last executing test programs: 3.791857713s ago: executing program 4 (id=4333): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001"], 0x25c}}, 0x13000000) 2.080744763s ago: executing program 4 (id=4349): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) 1.815562914s ago: executing program 0 (id=4354): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000fc00000000000000000000000000000000330000000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000004010500ac1e0001000000000000000000000000000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c"], 0x1bc}}, 0x0) 1.749311197s ago: executing program 4 (id=4355): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x794, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)=""/25, 0x19}, 0xb8}], 0x1, 0x12140, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffc2d8, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r3, 0x2000000, 0x17, 0x0, &(0x7f00000000c0)="3a1d5bd9a05eb82766a03581b25692ed5fa22942afbd5d", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x8083}, 0x0) 1.734055458s ago: executing program 3 (id=4356): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto(r0, &(0x7f0000000100)="f59737bc61264084f585b940c3aba03f3e262917c8ae3c5df7c06fe68e9bea83012665402d905428a9716426eb9b67a5b7aefbacac657dd83c4202c4cee673de73d21ae4348a5c9b54e28f46b94b026de580f486e86b2fee81e4ea0ac511aa65952ba982f68985537c7b5f98cbf6bdb59a18e1ebddfd3b5781dc2b743addd95d7ef2a5871c10fc8ccc3fbd951d6f5bef97b1c1557b2768e9dbddee86548d15947d5ddc69b7c8a60c0a5ec7263a7b15", 0xaf, 0x0, &(0x7f00000001c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) sendto(r0, &(0x7f0000000100)="f59737bc61264084f585b940c3aba03f3e262917c8ae3c5df7c06fe68e9bea83012665402d905428a9716426eb9b67a5b7aefbacac657dd83c4202c4cee673de73d21ae4348a5c9b54e28f46b94b026de580f486e86b2fee81e4ea0ac511aa65952ba982f68985537c7b5f98cbf6bdb59a18e1ebddfd3b5781dc2b743addd95d7ef2a5871c10fc8ccc3fbd951d6f5bef97b1c1557b2768e9dbddee86548d15947d5ddc69b7c8a60c0a5ec7263a7b15", 0xaf, 0x0, &(0x7f00000001c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}}, 0x0) (async) 1.593782366s ago: executing program 0 (id=4357): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.541155284s ago: executing program 3 (id=4359): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = accept4$unix(r0, 0x0, &(0x7f00000001c0), 0x0) r3 = accept4$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) r6 = getgid() r7 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@private}}, &(0x7f0000000580)=0xe8) r9 = getgid() r10 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0}, &(0x7f0000000a40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000b80)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000bc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000d00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0, 0x0}, &(0x7f0000000d80)=0xc) r18 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002240)=0x0) r20 = getgid() r21 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002280)={0x0, 0x0, 0x0}, &(0x7f00000022c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002300)={0x0}, &(0x7f0000002340)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002380)={0x0, 0x0}, &(0x7f00000023c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002400)={0x0, 0x0, 0x0}, &(0x7f0000002440)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002480)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000024c0)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000025c0)=0xe8) sendmmsg$unix(r2, &(0x7f0000003ec0)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)="56c0996a480a9338125eb47c8d90dfd32a1fce6d1636f5e3d3093957bb8c3cdacd2860b4c7650eb58c074b1e18d1ccebb2ebd9c7521ff944469b65a183867d2d42e748e8ffbfbf94c68b199cb0bc9f87da726f28a7bf4de93fdcdd2a51ad0f56857647ee726963c22146ec760a4024e1c5a1fc1db6e19436d0787b4f9ca9431f79907329991450d739e4ad30343dd06ae67c1b6d3e55b8ce314ac04c45c51eae92903befdc1468344b0f4521cb5f9d374667bb921bc751bf09f03bfdf8", 0xbd}, {&(0x7f0000000340)="31fff0e8727e96655207fec017c2b031fd691a0c6de2800f9fee2e1768521ca5f857a7727a5b7153c326d35e019895a379a479940dd3d97b5a31", 0x3a}], 0x2, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [r3, r0, r0, r0, r4, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x90, 0x4800}}, {{&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000700)="d7dabce748198261f44596451750e4e12e2fd2c46b0bb581430b0f777809230c836af4ee43b880f5c2ef69a96076d22e93b7dd2d5c01f26387fb65fc108124a4656c190217ef1f1f848d8bf1a86df0c5bee4c51fc036090ec741eeec0971d6e3565da02069fac06db63109cf3602e2a80838a3bed00e062ce36629fb758abca6645b472c03199648a24fc9a8e32cb1c2a349446d157578cd9bd40bcb11d5ee5aeaa57a4ed58fbc4edd81dc70c4ad3c2579e0ddcaa74750d0066f0636d5e97d388b39", 0xc2}], 0x1, &(0x7f0000000dc0)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r0, r18, r0, r0]}}], 0xb0, 0xc0}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000f00)="7ea2701a377283c4199f8c461deb8b15de07a2d1a7a3447473d447ae8721e25a4eab73f9fa293d4176909dd2f6480a17bf3145034322aed5ba1c5a81433c5523a981c937e9a4f90a42b7cfe50f4b27b0317aff7b5f3595538061dc3c9663e3ff893dfd08d40c98287dc0d02a297137b2271782b96026a5cf6b29cd74df60ab44c8179bd7f64eb1729511f65c914ec857774be85c1a7e22ccb97b33b147b6c1fde5137980f691bf78a41ff275d7e92d7f34ebba52cb9b3becf9bc0068c329d65b0e56bde9e9a2fb9c5132323adac9f8da933588dfaa0223f4a8a46c2ec3f8a27d7a05a1dec084b9cf5d67ee364df0afb86ad50cec42d0623a06f6f333eadc4d99c43f94de8fe88661f9236ddb0c6dc7b1c9e49f809b5b17e93133a1a4363c0b10a26af94a3e9769025938f408e4912fa99b3c977c6bd00d939f17b006cdb7b5c049c8007b0526cbb70d5eda2a904969388ad27c3fc2a64a5e6589e3d2ffa593c900fb23e3a710f8389dc4cef1b10e317ed494090fddc36782cdf80fa6bae5bf1434038746669c4c1eaf48f374bc3031b2b4ce4d70c173873caccece1260bb80fff10a6b23df164f3d07b877fbaf3347e61a9a631f715854aac4d2ddfe4e80d5bc2fc71280b3666e1057f0848895e3818a40be5c40e03b80eca340fec8bf87897040990eb994f81463f9c5499b5fdc3bc40586270091c1253a8567ac22caff667ee5b4c1618f9da17e15f661296515c6a61fd4ef2ab50ffbd8d677a29655c341bf6f96c217e1b829ff6d16dd17e4bf717a6c69da9922e0c5fe2c23792f3659f0f63f0f7544d2226b0f978f490c5fa48c8aacc6e116d3d36812f68c68548dba16e7dbfaedb4b2456b64fdf2d000be8aba71d1a2ccca86eb856b0de473561293687f2a478e03391b04de126acb05eec4fd7f467906cb691471063b0aca36b01153da337d053614bb7dc9f37bb3dd5d886bb279f085ca59756acf9fe3f40e5f9333d02318a3382c0980d16a95fd06708633fcd4b18072a75935d939246564e8412849a1db96538f91ae16fe999d901687df00bc28f62838b6c5cddf2c76915221da20d77f071d91513aca5978dd830cf77e9b6a9f078cfdca8a9b3b155f25523c71d5fddcbdd9cdb0ab4c0b09b27c604e9dd4f4f7756c1904acd1a3d945a110873ceb800d479b1ddcaf23661a59c620e6115bcb4cfbb714355d71058ac334e9ad3e50ca40a470fe5a346235636774c1546cdfcb7a7b880fc92e9c979f96073dc99b5ddbcbec0a62f0eedea401ed58e8423d04bcc1c4f9d346aea4f6c37198bda485464746f50cf135cc7f6415345a801a4adeadb0bdc8dd5f1ae252d74eb382f1516bad9dd42cdb52ad07946ed4a61c901208642c2881fb938c4eca7a3cb7ec309a67005cf8e60ff378e5212d99219419f3dc18ee4c57c616cd5be4ccacfe4b9786d00a274cd63e87f3cc86572826c49907f5bb3b9e7876e6fbfe9d36772b04e1b4ae627c1fbbf26bdae18bc09ef409d4c7b193591d9d144e9d4f8d09d17104e9bfde6e02b009652d68a597ed75a57e4b4b4271a70dd95c4316358a123d23c68764f70f8cae8a55b5b3726767b42849b0535d25ba6b5980f9320bd9d8fabc380214db758e915c4039c89cb375b67bc6ae4407c6b6640fea27ee1a021d3123b1d9387c133106961b3e5546333fd0d13c492f310c295dc9df5a47c20bcd6ac215960125d89a646f0d48c317d423d80c3d3c62230e79675b1861bdbbec07c4e73a85103c4ff330619c00719fb9957f2a7ce9afe1e1062761fb81f9b3efeb644a32e8f4265a1d25611243dfc1d698a90a86b74900c190f2a64ba95793af7b6587baf8692a0e5e74ca82f7b866949b3de7b237dd885fe2eec61428441406f0248635311e688d29acac2fc3649ce82a99e7f9e3ea7b07642be8c02afb47d20d7ec8c6586b23c178c59f2a960d6fad67964a1b4522ce961718ab55df50ef88c68d0765ba85503ae293380a2c463e148b545b0ad6d708d2ebfaab61ec0b6c76f817c6020399c4140e5181eb9a4b55355ce45209c33403c90fe81bcb79b05ad0f773ba7e7a9af972b09a5b2314bc7d2673422b178176cd9f542374383ce45bb76b2a15d6d8993eeefa83c94b063f62bdd960ad297789ccfe13ec03a74aa468622a2d3dcf022ff627d7131997c7005ec82446e4647cc6a2d717e503c02c263298254b2cfbd822f69d95bdcef8f9b1ec0184218218cc00ce5736e0705e0e4582e0d05329174d9fdde458c8feb98c0e66419f12b9a0280d3657da8173c3fc1e49699529e47f80b4f4a3543a6a70b4f6819ffa344261cd4d265f60f03c862695aba624939b2bcff3844bb6d20b162fc0dcaf26bb96db2c6c19aa5880a886a87bd447e5fd5845c9b4450b83f560d8c992a259ec9e95114e450b6c22e8aec401cfd567737fabd96eba4490779a3dd07feb17c28520bd6ad1d8bfb3dd0a1a55561f9655212f7b2e2b5cec5b31b163ae01d997d06de6f1c41ae060f453096ef13a214180eefd118661f49dfd05aa0742fc90d8a733fb6986fe333b2085a1f273de8a0c2c33e65b7a66a29f3d3c86f34b8444fb56713189695efb307005f0d52fb6b49df4c66b5c08280950c187987c70d0adfe1760fbcf12c62e81e40cb9c37fb33ffe52a5ea44a2954f67547d3b94b7a2bef4e2139faf9cc880758595fa8513c847a6fc0481ee3bcaf85b85d42a72333e8c2946e30c45d209585366397de7345b44c6cdd4adf1c8fa95fa435705af6beb4464ffe1cdf63c2f44bca9366cb58ad41165b0d7b464ee7d72068331c11244d2717d3dfebd9bf1fc3d515ba823ef1d216e74de4f8c8578f02213a2471614479b943422a97d3a5106342fd755dc1250b96e5090e734e9f45edff46f46d5f4093c8f579d644006d5ba65bdade6207680f25761cf1bed7ae420f8a6ecbae0c506305bb07f6f5efedcf13342f360b1bf3030dffb6680870862029cea2bf4cf3cdc6e187177547395d391f40764ad8b3fc715381029459dcad142bd5659f725518a7f12082298894ec16837277e3a81fcc1ded5571a2d3f9b87bfbf1e0b4263f27ec4b4482b1e8799bb3c9950926644898178c16dfa990c239272e73dab2f37377342c18566df8d4e19d631ecd4c4cac8ac8934adf928c64d76f024e710e4a0dd698155b05fe51a15323ca4d266746d4839d97d17a2d099e96ae48088072eb43a1fddfd1e9a9ae668b1e40acc6b22f09dbdc270dc1a1f02c303064b3fb3ccb5b5dce35cc83c2f7d4638396a4b1657f499f6d912f7cb1d101a7590fff5354724f0f56c0a1ae7efd8584bbddfac84f6d5351b26c6b1d2afea8d2a39dd8e73a5c45fc10ac8b0694d714c224263913d3562c176feb0985f7566faf6c82ff20d0eb5cd3c58ede04425af24c9057ededbfaea992f148c3f3b09f404b463087563052ecc8005d92bc84cb7a8f982f02f24fc1793a83362a80e967a8fc2c48c5ad82ae2b4592f77d8cdf5691feac0f3cb4965f2b7eab340142b502330e3693e856a0f58826b6b7e16c199d76216f766a97d0a6ab3a5b12851b4e1d356e02b9829a691e7a186c503c4faae166cf3c338e7c18415e89563a4cbf2488bae6346de4d2370d25b8801276fbde8163ef248c2f5761f824089ed480ca0f1946bc3ab40ee7dd86a386c67564ff589b80116b2e15b9e5836411264e1e96a737551496ed082f39a0b1dd1b05be85b50e93b935e68b5e44fb714182f5a59979e3766aa0137d2d7122a6bfe05554dfda07b3bb45c86dcd92d8436bf94babdfb329f9344c1ac6a98bbbff1ca8bc50bae9a08d0f6e8a5fcd514c45ffd5f0140ab50541aab966d1b23f438f402c0a4dafc822b4e21b7ccf008636aaaca9240a01e6ac03b61a8164cc36fb67d37fdbc63adb59fe5981b90bcc0eb0c196040c2984400345e21d51672ece1fde87859f9536f3c7b8f92797c2a8feb1a69194732fd5e07d2a9deda00e416f9bb892b57e90aaa8096a5849433b312ee397fe5bdaf209783358d2f1730d3d917fcecc1de9da7f2bb06c7a7677da662ea20a312ea7ff8208f7223e6973ae9895392551f10827c8350dc2635533a3ba5e338c9df418d75085d13ec41df9e1b829a0593f874f8978814e46f9f154d4d2accac204510fc216b0dbbf1cbb451bb24fd1e7aa3c9aea1add48beb50246d30616ef1db17903d98ba98283209d37619a199738569c50f6b8e1d9c765c0f28aa5086b5aef2b259044f627c221651a9d9ffbe30a702b77284c6cd8e8941df86f147ae09e692c33df76da1ba5349a190f4c2eeb88c1f396b8be4fca92de111053b6e0374a51bda0108e9eacb3d531fd4545572a07498912000f3c826bc69d2a6494909b0a63c6c6b155bceb0790ec2199dc36a70a4ea64d470ba6ee64b8496c1aedd43caa19de9305289c511e7f23f9124384a8ba76916af7aa737fb65e71e7efc6d9f3b28b9c3db74c40eff3f6c14a15eac783fc0cb07b04b5d1e9c063504d5143b04da8e81408198881c80a81ae003ca26940519889b60f1aa240fd1a3ad0ff0145b3f30de84b218152225d45920a661cb6d8bc38c727998e8a3d4bc9072895b6959ae8cb5c41ea709c583477893e1ffbd7af2b3b3480056a4cb9e317e9d2e830684f5f03bbc756eb66561d34bed4a1fad069fd37158cfeb927571b03bef9d6508864db6ec217a17db391654c44f2c292fa6f87666c0b4fe8a1538ecf42010ddb8c01c6a06d8323e6bb3038865801f69b90086e7a4f9d018cafab349949f7fd989cf84d0e5adfd1971eecd07219b08ad8fdb2c43fb973ca08e0455a4616f6a210f53b4a5ef9c140d8179e0d940e70294f52929677fa2ce85f45ab384d3a0c8b34ce5f7257e7a2848cf93abcc1d66d7af2c38f09c6d1ee874538ee32710988766b447381703089481811d47f568dd969943a7b15e4060003568f1495b28945c4c4503366b0519e882f6fb90159b2f8e0bf56eeda601ad5ba7bcee34235cc5e10bcc699b37c4b0696b6360bc69e5d059528124fe99baea5d23424150b2f8b81dac8e9fe2b664aef08984bba77b84b2083fff7c0cb77bfc8d083577b07364ecf97db0e455ea29bfc4036007374e3d9efa0f9ce9681f22795df80cfa3d4468ec726618c2e619abe1f03dba854efdea259342c8425ca40a5038e2151a1caf1826d676b10480481dfc9f268a5942a8c335c4bf94afc74c370f9c07d5a8364aabe6314c9da6cf66d3ebb72953a4d4c247ed3e8b1ebd8ae28a52ebe2b7b5de3062df14b5f2f7da8d869e70713a6476d666a1bdbfb140eea12eb2823bb97c832f14e6d903397fcf6a221bd5c4446831b570c9f208c485c40172b56545a19201c61a7044c90fd0fd6ee78345e3c33c964f035f9008a0d18223d325a1148f73315f17f5c06dadc055dc1d6c0272456816aad39f19e81919626e29de47d82d587738ee0d0d7199ad08c17b9aa496ceb9be280745ecb6f8a2980833291569ceff38b6eb6c22019391d9a3dc97e7135d6dcd8832b30b206db79657717acd83b22b3689ec888a9cc815f848c68568131b2c6fe0fe4550051da97be709d1fb2a3cc24636c9d3137c80b119ce25694e07bad9319bcbcb50ea4c248e745fa404822407ee6961c7c7c75ba38d6f8f876b5dd085bcffcc6b8ca3901f3ad525c33efe768f08d746d0c3cc1265e6dd3d42c004b59955c316167bcf2d62e64f0df1a1ca1ff7ec0556387d3fedbbaa427c9bfe34d84d5f1f2cf11f7001006c6a8ccff79872a764a6e78ac5444fd8e8862b68a72231d7689a3dad8e04", 0x1000}, {&(0x7f0000001f00)="963d1ea26b648fc33e3e2feb5feb5085678811603dd4be6e13687c1802e086", 0x1f}, {&(0x7f0000001f40)="d642608402dd1beee951b82093da5db89c9579c98a691e8645bea326922a938d39bb2a55ae1fc6404f5f9abf4f6efa066104513e5aa7ba3cf4c78a19d5cd7445538d9d8bcb9fd3cdf8c200ea7294a4a6cdd55c31731184d5c3e3af65e8d03c4782615b01f81d9a883d3168ad323e", 0x6e}, {&(0x7f0000001fc0)="e1be077204d88ef5098f0ab74798bfc86a8178ed34d426a2e13da7106857d2c4eac958b838cc0c0a90577cdab21dedd94995adebe401aa47631976fcc8ba3ac51bf56ff4b934f394c39bfc779e3594", 0x4f}, {&(0x7f0000002040)="e9b77dc2fe40a61267dc8ef309fd4131fde87eca48a44a76853d791739aea4609fb4067c8117b1c783e4c942b213e3e7d3964534083037afe4af52f81ded5701cfd5858883ac4528d3ddf53b8db4b9069d1b51e07a7ef1f289a3b7ae825ab125ecfbea801347b26c647b6f480090ac01926b58f3655a3879b322be98d84d3a31aab69296c8496660382296480fe9ea5b564af4a719baafbaa3837bc7cebc37a45b6a2afdf0f7c577413f8cacd32e96bec8cf80504d", 0xb5}, {&(0x7f0000002100)="20438aafb322d394ea3dfcf0601991d2a503000e1d28dc85ade7ce331977a8ffe722f87129cdef268c9fef019f2086100896a8d7863be1046ede87afccfa32af3e0470275e3e473ffc5d5d1bfbba5c1f3e89e62ebc00c64e3aa6b7492d8ae33632a1b1b3b648fcb7c006bfc49b0b715ddc6c1ab759f9b259faf5781d93fde6de296a33d63353dd02dec09b9b6c8670256b8ef2cf931b21304e2ff4b179a31d", 0x9f}], 0x6, &(0x7f00000026c0)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0x0, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r22}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}, @cred={{0x1c, 0x1, 0x2, {r26, r27}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}}], 0x140, 0x10}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002800)="dbf1246d9b4e484cf798f48e2f30226c9d09c3873811d10be8ccf1f2f120b68423b633517f4cb64a142bcc0addb6b7497e44896391bb8a1c9704d1173edf69ceab94c6c3c0498acfa7d58ab3c85a009dd41c31a833013a5ae375a14da7", 0x5d}, {&(0x7f0000002880)="24dcc8bab8d857e78ab014df61825efc73052b638e158923fb19449cf7f51b", 0x1f}, {&(0x7f00000028c0)="b4d3aa938feb57c5dbfb1bd725e240ad2616de4be91ec88128c1824b89dccd3dba872f4b071cb145f4d556db971b15ec43965c76a3848bc49b14bc8afa112b8585a61ef0a75fb27ddcc6a44b9d83226c2bf1e94ad4e78daef19606a2d6ef69d6943fced3ad2e2509a39555940eb0ae3f0c235166c79ef45e", 0x78}], 0x3, &(0x7f0000002ac0)=[@cred={{0x1c}}], 0x20, 0x4044050}}, {{&(0x7f0000002b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002b80)="5c441485110f21651425bd9338de6bf9179e4c69904370f63a387f6b2cc6ebc4c45532898ad8271bf0c4a0325f6c5ed43f050405e84de9802025c3286f9de9428d0cf887799140723e43bce68378251b76a6a42041015dfe4cd5fbef1bcbf3d04f695ada37917c3aa2ce927069f942d9d979ba654f16288540c9abe598f520a8fa9276d2481475ddc45776037dfd9f6c3577dc1448473e7c72d2698c1260fd3da85d5dc27985e7d6bfa94d7d61e11cf6ea943afe7be1a5ce71cd277f2c76de4c227a88613b1823bff5bc41364557cfbff9da54a58bb7dd7bc27f7687d09f1290c4a932", 0xe3}, {&(0x7f0000002c80)="41c4f493f125e7182b2fa8093c9a7b2d7e022d45619d841f59e18babd0736f23a0be947a3d4a2140a18c86eba45a630832865b2a8298855d4c06475feb440284d29f275ca41d75f04d23d695611a557bca193ba749c4e892bdde20f5501931b458c736d76f416df8007afd18298f8c4ba87f51a812687a493ce66501754cf5cbb525584c73d00b4c7327d289c43e50d9df2493aceeb64d31b3fbb23061451664f68a079ec51febc459afbd84b672eb8db06dd3df56dd7c32d149ffc56233da2443595498b4aa393976dc89917c2644a247692248851abb1c694c42f1b0ec44", 0xdf}], 0x2, &(0x7f0000002fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, r0, r0, r0, r0]}}], 0x68}}, {{&(0x7f0000003040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000034c0)=[{&(0x7f00000030c0)="bd9ba1ad71d52135a213ba6b9948ef91906f99517c575a246ca1ed211c6e17496a25db69dc5dbf129d3b9fadb0bda40e3b4b46e5425384b16a069066c2ef5dd8b89f96f611377d04134e1677f4cfe833de4d22ac06f301b7364a9200e417b0cac734bcd407e6bbb60b30042cffefb08fc5d956a24d47", 0x76}, {&(0x7f0000003140)="a43537238f2f5087d0752d09c646e36cb4b8c0dde938b4b9ef14fdf642c6fc5700036df5f6c455ef81338d1706cd399748289bb4f137c0f34c6a5a3734658cb4834e60e4f05430eb15f9f03a3859385b0b45d50d35f1b449e43d1972418e3c53b44349ed34a2bebb2286bbdd6524d0b485def5298b4a55072b1af9474abf53d4759a066d8ece93885083f72ea5a21c16ea74db7b69af1d9ca4b3cddc19de5dd01d41386ec78e502f148ff23208032b97dbc58edfb0e955938b657cf66348636d0143d1340be727a7c0a993ec8ab36ff66d8a6305e94b02f62d90e419e7ccdf1e68cae1902f", 0xe5}, {&(0x7f0000003240)="c6e0e08a26e851d067feeac71bee1f0c352dbd4f04fee446977badab5097c2f840229288b24866f1db6fea5c7cdca220921de854dc4f0a21bc8d97e57096266a0720c8f9a87327426d64faf7fd958974da468c3cd58b84ab83d5d90888d18d9e6f7e3ba437f9c8bf8ea892ba398809da254e70cdc3cad65e9fad8c3f2f7e77cf0400a665b4333e289724f944983e8bfb279292f69f2b24e3da5c0bd5737a18c2c3f618e8f7eafa5af7dd188833eed22c7c4d13f3093e34dc0421eb23e234317899210bc6de6f17bf743c040c060284600ba5d29c7a5a4cf069455b1bf382cf17be13b661f592324695f21021520c670b8c5e8a8cd66058", 0xf7}, {&(0x7f0000003340)="ff7f3160089d98db01b93b1d6ff3d9d463297fc106a290185d38e54b54f3be881b59df", 0x23}, {&(0x7f0000003380)="e79e0a1a0f179c1fe5452b6a505fd20d3f2665e60d64b36c814132daba549441b6892e1fd2e0625938338166cda374748db327bbfa60a971d46d4911a8c85cbe31af4d72", 0x44}, {&(0x7f0000003400)="b4b0afd4c8b8179767f411cc8395dbdf6cf5c6cb21e9890fd95052583613a6368a16608a7677e43866e402f7e82bb18a3e2c051aef08ed2d0c2eb4a999c3d8c26c0b7511fd0d346e642c1e2e4c4d839f7da958c108dc64dae7266d874b4d42994021da2e2014977d16b6b2944c551bc2cb02bd2a39aec5bda6e6c78238c14b0fd1cf5f6ee665488afb31b85a00214967a7e19b5f9fef", 0x96}], 0x6, &(0x7f0000003580)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x60, 0x4000804}}, {{&(0x7f0000003600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003680)="1ac4b1dd009a3b556e3e4da44c311070bf3565ffc8d492eceeff5271dcd22e2f5d5b25", 0x23}, {&(0x7f00000036c0)="d88a869a7fccfbccbadbdf2247fd8caa", 0x10}, {&(0x7f0000003700)="a634861ec8f317ad45fb0d9e4f3f87adfba05c53f4f7a326fd178592620853bbf07f2448844641e47d99cf9bd2dde368c2654615432e263b", 0x38}], 0x3, &(0x7f0000003d40)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x148, 0x4}}], 0x7, 0x40) 1.540944268s ago: executing program 4 (id=4360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x44) 1.442046734s ago: executing program 2 (id=4362): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r5, 0x8993, &(0x7f0000001fc0)="fa7c813a") ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2000}, {r2, 0x8104}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000001, 0x10013, r4, 0x8aa40000) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r9, @ANYBLOB="54002d80050001000000000005000400000000000800020003"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r10], 0x38}}, 0x10) 1.39738715s ago: executing program 3 (id=4363): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@gettaction={0x1c, 0x32, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3f}]}, 0x1c}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100b}]}]}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "9379c61d57dd0f1cd15bcde1688e4f07"}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001114010029bd00d961110008004b0011cd08ed3f6f9402040f55980dca1fd0d9931850605df4911dabbdbdbc814dd0d3fb91196db3ba4f6e5fcdf01678874448ee248f"], 0x20}}, 0x24000000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feff7fff00000000017c0000040042800c00018006000600800a0000100002800c00148008001700"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.396425245s ago: executing program 0 (id=4364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001a003300"], 0x50}}, 0x0) 1.328080124s ago: executing program 4 (id=4365): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) 1.230061449s ago: executing program 0 (id=4367): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400), 0xe) (async) listen(r1, 0x0) (async) shutdown(r1, 0x1) (async) listen(r0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd308001c06fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002100090780000040201039d000000"], 0x0) 1.025577902s ago: executing program 1 (id=4368): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000fc000000000000000000000000000000003c0000000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000004010500ac1e0001000000000000000000000000000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c"], 0x1bc}}, 0x0) 1.025409968s ago: executing program 3 (id=4369): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 3) 1.023999093s ago: executing program 4 (id=4370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0xa0000001}) epoll_wait(r4, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x9) poll(0x0, 0x0, 0x8000007) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x1b8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b55}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x374}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc34}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa2}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040084) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000001", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf2509000000060028000100000008000600", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1d) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x60}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xfffffffffffffed6}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=@bridge_dellink={0x1f8, 0x11, 0x200, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x1120, 0x60212}, [@IFLA_PHYS_PORT_ID={0xd, 0x22, "ca5df74775997d6cbe"}, @IFLA_CARRIER={0x5}, @IFLA_PHYS_PORT_ID={0x7, 0x22, "554517"}, @IFLA_VFINFO_LIST={0x12c, 0x16, 0x0, 0x1, [{0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xcb9, @remote}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffffa, 0x6db, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xc}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x372, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xffffffff7fffffff}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x32f52666, 0x4}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x401}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xf}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0xf80, @broadcast}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x5}}]}]}, @IFLA_VFINFO_LIST={0x88, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x9, 0x7fff, 0x81}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x10001, 0x9}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x26}}, @IFLA_VF_MAC={0x28, 0x1, {0x7fffffff}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @multicast}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x80}, 0x26044005) 1.023494296s ago: executing program 0 (id=4371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1000}, {0x5}, {0x6, 0x11, 0x46}, {0x8, 0xb, 0xfffffffe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf7}, {0x6, 0x16, 0x166}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x8008) 938.746913ms ago: executing program 1 (id=4372): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000100000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000004010500ac1e0001000000000000000000000000000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c00000000000000ac1414aa00000000000000000092f8f12e00e4e1710000"], 0x1bc}}, 0x0) 934.020738ms ago: executing program 2 (id=4373): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f0000000000)={'sit0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x185, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf) 821.413028ms ago: executing program 3 (id=4374): unshare(0x22020600) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05620000000000ffec000000d48429efedca96642f8fb5", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) unshare(0x2a020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000300)={r7, 0x7, 0x4, 0x100}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xcc, &(0x7f0000000480)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x1aa, @local, 0x88}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, @in6={0xa, 0x4e20, 0x10, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x1ea}, @in6={0xa, 0x4e20, 0xfffffffb, @private1, 0x4}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xf000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}]}, &(0x7f00000000c0)=0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xffffffffffffff9a, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4014}, 0x0) recvmsg$unix(r12, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYBLOB="0808000009000500694dcec4728842725c45852e58"], 0xc) 821.228227ms ago: executing program 1 (id=4375): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 803.960083ms ago: executing program 0 (id=4376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000004c0)={r3, 0x401}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r3, 0xa}, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 722.248696ms ago: executing program 2 (id=4377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001a003300"], 0x50}}, 0x0) 609.545045ms ago: executing program 1 (id=4378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xf5ffffff}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x44) 531.959149ms ago: executing program 2 (id=4379): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) mmap(&(0x7f0000dd3000/0x3000)=nil, 0x3000, 0x3000001, 0x31, 0xffffffffffffffff, 0x31e60000) (async) mmap(&(0x7f0000dd3000/0x3000)=nil, 0x3000, 0x3000001, 0x31, 0xffffffffffffffff, 0x31e60000) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 277.987268ms ago: executing program 2 (id=4380): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000850000001800000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xffe4, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) 221.544046ms ago: executing program 1 (id=4381): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) 221.26693ms ago: executing program 3 (id=4382): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa218100f0ff86dd010000000000030000000000000001fe8000000000244e21000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108000790780003"], 0x4e) (async) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa218100f0ff86dd010000000000030000000000000001fe8000000000244e21000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108000790780003"], 0x4e) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv4_delroute={0x24, 0x19, 0x901, 0x4, 0x0, {0x2, 0x18, 0x10, 0x0, 0x0, 0x2, 0x0, 0x1, 0x800}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) (async) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0xffffffff, @private1, 0x6}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x401, @rand_addr=' \x01\x00'}, @in6={0xa, 0x4e20, 0x4b22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}], 0x64) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) 115.022822ms ago: executing program 2 (id=4383): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r5, 0x8993, &(0x7f0000001fc0)="fa7c813a") ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2000}, {r2, 0x8104}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000001, 0x10013, r4, 0x8aa40000) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fddbdf252000000008000300", @ANYRES32=r9, @ANYBLOB="54002d80050001000000000005000400000000000800020003"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}}, 0x10) 0s ago: executing program 1 (id=4384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000fc000000000000000000000000000000006c0000000000000a0000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000004010500ac1e0001000000000000000000000000000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c"], 0x1bc}}, 0x0) kernel console output (not intermixed with test programs): 478] Mem-Info: [ 380.440199][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 380.653825][T15478] active_anon:8040 inactive_anon:0 isolated_anon:0 [ 380.653825][T15478] active_file:1790 inactive_file:39952 isolated_file:0 [ 380.653825][T15478] unevictable:768 dirty:305 writeback:0 [ 380.653825][T15478] slab_reclaimable:11469 slab_unreclaimable:140725 [ 380.653825][T15478] mapped:34694 shmem:4233 pagetables:801 [ 380.653825][T15478] sec_pagetables:0 bounce:0 [ 380.653825][T15478] kernel_misc_reclaimable:0 [ 380.653825][T15478] free:1301798 free_pcp:1807 free_cma:0 [ 380.715223][T15478] Node 0 active_anon:32160kB inactive_anon:0kB active_file:7160kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141576kB dirty:1216kB writeback:0kB shmem:15396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11764kB pagetables:3204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 380.765556][T15478] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 380.833981][ T53] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.843267][ T53] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.867709][T15478] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.899922][ T9992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 380.911827][T15478] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 380.928087][T15478] Node 0 DMA32 free:1288360kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:32260kB inactive_anon:0kB active_file:7160kB inactive_file:159516kB unevictable:1536kB writepending:1128kB present:3129332kB managed:2564056kB mlocked:0kB bounce:0kB free_pcp:1964kB local_pcp:1196kB free_cma:0kB [ 380.958706][T15470] lo speed is unknown, defaulting to 1000 [ 380.969796][T15478] lowmem_reserve[]: 0 0 0 0 0 [ 380.978765][T15478] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 381.017135][ T5140] Bluetooth: hci2: command tx timeout [ 381.032250][T15478] lowmem_reserve[]: 0 0 0 0 0 [ 381.037065][T15478] Node 1 Normal free:3908932kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 381.072151][T15472] lo speed is unknown, defaulting to 1000 [ 381.111830][T15478] lowmem_reserve[]: 0 0 0 0 0 [ 381.120672][T15478] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 381.149688][T15478] Node 0 DMA32: 4*4kB (UME) 45*8kB (UME) 90*16kB (ME) 147*32kB (UME) 62*64kB (UME) 40*128kB (UME) 37*256kB (UME) 14*512kB (UM) 26*1024kB (UE) 6*2048kB (UM) 296*4096kB (M) = 1283576kB [ 381.179040][T15478] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 381.239810][T15478] Node 1 Normal: 257*4kB (UME) 76*8kB (UME) 43*16kB (UME) 209*32kB (UME) 115*64kB (UME) 31*128kB (UME) 20*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3908980kB [ 381.279081][T15478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.288757][T15478] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 381.308751][T15478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.319813][T15478] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 381.349523][T15478] 45971 total pagecache pages [ 381.354295][T15478] 0 pages in swap cache [ 381.358467][T15478] Free swap = 124996kB [ 381.363514][T15478] Total swap = 124996kB [ 381.367698][T15478] 2097051 pages RAM [ 381.382222][T15478] 0 pages HighMem/MovableOnly [ 381.386990][T15478] 424379 pages reserved [ 381.399465][T15478] 0 pages cma reserved [ 381.479384][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 381.814968][T15502] lo speed is unknown, defaulting to 1000 [ 382.035760][T15323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.131077][T15323] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.256539][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.263858][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.317581][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.324880][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.520019][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 382.544712][T15323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 382.578741][T15323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.621138][ T30] audit: type=1800 audit(1746782105.582:83): pid=15521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2988" name="memory.events" dev="tmpfs" ino=3126 res=0 errno=0 [ 382.717105][ T30] audit: type=1804 audit(1746782105.672:84): pid=15521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2988" name="memory.events" dev="tmpfs" ino=3126 res=1 errno=0 [ 383.085042][ T5140] Bluetooth: hci2: command tx timeout [ 383.087688][T15539] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20004 [ 383.214125][T15323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.322558][T15547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2997'. [ 383.365706][T15323] veth0_vlan: entered promiscuous mode [ 383.412049][T15323] veth1_vlan: entered promiscuous mode [ 383.472997][T15551] xt_hashlimit: size too large, truncated to 1048576 [ 383.559305][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 383.721041][T15323] veth0_macvtap: entered promiscuous mode [ 383.741602][T15323] veth1_macvtap: entered promiscuous mode [ 383.820897][T15573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3004'. [ 383.822908][T15571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3003'. [ 383.862846][T15323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.898369][T15323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.923606][T15323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.012377][T15323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.039613][T15323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.060716][T15323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.087433][T15323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.110404][T15323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.121246][T15323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.132342][T15323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.187085][T15582] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.229426][T15582] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.270834][T15582] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.302971][T15582] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.564379][T15584] syzkaller1: entered promiscuous mode [ 384.571808][T15584] syzkaller1: entered allmulticast mode [ 384.599388][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 384.606816][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.697019][T15602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3009'. [ 384.840564][ T30] audit: type=1800 audit(1746782107.802:85): pid=15605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3010" name="memory.events" dev="tmpfs" ino=165 res=0 errno=0 [ 384.883040][T15568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.907642][T15568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.918555][ T30] audit: type=1804 audit(1746782107.852:86): pid=15605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3010" name="memory.events" dev="tmpfs" ino=165 res=1 errno=0 [ 385.014191][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.030408][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.085379][T15605] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.284926][T15605] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.338107][T15618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3014'. [ 385.356213][T15618] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3014'. [ 385.488731][T15605] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.536618][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3016'. [ 385.557517][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3017'. [ 385.570832][T15623] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3016'. [ 385.640355][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 385.659152][T15623] vlan3: entered allmulticast mode [ 385.689347][T15623] syz_tun: entered allmulticast mode [ 385.777090][T15628] netlink: 'syz.3.3017': attribute type 2 has an invalid length. [ 385.841930][T15605] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.154656][T15628] : entered promiscuous mode [ 386.181846][T15631] batadv1: entered promiscuous mode [ 386.267912][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.280914][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.294517][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.306711][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.314871][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.373248][T15605] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.397726][T15605] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.418441][T15605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.442828][T15605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.515167][T15632] lo speed is unknown, defaulting to 1000 [ 386.643058][T15643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.679262][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 386.912330][T15632] chnl_net:caif_netlink_parms(): no params data found [ 386.936813][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3024'. [ 386.945900][T15653] Cannot find set identified by id 0 to match [ 386.982723][T15650] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.991306][T15650] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.999805][T15650] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.008004][T15650] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.114380][T15657] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 387.206296][T15632] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.219374][T15632] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.226686][T15632] bridge_slave_0: entered allmulticast mode [ 387.236443][T15632] bridge_slave_0: entered promiscuous mode [ 387.246722][T15632] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.254051][T15632] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.261572][T15632] bridge_slave_1: entered allmulticast mode [ 387.269989][T15632] bridge_slave_1: entered promiscuous mode [ 387.317550][T15666] vlan0: entered promiscuous mode [ 387.328504][T15632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.345029][T15632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.426024][T15632] team0: Port device team_slave_0 added [ 387.437609][T15669] lo speed is unknown, defaulting to 1000 [ 387.444636][T15632] team0: Port device team_slave_1 added [ 387.634603][T15632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.678751][T15632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.719283][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 387.765941][T15632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.872725][T15632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.984486][T15632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.024941][T15632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.206474][T15682] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 388.304024][T15632] hsr_slave_0: entered promiscuous mode [ 388.320836][T15632] hsr_slave_1: entered promiscuous mode [ 388.327507][T15632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.348882][T15632] Cannot create hsr debugfs directory [ 388.359547][ T5140] Bluetooth: hci0: command tx timeout [ 388.747338][T15697] __nla_validate_parse: 5 callbacks suppressed [ 388.747356][T15697] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3038'. [ 388.763541][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 388.809979][T15697] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 389.043204][T15632] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.071056][T15632] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 33710 - 0 [ 389.119647][T15632] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 33268 - 0 [ 389.284071][T15632] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.319839][T15632] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 33710 - 0 [ 389.345896][T15632] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 33268 - 0 [ 389.361579][T15717] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 389.505636][T15632] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.524245][T15632] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 33710 - 0 [ 389.527228][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3048'. [ 389.536847][T15632] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 33268 - 0 [ 389.554743][T15728] sctp: [Deprecated]: syz.2.3049 (pid 15728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 389.554743][T15728] Use struct sctp_sack_info instead [ 389.586980][T15723] batadv0: left promiscuous mode [ 389.599619][T15723] batadv0: left allmulticast mode [ 389.624824][T15723] bond_slave_0: left promiscuous mode [ 389.650490][T15723] ip6gre2: left allmulticast mode [ 389.656607][T15723] bond0: left promiscuous mode [ 389.666826][T15723] ip6gre3: left promiscuous mode [ 389.741382][T15632] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.772708][T15632] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 33710 - 0 [ 389.788502][T15632] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 33268 - 0 [ 389.799307][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 389.981969][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3054'. [ 390.003070][T15749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3054'. [ 390.038530][T15746] xt_hashlimit: max too large, truncated to 1048576 [ 390.049134][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3054'. [ 390.107824][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3057'. [ 390.128781][T15751] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3057'. [ 390.249681][T15758] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.399729][T15632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 390.439751][ T5140] Bluetooth: hci0: command tx timeout [ 390.450566][T15632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 390.473276][T15632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 390.508552][T15632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 390.578218][T15769] FAULT_INJECTION: forcing a failure. [ 390.578218][T15769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.698839][T15769] CPU: 0 UID: 0 PID: 15769 Comm: syz.3.3061 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 390.698870][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 390.698883][T15769] Call Trace: [ 390.698891][T15769] [ 390.698900][T15769] dump_stack_lvl+0x189/0x250 [ 390.698932][T15769] ? __lock_acquire+0xaac/0xd20 [ 390.698963][T15769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.698991][T15769] ? __pfx__printk+0x10/0x10 [ 390.699011][T15769] ? __might_fault+0xb0/0x130 [ 390.699048][T15769] should_fail_ex+0x414/0x560 [ 390.699073][T15769] _copy_from_user+0x2d/0xb0 [ 390.699101][T15769] ___sys_recvmsg+0x12e/0x510 [ 390.699149][T15769] ? __pfx____sys_recvmsg+0x10/0x10 [ 390.699212][T15769] ? __might_fault+0xb0/0x130 [ 390.699240][T15769] do_recvmmsg+0x307/0x760 [ 390.699276][T15769] ? __pfx_do_recvmmsg+0x10/0x10 [ 390.699317][T15769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 390.699355][T15769] __x64_sys_recvmmsg+0x190/0x240 [ 390.699383][T15769] ? rcu_is_watching+0x15/0xb0 [ 390.699414][T15769] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 390.699447][T15769] ? do_syscall_64+0xba/0x210 [ 390.699471][T15769] do_syscall_64+0xf6/0x210 [ 390.699490][T15769] ? clear_bhb_loop+0x45/0xa0 [ 390.699515][T15769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.699533][T15769] RIP: 0033:0x7f2a1b38e969 [ 390.699550][T15769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.699566][T15769] RSP: 002b:00007f2a1c27b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 390.699587][T15769] RAX: ffffffffffffffda RBX: 00007f2a1b5b6080 RCX: 00007f2a1b38e969 [ 390.699600][T15769] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000004 [ 390.699613][T15769] RBP: 00007f2a1c27b090 R08: 0000000000000000 R09: 0000000000000000 [ 390.699625][T15769] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 390.699637][T15769] R13: 0000000000000000 R14: 00007f2a1b5b6080 R15: 00007ffd683f6f78 [ 390.699668][T15769] [ 390.796195][T15632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.852295][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 390.958885][T15632] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.970508][T15777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3065'. [ 391.028123][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.035369][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.092634][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.099874][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.116682][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 391.186629][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 391.276266][T15786] erspan0: left allmulticast mode [ 391.287984][T15786] vlan0: left promiscuous mode [ 391.296218][T15786] geneve1: left promiscuous mode [ 391.302093][T15786] ipvlan2: left promiscuous mode [ 391.307232][T15786] ipvlan2: left allmulticast mode [ 391.312948][T15786] bridge0: left allmulticast mode [ 391.324403][T15786] geneve2: left promiscuous mode [ 391.334226][T15786] geneve2: left allmulticast mode [ 391.368626][T15786] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.378047][T15786] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.389402][T15786] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.397799][T15786] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.414261][T15786] geneve3: left allmulticast mode [ 391.616624][T15793] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 391.858782][T15808] lo speed is unknown, defaulting to 1000 [ 391.879709][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 392.039677][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 392.405365][T15834] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.435934][T15835] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 392.444797][T15834] FAULT_INJECTION: forcing a failure. [ 392.444797][T15834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.488475][T15834] CPU: 1 UID: 0 PID: 15834 Comm: syz.1.3084 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 392.488506][T15834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 392.488518][T15834] Call Trace: [ 392.488527][T15834] [ 392.488540][T15834] dump_stack_lvl+0x189/0x250 [ 392.488577][T15834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.488607][T15834] ? __pfx__printk+0x10/0x10 [ 392.488640][T15834] should_fail_ex+0x414/0x560 [ 392.488667][T15834] _copy_to_user+0x31/0xb0 [ 392.488697][T15834] simple_read_from_buffer+0xe1/0x170 [ 392.488728][T15834] proc_fail_nth_read+0x1df/0x250 [ 392.488760][T15834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.488791][T15834] ? rw_verify_area+0x258/0x650 [ 392.488812][T15834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.488842][T15834] vfs_read+0x1fd/0x980 [ 392.488870][T15834] ? __pfx___mutex_lock+0x10/0x10 [ 392.488891][T15834] ? __pfx_vfs_read+0x10/0x10 [ 392.488915][T15834] ? __fget_files+0x2a/0x420 [ 392.488945][T15834] ? __fget_files+0x3a0/0x420 [ 392.488970][T15834] ? __fget_files+0x2a/0x420 [ 392.489033][T15834] ksys_read+0x145/0x250 [ 392.489054][T15834] ? rcu_is_watching+0x15/0xb0 [ 392.489086][T15834] ? __pfx_ksys_read+0x10/0x10 [ 392.489112][T15834] ? do_syscall_64+0xba/0x210 [ 392.489137][T15834] do_syscall_64+0xf6/0x210 [ 392.489157][T15834] ? clear_bhb_loop+0x45/0xa0 [ 392.489180][T15834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.489198][T15834] RIP: 0033:0x7efd21d8d37c [ 392.489216][T15834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 392.489232][T15834] RSP: 002b:00007efd22c14030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.489253][T15834] RAX: ffffffffffffffda RBX: 00007efd21fb5fa0 RCX: 00007efd21d8d37c [ 392.489267][T15834] RDX: 000000000000000f RSI: 00007efd22c140a0 RDI: 0000000000000005 [ 392.489279][T15834] RBP: 00007efd22c14090 R08: 0000000000000000 R09: 0000000000000000 [ 392.489291][T15834] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 392.489303][T15834] R13: 0000000000000000 R14: 00007efd21fb5fa0 R15: 00007fffcf8dd5f8 [ 392.489334][T15834] [ 392.710306][T15632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.719638][ T5140] Bluetooth: hci0: command tx timeout [ 392.919261][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 393.144827][T15857] FAULT_INJECTION: forcing a failure. [ 393.144827][T15857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.205886][T15857] CPU: 0 UID: 0 PID: 15857 Comm: syz.3.3091 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 393.205915][T15857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 393.205928][T15857] Call Trace: [ 393.205935][T15857] [ 393.205944][T15857] dump_stack_lvl+0x189/0x250 [ 393.205977][T15857] ? __lock_acquire+0xaac/0xd20 [ 393.206007][T15857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.206035][T15857] ? __pfx__printk+0x10/0x10 [ 393.206056][T15857] ? __might_fault+0xb0/0x130 [ 393.206094][T15857] should_fail_ex+0x414/0x560 [ 393.206118][T15857] _copy_from_user+0x2d/0xb0 [ 393.206147][T15857] ___sys_sendmsg+0x158/0x2a0 [ 393.206179][T15857] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.206246][T15857] ? __fget_files+0x2a/0x420 [ 393.206271][T15857] ? __fget_files+0x3a0/0x420 [ 393.206307][T15857] __x64_sys_sendmsg+0x19b/0x260 [ 393.206338][T15857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.206384][T15857] ? do_syscall_64+0xba/0x210 [ 393.206409][T15857] do_syscall_64+0xf6/0x210 [ 393.206429][T15857] ? clear_bhb_loop+0x45/0xa0 [ 393.206453][T15857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.206473][T15857] RIP: 0033:0x7f2a1b38e969 [ 393.206490][T15857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.206507][T15857] RSP: 002b:00007f2a1c29c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.206527][T15857] RAX: ffffffffffffffda RBX: 00007f2a1b5b5fa0 RCX: 00007f2a1b38e969 [ 393.206542][T15857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 393.206554][T15857] RBP: 00007f2a1c29c090 R08: 0000000000000000 R09: 0000000000000000 [ 393.206567][T15857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.206578][T15857] R13: 0000000000000000 R14: 00007f2a1b5b5fa0 R15: 00007ffd683f6f78 [ 393.206609][T15857] [ 393.420915][T15632] veth0_vlan: entered promiscuous mode [ 393.434278][T15632] veth1_vlan: entered promiscuous mode [ 393.545347][T15632] veth0_macvtap: entered promiscuous mode [ 393.574146][T15632] veth1_macvtap: entered promiscuous mode [ 393.605951][T15632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.632313][T15632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.695958][T15632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.759264][T15632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.821850][T15632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.864650][T15632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.912347][T15632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.925553][T15632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.936798][T15632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.948177][ T30] audit: type=1800 audit(1746782116.912:87): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3095" name="memory.events" dev="tmpfs" ino=2928 res=0 errno=0 [ 393.955931][T15632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.972119][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 394.024333][T15632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.049433][T15632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.072236][ T30] audit: type=1804 audit(1746782116.972:88): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3095" name="memory.events" dev="tmpfs" ino=2928 res=1 errno=0 [ 394.077743][T15632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.148007][T15632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.151506][T15891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.164107][T15891] IPv6: NLM_F_CREATE should be set when creating new route [ 394.171502][T15891] IPv6: NLM_F_CREATE should be set when creating new route [ 394.405201][T15898] netlink: 'syz.3.3099': attribute type 2 has an invalid length. [ 394.454291][T15900] __nla_validate_parse: 1 callbacks suppressed [ 394.454313][T15900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3100'. [ 394.544116][T15898] : entered promiscuous mode [ 394.653238][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.659531][T15898] tipc: Started in network mode [ 394.668658][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.672708][T15898] tipc: Node identity d6bb20aa0e6a, cluster identity 4711 [ 394.687777][T15898] tipc: Enabled bearer , priority 0 [ 394.742548][T15898] syzkaller0: entered promiscuous mode [ 394.748088][T15898] syzkaller0: entered allmulticast mode [ 394.759922][ T5140] Bluetooth: hci0: command tx timeout [ 394.769669][T15897] tipc: Resetting bearer [ 394.808112][T15897] tipc: Disabling bearer [ 394.865924][T15908] FAULT_INJECTION: forcing a failure. [ 394.865924][T15908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.879439][T15908] CPU: 0 UID: 0 PID: 15908 Comm: syz.0.3103 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 394.879469][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 394.879482][T15908] Call Trace: [ 394.879490][T15908] [ 394.879498][T15908] dump_stack_lvl+0x189/0x250 [ 394.879533][T15908] ? __lock_acquire+0xaac/0xd20 [ 394.879564][T15908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.879593][T15908] ? __pfx__printk+0x10/0x10 [ 394.879620][T15908] ? __might_fault+0xb0/0x130 [ 394.879658][T15908] should_fail_ex+0x414/0x560 [ 394.879684][T15908] _copy_from_iter+0x1db/0x15a0 [ 394.879713][T15908] ? sock_alloc_send_pskb+0x875/0x990 [ 394.879750][T15908] ? __pfx__copy_from_iter+0x10/0x10 [ 394.879783][T15908] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 394.879817][T15908] skb_copy_datagram_from_iter+0xf5/0x720 [ 394.879853][T15908] ? skb_put+0x11b/0x210 [ 394.879882][T15908] unix_dgram_sendmsg+0x689/0x17c0 [ 394.879916][T15908] ? __lock_acquire+0xaac/0xd20 [ 394.879948][T15908] ? aa_sk_perm+0x81e/0x950 [ 394.879973][T15908] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 394.880009][T15908] ? aa_sock_msg_perm+0x94/0x160 [ 394.880032][T15908] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 394.880066][T15908] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 394.880097][T15908] __sock_sendmsg+0x219/0x270 [ 394.880122][T15908] ____sys_sendmsg+0x52d/0x830 [ 394.880155][T15908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.880193][T15908] ? import_iovec+0x74/0xa0 [ 394.880224][T15908] ___sys_sendmsg+0x21f/0x2a0 [ 394.880255][T15908] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.880331][T15908] ? __might_fault+0xb0/0x130 [ 394.880360][T15908] __sys_sendmmsg+0x227/0x430 [ 394.880394][T15908] ? __pfx___sys_sendmmsg+0x10/0x10 [ 394.880432][T15908] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 394.880471][T15908] ? ksys_write+0x1f0/0x250 [ 394.880492][T15908] ? rcu_is_watching+0x15/0xb0 [ 394.880534][T15908] __x64_sys_sendmmsg+0xa0/0xc0 [ 394.880564][T15908] do_syscall_64+0xf6/0x210 [ 394.880586][T15908] ? clear_bhb_loop+0x45/0xa0 [ 394.880610][T15908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.880630][T15908] RIP: 0033:0x7f9ab018e969 [ 394.880659][T15908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.880675][T15908] RSP: 002b:00007f9ab103e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 394.880696][T15908] RAX: ffffffffffffffda RBX: 00007f9ab03b5fa0 RCX: 00007f9ab018e969 [ 394.880709][T15908] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 394.880722][T15908] RBP: 00007f9ab103e090 R08: 0000000000000000 R09: 0000000000000000 [ 394.880734][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.880745][T15908] R13: 0000000000000000 R14: 00007f9ab03b5fa0 R15: 00007ffe9d404b68 [ 394.880776][T15908] [ 394.999699][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 395.202292][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.210409][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.454445][T15921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.887036][T15931] netlink: 'syz.4.3111': attribute type 10 has an invalid length. [ 395.932130][T15931] team0: Port device dummy0 added [ 396.039359][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 396.156838][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.166546][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.178307][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.186732][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.206351][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.303852][T15940] lo speed is unknown, defaulting to 1000 [ 396.418908][T15943] lo speed is unknown, defaulting to 1000 [ 396.500042][T15946] syzkaller0: entered promiscuous mode [ 396.505757][T15946] syzkaller0: entered allmulticast mode [ 396.618936][T15945] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3114'. [ 396.634212][T15945] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3114'. [ 396.839880][ T5834] Bluetooth: hci0: command tx timeout [ 396.874695][T15955] netlink: 952 bytes leftover after parsing attributes in process `syz.1.3117'. [ 396.901551][T15955] netlink: set zone limit has 8 unknown bytes [ 397.089345][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 398.129288][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 398.281503][ T5834] Bluetooth: hci3: command tx timeout [ 398.330350][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3118'. [ 398.363919][T15960] netlink: 'syz.0.3118': attribute type 30 has an invalid length. [ 398.503797][T15968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3122'. [ 398.549832][ T53] bond0 (unregistering): (slave ip6gre3): Releasing backup interface [ 398.603490][T15972] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 398.870518][T15981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3127'. [ 398.931481][ T53] team0: Port device geneve0 removed [ 399.169397][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 399.193801][ T53] bond0 (unregistering): Released all slaves [ 399.349702][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3127'. [ 399.538869][T15940] chnl_net:caif_netlink_parms(): no params data found [ 399.947252][T15940] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.965541][T15940] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.979750][T15940] bridge_slave_0: entered allmulticast mode [ 399.997498][T15940] bridge_slave_0: entered promiscuous mode [ 400.014258][T15940] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.030686][T15940] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.058449][T15940] bridge_slave_1: entered allmulticast mode [ 400.075515][T15940] bridge_slave_1: entered promiscuous mode [ 400.188283][T16020] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.199337][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 400.199762][T16020] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.248682][T16025] xt_l2tp: missing protocol rule (udp|l2tpip) [ 400.312000][T15940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.342780][T16020] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.367795][ T5834] Bluetooth: hci3: command tx timeout [ 400.379687][T16020] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.479946][T15940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.491575][T16039] FAULT_INJECTION: forcing a failure. [ 400.491575][T16039] name failslab, interval 1, probability 0, space 0, times 0 [ 400.504489][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.3.3142 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 400.504524][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 400.504534][T16039] Call Trace: [ 400.504540][T16039] [ 400.504547][T16039] dump_stack_lvl+0x189/0x250 [ 400.504580][T16039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.504603][T16039] ? __pfx__printk+0x10/0x10 [ 400.504625][T16039] ? __pfx___might_resched+0x10/0x10 [ 400.504640][T16039] ? fs_reclaim_acquire+0x7d/0x100 [ 400.504669][T16039] should_fail_ex+0x414/0x560 [ 400.504690][T16039] should_failslab+0xa8/0x100 [ 400.504712][T16039] __kmalloc_cache_noprof+0x70/0x3d0 [ 400.504732][T16039] ? genl_start+0x1c9/0x6c0 [ 400.504763][T16039] genl_start+0x1c9/0x6c0 [ 400.504788][T16039] ? netlink_lookup+0x30/0x200 [ 400.504814][T16039] __netlink_dump_start+0x466/0x7e0 [ 400.504844][T16039] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 400.504873][T16039] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 400.504898][T16039] ? genl_get_cmd+0x67f/0x910 [ 400.504927][T16039] ? __pfx_genl_start+0x10/0x10 [ 400.504949][T16039] ? __pfx_genl_dumpit+0x10/0x10 [ 400.504971][T16039] ? __pfx_genl_done+0x10/0x10 [ 400.505011][T16039] genl_rcv_msg+0x5da/0x790 [ 400.505043][T16039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.505087][T16039] ? __pfx_ethnl_default_start+0x10/0x10 [ 400.505111][T16039] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 400.505135][T16039] ? __pfx_ethnl_default_done+0x10/0x10 [ 400.505161][T16039] ? ref_tracker_free+0x63a/0x7d0 [ 400.505181][T16039] ? __copy_skb_header+0xa7/0x550 [ 400.505218][T16039] netlink_rcv_skb+0x219/0x490 [ 400.505244][T16039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.505275][T16039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.505324][T16039] ? down_read+0x1ad/0x2e0 [ 400.505349][T16039] genl_rcv+0x28/0x40 [ 400.505374][T16039] netlink_unicast+0x758/0x8d0 [ 400.505408][T16039] netlink_sendmsg+0x805/0xb30 [ 400.505442][T16039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.505471][T16039] ? aa_sock_msg_perm+0x94/0x160 [ 400.505498][T16039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.505528][T16039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.505554][T16039] __sock_sendmsg+0x219/0x270 [ 400.505578][T16039] ____sys_sendmsg+0x505/0x830 [ 400.505608][T16039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.505639][T16039] ? import_iovec+0x74/0xa0 [ 400.505665][T16039] ___sys_sendmsg+0x21f/0x2a0 [ 400.505689][T16039] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.505746][T16039] ? __fget_files+0x2a/0x420 [ 400.505766][T16039] ? __fget_files+0x3a0/0x420 [ 400.505799][T16039] __x64_sys_sendmsg+0x19b/0x260 [ 400.505828][T16039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.505870][T16039] ? do_syscall_64+0xba/0x210 [ 400.505892][T16039] do_syscall_64+0xf6/0x210 [ 400.505909][T16039] ? clear_bhb_loop+0x45/0xa0 [ 400.505933][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.505949][T16039] RIP: 0033:0x7f2a1b38e969 [ 400.505967][T16039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.505980][T16039] RSP: 002b:00007f2a1c29c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.505997][T16039] RAX: ffffffffffffffda RBX: 00007f2a1b5b5fa0 RCX: 00007f2a1b38e969 [ 400.506010][T16039] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 400.506020][T16039] RBP: 00007f2a1c29c090 R08: 0000000000000000 R09: 0000000000000000 [ 400.506030][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.506040][T16039] R13: 0000000000000000 R14: 00007f2a1b5b5fa0 R15: 00007ffd683f6f78 [ 400.506067][T16039] [ 400.912191][T16035] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.011191][T16020] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.021858][T16020] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.077296][T15940] team0: Port device team_slave_0 added [ 401.086370][T16020] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.099600][T16020] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.119961][T15940] team0: Port device team_slave_1 added [ 401.165029][T15940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.173665][T15940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.217255][T15940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.231541][T15940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.238557][T15940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.265300][T15940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.269360][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 401.378907][T15940] hsr_slave_0: entered promiscuous mode [ 401.550289][T15940] hsr_slave_1: entered promiscuous mode [ 401.556942][T15940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.578819][T15940] Cannot create hsr debugfs directory [ 401.585053][T16059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3145'. [ 401.602931][T16051] lo speed is unknown, defaulting to 1000 [ 401.671502][ T53] tipc: Disabling bearer [ 401.678306][ T53] tipc: Left network mode [ 401.796846][T16020] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.813371][T16020] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.942226][T16020] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.950855][T16020] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.385902][T16020] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.433304][T16020] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.442754][ T5834] Bluetooth: hci3: command tx timeout [ 402.538531][T16020] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.549785][T16020] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.559156][T16083] vlan0: entered promiscuous mode [ 402.625944][ T53] hsr_slave_0: left promiscuous mode [ 402.639287][ T53] hsr_slave_1: left promiscuous mode [ 402.651515][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.672704][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.618649][ T53] team0 (unregistering): Port device team_slave_1 removed [ 403.731239][ T53] team0 (unregistering): Port device team_slave_0 removed [ 404.231889][T16087] lo speed is unknown, defaulting to 1000 [ 404.519696][ T5834] Bluetooth: hci3: command tx timeout [ 404.656325][T16127] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 59006 - 0 [ 404.673428][T16127] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 59006 - 0 [ 404.688191][T16127] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 59006 - 0 [ 404.699262][T16127] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 59006 - 0 [ 404.708202][T16127] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 34631 - 0 [ 404.713854][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3167'. [ 404.719927][T16127] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 34631 - 0 [ 404.732319][T16131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3167'. [ 404.735144][T16127] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 34631 - 0 [ 404.754669][T16127] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 34631 - 0 [ 404.766364][T16127] geneve2: entered promiscuous mode [ 404.773623][T16127] geneve2: entered allmulticast mode [ 405.065575][ T53] IPVS: stop unused estimator thread 0... [ 405.446841][T16148] xt_hashlimit: size too large, truncated to 1048576 [ 405.534408][T15940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.606896][T15940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.726068][T16156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3175'. [ 405.791587][T15940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.837520][T15940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 405.931426][T16164] lo speed is unknown, defaulting to 1000 [ 406.219042][T16176] siw: device registration error -23 [ 406.324285][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3177'. [ 406.744594][T15940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.759630][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 406.965046][T15940] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.034931][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.042183][T15566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.138822][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.146105][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.543838][T16212] netlink: 'syz.0.3188': attribute type 2 has an invalid length. [ 407.610740][T16216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3190'. [ 407.857757][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 407.897588][T15940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.045750][T15940] veth0_vlan: entered promiscuous mode [ 408.086162][T15940] veth1_vlan: entered promiscuous mode [ 408.095763][T16243] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 408.255213][T15940] veth0_macvtap: entered promiscuous mode [ 408.298595][T16249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3204'. [ 408.315180][T15940] veth1_macvtap: entered promiscuous mode [ 408.395445][T15940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.417105][T15940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.429143][T15940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.443330][T15940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.453290][T15940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.472185][T15940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.485727][T15940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.505818][T16253] lo speed is unknown, defaulting to 1000 [ 408.613501][T15940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.639678][T15940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.657506][T15940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.673963][T15940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.688339][T15940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.700199][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3206'. [ 408.709619][T15940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.722140][T15940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.734821][T15940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.751359][T15940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.762509][T15940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.771443][T15940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.026474][T16274] lo speed is unknown, defaulting to 1000 [ 409.101906][T15570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.115983][T15570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.239120][T16286] netlink: 'syz.1.3214': attribute type 8 has an invalid length. [ 409.368612][T16291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3216'. [ 409.533393][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.569843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.707982][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 409.870662][ T9992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.015826][T16319] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 410.160349][ T9992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.282833][T16328] xt_CT: No such helper "pptp" [ 410.423040][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'. [ 410.600044][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 411.065309][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.075293][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.083935][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 411.093525][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 411.128205][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.534547][T16348] lo speed is unknown, defaulting to 1000 [ 411.622539][T16364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3239'. [ 411.631796][T16364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3239'. [ 411.913867][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3241'. [ 412.320174][T16389] netlink: 'syz.3.3246': attribute type 23 has an invalid length. [ 412.364537][T16384] lo speed is unknown, defaulting to 1000 [ 412.527670][T16348] chnl_net:caif_netlink_parms(): no params data found [ 413.152274][T16348] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.183462][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.227005][T16348] bridge_slave_0: entered allmulticast mode [ 413.240046][ T5834] Bluetooth: hci1: command tx timeout [ 413.249528][T16348] bridge_slave_0: entered promiscuous mode [ 413.262915][T16348] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.273717][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.299498][T16348] bridge_slave_1: entered allmulticast mode [ 413.307634][T16348] bridge_slave_1: entered promiscuous mode [ 413.493697][T16434] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 413.659560][T16348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.697160][T16348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.875290][T16348] team0: Port device team_slave_0 added [ 413.886280][T16348] team0: Port device team_slave_1 added [ 413.985727][T16348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.994221][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.011284][T16477] __nla_validate_parse: 1 callbacks suppressed [ 414.011316][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'. [ 414.051813][T16476] FAULT_INJECTION: forcing a failure. [ 414.051813][T16476] name failslab, interval 1, probability 0, space 0, times 0 [ 414.074140][T16348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.080889][T16476] CPU: 1 UID: 0 PID: 16476 Comm: syz.4.3273 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 414.080925][T16476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 414.080946][T16476] Call Trace: [ 414.080957][T16476] [ 414.080967][T16476] dump_stack_lvl+0x189/0x250 [ 414.081010][T16476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.081042][T16476] ? __pfx__printk+0x10/0x10 [ 414.081072][T16476] ? __pfx___might_resched+0x10/0x10 [ 414.081099][T16476] should_fail_ex+0x414/0x560 [ 414.081142][T16476] should_failslab+0xa8/0x100 [ 414.081174][T16476] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 414.081204][T16476] ? __alloc_skb+0x112/0x2d0 [ 414.081246][T16476] __alloc_skb+0x112/0x2d0 [ 414.081279][T16476] netlink_sendmsg+0x5c6/0xb30 [ 414.081338][T16476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.081369][T16476] ? aa_sock_msg_perm+0x94/0x160 [ 414.081397][T16476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.081421][T16476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.081449][T16476] __sock_sendmsg+0x219/0x270 [ 414.081477][T16476] ____sys_sendmsg+0x505/0x830 [ 414.081515][T16476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.081556][T16476] ? import_iovec+0x74/0xa0 [ 414.081591][T16476] ___sys_sendmsg+0x21f/0x2a0 [ 414.081624][T16476] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.081697][T16476] ? __fget_files+0x2a/0x420 [ 414.081723][T16476] ? __fget_files+0x3a0/0x420 [ 414.081765][T16476] __x64_sys_sendmsg+0x19b/0x260 [ 414.081798][T16476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.081848][T16476] ? do_syscall_64+0xba/0x210 [ 414.081876][T16476] do_syscall_64+0xf6/0x210 [ 414.081899][T16476] ? clear_bhb_loop+0x45/0xa0 [ 414.081926][T16476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.081948][T16476] RIP: 0033:0x7f329138e969 [ 414.081968][T16476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.081987][T16476] RSP: 002b:00007f3292240038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.082009][T16476] RAX: ffffffffffffffda RBX: 00007f32915b6080 RCX: 00007f329138e969 [ 414.082026][T16476] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000005 [ 414.082040][T16476] RBP: 00007f3292240090 R08: 0000000000000000 R09: 0000000000000000 [ 414.082054][T16476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.082067][T16476] R13: 0000000000000000 R14: 00007f32915b6080 R15: 00007ffdded41628 [ 414.082102][T16476] [ 414.096860][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'. [ 414.186051][T16348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.329101][T16486] netlink: 'syz.0.3275': attribute type 21 has an invalid length. [ 414.334600][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.387987][T16348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.416199][T16470] lo speed is unknown, defaulting to 1000 [ 414.431388][T16487] tun0: tun_chr_ioctl cmd 2147767520 [ 414.729500][T16348] hsr_slave_0: entered promiscuous mode [ 414.736035][T16348] hsr_slave_1: entered promiscuous mode [ 414.745984][T16348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.753770][T16348] Cannot create hsr debugfs directory [ 415.161432][T16505] SET target dimension over the limit! [ 415.315692][T16495] lo speed is unknown, defaulting to 1000 [ 415.323202][ T5834] Bluetooth: hci1: command tx timeout [ 415.485883][T16521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3282'. [ 416.072854][T16543] netlink: 'syz.4.3291': attribute type 8 has an invalid length. [ 416.478867][T16559] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 416.541703][T16559] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 416.760123][T16348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 416.869523][T16348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 416.946131][T16348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.998290][T16348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.389634][T16348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.399994][ T5834] Bluetooth: hci1: command tx timeout [ 417.434109][T16348] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.453771][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.460998][T15566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.482053][T16574] netlink: 'syz.2.3300': attribute type 8 has an invalid length. [ 417.541363][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.548574][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.912923][T16348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.620090][T16601] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 418.661454][T16348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.916835][T16348] veth0_vlan: entered promiscuous mode [ 418.953764][T16348] veth1_vlan: entered promiscuous mode [ 419.080932][T16348] veth0_macvtap: entered promiscuous mode [ 419.151143][T16611] netlink: 'syz.2.3312': attribute type 8 has an invalid length. [ 419.184121][T16348] veth1_macvtap: entered promiscuous mode [ 419.275726][T16348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.317193][T16348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.352270][T16348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.368575][T16348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.417250][T16348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.428022][T16348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.444105][T16348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.454860][T16348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.479335][ T5834] Bluetooth: hci1: command tx timeout [ 419.486586][T16348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.533480][T16348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.544219][T16348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.554253][T16348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.569373][T16348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.579395][T16348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.590577][T16348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.601750][T16348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.613240][T16348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.625447][T16348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.660649][T16348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.679639][T16348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.688400][T16348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.721078][T16348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.769584][T16626] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 420.050511][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.092181][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.149340][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.157215][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.714745][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3329'. [ 420.758452][T16658] netlink: 'syz.1.3330': attribute type 1 has an invalid length. [ 420.789551][T16658] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3330'. [ 420.812268][T16661] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 421.001945][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'. [ 421.153896][T16672] lo speed is unknown, defaulting to 1000 [ 421.211027][T16677] netlink: 'syz.0.3337': attribute type 1 has an invalid length. [ 421.347717][T16681] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 421.483167][T16677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.491659][T15566] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 421.524392][T16690] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 421.539326][T16690] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 421.561861][T16690] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 421.582639][T16688] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 421.606569][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3337'. [ 421.634071][T16688] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 421.654315][T16677] veth3: entered promiscuous mode [ 421.673078][ T7147] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 421.685931][T16677] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 421.695608][T16688] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 421.728642][T16696] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 421.809429][ T5881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.967556][T16705] siw: device registration error -23 [ 422.014186][T16708] RDS: rds_bind could not find a transport for ::6970:365f:7674:6930:0, load rds_tcp or rds_rdma? [ 422.646583][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 422.762725][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 422.849573][T16745] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 422.948929][T16753] dummy0: entered allmulticast mode [ 423.290261][T16763] team0: Port device dummy0 removed [ 423.306283][T16763] bridge_slave_0: left allmulticast mode [ 423.318496][T16763] bridge_slave_0: left promiscuous mode [ 423.348272][T16763] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.360942][T16763] bridge_slave_1: left allmulticast mode [ 423.366971][T16763] bridge_slave_1: left promiscuous mode [ 423.374311][T16763] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.419265][T16763] bond0: (slave bond_slave_0): Releasing backup interface [ 423.436360][T16763] bond0: (slave bond_slave_1): Releasing backup interface [ 423.488468][T16763] team0: Port device team_slave_0 removed [ 423.530937][T16763] team0: Port device team_slave_1 removed [ 423.538209][T16763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.546407][T16763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.563413][T16763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.571269][T16763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.703112][T16777] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3370'. [ 423.788305][T16780] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 424.131387][T16790] syzkaller0: entered promiscuous mode [ 424.141768][T16801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3379'. [ 424.153836][T16790] syzkaller0: entered allmulticast mode [ 424.187989][T16795] gretap0: entered promiscuous mode [ 424.195429][T16795] vlan2: entered promiscuous mode [ 424.414084][T16811] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 424.539984][ T9992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 426.486811][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3390'. [ 426.510127][T16842] netlink: 'syz.0.3388': attribute type 1 has an invalid length. [ 426.546062][T16843] lo speed is unknown, defaulting to 1000 [ 426.570221][T16848] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3392'. [ 426.604980][T16852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3389'. [ 426.608388][T16842] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.679027][T16850] veth5: entered promiscuous mode [ 426.690618][T16850] bond3: (slave veth5): Enslaving as an active interface with a down link [ 426.705447][T16853] erspan0: entered allmulticast mode [ 426.722020][T16853] bond3: (slave erspan0): making interface the new active one [ 426.733405][T16853] erspan0: entered promiscuous mode [ 426.740052][T16862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3394'. [ 426.740231][T16853] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 426.783084][T16864] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3395'. [ 427.126550][T16875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3399'. [ 427.307393][T16881] syzkaller0: entered promiscuous mode [ 427.322743][T16881] syzkaller0: entered allmulticast mode [ 427.335567][T16878] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3399'. [ 427.417013][T16893] netlink: 'syz.4.3405': attribute type 8 has an invalid length. [ 427.841080][T16903] x_tables: duplicate underflow at hook 1 [ 429.223986][T16921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.355801][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3414'. [ 429.560192][T16925] netlink: 'syz.3.3415': attribute type 10 has an invalid length. [ 429.854170][T16898] netlink: 'syz.1.3407': attribute type 3 has an invalid length. [ 429.863287][T16898] netlink: 'syz.1.3407': attribute type 3 has an invalid length. [ 429.871544][T16898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3407'. [ 429.901522][T16925] lo: entered promiscuous mode [ 429.934349][T16925] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 430.267661][T16948] Bluetooth: MGMT ver 1.23 [ 430.360957][T16955] netlink: 'syz.3.3423': attribute type 1 has an invalid length. [ 430.369051][T16955] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3423'. [ 430.948463][T16980] syzkaller0: entered promiscuous mode [ 430.961534][T16980] syzkaller0: entered allmulticast mode [ 431.459491][T17003] block nbd3: server does not support multiple connections per device. [ 431.483379][T17003] block nbd3: shutting down sockets [ 432.916103][T17001] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 433.113983][T17023] __nla_validate_parse: 5 callbacks suppressed [ 433.114003][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3440'. [ 433.360010][T17034] sctp: [Deprecated]: syz.1.3444 (pid 17034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.360010][T17034] Use struct sctp_sack_info instead [ 433.508370][T17044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3448'. [ 433.975133][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 434.012096][T17050] syzkaller0: entered promiscuous mode [ 434.024424][T17050] syzkaller0: entered allmulticast mode [ 434.676555][T17076] IPv4: Oversized IP packet from 127.202.26.0 [ 435.879694][ T5140] Bluetooth: hci1: command 0x0405 tx timeout [ 435.918597][T17063] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3453'. [ 435.927942][T17063] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 435.944212][T17064] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 436.168407][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3458'. [ 436.200490][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.209931][T16141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.218841][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3458'. [ 436.264662][T17090] netlink: 'syz.3.3458': attribute type 18 has an invalid length. [ 436.437386][T17103] netlink: 'syz.2.3466': attribute type 3 has an invalid length. [ 436.449806][T17103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3466'. [ 436.472884][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3466'. [ 436.488530][T17107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3465'. [ 436.501228][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3466'. [ 436.670035][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.693149][T17111] syzkaller0: entered promiscuous mode [ 436.706439][T17111] syzkaller0: entered allmulticast mode [ 436.826397][T17124] openvswitch: netlink: Message has 4 unknown bytes. [ 437.223732][T17098] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 437.418481][T17145] netlink: 'syz.4.3476': attribute type 10 has an invalid length. [ 438.450176][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 438.584333][T17120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.643008][T17120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.744252][T17128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.794119][T17153] __nla_validate_parse: 4 callbacks suppressed [ 438.794136][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3478'. [ 438.846574][T17137] bridge_slave_1: left allmulticast mode [ 438.853708][T17137] bridge_slave_1: left promiscuous mode [ 438.862042][T17137] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.872538][T17137] bridge_slave_0: left allmulticast mode [ 438.878204][T17137] bridge_slave_0: left promiscuous mode [ 438.884549][T17137] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.994366][T17145] team0: Port device geneve0 added [ 439.123288][T17128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.190063][T15568] erspan0: left promiscuous mode [ 439.331084][T17128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.401468][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.515760][T17128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.771047][T17128] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.832720][T17128] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.888616][T17128] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.983798][T17183] syzkaller0: entered promiscuous mode [ 440.002271][T17183] syzkaller0: entered allmulticast mode [ 440.027883][T17128] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.037759][T17190] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 440.095069][T17196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3493'. [ 440.276453][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3496'. [ 440.451331][T17213] Cannot find set identified by id 2 to match [ 440.680362][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.034062][T17216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'. [ 442.203468][T17218] lo speed is unknown, defaulting to 1000 [ 442.521497][T17243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3509'. [ 442.547666][T17244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3509'. [ 442.579885][T17240] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 442.914583][T17265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3513'. [ 443.436813][T17281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3516'. [ 443.478666][T17285] batadv_slave_0: entered promiscuous mode [ 443.563980][T17290] netlink: 'syz.0.3519': attribute type 10 has an invalid length. [ 443.575940][T17290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3519'. [ 443.598068][T17285] batadv_slave_0: left promiscuous mode [ 443.642564][T17290] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 443.831338][T17303] bond3: (slave erspan0): Releasing active interface [ 443.882502][ T9992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 443.918827][T17303] bond0: (slave bond_slave_0): Releasing backup interface [ 443.938801][T17303] bond0: (slave bond_slave_1): Releasing backup interface [ 443.983718][T17303] team0: Port device team_slave_0 removed [ 443.997576][T17303] team0: Port device team_slave_1 removed [ 444.005668][T17303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.013691][T17303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.027023][T17303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.035049][T17303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.054001][T17303] bond2: (slave ip6gretap1): Removing an active aggregator [ 444.064698][T17303] bond2: (slave ip6gretap1): Releasing backup interface [ 444.077282][T17303] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 4a:47:81:4d:ac:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 444.106903][T17303] bond2: (slave veth3): Releasing backup interface [ 444.117649][T17303] bond3: (slave veth5): Releasing active interface [ 444.303645][ T5912] IPVS: starting estimator thread 0... [ 444.360127][ T9992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 444.369674][T17329] netlink: 'syz.2.3530': attribute type 6 has an invalid length. [ 444.400473][T17328] IPVS: using max 30 ests per chain, 72000 per kthread [ 444.486619][T17338] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.779608][T17354] FAULT_INJECTION: forcing a failure. [ 444.779608][T17354] name failslab, interval 1, probability 0, space 0, times 0 [ 444.841199][T17354] CPU: 0 UID: 0 PID: 17354 Comm: syz.1.3536 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 444.841232][T17354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 444.841245][T17354] Call Trace: [ 444.841254][T17354] [ 444.841264][T17354] dump_stack_lvl+0x189/0x250 [ 444.841305][T17354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.841335][T17354] ? __pfx__printk+0x10/0x10 [ 444.841359][T17354] ? __pfx___might_resched+0x10/0x10 [ 444.841379][T17354] ? fs_reclaim_acquire+0x7d/0x100 [ 444.841415][T17354] should_fail_ex+0x414/0x560 [ 444.841450][T17354] should_failslab+0xa8/0x100 [ 444.841480][T17354] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 444.841507][T17354] ? __alloc_skb+0x112/0x2d0 [ 444.841538][T17354] __alloc_skb+0x112/0x2d0 [ 444.841568][T17354] alloc_skb_with_frags+0xca/0x890 [ 444.841611][T17354] sock_alloc_send_pskb+0x857/0x990 [ 444.841663][T17354] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 444.841707][T17354] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 444.841737][T17354] unix_dgram_sendmsg+0x5c2/0x17c0 [ 444.841774][T17354] ? __lock_acquire+0xaac/0xd20 [ 444.841807][T17354] ? aa_sk_perm+0x81e/0x950 [ 444.841834][T17354] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 444.841869][T17354] ? aa_sock_msg_perm+0x94/0x160 [ 444.841893][T17354] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 444.841922][T17354] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 444.841953][T17354] __sock_sendmsg+0x219/0x270 [ 444.841978][T17354] ____sys_sendmsg+0x52d/0x830 [ 444.842012][T17354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.842051][T17354] ? import_iovec+0x74/0xa0 [ 444.842083][T17354] ___sys_sendmsg+0x21f/0x2a0 [ 444.842114][T17354] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.842191][T17354] ? __might_fault+0xb0/0x130 [ 444.842225][T17354] __sys_sendmmsg+0x227/0x430 [ 444.842260][T17354] ? __pfx___sys_sendmmsg+0x10/0x10 [ 444.842299][T17354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 444.842341][T17354] ? ksys_write+0x1f0/0x250 [ 444.842363][T17354] ? rcu_is_watching+0x15/0xb0 [ 444.842404][T17354] __x64_sys_sendmmsg+0xa0/0xc0 [ 444.842442][T17354] do_syscall_64+0xf6/0x210 [ 444.842464][T17354] ? clear_bhb_loop+0x45/0xa0 [ 444.842489][T17354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.842509][T17354] RIP: 0033:0x7fa424d8e969 [ 444.842527][T17354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.842545][T17354] RSP: 002b:00007fa425cb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 444.842568][T17354] RAX: ffffffffffffffda RBX: 00007fa424fb5fa0 RCX: 00007fa424d8e969 [ 444.842584][T17354] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 444.842598][T17354] RBP: 00007fa425cb0090 R08: 0000000000000000 R09: 0000000000000000 [ 444.842612][T17354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.842624][T17354] R13: 0000000000000000 R14: 00007fa424fb5fa0 R15: 00007ffef1223c98 [ 444.842657][T17354] [ 445.163388][T17358] netlink: 'syz.3.3537': attribute type 2 has an invalid length. [ 445.183041][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3537'. [ 445.422664][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 445.473330][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3541'. [ 445.504175][T17373] netlink: 'syz.4.3541': attribute type 5 has an invalid length. [ 445.525673][T17369] lo speed is unknown, defaulting to 1000 [ 445.535940][T17373] netlink: 'syz.4.3541': attribute type 6 has an invalid length. [ 445.692810][T17384] netlink: 'syz.2.3544': attribute type 10 has an invalid length. [ 445.712884][T17384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3544'. [ 445.852888][T17384] team0: Port device geneve0 added [ 446.002897][T17339] lo speed is unknown, defaulting to 1000 [ 446.025352][ T30] audit: type=1800 audit(1746782168.982:89): pid=17393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3548" name="memory.events" dev="tmpfs" ino=573 res=0 errno=0 [ 446.068445][ T30] audit: type=1804 audit(1746782169.022:90): pid=17393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3548" name="memory.events" dev="tmpfs" ino=573 res=1 errno=0 [ 446.292694][T17393] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.340722][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3550'. [ 446.412504][T17369] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3542'. [ 446.423082][T17369] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3542'. [ 446.587760][T17393] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.762063][T17393] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.762971][T17410] netlink: 'syz.1.3553': attribute type 6 has an invalid length. [ 446.931426][T17393] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.006449][T17420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3559'. [ 447.135846][T17430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3561'. [ 447.327954][T17441] xfrm1: entered promiscuous mode [ 447.337535][T17441] xfrm1: entered allmulticast mode [ 447.355488][T17441] xt_hashlimit: size too large, truncated to 1048576 [ 447.414772][T17393] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.483388][T17447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3566'. [ 447.514439][T17393] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.528827][T17439] lo speed is unknown, defaulting to 1000 [ 447.585466][T17393] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.708491][T17393] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.076656][T17464] tun0: tun_chr_ioctl cmd 2147767520 [ 448.524109][T17477] lo speed is unknown, defaulting to 1000 [ 449.671381][T17515] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20003 [ 449.696163][T17511] lo speed is unknown, defaulting to 1000 [ 450.315906][T17511] __nla_validate_parse: 3 callbacks suppressed [ 450.315928][T17511] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3589'. [ 450.349342][T17511] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3589'. [ 450.680742][T17557] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 450.746543][T17557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.807936][T17563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3609'. [ 450.811279][T17557] team0: Port device bond0 added [ 451.039031][T17571] lo speed is unknown, defaulting to 1000 [ 451.108785][T17580] netlink: 'syz.1.3613': attribute type 30 has an invalid length. [ 451.163621][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3615'. [ 451.641213][T17609] lo speed is unknown, defaulting to 1000 [ 451.750900][T17620] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 451.929943][T17615] syzkaller0: entered promiscuous mode [ 451.935571][T17615] syzkaller0: entered allmulticast mode [ 452.017302][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'. [ 452.026383][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'. [ 452.298887][T17636] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3622'. [ 452.308320][T17636] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3622'. [ 453.900039][T17629] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3629'. [ 453.910513][T17629] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3629'. [ 454.146081][T17657] ip6t_REJECT: ECHOREPLY is not supported [ 454.232222][T17660] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 454.346530][T17664] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 454.546835][T17672] lo speed is unknown, defaulting to 1000 [ 455.397196][T17665] lo speed is unknown, defaulting to 1000 [ 455.447575][T17704] vlan2: entered allmulticast mode [ 455.459887][T17704] bond0: entered allmulticast mode [ 455.474055][T17704] bond_slave_0: entered allmulticast mode [ 455.502490][T17704] bond_slave_1: entered allmulticast mode [ 455.535661][T17704] bridge0: port 3(vlan2) entered blocking state [ 455.573014][T17704] bridge0: port 3(vlan2) entered disabled state [ 455.583892][T17704] vlan2: entered promiscuous mode [ 455.588988][T17704] bond0: entered promiscuous mode [ 455.600845][T17704] bond_slave_0: entered promiscuous mode [ 455.606785][T17704] bond_slave_1: entered promiscuous mode [ 455.618575][T17704] bridge0: port 3(vlan2) entered blocking state [ 455.625272][T17704] bridge0: port 3(vlan2) entered forwarding state [ 455.649685][T17712] netlink: 'syz.2.3659': attribute type 1 has an invalid length. [ 456.040477][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.055490][T17714] bond1: (slave gretap1): making interface the new active one [ 456.093517][T17714] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 456.225538][T17721] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 456.298040][T17713] __nla_validate_parse: 5 callbacks suppressed [ 456.298062][T17713] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3658'. [ 456.327417][T17713] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3658'. [ 456.346824][T17710] lo speed is unknown, defaulting to 1000 [ 456.702284][T17744] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3669'. [ 457.333227][T17765] hsr0: entered promiscuous mode [ 457.421778][T17765] macvtap1: entered promiscuous mode [ 457.427366][T17765] macvtap1: entered allmulticast mode [ 457.446529][T17774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3681'. [ 457.484688][T17765] hsr0: entered allmulticast mode [ 457.490495][T17765] hsr_slave_0: entered allmulticast mode [ 457.509347][T17765] hsr_slave_1: entered allmulticast mode [ 457.537249][T17765] hsr0: left allmulticast mode [ 457.568684][T17765] hsr_slave_0: left allmulticast mode [ 457.580886][T17780] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 457.592377][T17765] hsr_slave_1: left allmulticast mode [ 457.612557][T17780] netlink: 'syz.3.3680': attribute type 58 has an invalid length. [ 457.620622][T17780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3680'. [ 457.798914][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3676'. [ 457.838553][T17775] syzkaller0: entered promiscuous mode [ 457.869406][T17775] syzkaller0: entered allmulticast mode [ 458.531352][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'. [ 458.715371][T17813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3691'. [ 460.699988][T16141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 461.335241][T17867] 8021q: VLANs not supported on wg0 [ 461.402131][ T5912] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 461.452347][T17860] lo speed is unknown, defaulting to 1000 [ 461.756917][T17863] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3708'. [ 461.807703][T17863] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3708'. [ 461.808186][T17893] ip6t_srh: unknown srh invflags 4449 [ 461.886718][T17897] netlink: 'syz.0.3719': attribute type 4 has an invalid length. [ 461.990159][T17900] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3721'. [ 462.308116][T17920] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 462.332933][T17921] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 462.367674][T17921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3729'. [ 462.390757][T17920] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 462.424231][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3729'. [ 462.703921][T17937] lo speed is unknown, defaulting to 1000 [ 462.807840][ T5931] IPVS: starting estimator thread 0... [ 462.909270][T17949] IPVS: using max 31 ests per chain, 74400 per kthread [ 463.084496][T17965] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3745'. [ 463.418806][T17974] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 48317 - 0 [ 463.442079][T17974] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 48317 - 0 [ 463.489089][T17974] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 48317 - 0 [ 463.511228][T17974] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 48317 - 0 [ 463.550011][T17974] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 37260 - 0 [ 463.578352][T17974] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 37260 - 0 [ 463.605055][T17974] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 37260 - 0 [ 463.614454][T17974] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 37260 - 0 [ 463.626556][T17974] geneve2: entered promiscuous mode [ 463.635563][T17974] geneve2: entered allmulticast mode [ 463.651610][T17937] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3736'. [ 463.662466][T17994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3755'. [ 463.704775][T17994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3755'. [ 463.719876][T17937] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3736'. [ 464.325130][T18022] pim6reg: entered allmulticast mode [ 464.339730][T18022] pim6reg: left allmulticast mode [ 464.450256][T18027] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 464.693277][T18041] netlink: 'syz.4.3771': attribute type 4 has an invalid length. [ 464.783286][T18050] sctp: [Deprecated]: syz.1.3772 (pid 18050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.783286][T18050] Use struct sctp_sack_info instead [ 465.066856][T16141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 465.434236][T18076] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 466.039787][T16141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 466.679487][ T5931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 467.103263][T18143] lo speed is unknown, defaulting to 1000 [ 467.182075][T18149] __nla_validate_parse: 6 callbacks suppressed [ 467.182095][T18149] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3810'. [ 467.289806][T18149] block nbd3: shutting down sockets [ 467.400026][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3808'. [ 467.425829][T18146] lo speed is unknown, defaulting to 1000 [ 467.620521][T18163] netlink: 'syz.0.3814': attribute type 1 has an invalid length. [ 467.679731][T18168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3813'. [ 467.752098][T18164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3813'. [ 467.985056][T18177] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 468.330050][T18146] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3809'. [ 468.351611][T18146] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3809'. [ 469.057942][T18196] netlink: 'syz.3.3824': attribute type 8 has an invalid length. [ 469.282318][T18202] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3826'. [ 469.484090][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3828'. [ 469.500707][T18208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3828'. [ 469.572260][T18206] lo speed is unknown, defaulting to 1000 [ 469.627525][T18211] x_tables: duplicate underflow at hook 4 [ 469.640203][T16141] IPVS: starting estimator thread 0... [ 469.760051][T18212] IPVS: using max 26 ests per chain, 62400 per kthread [ 470.259518][T16141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 470.364694][T18227] lo speed is unknown, defaulting to 1000 [ 470.470136][T18240] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 470.627034][T18245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3841'. [ 470.842404][T18250] can: request_module (can-proto-4) failed. [ 471.054490][T18262] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 471.080039][ T5881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 471.195673][T18273] openvswitch: netlink: Multiple metadata blocks provided [ 471.212114][T18262] batadv1: entered allmulticast mode [ 471.228952][T18262] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 471.519375][T18277] xt_CT: No such helper "pptp" [ 471.732985][T18286] lo speed is unknown, defaulting to 1000 [ 472.531611][T18312] lo speed is unknown, defaulting to 1000 [ 472.646770][T18316] lo speed is unknown, defaulting to 1000 [ 472.747610][T18286] __nla_validate_parse: 3 callbacks suppressed [ 472.747632][T18286] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3852'. [ 472.775220][T18286] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3852'. [ 473.297195][T18312] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3860'. [ 473.307843][T18312] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3860'. [ 473.363930][T18336] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 473.744774][T18340] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (20) [ 473.757875][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3868'. [ 473.789935][T18343] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.974123][T18359] netlink: 'syz.3.3875': attribute type 8 has an invalid length. [ 474.044137][T18343] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.105948][T18363] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3876'. [ 474.217649][T18343] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.338820][T18343] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.508827][T18375] lo speed is unknown, defaulting to 1000 [ 474.561340][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'. [ 474.599811][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.648125][T18387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3885'. [ 474.662164][T18343] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.705691][T18343] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.860930][T18343] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.925472][T18343] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.034800][T18400] netlink: 'syz.4.3888': attribute type 8 has an invalid length. [ 475.117255][T18375] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3880'. [ 475.127107][T18375] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3880'. [ 475.425993][T18416] syzkaller0: entered promiscuous mode [ 475.434287][T18416] syzkaller0: entered allmulticast mode [ 475.444541][T18421] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 475.489106][T18420] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 475.526355][T18420] No such timeout policy "syz0" [ 477.500478][T16141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 477.546515][T18451] netlink: 'syz.1.3903': attribute type 8 has an invalid length. [ 477.648932][T18451] Cannot find set identified by id 4 to match [ 477.700618][T18459] netlink: 'syz.3.3905': attribute type 1 has an invalid length. [ 477.773215][T18444] lo speed is unknown, defaulting to 1000 [ 477.825195][T18464] __nla_validate_parse: 13 callbacks suppressed [ 477.825216][T18464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3907'. [ 478.106332][T18472] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.107085][T18474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3911'. [ 478.160950][T18477] pim6reg9: entered allmulticast mode [ 478.173030][T18477] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 478.188229][T18474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3911'. [ 478.205537][T18472] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.258848][T18474] batadv0: entered promiscuous mode [ 478.265020][T18474] macsec1: entered allmulticast mode [ 478.270565][T18474] batadv0: entered allmulticast mode [ 478.279929][T16141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 478.287834][T18474] batadv0: left allmulticast mode [ 478.293252][T18474] batadv0: left promiscuous mode [ 478.334471][T18480] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 478.347995][T18480] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 478.367922][T18480] bond4: (slave vcan1): making interface the new active one [ 478.379932][T18480] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 478.392729][T18472] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.466402][T18472] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.647065][T18472] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.682541][T18472] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.706476][T18472] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.726737][T18472] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.819727][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 478.921325][T18492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3917'. [ 479.042218][ T5834] block nbd3: Receive control failed (result -32) [ 479.079847][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 479.214367][ T9992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 479.637384][ T9990] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 479.930679][T18550] erspan1: entered allmulticast mode [ 480.079665][ T9992] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 480.134736][T18563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3940'. [ 480.535663][T18585] lo speed is unknown, defaulting to 1000 [ 481.027193][T18606] lo speed is unknown, defaulting to 1000 [ 481.058913][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.126884][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.157342][T18613] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3957'. [ 481.164779][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.262558][T18585] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 481.409333][ T55] Bluetooth: hci1: command 0x0405 tx timeout [ 481.628375][T18624] dvmrp0: entered allmulticast mode [ 481.669422][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.698823][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.714515][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.735211][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.773667][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.804445][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.831708][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.853389][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.892376][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.910434][T18585] wg1 speed is unknown, defaulting to 1000 [ 481.940452][T18585] wg1 speed is unknown, defaulting to 1000 [ 482.076239][T18640] lo speed is unknown, defaulting to 1000 [ 482.131958][T18649] netlink: 'syz.4.3969': attribute type 1 has an invalid length. [ 482.190196][T18649] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3969'. [ 482.229668][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3969'. [ 482.269848][T18642] lo speed is unknown, defaulting to 1000 [ 482.277452][T18642] wg1 speed is unknown, defaulting to 1000 [ 482.502381][T18656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3972'. [ 482.742641][T18664] lo speed is unknown, defaulting to 1000 [ 482.935571][T18664] wg1 speed is unknown, defaulting to 1000 [ 482.983805][T18676] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3980'. [ 483.009673][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 483.079837][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 483.098887][T18676] netlink: 'syz.2.3980': attribute type 29 has an invalid length. [ 483.107954][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3980'. [ 483.178510][T18682] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 483.290703][ C1] Unknown status report in ack skb [ 483.347793][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3983'. [ 483.858176][T18707] netlink: 'syz.1.3991': attribute type 1 has an invalid length. [ 483.989890][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3994'. [ 484.012120][T18716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3991'. [ 484.140485][T18707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.187113][T18712] bond2: (slave veth3): Enslaving as an active interface with a down link [ 484.197203][T18716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3991'. [ 484.238461][T18723] bond2: (slave veth0_to_bond): making interface the new active one [ 484.263057][T18723] veth0_to_bond: entered promiscuous mode [ 484.285051][T18723] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 484.325221][T18726] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 484.432563][T18707] vlan3: entered allmulticast mode [ 484.437911][T18707] veth1: entered allmulticast mode [ 484.444064][T18707] veth1: entered promiscuous mode [ 484.450247][T18707] veth1: left promiscuous mode [ 484.458016][T18707] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 484.552672][T18735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4000'. [ 484.825303][T18752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4008'. [ 484.870584][T18755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 484.978025][T18764] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 485.562936][T18796] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 485.997446][T18816] team0: No ports can be present during mode change [ 486.140756][T18822] nbd: nbd1 already in use [ 486.200022][T18823] lo speed is unknown, defaulting to 1000 [ 486.206040][T18822] dvmrp0: left allmulticast mode [ 486.268069][T18831] sctp: [Deprecated]: syz.3.4041 (pid 18831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.268069][T18831] Use struct sctp_sack_info instead [ 486.273744][T18823] wg1 speed is unknown, defaulting to 1000 [ 486.370927][T18829] sctp: [Deprecated]: syz.3.4041 (pid 18829) Use of int in max_burst socket option deprecated. [ 486.370927][T18829] Use struct sctp_assoc_value instead [ 486.395395][T18829] lo: left promiscuous mode [ 486.543515][T18829] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.551467][T18829] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.756667][T18829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.776748][T18829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.863993][T18829] vlan0: left promiscuous mode [ 486.939607][T18829] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.948631][T18829] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.979674][T18829] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.998330][T18829] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.150706][T18829] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 37260 - 0 [ 487.167480][T18829] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 37260 - 0 [ 487.178251][T18829] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 37260 - 0 [ 487.190414][T18829] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 37260 - 0 [ 487.200381][T18829] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 48317 - 0 [ 487.210482][T18829] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 48317 - 0 [ 487.239665][T18829] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 48317 - 0 [ 487.248703][T18829] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 48317 - 0 [ 487.280090][T18829] geneve2: left promiscuous mode [ 487.285293][T18829] geneve2: left allmulticast mode [ 487.492552][T18842] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 487.846791][T18862] xt_ipcomp: unknown flags F7 [ 487.989949][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 488.035147][T18872] netlink: 'syz.3.4058': attribute type 2 has an invalid length. [ 488.091999][T18879] __nla_validate_parse: 9 callbacks suppressed [ 488.092035][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4055'. [ 488.127545][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4056'. [ 488.159789][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4056'. [ 488.654803][T18899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 488.741495][T18903] lo speed is unknown, defaulting to 1000 [ 488.752430][T18903] wg1 speed is unknown, defaulting to 1000 [ 488.974473][T18909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4064'. [ 489.094132][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'. [ 489.279623][T18903] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4063'. [ 489.290342][ T9990] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 489.307760][T18903] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4063'. [ 489.789483][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4076'. [ 490.004965][T18951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4079'. [ 490.120160][ T9994] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 490.207311][T18941] lo speed is unknown, defaulting to 1000 [ 490.220030][T18935] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.241915][T18935] tipc: Enabled bearer , priority 10 [ 490.271726][T18941] wg1 speed is unknown, defaulting to 1000 [ 490.359378][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.499437][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.639438][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.731966][T18968] siw: device registration error -23 [ 490.757019][T18964] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4081'. [ 490.779862][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.866970][T18958] lo speed is unknown, defaulting to 1000 [ 490.919312][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.973877][T18958] wg1 speed is unknown, defaulting to 1000 [ 491.059257][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.152137][T18976] IPVS: length: 78 != 8 [ 491.199268][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.339334][ T5822] tipc: Node number set to 3637584042 [ 491.479371][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.677212][T18995] dvmrp0: entered allmulticast mode [ 491.744375][T18995] nbd: nbd2 already in use [ 491.749318][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.784585][T18995] dvmrp0: left allmulticast mode [ 491.964162][T19001] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.972523][T19001] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.980819][T19001] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.989026][T19001] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.022378][T19008] IPVS: length: 78 != 8 [ 492.464259][T19025] netlink: 'syz.4.4104': attribute type 10 has an invalid length. [ 492.494725][T19025] dummy0: entered promiscuous mode [ 492.547130][T19025] bridge0: port 1(dummy0) entered blocking state [ 492.579344][T19025] bridge0: port 1(dummy0) entered disabled state [ 493.106692][T19053] __nla_validate_parse: 7 callbacks suppressed [ 493.106722][T19053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4113'. [ 493.590569][T19077] erspan0: left allmulticast mode [ 493.793841][T19090] sctp: [Deprecated]: syz.3.4122 (pid 19090) Use of int in max_burst socket option. [ 493.793841][T19090] Use struct sctp_assoc_value instead [ 494.266300][T19077] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.284511][T19077] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.296481][T19077] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.313188][T19077] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.386392][T19077] bridge1: left allmulticast mode [ 494.404834][T19077] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.414311][T19077] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.422857][T19077] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.431361][T19077] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.458597][T19077] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 34631 - 0 [ 494.468109][T19077] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 34631 - 0 [ 494.476982][T19077] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 34631 - 0 [ 494.485712][T19077] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 34631 - 0 [ 494.494585][T19077] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 59006 - 0 [ 494.504133][T19077] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 59006 - 0 [ 494.512768][T19077] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 59006 - 0 [ 494.521455][T19077] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 59006 - 0 [ 494.530276][T19077] geneve2: left promiscuous mode [ 494.535378][T19077] geneve2: left allmulticast mode [ 494.550150][T19077] veth3: left promiscuous mode [ 494.598117][T19077] veth5: left promiscuous mode [ 494.650032][T19109] lo speed is unknown, defaulting to 1000 [ 494.694850][T19081] lo speed is unknown, defaulting to 1000 [ 494.700871][T19109] lo speed is unknown, defaulting to 1000 [ 494.707716][T19109] lo speed is unknown, defaulting to 1000 [ 494.724001][T19081] wg1 speed is unknown, defaulting to 1000 [ 494.795516][T19109] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 494.876060][T19123] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4130'. [ 494.915316][T19123] netlink: 'syz.2.4130': attribute type 1 has an invalid length. [ 494.948440][T19109] lo speed is unknown, defaulting to 1000 [ 494.986362][T19130] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4130'. [ 495.061776][T19123] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.107300][T19109] lo speed is unknown, defaulting to 1000 [ 495.131623][T19109] lo speed is unknown, defaulting to 1000 [ 495.200405][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4136'. [ 495.298637][T19142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4139'. [ 495.309612][T19109] lo speed is unknown, defaulting to 1000 [ 495.311643][T19109] lo speed is unknown, defaulting to 1000 [ 495.348459][T19109] lo speed is unknown, defaulting to 1000 [ 495.368600][T19109] lo speed is unknown, defaulting to 1000 [ 495.399536][ C0] net_ratelimit: 4 callbacks suppressed [ 495.399555][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 495.401220][T19109] lo speed is unknown, defaulting to 1000 [ 495.453799][T19109] lo speed is unknown, defaulting to 1000 [ 495.481972][ T7145] veth0_to_bond: left promiscuous mode [ 495.582782][T19154] lo speed is unknown, defaulting to 1000 [ 495.679059][T19164] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.826700][T19154] wg1 speed is unknown, defaulting to 1000 [ 495.839716][T19168] netlink: 'syz.2.4147': attribute type 12 has an invalid length. [ 495.902669][T19154] lo speed is unknown, defaulting to 1000 [ 496.236138][T19182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4153'. [ 496.359331][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.388483][T19190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4155'. [ 496.437275][T19190] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 496.439328][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 496.576557][T19198] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 496.606397][T19202] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 496.720813][T19154] netlink: 264 bytes leftover after parsing attributes in process `syz.1.4141'. [ 496.740156][T19154] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4141'. [ 497.053278][T19220] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 497.281347][T19219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4163'. [ 497.316016][ T30] audit: type=1800 audit(1746782220.272:91): pid=19231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4168" name="xffffffffffffffff00000000000000000000005" dev="tmpfs" ino=986 res=0 errno=0 [ 497.479668][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 497.919777][T19260] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 498.175462][T19280] __nla_validate_parse: 3 callbacks suppressed [ 498.175484][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4183'. [ 498.188750][T19279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4186'. [ 498.233749][T19282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4187'. [ 498.262177][T19282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4187'. [ 498.358973][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4188'. [ 498.439482][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 498.519352][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 498.726787][T19298] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 498.812972][T19298] bond3: entered promiscuous mode [ 498.813495][T19303] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4192'. [ 498.829074][T19298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.927148][T19303] batadv2: entered promiscuous mode [ 498.958457][T19306] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4192'. [ 498.971408][T19303] batadv2: entered allmulticast mode [ 499.013147][T19303] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 499.043966][T19312] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4192'. [ 499.086859][T19303] bond3: (slave batadv2): making interface the new active one [ 499.124965][T19303] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 499.138587][T19311] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 499.174701][T19316] ip6gre1: entered promiscuous mode [ 499.260614][T19316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4197'. [ 499.272379][T19316] netem: unknown loss type 13 [ 499.277451][T19316] netem: change failed [ 499.474608][T19321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4200'. [ 499.559810][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 499.894346][T19345] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 500.469504][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.599313][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 500.812041][T19395] lo speed is unknown, defaulting to 1000 [ 500.867401][T19395] wg1 speed is unknown, defaulting to 1000 [ 500.929878][T19395] lo speed is unknown, defaulting to 1000 [ 501.184172][T19413] Cannot find add_set index 2 as target [ 501.319673][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.387745][T19421] lo speed is unknown, defaulting to 1000 [ 501.393987][T19422] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 501.451418][T19421] wg1 speed is unknown, defaulting to 1000 [ 501.544202][T19421] lo speed is unknown, defaulting to 1000 [ 501.639297][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 501.724078][T19429] sctp: [Deprecated]: syz.4.4236 (pid 19429) Use of int in max_burst socket option. [ 501.724078][T19429] Use struct sctp_assoc_value instead [ 502.113856][T19451] netlink: 'syz.3.4246': attribute type 2 has an invalid length. [ 502.438614][T19451] : entered promiscuous mode [ 502.470032][T19464] bridge_slave_0: left allmulticast mode [ 502.475757][T19464] bridge_slave_0: left promiscuous mode [ 502.486904][T19464] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.499102][T19464] bridge_slave_1: left allmulticast mode [ 502.505112][T19464] bridge_slave_1: left promiscuous mode [ 502.512080][T19464] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.555420][T19464] bond0: (slave bond_slave_0): Releasing backup interface [ 502.571285][T19464] bond0: (slave bond_slave_1): Releasing backup interface [ 502.610606][T19464] team0: Port device team_slave_0 removed [ 502.639010][T19464] team0: Port device team_slave_1 removed [ 502.647443][T19464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.660225][T19464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.677186][T19468] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 502.679477][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 503.085393][T19484] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 503.149029][T19486] lo speed is unknown, defaulting to 1000 [ 503.174657][T19486] wg1 speed is unknown, defaulting to 1000 [ 503.200734][T19486] lo speed is unknown, defaulting to 1000 [ 503.235674][T19493] __nla_validate_parse: 17 callbacks suppressed [ 503.235714][T19493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4259'. [ 503.290093][T19497] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4259'. [ 503.482168][T19496] xt_CT: No such helper "pptp" [ 503.658390][T19507] lo speed is unknown, defaulting to 1000 [ 503.706083][T19507] wg1 speed is unknown, defaulting to 1000 [ 503.719371][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 503.741679][T19507] lo speed is unknown, defaulting to 1000 [ 503.818200][T19513] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4264'. [ 504.165597][T19524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4269'. [ 504.211688][ T5822] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 504.409452][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 504.518894][T19507] netlink: 264 bytes leftover after parsing attributes in process `syz.1.4261'. [ 504.530240][T19507] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4261'. [ 504.594469][T19545] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 504.602568][T19541] lo speed is unknown, defaulting to 1000 [ 504.615205][T19541] wg1 speed is unknown, defaulting to 1000 [ 504.750183][T19547] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 504.768380][T19541] lo speed is unknown, defaulting to 1000 [ 505.024116][T19557] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4282'. [ 505.186138][T19564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4286'. [ 505.578349][T19585] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4294'. [ 505.685070][T19589] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4290'. [ 505.931283][T19602] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 505.990461][T19604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.049663][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.303528][T19620] lo speed is unknown, defaulting to 1000 [ 506.449043][T19623] lo speed is unknown, defaulting to 1000 [ 506.449230][T19620] wg1 speed is unknown, defaulting to 1000 [ 506.534178][T19623] wg1 speed is unknown, defaulting to 1000 [ 506.542912][T19620] lo speed is unknown, defaulting to 1000 [ 506.582833][T19623] lo speed is unknown, defaulting to 1000 [ 506.795818][T19645] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 506.919740][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.099824][T19657] ipvlan2: entered promiscuous mode [ 507.110556][T19657] bridge0: port 3(ipvlan2) entered blocking state [ 507.117229][T19657] bridge0: port 3(ipvlan2) entered disabled state [ 507.124347][T19657] ipvlan2: entered allmulticast mode [ 507.139257][T19657] bridge0: entered allmulticast mode [ 507.147212][T19657] ipvlan2: left allmulticast mode [ 507.169056][T19657] bridge0: left allmulticast mode [ 507.303269][ T2152] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.601382][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 507.807954][T19686] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 507.910315][T19698] geneve2: entered allmulticast mode [ 507.995501][T19693] lo speed is unknown, defaulting to 1000 [ 508.003519][T19693] wg1 speed is unknown, defaulting to 1000 [ 508.011847][T19693] lo speed is unknown, defaulting to 1000 [ 508.105543][T19708] lo speed is unknown, defaulting to 1000 [ 508.190347][T19708] wg1 speed is unknown, defaulting to 1000 [ 508.313457][T19708] lo speed is unknown, defaulting to 1000 [ 508.495790][T19717] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 508.611658][T19717] batadv2: entered allmulticast mode [ 508.642275][T19717] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 509.160643][ T7147] IPVS: sh: UDP 127.0.0.1:0 - no destination available [ 509.171556][T19708] __nla_validate_parse: 7 callbacks suppressed [ 509.171577][T19708] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4333'. [ 509.196775][T19742] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4343'. [ 509.206256][T19708] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4333'. [ 509.243569][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4343'. [ 509.426133][T19744] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4345'. [ 509.729879][T19766] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 509.827319][T19772] netlink: 'syz.1.4352': attribute type 1 has an invalid length. [ 509.840999][T19772] netlink: 'syz.1.4352': attribute type 2 has an invalid length. [ 509.984791][T19772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4352'. [ 510.290279][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4361'. [ 510.319454][T19796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4361'. [ 510.361986][T19798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4363'. [ 510.382932][T19801] openvswitch: netlink: Message has 4 unknown bytes. [ 510.404609][T19801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.522633][T19809] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 510.550417][T19811] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4362'. [ 511.038050][T19839] vlan2: entered promiscuous mode [ 511.089201][T19839] gretap0: entered promiscuous mode [ 511.097472][T19847] netlink: 'syz.0.4376': attribute type 8 has an invalid length. [ 511.185829][T19851] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.478125][T19843] bond0: (slave macvlan2): Opening slave failed [ 511.609353][T19859] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 511.720794][ C0] ================================================================== [ 511.728923][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 511.736853][ C0] Read of size 2 at addr ffff8880273e402a by task syz.4.4370/19832 [ 511.744756][ C0] [ 511.747103][ C0] CPU: 0 UID: 0 PID: 19832 Comm: syz.4.4370 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 511.747129][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 511.747141][ C0] Call Trace: [ 511.747150][ C0] [ 511.747159][ C0] dump_stack_lvl+0x189/0x250 [ 511.747188][ C0] ? __virt_addr_valid+0x18c/0x540 [ 511.747210][ C0] ? rcu_is_watching+0x15/0xb0 [ 511.747237][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.747260][ C0] ? rcu_is_watching+0x15/0xb0 [ 511.747285][ C0] ? lock_release+0x4b/0x3e0 [ 511.747310][ C0] ? __virt_addr_valid+0x18c/0x540 [ 511.747331][ C0] ? __virt_addr_valid+0x469/0x540 [ 511.747359][ C0] print_report+0xb4/0x290 [ 511.747380][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 511.747399][ C0] kasan_report+0x118/0x150 [ 511.747421][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 511.747443][ C0] rose_timer_expiry+0x471/0x4b0 [ 511.747462][ C0] call_timer_fn+0x17b/0x5f0 [ 511.747485][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 511.747502][ C0] ? call_timer_fn+0xbe/0x5f0 [ 511.747524][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 511.747550][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.747574][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.747599][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 511.747618][ C0] __run_timer_base+0x61a/0x860 [ 511.747638][ C0] ? ktime_get+0x3e/0x1f0 [ 511.747660][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 511.747679][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 511.747705][ C0] run_timer_softirq+0xb7/0x180 [ 511.747726][ C0] handle_softirqs+0x283/0x870 [ 511.747744][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 511.747761][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 511.747779][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 511.747801][ C0] __irq_exit_rcu+0xca/0x1f0 [ 511.747816][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 511.747836][ C0] irq_exit_rcu+0x9/0x30 [ 511.747849][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 511.747875][ C0] [ 511.747881][ C0] [ 511.747888][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.747908][ C0] RIP: 0010:_raw_write_unlock_irq+0x29/0x50 [ 511.747937][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 aa 77 44 f6 48 89 df e8 b2 17 45 f6 e8 9d 96 6d f6 fb bf 01 00 00 00 e2 18 37 f6 65 8b 05 4b 49 1c 07 85 c0 74 07 5b c3 cc cc cc cc [ 511.747953][ C0] RSP: 0018:ffffc9000bf17ad0 EFLAGS: 00000286 [ 511.747970][ C0] RAX: 37e181f637c92700 RBX: ffff88802f7a2940 RCX: 37e181f637c92700 [ 511.747984][ C0] RDX: 0000000000000006 RSI: ffffffff8d75179c RDI: 0000000000000001 [ 511.747996][ C0] RBP: ffffc9000bf17c10 R08: ffffffff8f7f2c77 R09: 1ffffffff1efe58e [ 511.748009][ C0] R10: dffffc0000000000 R11: fffffbfff1efe58f R12: ffffc9000bf17b80 [ 511.748022][ C0] R13: dffffc0000000000 R14: ffff88802f7a2800 R15: 0000000000000000 [ 511.748043][ C0] ep_try_send_events+0xd93/0xf40 [ 511.748064][ C0] ? __pfx_do_raw_write_lock+0x10/0x10 [ 511.748089][ C0] ? __pfx_ep_try_send_events+0x10/0x10 [ 511.748113][ C0] ? _raw_write_unlock_irq+0x23/0x50 [ 511.748138][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.748164][ C0] do_epoll_wait+0x53f/0xf30 [ 511.748192][ C0] ? do_epoll_wait+0x757/0xf30 [ 511.748214][ C0] ? __pfx_do_epoll_wait+0x10/0x10 [ 511.748234][ C0] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 511.748257][ C0] ? fput+0xa0/0xd0 [ 511.748285][ C0] __x64_sys_epoll_wait+0x1be/0x210 [ 511.748305][ C0] ? __pfx___x64_sys_epoll_wait+0x10/0x10 [ 511.748327][ C0] ? do_syscall_64+0xba/0x210 [ 511.748345][ C0] do_syscall_64+0xf6/0x210 [ 511.748367][ C0] ? clear_bhb_loop+0x45/0xa0 [ 511.748385][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.748401][ C0] RIP: 0033:0x7f329138e969 [ 511.748417][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.748431][ C0] RSP: 002b:00007f329221f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 511.748448][ C0] RAX: ffffffffffffffda RBX: 00007f32915b6160 RCX: 00007f329138e969 [ 511.748461][ C0] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000007 [ 511.748473][ C0] RBP: 00007f3291410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 511.748484][ C0] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 511.748495][ C0] R13: 0000000000000000 R14: 00007f32915b6160 R15: 00007ffdded41628 [ 511.748514][ C0] [ 511.748520][ C0] [ 512.183338][ C0] Allocated by task 18616: [ 512.187757][ C0] kasan_save_track+0x3e/0x80 [ 512.192444][ C0] __kasan_kmalloc+0x93/0xb0 [ 512.197042][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 512.201900][ C0] copy_splice_read+0x143/0x9b0 [ 512.206843][ C0] splice_direct_to_actor+0x4d0/0xcc0 [ 512.212222][ C0] do_splice_direct+0x181/0x270 [ 512.217075][ C0] do_sendfile+0x4da/0x7d0 [ 512.221515][ C0] __se_sys_sendfile64+0x13e/0x190 [ 512.226634][ C0] do_syscall_64+0xf6/0x210 [ 512.231139][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.237033][ C0] [ 512.239356][ C0] Freed by task 18616: [ 512.243416][ C0] kasan_save_track+0x3e/0x80 [ 512.248095][ C0] kasan_save_free_info+0x46/0x50 [ 512.253134][ C0] __kasan_slab_free+0x62/0x70 [ 512.257989][ C0] kfree+0x193/0x440 [ 512.261921][ C0] copy_splice_read+0x881/0x9b0 [ 512.266796][ C0] splice_direct_to_actor+0x4d0/0xcc0 [ 512.272184][ C0] do_splice_direct+0x181/0x270 [ 512.277043][ C0] do_sendfile+0x4da/0x7d0 [ 512.281476][ C0] __se_sys_sendfile64+0x13e/0x190 [ 512.286598][ C0] do_syscall_64+0xf6/0x210 [ 512.291102][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.297008][ C0] [ 512.299331][ C0] The buggy address belongs to the object at ffff8880273e4000 [ 512.299331][ C0] which belongs to the cache kmalloc-512 of size 512 [ 512.313386][ C0] The buggy address is located 42 bytes inside of [ 512.313386][ C0] freed 512-byte region [ffff8880273e4000, ffff8880273e4200) [ 512.327107][ C0] [ 512.329437][ C0] The buggy address belongs to the physical page: [ 512.335862][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880273e6000 pfn:0x273e4 [ 512.345943][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 512.354471][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 512.362989][ C0] page_type: f5(slab) [ 512.366981][ C0] raw: 00fff00000000240 ffff88801a041c80 ffffea0001f20010 ffffea0001918610 [ 512.375572][ C0] raw: ffff8880273e6000 0000000000100008 00000000f5000000 0000000000000000 [ 512.384181][ C0] head: 00fff00000000240 ffff88801a041c80 ffffea0001f20010 ffffea0001918610 [ 512.392903][ C0] head: ffff8880273e6000 0000000000100008 00000000f5000000 0000000000000000 [ 512.401591][ C0] head: 00fff00000000002 ffffea00009cf901 00000000ffffffff 00000000ffffffff [ 512.410268][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 512.418936][ C0] page dumped because: kasan: bad access detected [ 512.425357][ C0] page_owner tracks the page as allocated [ 512.431071][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5839, tgid 5839 (syz-executor), ts 95957388481, free_ts 95816553239 [ 512.450365][ C0] post_alloc_hook+0x1d8/0x230 [ 512.455236][ C0] get_page_from_freelist+0x21e0/0x22c0 [ 512.460810][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 512.466647][ C0] alloc_pages_mpol+0x232/0x4a0 [ 512.471546][ C0] allocate_slab+0x8a/0x3b0 [ 512.476065][ C0] ___slab_alloc+0xbfc/0x1480 [ 512.480770][ C0] __kmalloc_noprof+0x305/0x4f0 [ 512.485635][ C0] fib6_info_alloc+0x30/0xf0 [ 512.490227][ C0] ip6_route_info_create+0x147/0xa70 [ 512.495521][ C0] ip6_route_add+0x29/0x2f0 [ 512.500031][ C0] addrconf_add_linklocal+0x45f/0x6c0 [ 512.505407][ C0] addrconf_addr_gen+0x490/0x580 [ 512.510353][ C0] addrconf_init_auto_addrs+0x711/0xb50 [ 512.515922][ C0] addrconf_notify+0xacc/0x1010 [ 512.520796][ C0] notifier_call_chain+0x1b3/0x3e0 [ 512.525919][ C0] __dev_notify_flags+0x18d/0x2e0 [ 512.530960][ C0] page last free pid 5913 tgid 5913 stack trace: [ 512.537297][ C0] __free_frozen_pages+0xb14/0xce0 [ 512.542423][ C0] __slab_free+0x326/0x400 [ 512.546842][ C0] qlist_free_all+0x9a/0x140 [ 512.551434][ C0] kasan_quarantine_reduce+0x148/0x160 [ 512.556982][ C0] __kasan_slab_alloc+0x22/0x80 [ 512.561839][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 512.567304][ C0] jbd2__journal_start+0x146/0x5b0 [ 512.572424][ C0] __ext4_journal_start_sb+0x227/0x5c0 [ 512.577885][ C0] ext4_dirty_inode+0x93/0x110 [ 512.582661][ C0] __mark_inode_dirty+0x2ce/0xdf0 [ 512.587699][ C0] file_update_time+0x40c/0x490 [ 512.592564][ C0] ext4_page_mkwrite+0x1f5/0x1110 [ 512.597595][ C0] do_page_mkwrite+0x14a/0x310 [ 512.602368][ C0] __handle_mm_fault+0x18d2/0x5380 [ 512.607482][ C0] handle_mm_fault+0x3f6/0x8c0 [ 512.612250][ C0] do_user_addr_fault+0xa81/0x1390 [ 512.617370][ C0] [ 512.619695][ C0] Memory state around the buggy address: [ 512.625326][ C0] ffff8880273e3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 512.633390][ C0] ffff8880273e3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 512.641452][ C0] >ffff8880273e4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 512.649510][ C0] ^ [ 512.654897][ C0] ffff8880273e4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 512.662957][ C0] ffff8880273e4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 512.671019][ C0] ================================================================== [ 512.679262][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 512.686489][ C0] CPU: 0 UID: 0 PID: 19832 Comm: syz.4.4370 Not tainted 6.15.0-rc5-syzkaller-00984-gd97e2634fbdc #0 PREEMPT(full) [ 512.698591][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 512.708684][ C0] Call Trace: [ 512.711977][ C0] [ 512.714825][ C0] dump_stack_lvl+0x99/0x250 [ 512.719446][ C0] ? __asan_memcpy+0x40/0x70 [ 512.724061][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.729275][ C0] ? __pfx__printk+0x10/0x10 [ 512.733876][ C0] panic+0x2db/0x790 [ 512.737783][ C0] ? __pfx_panic+0x10/0x10 [ 512.742245][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 512.748163][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 512.754086][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.760442][ C0] ? print_memory_metadata+0x314/0x400 [ 512.765924][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 512.771049][ C0] check_panic_on_warn+0x89/0xb0 [ 512.775999][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 512.781118][ C0] end_report+0x78/0x160 [ 512.785390][ C0] kasan_report+0x129/0x150 [ 512.789929][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 512.795079][ C0] rose_timer_expiry+0x471/0x4b0 [ 512.800047][ C0] call_timer_fn+0x17b/0x5f0 [ 512.804665][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 512.810141][ C0] ? call_timer_fn+0xbe/0x5f0 [ 512.814851][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 512.819985][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.825196][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.830409][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 512.835877][ C0] __run_timer_base+0x61a/0x860 [ 512.840739][ C0] ? ktime_get+0x3e/0x1f0 [ 512.845080][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 512.850472][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 512.856752][ C0] run_timer_softirq+0xb7/0x180 [ 512.861619][ C0] handle_softirqs+0x283/0x870 [ 512.866399][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 512.871177][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 512.876497][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 512.881710][ C0] __irq_exit_rcu+0xca/0x1f0 [ 512.886308][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 512.891530][ C0] irq_exit_rcu+0x9/0x30 [ 512.895777][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 512.901425][ C0] [ 512.904358][ C0] [ 512.907292][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.913366][ C0] RIP: 0010:_raw_write_unlock_irq+0x29/0x50 [ 512.919620][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 aa 77 44 f6 48 89 df e8 b2 17 45 f6 e8 9d 96 6d f6 fb bf 01 00 00 00 e2 18 37 f6 65 8b 05 4b 49 1c 07 85 c0 74 07 5b c3 cc cc cc cc [ 512.939238][ C0] RSP: 0018:ffffc9000bf17ad0 EFLAGS: 00000286 [ 512.945326][ C0] RAX: 37e181f637c92700 RBX: ffff88802f7a2940 RCX: 37e181f637c92700 [ 512.953303][ C0] RDX: 0000000000000006 RSI: ffffffff8d75179c RDI: 0000000000000001 [ 512.961296][ C0] RBP: ffffc9000bf17c10 R08: ffffffff8f7f2c77 R09: 1ffffffff1efe58e [ 512.969271][ C0] R10: dffffc0000000000 R11: fffffbfff1efe58f R12: ffffc9000bf17b80 [ 512.977245][ C0] R13: dffffc0000000000 R14: ffff88802f7a2800 R15: 0000000000000000 [ 512.985321][ C0] ep_try_send_events+0xd93/0xf40 [ 512.990369][ C0] ? __pfx_do_raw_write_lock+0x10/0x10 [ 512.995847][ C0] ? __pfx_ep_try_send_events+0x10/0x10 [ 513.001406][ C0] ? _raw_write_unlock_irq+0x23/0x50 [ 513.006731][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.011983][ C0] do_epoll_wait+0x53f/0xf30 [ 513.016592][ C0] ? do_epoll_wait+0x757/0xf30 [ 513.021372][ C0] ? __pfx_do_epoll_wait+0x10/0x10 [ 513.026492][ C0] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 513.032835][ C0] ? fput+0xa0/0xd0 [ 513.036662][ C0] __x64_sys_epoll_wait+0x1be/0x210 [ 513.041899][ C0] ? __pfx___x64_sys_epoll_wait+0x10/0x10 [ 513.047719][ C0] ? do_syscall_64+0xba/0x210 [ 513.052437][ C0] do_syscall_64+0xf6/0x210 [ 513.056946][ C0] ? clear_bhb_loop+0x45/0xa0 [ 513.061638][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.067537][ C0] RIP: 0033:0x7f329138e969 [ 513.071958][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.092040][ C0] RSP: 002b:00007f329221f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 513.100468][ C0] RAX: ffffffffffffffda RBX: 00007f32915b6160 RCX: 00007f329138e969 [ 513.108448][ C0] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000007 [ 513.116423][ C0] RBP: 00007f3291410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 513.124407][ C0] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 513.132380][ C0] R13: 0000000000000000 R14: 00007f32915b6160 R15: 00007ffdded41628 [ 513.140363][ C0] [ 513.168695][ C0] Kernel Offset: disabled [ 513.173595][ C0] Rebooting in 86400 seconds..