? __pfx_xsk_setsockopt+0x10/0x10 [ 206.609252][ T9755] do_sock_setsockopt+0x257/0x3e0 [ 206.609285][ T9755] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 206.609314][ T9755] ? __fget_files+0x2a/0x420 [ 206.609349][ T9755] ? __fget_files+0x3a0/0x420 [ 206.609376][ T9755] ? __fget_files+0x2a/0x420 [ 206.609423][ T9755] __x64_sys_setsockopt+0x18b/0x220 [ 206.609461][ T9755] do_syscall_64+0xf6/0x210 [ 206.609487][ T9755] ? clear_bhb_loop+0x60/0xb0 [ 206.609514][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.609534][ T9755] RIP: 0033:0x7f05d3f8e969 [ 206.609553][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.609571][ T9755] RSP: 002b:00007f05d4df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.609593][ T9755] RAX: ffffffffffffffda RBX: 00007f05d41b5fa0 RCX: 00007f05d3f8e969 [ 206.609609][ T9755] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 206.609621][ T9755] RBP: 00007f05d4df9090 R08: 0000000000000020 R09: 0000000000000000 [ 206.609634][ T9755] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 206.609646][ T9755] R13: 0000000000000000 R14: 00007f05d41b5fa0 R15: 00007fff4a937c88 [ 206.609678][ T9755] [ 206.610358][ T9760] ip6erspan0: entered promiscuous mode [ 206.751543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.818798][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 206.994636][ T9771] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 207.002277][ T6500] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.099469][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 207.189932][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 207.238900][ T9781] netlink: 'syz.1.1218': attribute type 9 has an invalid length. [ 207.256525][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1219'. [ 207.457576][ T9795] xfrm1: entered allmulticast mode [ 207.477093][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 207.545435][ T9801] openvswitch: netlink: Missing key (keys=40, expected=100) [ 207.677682][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 207.691614][ T9807] Unknown options in mask 700 [ 207.790770][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.816405][ T9809] lo speed is unknown, defaulting to 1000 [ 207.824392][ T9811] netlink: 'syz.4.1231': attribute type 4 has an invalid length. [ 207.927874][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 208.250116][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805947b400: rx timeout, send abort [ 208.445099][ T9824] lo speed is unknown, defaulting to 1000 [ 208.758407][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805947b400: abort rx timeout. Force session deactivation [ 208.830791][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.945194][ T9843] netlink: 'syz.2.1242': attribute type 7 has an invalid length. [ 208.962255][ T9842] Unknown options in mask 700 [ 209.002535][ T30] audit: type=1107 audit(1747371113.152:5): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 209.019533][ T9845] syzkaller1: entered promiscuous mode [ 209.025190][ T9845] syzkaller1: entered allmulticast mode [ 209.678089][ T9871] ip6gretap0: entered promiscuous mode [ 209.713601][ T9871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.734131][ T9871] Cannot create hsr debugfs directory [ 209.870922][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.929118][ T9879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.983301][ T9882] netlink: 'syz.3.1257': attribute type 7 has an invalid length. [ 210.013549][ T30] audit: type=1107 audit(1747371114.162:6): pid=9881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 210.666303][ T9907] vlan0: entered promiscuous mode [ 210.752221][ T9915] netlink: 'syz.1.1270': attribute type 7 has an invalid length. [ 210.777426][ T9914] tipc: Started in network mode [ 210.782714][ T9914] tipc: Node identity , cluster identity 4711 [ 210.790929][ T30] audit: type=1107 audit(1747371114.942:7): pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 210.910717][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.632469][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 211.638546][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.644750][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 211.852906][ T9960] atomic_op ffff8880313fc998 conn xmit_atomic 0000000000000000 [ 211.928115][ T9960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 211.950770][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.801946][ T9993] __nla_validate_parse: 12 callbacks suppressed [ 212.801972][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'. [ 212.844257][ T9994] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 212.990915][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.614672][T10005] lo speed is unknown, defaulting to 1000 [ 213.881454][T10020] vlan2: entered promiscuous mode [ 214.030732][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.139020][T10022] lo speed is unknown, defaulting to 1000 [ 214.580354][T10031] lo speed is unknown, defaulting to 1000 [ 214.744425][T10005] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1299'. [ 214.788239][T10005] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1299'. [ 215.070719][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.322643][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 215.370495][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 215.462762][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1312'. [ 215.477409][T10042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.527949][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1312'. [ 215.594985][T10053] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 215.765833][T10059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1315'. [ 215.924976][T10066] FAULT_INJECTION: forcing a failure. [ 215.924976][T10066] name failslab, interval 1, probability 0, space 0, times 0 [ 215.982541][T10066] CPU: 1 UID: 0 PID: 10066 Comm: syz.0.1316 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 215.982571][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.982584][T10066] Call Trace: [ 215.982592][T10066] [ 215.982601][T10066] dump_stack_lvl+0x189/0x250 [ 215.982642][T10066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.982682][T10066] ? __pfx__printk+0x10/0x10 [ 215.982707][T10066] ? __pfx___might_resched+0x10/0x10 [ 215.982729][T10066] ? fs_reclaim_acquire+0x7d/0x100 [ 215.982768][T10066] should_fail_ex+0x414/0x560 [ 215.982799][T10066] should_failslab+0xa8/0x100 [ 215.982831][T10066] __kmalloc_cache_noprof+0x70/0x3d0 [ 215.982859][T10066] ? xfrm_policy_alloc+0x78/0x2b0 [ 215.982891][T10066] xfrm_policy_alloc+0x78/0x2b0 [ 215.982919][T10066] xfrm_policy_construct+0x39/0x6b0 [ 215.982941][T10066] ? aa_get_newest_label+0xf7/0x5d0 [ 215.982976][T10066] xfrm_add_policy+0x267/0x800 [ 215.983009][T10066] ? rcu_is_watching+0x15/0xb0 [ 215.983033][T10066] ? __pfx_xfrm_add_policy+0x10/0x10 [ 215.983062][T10066] ? apparmor_capable+0x137/0x1b0 [ 215.983100][T10066] ? __nla_parse+0x40/0x60 [ 215.983133][T10066] xfrm_user_rcv_msg+0x7a3/0xab0 [ 215.983172][T10066] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 215.983250][T10066] ? __mutex_trylock_common+0x153/0x260 [ 215.983279][T10066] ? __pfx___mutex_trylock_common+0x10/0x10 [ 215.983316][T10066] netlink_rcv_skb+0x219/0x490 [ 215.983349][T10066] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 215.983382][T10066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.983439][T10066] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.983469][T10066] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.983502][T10066] xfrm_netlink_rcv+0x79/0x90 [ 215.983532][T10066] netlink_unicast+0x75b/0x8d0 [ 215.983573][T10066] netlink_sendmsg+0x805/0xb30 [ 215.983615][T10066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.983649][T10066] ? aa_sock_msg_perm+0x94/0x160 [ 215.983683][T10066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.983709][T10066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.983741][T10066] __sock_sendmsg+0x21c/0x270 [ 215.983768][T10066] ____sys_sendmsg+0x505/0x830 [ 215.983806][T10066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.983850][T10066] ? import_iovec+0x74/0xa0 [ 215.983886][T10066] ___sys_sendmsg+0x21f/0x2a0 [ 215.983920][T10066] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.983994][T10066] ? __fget_files+0x2a/0x420 [ 215.984023][T10066] ? __fget_files+0x3a0/0x420 [ 215.984065][T10066] __x64_sys_sendmsg+0x19b/0x260 [ 215.984100][T10066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.984154][T10066] ? do_syscall_64+0xba/0x210 [ 215.984184][T10066] do_syscall_64+0xf6/0x210 [ 215.984210][T10066] ? clear_bhb_loop+0x60/0xb0 [ 215.984238][T10066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.984258][T10066] RIP: 0033:0x7fca3d58e969 [ 215.984276][T10066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.984293][T10066] RSP: 002b:00007fca3e3b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.984315][T10066] RAX: ffffffffffffffda RBX: 00007fca3d7b5fa0 RCX: 00007fca3d58e969 [ 215.984330][T10066] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 215.984342][T10066] RBP: 00007fca3e3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 215.984355][T10066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.984366][T10066] R13: 0000000000000000 R14: 00007fca3d7b5fa0 R15: 00007ffdee8fb788 [ 215.984398][T10066] [ 216.015327][T10070] Cannot find map_set index 0 as target [ 216.112275][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.318980][T10076] Unknown options in mask 700 [ 216.331074][T10065] tipc: Started in network mode [ 216.362614][T10065] tipc: Node identity , cluster identity 4711 [ 216.620443][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1324'. [ 216.635197][T10086] block nbd0: not configured, cannot reconfigure [ 216.661269][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1324'. [ 216.856517][T10089] trusted_key: syz.1.1327 sent an empty control message without MSG_MORE. [ 216.928479][T10099] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 217.060083][T10105] atomic_op ffff88805a622198 conn xmit_atomic 0000000000000000 [ 217.119753][T10105] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 217.162126][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.853652][T10124] lo speed is unknown, defaulting to 1000 [ 217.902953][T10139] netlink: 'syz.1.1339': attribute type 4 has an invalid length. [ 217.954724][T10144] netlink: 'syz.1.1339': attribute type 4 has an invalid length. [ 217.994682][T10146] netlink: 'syz.2.1341': attribute type 41 has an invalid length. [ 218.040922][T10146] __nla_validate_parse: 1 callbacks suppressed [ 218.040940][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1341'. [ 218.190977][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.295932][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 218.334230][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 218.608264][T10159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 219.043501][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 219.230720][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.269849][T10190] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 219.309343][T10190] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 220.176720][T10214] lo speed is unknown, defaulting to 1000 [ 220.270731][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.323269][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 220.440022][T10231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.554171][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807baff400: rx timeout, send abort [ 220.634904][T10244] netlink: 'syz.4.1367': attribute type 7 has an invalid length. [ 220.700899][ T30] audit: type=1107 audit(1747371124.852:8): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 220.773054][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 220.809325][T10247] team0: Port device vlan0 removed [ 220.826609][T10247] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 221.062509][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807baff400: abort rx timeout. Force session deactivation [ 221.073404][T10255] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1371'. [ 221.310707][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.448315][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1378'. [ 221.480812][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1378'. [ 221.537829][T10266] lo speed is unknown, defaulting to 1000 [ 221.546736][T10275] netlink: 'syz.2.1379': attribute type 6 has an invalid length. [ 221.741564][T10287] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 222.058557][T10287] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.289373][T10298] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 222.350919][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.609866][T10310] netlink: 'syz.2.1386': attribute type 4 has an invalid length. [ 222.653766][T10310] xt_hashlimit: size too large, truncated to 1048576 [ 222.672974][T10310] xt_hashlimit: max too large, truncated to 1048576 [ 223.206167][T10332] team0: Port device team_slave_1 removed [ 223.390706][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.539571][T10352] netlink: 'syz.2.1404': attribute type 7 has an invalid length. [ 223.552686][ T30] audit: type=1107 audit(1747371127.712:9): pid=10351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 223.569632][T10352] __nla_validate_parse: 3 callbacks suppressed [ 223.569650][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'. [ 223.586558][T10352] vlan0: entered promiscuous mode [ 223.592060][T10352] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 223.683297][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 223.695512][T10358] netlink: 'syz.2.1407': attribute type 9 has an invalid length. [ 223.723279][T10358] macvlan3: entered allmulticast mode [ 223.728861][T10358] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 223.895574][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1411'. [ 223.966371][T10370] netlink: 'syz.2.1412': attribute type 15 has an invalid length. [ 223.975457][T10367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.977875][T10370] netlink: 'syz.2.1412': attribute type 3 has an invalid length. [ 223.990564][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1412'. [ 224.083729][T10375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1415'. [ 224.222050][T10379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1416'. [ 224.256351][T10377] lo speed is unknown, defaulting to 1000 [ 224.301393][T10384] netlink: 'syz.2.1418': attribute type 7 has an invalid length. [ 224.350569][ T30] audit: type=1107 audit(1747371128.502:10): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 224.373247][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1418'. [ 224.414138][T10384] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 224.430756][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.722947][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 224.839924][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1426'. [ 224.868106][T10405] block nbd0: not configured, cannot reconfigure [ 224.884586][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 224.909356][T10398] bridge_slave_1: left allmulticast mode [ 224.971305][T10398] bridge_slave_1: left promiscuous mode [ 224.996074][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.024449][T10398] bridge_slave_0: left allmulticast mode [ 225.030305][T10398] bridge_slave_0: left promiscuous mode [ 225.036987][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.289693][T10422] FAULT_INJECTION: forcing a failure. [ 225.289693][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 225.310992][T10422] CPU: 1 UID: 0 PID: 10422 Comm: syz.0.1430 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 225.311023][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.311036][T10422] Call Trace: [ 225.311044][T10422] [ 225.311053][T10422] dump_stack_lvl+0x189/0x250 [ 225.311093][T10422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.311125][T10422] ? __pfx__printk+0x10/0x10 [ 225.311156][T10422] ? __pfx___might_resched+0x10/0x10 [ 225.311178][T10422] ? fs_reclaim_acquire+0x7d/0x100 [ 225.311216][T10422] should_fail_ex+0x414/0x560 [ 225.311242][T10422] ? __pfx_sock_alloc_inode+0x10/0x10 [ 225.311265][T10422] should_failslab+0xa8/0x100 [ 225.311295][T10422] ? __pfx_sock_alloc_inode+0x10/0x10 [ 225.311315][T10422] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 225.311343][T10422] ? sock_alloc_inode+0x28/0xc0 [ 225.311369][T10422] ? __pfx_sock_alloc_inode+0x10/0x10 [ 225.311390][T10422] sock_alloc_inode+0x28/0xc0 [ 225.311411][T10422] alloc_inode+0x67/0x1b0 [ 225.311441][T10422] __sock_create+0x12d/0x9f0 [ 225.311464][T10422] ? fput+0xa0/0xd0 [ 225.311485][T10422] ? rcu_is_watching+0x15/0xb0 [ 225.311510][T10422] __sys_socket+0xd7/0x1b0 [ 225.311540][T10422] __x64_sys_socket+0x7a/0x90 [ 225.311567][T10422] do_syscall_64+0xf6/0x210 [ 225.311594][T10422] ? clear_bhb_loop+0x60/0xb0 [ 225.311619][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.311640][T10422] RIP: 0033:0x7fca3d58e969 [ 225.311659][T10422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.311678][T10422] RSP: 002b:00007fca3e3b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 225.311700][T10422] RAX: ffffffffffffffda RBX: 00007fca3d7b5fa0 RCX: 00007fca3d58e969 [ 225.311715][T10422] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 225.311728][T10422] RBP: 00007fca3e3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 225.311741][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.311753][T10422] R13: 0000000000000000 R14: 00007fca3d7b5fa0 R15: 00007ffdee8fb788 [ 225.311786][T10422] [ 225.311797][T10422] socket: no more sockets [ 225.479669][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.727445][T10434] netlink: 'syz.1.1435': attribute type 30 has an invalid length. [ 225.992250][T10448] netlink: 'syz.2.1441': attribute type 10 has an invalid length. [ 226.017379][T10448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.042882][T10448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.060757][T10448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.077561][T10448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.152364][T10448] team0: Port device geneve0 added [ 226.424654][T10456] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.510821][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.534066][T10470] openvswitch: netlink: Flow actions attr not present in new flow. [ 226.952670][T10478] xt_CT: No such helper "snmp" [ 227.252237][T10506] Unknown options in mask 700 [ 227.534791][T10518] lo speed is unknown, defaulting to 1000 [ 227.550719][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.813958][T10529] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 228.043578][T10539] macvlan2: entered allmulticast mode [ 228.075104][T10539] bond0: entered allmulticast mode [ 228.087094][T10539] bond_slave_0: entered allmulticast mode [ 228.115165][T10539] bond_slave_1: entered allmulticast mode [ 228.149224][T10539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.185456][T10539] team0: Port device macvlan2 added [ 228.382511][T10553] netlink: 'syz.4.1474': attribute type 39 has an invalid length. [ 228.590704][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.770243][T10571] veth1_macvtap: entered promiscuous mode [ 228.797524][T10571] macsec2: entered promiscuous mode [ 228.809878][T10571] macsec2: entered allmulticast mode [ 228.832146][T10571] veth1_macvtap: entered allmulticast mode [ 228.858640][T10571] veth1_macvtap: left allmulticast mode [ 228.879624][T10575] __nla_validate_parse: 7 callbacks suppressed [ 228.879643][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 228.886280][T10571] veth1_macvtap: left promiscuous mode [ 228.949356][T10575] block nbd0: not configured, cannot reconfigure [ 229.114898][T10584] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1483'. [ 229.244335][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 229.266938][T10593] FAULT_INJECTION: forcing a failure. [ 229.266938][T10593] name failslab, interval 1, probability 0, space 0, times 0 [ 229.308905][T10593] CPU: 0 UID: 0 PID: 10593 Comm: syz.0.1486 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 229.308937][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.308950][T10593] Call Trace: [ 229.308957][T10593] [ 229.308967][T10593] dump_stack_lvl+0x189/0x250 [ 229.309007][T10593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.309039][T10593] ? __pfx__printk+0x10/0x10 [ 229.309064][T10593] ? __pfx___might_resched+0x10/0x10 [ 229.309085][T10593] ? fs_reclaim_acquire+0x7d/0x100 [ 229.309124][T10593] should_fail_ex+0x414/0x560 [ 229.309153][T10593] should_failslab+0xa8/0x100 [ 229.309185][T10593] kmem_cache_alloc_noprof+0x73/0x3c0 [ 229.309212][T10593] ? security_inode_alloc+0x39/0x330 [ 229.309245][T10593] security_inode_alloc+0x39/0x330 [ 229.309275][T10593] inode_init_always_gfp+0x9ed/0xdc0 [ 229.309311][T10593] ? __pfx_sock_alloc_inode+0x10/0x10 [ 229.309334][T10593] alloc_inode+0x82/0x1b0 [ 229.309363][T10593] __sock_create+0x12d/0x9f0 [ 229.309386][T10593] ? fput+0xa0/0xd0 [ 229.309408][T10593] ? rcu_is_watching+0x15/0xb0 [ 229.309432][T10593] __sys_socket+0xd7/0x1b0 [ 229.309462][T10593] __x64_sys_socket+0x7a/0x90 [ 229.309490][T10593] do_syscall_64+0xf6/0x210 [ 229.309518][T10593] ? clear_bhb_loop+0x60/0xb0 [ 229.309545][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.309566][T10593] RIP: 0033:0x7fca3d58e969 [ 229.309584][T10593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.309603][T10593] RSP: 002b:00007fca3e3b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 229.309626][T10593] RAX: ffffffffffffffda RBX: 00007fca3d7b5fa0 RCX: 00007fca3d58e969 [ 229.309642][T10593] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 229.309656][T10593] RBP: 00007fca3e3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 229.309669][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.309682][T10593] R13: 0000000000000000 R14: 00007fca3d7b5fa0 R15: 00007ffdee8fb788 [ 229.309716][T10593] [ 229.309755][T10593] socket: no more sockets [ 229.365326][T10596] Unknown options in mask 700 [ 229.630738][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.723573][T10607] atomic_op ffff88802276d998 conn xmit_atomic 0000000000000000 [ 229.735413][T10609] netlink: 1368 bytes leftover after parsing attributes in process `syz.1.1491'. [ 229.762868][T10607] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 229.805775][T10615] netlink: 'syz.0.1493': attribute type 21 has an invalid length. [ 229.833306][T10615] netlink: 'syz.0.1493': attribute type 6 has an invalid length. [ 229.853359][T10615] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1493'. [ 229.875044][T10616] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1493'. [ 230.040455][T10619] lo speed is unknown, defaulting to 1000 [ 230.578530][T10629] lo speed is unknown, defaulting to 1000 [ 230.670832][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.005044][T10646] Unknown options in mask 700 [ 231.148203][T10648] lo speed is unknown, defaulting to 1000 [ 231.151216][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'. [ 231.352666][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1494'. [ 231.552301][T10657] FAULT_INJECTION: forcing a failure. [ 231.552301][T10657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.630783][T10657] CPU: 0 UID: 0 PID: 10657 Comm: syz.4.1505 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 231.630815][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.630829][T10657] Call Trace: [ 231.630837][T10657] [ 231.630846][T10657] dump_stack_lvl+0x189/0x250 [ 231.630882][T10657] ? __lock_acquire+0xaac/0xd20 [ 231.630917][T10657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.630948][T10657] ? __pfx__printk+0x10/0x10 [ 231.630970][T10657] ? __might_fault+0xb0/0x130 [ 231.631012][T10657] should_fail_ex+0x414/0x560 [ 231.631042][T10657] _copy_from_user+0x2d/0xb0 [ 231.631074][T10657] __sys_bpf+0x1ed/0x860 [ 231.631105][T10657] ? __pfx___sys_bpf+0x10/0x10 [ 231.631146][T10657] ? ksys_write+0x1f0/0x250 [ 231.631189][T10657] __x64_sys_bpf+0x7c/0x90 [ 231.631216][T10657] do_syscall_64+0xf6/0x210 [ 231.631242][T10657] ? clear_bhb_loop+0x60/0xb0 [ 231.631269][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.631288][T10657] RIP: 0033:0x7f3f82f8e969 [ 231.631308][T10657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.631326][T10657] RSP: 002b:00007f3f83e89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.631348][T10657] RAX: ffffffffffffffda RBX: 00007f3f831b5fa0 RCX: 00007f3f82f8e969 [ 231.631364][T10657] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 231.631377][T10657] RBP: 00007f3f83e89090 R08: 0000000000000000 R09: 0000000000000000 [ 231.631391][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.631403][T10657] R13: 0000000000000001 R14: 00007f3f831b5fa0 R15: 00007ffe72f888d8 [ 231.631436][T10657] [ 231.810728][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.054180][T10659] tipc: Started in network mode [ 232.062835][T10659] tipc: Node identity , cluster identity 4711 [ 232.445700][T10672] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 232.645768][T10670] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 232.830849][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.957934][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'. [ 233.003502][T10687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 233.024274][T10686] Unknown options in mask 700 [ 233.335395][T10711] netlink: 'syz.0.1518': attribute type 1 has an invalid length. [ 233.643120][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 233.694898][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012012000: rx timeout, send abort [ 233.871076][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.048312][T10733] FAULT_INJECTION: forcing a failure. [ 234.048312][T10733] name failslab, interval 1, probability 0, space 0, times 0 [ 234.097264][T10733] CPU: 1 UID: 0 PID: 10733 Comm: syz.3.1525 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 234.097295][T10733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.097308][T10733] Call Trace: [ 234.097316][T10733] [ 234.097325][T10733] dump_stack_lvl+0x189/0x250 [ 234.097372][T10733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.097404][T10733] ? __pfx__printk+0x10/0x10 [ 234.097432][T10733] ? __pfx___might_resched+0x10/0x10 [ 234.097460][T10733] should_fail_ex+0x414/0x560 [ 234.097490][T10733] should_failslab+0xa8/0x100 [ 234.097522][T10733] __kmalloc_noprof+0xcb/0x4f0 [ 234.097551][T10733] ? sk_prot_alloc+0xe7/0x220 [ 234.097586][T10733] sk_prot_alloc+0xe7/0x220 [ 234.097612][T10733] ? sk_alloc+0x24/0x370 [ 234.097643][T10733] sk_alloc+0x3a/0x370 [ 234.097678][T10733] packet_create+0xff/0x780 [ 234.097715][T10733] __sock_create+0x4b3/0x9f0 [ 234.097751][T10733] __sys_socket+0xd7/0x1b0 [ 234.097780][T10733] __x64_sys_socket+0x7a/0x90 [ 234.097807][T10733] do_syscall_64+0xf6/0x210 [ 234.097834][T10733] ? clear_bhb_loop+0x60/0xb0 [ 234.097858][T10733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.097879][T10733] RIP: 0033:0x7f05d3f8e969 [ 234.097898][T10733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.097916][T10733] RSP: 002b:00007f05d4df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 234.097939][T10733] RAX: ffffffffffffffda RBX: 00007f05d41b5fa0 RCX: 00007f05d3f8e969 [ 234.097954][T10733] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 234.097968][T10733] RBP: 00007f05d4df9090 R08: 0000000000000000 R09: 0000000000000000 [ 234.097981][T10733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.097997][T10733] R13: 0000000000000000 R14: 00007f05d41b5fa0 R15: 00007fff4a937c88 [ 234.098028][T10733] [ 234.290612][ C1] vcan0: j1939_tp_rxtimer: 0xffff888012012000: abort rx timeout. Force session deactivation [ 234.602350][T10749] vlan2: entered promiscuous mode [ 234.734119][T10755] sctp: [Deprecated]: syz.0.1532 (pid 10755) Use of int in maxseg socket option. [ 234.734119][T10755] Use struct sctp_assoc_value instead [ 234.910705][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.947983][T10764] netlink: 'syz.1.1536': attribute type 1 has an invalid length. [ 235.009089][T10766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1538'. [ 235.047626][T10769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1537'. [ 235.059050][T10769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1537'. [ 235.114281][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.143802][T10764] bond7: entered promiscuous mode [ 235.160509][T10764] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.359791][T10773] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.367408][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 235.402833][T10773] bond7: (slave bond8): making interface the new active one [ 235.428902][T10773] bond8: entered promiscuous mode [ 235.450050][T10773] bond7: (slave bond8): Enslaving as an active interface with an up link [ 235.488838][T10772] bridge0: entered promiscuous mode [ 235.509912][T10772] vlan2: entered promiscuous mode [ 235.606013][T10784] macsec1: entered allmulticast mode [ 235.620828][T10784] bond0: entered allmulticast mode [ 235.634522][T10784] bridge2: port 1(macsec1) entered blocking state [ 235.651425][T10784] bridge2: port 1(macsec1) entered disabled state [ 235.675745][T10784] macsec1: entered promiscuous mode [ 235.701424][T10776] lo speed is unknown, defaulting to 1000 [ 235.950965][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.958886][T10804] netlink: 'syz.4.1546': attribute type 15 has an invalid length. [ 235.992305][T10801] ipvlan2: entered promiscuous mode [ 235.999860][T10804] netlink: 'syz.4.1546': attribute type 3 has an invalid length. [ 236.034047][T10804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1546'. [ 236.044751][T10801] ipvlan2: entered allmulticast mode [ 236.109782][T10778] netlink: 'syz.2.1540': attribute type 4 has an invalid length. [ 236.527494][T10832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1551'. [ 236.575702][T10830] netlink: 'syz.4.1552': attribute type 7 has an invalid length. [ 236.637574][ T30] audit: type=1107 audit(1747371140.792:11): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 236.644912][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 236.664556][T10830] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 236.988309][T10849] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1555'. [ 237.000866][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.063891][T10841] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.103698][T10852] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1558'. [ 237.142170][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 237.206135][T10841] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.281622][T10854] wg1: entered promiscuous mode [ 237.287749][T10854] wg1: entered allmulticast mode [ 237.304191][T10843] lo speed is unknown, defaulting to 1000 [ 237.316380][T10841] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.349250][T10858] 8021q: VLANs not supported on syzkaller1 [ 237.364058][T10858] FAULT_INJECTION: forcing a failure. [ 237.364058][T10858] name failslab, interval 1, probability 0, space 0, times 0 [ 237.391077][T10858] CPU: 0 UID: 0 PID: 10858 Comm: syz.0.1561 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 237.391131][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.391144][T10858] Call Trace: [ 237.391152][T10858] [ 237.391160][T10858] dump_stack_lvl+0x189/0x250 [ 237.391199][T10858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.391229][T10858] ? __pfx__printk+0x10/0x10 [ 237.391247][T10858] ? __mutex_trylock_common+0x153/0x260 [ 237.391275][T10858] ? __pfx___mutex_trylock_common+0x10/0x10 [ 237.391308][T10858] should_fail_ex+0x414/0x560 [ 237.391337][T10858] should_failslab+0xa8/0x100 [ 237.391369][T10858] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 237.391398][T10858] ? __alloc_skb+0x112/0x2d0 [ 237.391424][T10858] ? hci_sock_sendmsg+0x549/0xee0 [ 237.391460][T10858] __alloc_skb+0x112/0x2d0 [ 237.391493][T10858] hci_mgmt_cmd+0x1ca/0xef0 [ 237.391512][T10858] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 237.391545][T10858] hci_sock_sendmsg+0x6ca/0xee0 [ 237.391584][T10858] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 237.391615][T10858] ? aa_sock_msg_perm+0x94/0x160 [ 237.391642][T10858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.391667][T10858] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 237.391699][T10858] __sock_sendmsg+0x21c/0x270 [ 237.391727][T10858] sock_write_iter+0x258/0x330 [ 237.391751][T10858] ? __pfx_sock_write_iter+0x10/0x10 [ 237.391784][T10858] ? bpf_lsm_file_permission+0x9/0x20 [ 237.391810][T10858] ? security_file_permission+0x75/0x290 [ 237.391840][T10858] vfs_write+0x548/0xa90 [ 237.391870][T10858] ? __pfx_sock_write_iter+0x10/0x10 [ 237.391892][T10858] ? __pfx_vfs_write+0x10/0x10 [ 237.391929][T10858] ? __fget_files+0x2a/0x420 [ 237.391968][T10858] ksys_write+0x145/0x250 [ 237.391992][T10858] ? rcu_is_watching+0x15/0xb0 [ 237.392013][T10858] ? __pfx_ksys_write+0x10/0x10 [ 237.392043][T10858] ? do_syscall_64+0xba/0x210 [ 237.392073][T10858] do_syscall_64+0xf6/0x210 [ 237.392107][T10858] ? clear_bhb_loop+0x60/0xb0 [ 237.392134][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.392154][T10858] RIP: 0033:0x7fca3d58e969 [ 237.392173][T10858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.392191][T10858] RSP: 002b:00007fca3e3b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.392212][T10858] RAX: ffffffffffffffda RBX: 00007fca3d7b5fa0 RCX: 00007fca3d58e969 [ 237.392227][T10858] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000004 [ 237.392239][T10858] RBP: 00007fca3e3b3090 R08: 0000000000000000 R09: 0000000000000000 [ 237.392252][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.392263][T10858] R13: 0000000000000000 R14: 00007fca3d7b5fa0 R15: 00007ffdee8fb788 [ 237.392297][T10858] [ 237.403354][T10841] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.769587][T10863] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 237.850153][T10865] batman_adv: batadv0: Adding interface: ip6gretap1 [ 237.857147][T10865] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 237.885349][T10865] batman_adv: batadv0: Interface activated: ip6gretap1 [ 237.967611][T10869] lo speed is unknown, defaulting to 1000 [ 238.040896][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.107832][T10841] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.179156][T10841] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.253687][T10841] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.266518][T10876] block nbd0: not configured, cannot reconfigure [ 238.352661][ T6498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.445957][T10841] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.719103][T10889] macsec2: entered promiscuous mode [ 238.756844][T10889] macsec2: entered allmulticast mode [ 238.766351][T10889] dummy0: entered allmulticast mode [ 238.818018][T10893] syzkaller1: entered promiscuous mode [ 238.824096][T10893] syzkaller1: entered allmulticast mode [ 238.833064][ T12] wlan1: Trigger new scan to find an IBSS to join [ 239.070817][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.318447][T10904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.327465][T10904] bond_slave_0: left promiscuous mode [ 239.343978][T10904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.353578][T10904] bond_slave_1: left promiscuous mode [ 239.369646][T10904] bond0 (unregistering): Released all slaves [ 239.375120][T10915] Unknown options in mask 700 [ 239.601477][T10920] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 239.809926][T10928] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 239.969563][T10933] xt_CT: No such helper "snmp" [ 240.084302][T10943] __nla_validate_parse: 6 callbacks suppressed [ 240.084324][T10943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1588'. [ 240.110894][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.261533][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1590'. [ 240.292304][T10946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.409235][T10946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.468968][T10957] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 240.497172][T10960] 8021q: VLANs not supported on syzkaller1 [ 240.665455][T10964] netlink: 'syz.0.1597': attribute type 15 has an invalid length. [ 240.683762][T10964] netlink: 'syz.0.1597': attribute type 3 has an invalid length. [ 240.737146][T10964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1597'. [ 240.917979][T10977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1601'. [ 241.009520][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 241.033709][T10981] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1604'. [ 241.059044][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1603'. [ 241.090339][T10985] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 241.150818][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.431202][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 241.459604][T11002] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 241.490373][T11002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.548081][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1615'. [ 241.592998][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 241.658064][T11012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.688374][T11021] netlink: 'syz.0.1619': attribute type 10 has an invalid length. [ 241.703340][T11007] bridge4: entered promiscuous mode [ 241.733456][T11023] block nbd0: not configured, cannot reconfigure [ 241.795502][T11021] team0: Port device geneve0 added [ 241.835389][T11027] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 241.916670][T11030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.026258][T11033] vlan2: entered promiscuous mode [ 242.191298][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.396936][T11049] netlink: 'syz.4.1628': attribute type 39 has an invalid length. [ 242.505391][T11053] veth1_to_bond: entered allmulticast mode [ 242.618609][T11053] veth1_to_bond: entered promiscuous mode [ 242.832403][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.871450][T11051] veth1_to_bond: left promiscuous mode [ 242.889606][T11051] veth1_to_bond: left allmulticast mode [ 242.929777][T11065] netlink: 'syz.4.1632': attribute type 10 has an invalid length. [ 242.944032][T11065] team0: Device geneve0 is up. Set it down before adding it as a team port [ 242.987868][T11065] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 243.016447][T11069] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 243.089864][T11067] netlink: 'syz.1.1634': attribute type 4 has an invalid length. [ 243.230825][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.791849][ T6496] wlan1: Trigger new scan to find an IBSS to join [ 244.270903][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.340959][T11113] macsec3: entered allmulticast mode [ 244.346330][T11113] bond0: entered allmulticast mode [ 244.364341][T11113] bond_slave_0: entered allmulticast mode [ 244.370130][T11113] bond_slave_1: entered allmulticast mode [ 244.444113][T11113] bond0: left allmulticast mode [ 244.449044][T11113] bond_slave_0: left allmulticast mode [ 244.473201][T11113] bond_slave_1: left allmulticast mode [ 244.726151][ T6496] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 244.831452][ T6500] wlan1: Trigger new scan to find an IBSS to join [ 244.881809][T11129] lo speed is unknown, defaulting to 1000 [ 244.935419][T11132] vlan2: entered promiscuous mode [ 244.962102][T11132] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 244.991198][T11132] vlan2: entered allmulticast mode [ 245.008613][T11132] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 245.310909][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.405591][T11149] __nla_validate_parse: 13 callbacks suppressed [ 245.405612][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1665'. [ 245.476442][T11149] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 245.505572][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1666'. [ 245.658969][T11162] lo speed is unknown, defaulting to 1000 [ 245.716592][T11149] validate_nla: 2 callbacks suppressed [ 245.716611][T11149] netlink: 'syz.2.1665': attribute type 12 has an invalid length. [ 245.741058][T11149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1665'. [ 245.964497][T11169] macsec3: entered promiscuous mode [ 245.970975][T11169] macsec3: entered allmulticast mode [ 245.976308][T11169] veth1_macvtap: entered allmulticast mode [ 246.006382][T11169] veth1_macvtap: left allmulticast mode [ 246.203991][T11178] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1672'. [ 246.213491][T11178] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1672'. [ 246.226399][T11180] vlan0: entered promiscuous mode [ 246.351833][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.355885][ T30] audit: type=1800 audit(1747371150.512:12): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1676" name="memory.events" dev="tmpfs" ino=1888 res=0 errno=0 [ 246.382388][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 247.290268][T11221] netlink: 'syz.1.1684': attribute type 1 has an invalid length. [ 247.400957][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.441993][T11227] FAULT_INJECTION: forcing a failure. [ 247.441993][T11227] name failslab, interval 1, probability 0, space 0, times 0 [ 247.464876][T11221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.502267][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1684'. [ 247.519232][T11227] CPU: 1 UID: 0 PID: 11227 Comm: syz.2.1686 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 247.519262][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.519286][T11227] Call Trace: [ 247.519298][T11227] [ 247.519307][T11227] dump_stack_lvl+0x189/0x250 [ 247.519348][T11227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.519379][T11227] ? __pfx__printk+0x10/0x10 [ 247.519408][T11227] ? __pfx___might_resched+0x10/0x10 [ 247.519427][T11227] ? fs_reclaim_acquire+0x7d/0x100 [ 247.519467][T11227] should_fail_ex+0x414/0x560 [ 247.519497][T11227] should_failslab+0xa8/0x100 [ 247.519530][T11227] kmem_cache_alloc_noprof+0x73/0x3c0 [ 247.519558][T11227] ? alloc_empty_file+0x55/0x1d0 [ 247.519596][T11227] alloc_empty_file+0x55/0x1d0 [ 247.519630][T11227] alloc_file_pseudo+0x13d/0x210 [ 247.519668][T11227] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 247.519710][T11227] ? alloc_fd+0x64c/0x6c0 [ 247.519744][T11227] sock_alloc_file+0xb8/0x2e0 [ 247.519765][T11227] ? __sys_socket+0x12c/0x1b0 [ 247.519793][T11227] __sys_socket+0x13d/0x1b0 [ 247.519824][T11227] __x64_sys_socket+0x7a/0x90 [ 247.519871][T11227] do_syscall_64+0xf6/0x210 [ 247.519899][T11227] ? clear_bhb_loop+0x60/0xb0 [ 247.519926][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.519947][T11227] RIP: 0033:0x7f07df58e969 [ 247.519966][T11227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.519985][T11227] RSP: 002b:00007f07e04b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 247.520008][T11227] RAX: ffffffffffffffda RBX: 00007f07df7b5fa0 RCX: 00007f07df58e969 [ 247.520034][T11227] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 247.520047][T11227] RBP: 00007f07e04b2090 R08: 0000000000000000 R09: 0000000000000000 [ 247.520061][T11227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.520074][T11227] R13: 0000000000000000 R14: 00007f07df7b5fa0 R15: 00007fff7b8450a8 [ 247.520107][T11227] [ 247.779264][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1684'. [ 247.844795][ T6496] wlan1: Trigger new scan to find an IBSS to join [ 248.058923][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 248.381638][T11253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1697'. [ 248.430918][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.782095][ T6500] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 249.470875][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.609387][T11302] vlan3: entered promiscuous mode [ 249.919419][T11310] vlan0: entered promiscuous mode [ 250.521483][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.581264][T11339] FAULT_INJECTION: forcing a failure. [ 250.581264][T11339] name failslab, interval 1, probability 0, space 0, times 0 [ 250.594420][T11339] CPU: 1 UID: 0 PID: 11339 Comm: syz.2.1734 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 250.594449][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.594464][T11339] Call Trace: [ 250.594472][T11339] [ 250.594481][T11339] dump_stack_lvl+0x189/0x250 [ 250.594522][T11339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.594555][T11339] ? __pfx__printk+0x10/0x10 [ 250.594581][T11339] ? __pfx___might_resched+0x10/0x10 [ 250.594603][T11339] ? fs_reclaim_acquire+0x7d/0x100 [ 250.594643][T11339] should_fail_ex+0x414/0x560 [ 250.594674][T11339] should_failslab+0xa8/0x100 [ 250.594707][T11339] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 250.594743][T11339] ? __alloc_skb+0x112/0x2d0 [ 250.594786][T11339] __alloc_skb+0x112/0x2d0 [ 250.594821][T11339] mgmt_cmd_complete+0x49/0x590 [ 250.594855][T11339] ? hci_dev_get+0x40/0x190 [ 250.594890][T11339] set_bondable+0x1cb/0x350 [ 250.594918][T11339] ? __pfx_set_bondable+0x10/0x10 [ 250.594955][T11339] hci_mgmt_cmd+0x9c6/0xef0 [ 250.594992][T11339] hci_sock_sendmsg+0x6ca/0xee0 [ 250.595034][T11339] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 250.595067][T11339] ? aa_sock_msg_perm+0x94/0x160 [ 250.595095][T11339] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 250.595122][T11339] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 250.595157][T11339] __sock_sendmsg+0x21c/0x270 [ 250.595185][T11339] sock_write_iter+0x258/0x330 [ 250.595212][T11339] ? __pfx_sock_write_iter+0x10/0x10 [ 250.595249][T11339] ? bpf_lsm_file_permission+0x9/0x20 [ 250.595278][T11339] ? security_file_permission+0x75/0x290 [ 250.595309][T11339] vfs_write+0x548/0xa90 [ 250.595342][T11339] ? __pfx_sock_write_iter+0x10/0x10 [ 250.595366][T11339] ? __pfx_vfs_write+0x10/0x10 [ 250.595405][T11339] ? __fget_files+0x2a/0x420 [ 250.595447][T11339] ksys_write+0x145/0x250 [ 250.595471][T11339] ? rcu_is_watching+0x15/0xb0 [ 250.595494][T11339] ? __pfx_ksys_write+0x10/0x10 [ 250.595526][T11339] ? do_syscall_64+0xba/0x210 [ 250.595557][T11339] do_syscall_64+0xf6/0x210 [ 250.595584][T11339] ? clear_bhb_loop+0x60/0xb0 [ 250.595612][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.595632][T11339] RIP: 0033:0x7f07df58e969 [ 250.595652][T11339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.595672][T11339] RSP: 002b:00007f07e04b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.595694][T11339] RAX: ffffffffffffffda RBX: 00007f07df7b5fa0 RCX: 00007f07df58e969 [ 250.595710][T11339] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000004 [ 250.595724][T11339] RBP: 00007f07e04b2090 R08: 0000000000000000 R09: 0000000000000000 [ 250.595737][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.595750][T11339] R13: 0000000000000000 R14: 00007f07df7b5fa0 R15: 00007fff7b8450a8 [ 250.595796][T11339] [ 251.084210][T11347] __nla_validate_parse: 7 callbacks suppressed [ 251.084231][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'. [ 251.316270][T11347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.415264][T11353] veth3: entered promiscuous mode [ 251.430095][T11353] bond6: (slave veth3): Enslaving as an active interface with an up link [ 251.448130][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 251.542009][T11355] lo speed is unknown, defaulting to 1000 [ 251.560938][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.718044][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 251.774330][T11363] vlan0: entered promiscuous mode [ 251.889912][T11378] netlink: 'syz.4.1745': attribute type 11 has an invalid length. [ 251.957225][T11382] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1747'. [ 252.096335][T11379] lo speed is unknown, defaulting to 1000 [ 252.243600][T11391] FAULT_INJECTION: forcing a failure. [ 252.243600][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 252.243620][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'. [ 252.317612][T11391] CPU: 0 UID: 0 PID: 11391 Comm: syz.4.1750 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 252.317644][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.317658][T11391] Call Trace: [ 252.317666][T11391] [ 252.317676][T11391] dump_stack_lvl+0x189/0x250 [ 252.317716][T11391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.317748][T11391] ? __pfx__printk+0x10/0x10 [ 252.317773][T11391] ? __pfx___might_resched+0x10/0x10 [ 252.317795][T11391] ? fs_reclaim_acquire+0x7d/0x100 [ 252.317833][T11391] should_fail_ex+0x414/0x560 [ 252.317863][T11391] should_failslab+0xa8/0x100 [ 252.317895][T11391] kmem_cache_alloc_noprof+0x73/0x3c0 [ 252.317929][T11391] ? security_file_alloc+0x34/0x330 [ 252.317955][T11391] security_file_alloc+0x34/0x330 [ 252.317978][T11391] init_file+0x93/0x2f0 [ 252.318014][T11391] alloc_empty_file+0x6e/0x1d0 [ 252.318049][T11391] alloc_file_pseudo+0x13d/0x210 [ 252.318086][T11391] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 252.318126][T11391] ? alloc_fd+0x64c/0x6c0 [ 252.318160][T11391] sock_alloc_file+0xb8/0x2e0 [ 252.318181][T11391] ? __sys_socket+0x12c/0x1b0 [ 252.318208][T11391] __sys_socket+0x13d/0x1b0 [ 252.318237][T11391] __x64_sys_socket+0x7a/0x90 [ 252.318264][T11391] do_syscall_64+0xf6/0x210 [ 252.318292][T11391] ? clear_bhb_loop+0x60/0xb0 [ 252.318318][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.318339][T11391] RIP: 0033:0x7f3f82f8e969 [ 252.318358][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.318376][T11391] RSP: 002b:00007f3f83e89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 252.318398][T11391] RAX: ffffffffffffffda RBX: 00007f3f831b5fa0 RCX: 00007f3f82f8e969 [ 252.318414][T11391] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 252.318427][T11391] RBP: 00007f3f83e89090 R08: 0000000000000000 R09: 0000000000000000 [ 252.318440][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.318453][T11391] R13: 0000000000000000 R14: 00007f3f831b5fa0 R15: 00007ffe72f888d8 [ 252.318486][T11391] [ 252.590824][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.768174][T11383] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1746'. [ 252.777702][T11383] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1746'. [ 252.818449][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 252.934005][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 253.200219][T11419] bridge0: port 3(vlan2) entered blocking state [ 253.234833][T11419] bridge0: port 3(vlan2) entered disabled state [ 253.277280][T11419] vlan2: entered allmulticast mode [ 253.284135][T11419] bond0: entered allmulticast mode [ 253.295393][T11419] vlan2: entered promiscuous mode [ 253.300473][T11419] bond0: entered promiscuous mode [ 253.461372][T11432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1763'. [ 253.630872][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.848716][T11446] lo speed is unknown, defaulting to 1000 [ 253.999970][T11457] vlan3: entered promiscuous mode [ 254.549021][T11475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.671155][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.712566][T11475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.874941][T11499] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 255.059596][T11475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.227403][T11475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.254949][T11509] vlan3: entered promiscuous mode [ 255.421795][T11475] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.425558][T11516] block nbd0: not configured, cannot reconfigure [ 255.469734][T11475] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.563623][T11513] macsec1: left promiscuous mode [ 255.569035][T11513] bridge2: port 1(macsec1) entered disabled state [ 255.599017][T11513] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 255.622448][T11513] batman_adv: batadv0: Removing interface: ip6gretap1 [ 255.636821][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.671388][T11513] bond6: (slave veth3): Releasing backup interface [ 255.710799][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.762905][T11475] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.845751][T11475] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.953788][T11529] vlan0: entered promiscuous mode [ 256.094335][T11533] Unknown options in mask 700 [ 256.326554][T11542] tipc: Started in network mode [ 256.343157][T11542] tipc: Node identity , cluster identity 4711 [ 256.388436][T11549] syz.1.1806 uses old SIOCAX25GETINFO [ 256.552105][T11551] ipvlan2: entered promiscuous mode [ 256.577534][T11551] ipvlan2: entered allmulticast mode [ 256.579755][T11559] __nla_validate_parse: 5 callbacks suppressed [ 256.579775][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1807'. [ 256.629163][T11560] ------------[ cut here ]------------ [ 256.635009][T11560] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7) [ 256.684723][T11560] WARNING: CPU: 0 PID: 11560 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 256.697887][T11560] Modules linked in: [ 256.702413][T11560] CPU: 0 UID: 0 PID: 11560 Comm: syz.0.1808 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 256.714582][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.725661][T11560] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 256.733273][T11560] Code: 71 17 00 00 48 c7 c7 a0 ff 0b 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 60 25 9c fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 bd c8 d7 fa 90 0f 0b 90 e9 fe fe ff [ 256.753165][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.760488][T11560] RSP: 0018:ffffc9000b8f6fb0 EFLAGS: 00010282 [ 256.767338][T11560] RAX: 28f0c4dbc9551a00 RBX: 0000000000000014 RCX: ffff88805bcdda00 [ 256.775390][T11560] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 256.783436][T11560] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 256.791475][T11560] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: 0000000000000000 [ 256.799485][T11560] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 256.807550][T11560] FS: 00007fca3e3926c0(0000) GS:ffff8881260b6000(0000) knlGS:0000000000000000 [ 256.816572][T11560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 256.824181][T11560] CR2: 0000200000001000 CR3: 0000000055484000 CR4: 00000000003526f0 [ 256.832978][T11560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.841161][T11560] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 256.849170][T11560] Call Trace: [ 256.852551][T11560] [ 256.855531][T11560] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 256.861633][T11560] mac80211_hwsim_sta_add+0xa3/0x310 [ 256.866970][T11560] drv_sta_state+0x8c1/0x1840 [ 256.871782][T11560] sta_info_insert_rcu+0xd32/0x1940 [ 256.877032][T11560] ? sta_info_insert_rcu+0x2ce/0x1940 [ 256.882515][T11560] sta_info_insert+0x16/0xc0 [ 256.887158][T11560] rdev_add_station+0x105/0x290 [ 256.892113][T11560] nl80211_new_station+0x1723/0x1b40 [ 256.897461][T11560] ? __pfx_nl80211_new_station+0x10/0x10 [ 256.903189][T11560] ? netdev_run_todo+0xe1d/0xea0 [ 256.908196][T11560] ? nl80211_pre_doit+0x4f1/0x930 [ 256.913520][T11560] genl_family_rcv_msg_doit+0x215/0x300 [ 256.919131][T11560] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 256.926201][T11560] ? bpf_lsm_capable+0x9/0x20 [ 256.931735][T11560] ? security_capable+0x7e/0x2e0 [ 256.936736][T11560] genl_rcv_msg+0x60e/0x790 [ 256.941354][T11560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.946420][T11560] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 256.951867][T11560] ? __pfx_nl80211_new_station+0x10/0x10 [ 256.957543][T11560] ? __pfx_nl80211_post_doit+0x10/0x10 [ 256.963084][T11560] ? ref_tracker_free+0x63a/0x7d0 [ 256.968151][T11560] ? __copy_skb_header+0xa7/0x550 [ 256.973277][T11560] netlink_rcv_skb+0x219/0x490 [ 256.978089][T11560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.983201][T11560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.988573][T11560] ? down_read+0x1ad/0x2e0 [ 256.993096][T11560] genl_rcv+0x28/0x40 [ 256.997113][T11560] netlink_unicast+0x75b/0x8d0 [ 257.001988][T11560] netlink_sendmsg+0x805/0xb30 [ 257.006795][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.012159][T11560] ? aa_sock_msg_perm+0x94/0x160 [ 257.017144][T11560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.022506][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.028553][T11560] __sock_sendmsg+0x21c/0x270 [ 257.034123][T11560] ____sys_sendmsg+0x505/0x830 [ 257.038940][T11560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.044305][T11560] ? import_iovec+0x74/0xa0 [ 257.048850][T11560] ___sys_sendmsg+0x21f/0x2a0 [ 257.053611][T11560] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.058877][T11560] ? __fget_files+0x2a/0x420 [ 257.063563][T11560] ? __fget_files+0x3a0/0x420 [ 257.068284][T11560] __x64_sys_sendmsg+0x19b/0x260 [ 257.073325][T11560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.078850][T11560] ? do_syscall_64+0xba/0x210 [ 257.083612][T11560] do_syscall_64+0xf6/0x210 [ 257.088160][T11560] ? clear_bhb_loop+0x60/0xb0 [ 257.092939][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.098957][T11560] RIP: 0033:0x7fca3d58e969 [ 257.103451][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.123125][T11560] RSP: 002b:00007fca3e392038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.132542][T11560] RAX: ffffffffffffffda RBX: 00007fca3d7b6080 RCX: 00007fca3d58e969 [ 257.140572][T11560] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000f [ 257.149849][T11560] RBP: 00007fca3d610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 257.158382][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.166455][T11560] R13: 0000000000000000 R14: 00007fca3d7b6080 R15: 00007ffdee8fb788 [ 257.174530][T11560] [ 257.177571][T11560] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 257.184857][T11560] CPU: 0 UID: 0 PID: 11560 Comm: syz.0.1808 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) [ 257.196930][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.206998][T11560] Call Trace: [ 257.210289][T11560] [ 257.213233][T11560] dump_stack_lvl+0x99/0x250 [ 257.217852][T11560] ? __asan_memcpy+0x40/0x70 [ 257.222492][T11560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.227715][T11560] ? __pfx__printk+0x10/0x10 [ 257.232329][T11560] panic+0x2db/0x790 [ 257.236270][T11560] ? __pfx_panic+0x10/0x10 [ 257.242040][T11560] __warn+0x31b/0x4b0 [ 257.246042][T11560] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 257.252141][T11560] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 257.258253][T11560] report_bug+0x2be/0x4f0 [ 257.262602][T11560] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 257.268686][T11560] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 257.274765][T11560] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 257.280844][T11560] handle_bug+0x84/0x160 [ 257.285102][T11560] exc_invalid_op+0x1a/0x50 [ 257.289618][T11560] asm_exc_invalid_op+0x1a/0x20 [ 257.294477][T11560] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 257.301170][T11560] Code: 71 17 00 00 48 c7 c7 a0 ff 0b 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 60 25 9c fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 bd c8 d7 fa 90 0f 0b 90 e9 fe fe ff [ 257.320785][T11560] RSP: 0018:ffffc9000b8f6fb0 EFLAGS: 00010282 [ 257.326863][T11560] RAX: 28f0c4dbc9551a00 RBX: 0000000000000014 RCX: ffff88805bcdda00 [ 257.334847][T11560] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 257.342827][T11560] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 257.350804][T11560] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: 0000000000000000 [ 257.358783][T11560] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000 [ 257.366784][T11560] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 257.372789][T11560] mac80211_hwsim_sta_add+0xa3/0x310 [ 257.378091][T11560] drv_sta_state+0x8c1/0x1840 [ 257.382786][T11560] sta_info_insert_rcu+0xd32/0x1940 [ 257.387998][T11560] ? sta_info_insert_rcu+0x2ce/0x1940 [ 257.393395][T11560] sta_info_insert+0x16/0xc0 [ 257.397998][T11560] rdev_add_station+0x105/0x290 [ 257.402870][T11560] nl80211_new_station+0x1723/0x1b40 [ 257.408182][T11560] ? __pfx_nl80211_new_station+0x10/0x10 [ 257.413829][T11560] ? netdev_run_todo+0xe1d/0xea0 [ 257.418800][T11560] ? nl80211_pre_doit+0x4f1/0x930 [ 257.423844][T11560] genl_family_rcv_msg_doit+0x215/0x300 [ 257.429410][T11560] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 257.435501][T11560] ? bpf_lsm_capable+0x9/0x20 [ 257.440206][T11560] ? security_capable+0x7e/0x2e0 [ 257.445171][T11560] genl_rcv_msg+0x60e/0x790 [ 257.449692][T11560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.454733][T11560] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 257.460131][T11560] ? __pfx_nl80211_new_station+0x10/0x10 [ 257.465775][T11560] ? __pfx_nl80211_post_doit+0x10/0x10 [ 257.471247][T11560] ? ref_tracker_free+0x63a/0x7d0 [ 257.476285][T11560] ? __copy_skb_header+0xa7/0x550 [ 257.481337][T11560] netlink_rcv_skb+0x219/0x490 [ 257.486135][T11560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.491264][T11560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.496603][T11560] ? down_read+0x1ad/0x2e0 [ 257.501045][T11560] genl_rcv+0x28/0x40 [ 257.505051][T11560] netlink_unicast+0x75b/0x8d0 [ 257.509842][T11560] netlink_sendmsg+0x805/0xb30 [ 257.514641][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.519973][T11560] ? aa_sock_msg_perm+0x94/0x160 [ 257.524949][T11560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.530247][T11560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.535571][T11560] __sock_sendmsg+0x21c/0x270 [ 257.540274][T11560] ____sys_sendmsg+0x505/0x830 [ 257.545073][T11560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.550396][T11560] ? import_iovec+0x74/0xa0 [ 257.554935][T11560] ___sys_sendmsg+0x21f/0x2a0 [ 257.559640][T11560] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.564895][T11560] ? __fget_files+0x2a/0x420 [ 257.569505][T11560] ? __fget_files+0x3a0/0x420 [ 257.574209][T11560] __x64_sys_sendmsg+0x19b/0x260 [ 257.579173][T11560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.584667][T11560] ? do_syscall_64+0xba/0x210 [ 257.589362][T11560] do_syscall_64+0xf6/0x210 [ 257.593881][T11560] ? clear_bhb_loop+0x60/0xb0 [ 257.598573][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.604496][T11560] RIP: 0033:0x7fca3d58e969 [ 257.608921][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.628545][T11560] RSP: 002b:00007fca3e392038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.636978][T11560] RAX: ffffffffffffffda RBX: 00007fca3d7b6080 RCX: 00007fca3d58e969 [ 257.644965][T11560] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000f [ 257.652952][T11560] RBP: 00007fca3d610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 257.660942][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.668930][T11560] R13: 0000000000000000 R14: 00007fca3d7b6080 R15: 00007ffdee8fb788 [ 257.676930][T11560] [ 257.680305][T11560] Kernel Offset: disabled [ 257.684653][T11560] Rebooting in 86400 seconds..