last executing test programs: 4.773901325s ago: executing program 4 (id=3993): syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa0100fd, @multicast1}, {0x3f01, 0x88be, 0xc, 0x0, @opaque="944523b3"}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x16, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x14}}}]}, 0x78}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000efffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r7, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000000000000a03000000000000000200000d030000000a000000040000000000080003000000020000000000000c02000000000061"], 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x81000000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00210d00040000000000000a000000000000000000000008000400", @ANYRES64=r0, @ANYBLOB="15dc1dc2b75217a3239815f3224ce31c7d6b5bfb4964b86909566fbf90a929e5de0e6565c1c889048224a1360b10e4af54c2ad31c1aa12839df90fc78e1042740b785dc8cfa5fe506469f6d90418e3d9c3940eb6ddfbcb72db0f37df582a4a6b73a69e2e384fc4d2ef8fcd51c852b6783e42050e42cb20e2d2e353992032629a9a2d86b3a7b524a5631e06031cc72d2d0668e5337f7156e40063607fccbcd11e3caf90e4be9252eb745940571897"], 0x24}}, 0x4004890) 4.4443394s ago: executing program 4 (id=3997): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x42051}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_crypto(r3, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000100001200020002000000fedbdf256362636d61632d6165732d6365000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000003000000000000000000000080001001c020000080001000500000008000100ff0f00000800010007000000000000000000000000000000ca60967980217fe39687bd53d23a"], 0x100}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) recvfrom$inet6(r3, &(0x7f0000000200)=""/93, 0x5d, 0x100, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}, 0x1c) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 3.488386578s ago: executing program 4 (id=4006): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x5, 0x3, 0xfffffffd) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xd43, 0x3, 0xfffffffffffffffd, 0xd472}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffff000, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}}], 0x1, 0x2000c054) 3.17424105s ago: executing program 4 (id=4010): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@txtime={{0x18, 0xff80, 0x3d, 0x7}}], 0x18}}], 0x2, 0x10048000) 3.031593331s ago: executing program 4 (id=4013): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006"], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x80, 0xb, 0x10, @local, @private1, 0x10, 0x10, 0x3, 0x10000}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0x3, {{0x34, 0x4, 0x2, 0x18, 0xd0, 0x68, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @empty, {[@timestamp={0x44, 0x10, 0x7b, 0x0, 0x2, [0xd, 0x9, 0x3]}, @lsrr={0x83, 0x7, 0xd1, [@dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0x7, 0x50, [@remote]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x41, 0x3, [{0x0, 0x12, "60fd827ecefe4c449e45cccec67cbee8"}, {0x2, 0xf, "f6fc2c6351f4afc8ab93cdfd24"}, {0x1, 0x10, "176d28f1038c726ab74009d50e14"}, {0x1, 0x3, 'M'}, {0x1, 0x7, "2cb96b341e"}]}, @lsrr={0x83, 0xf, 0xe2, [@private=0xa010101, @multicast1, @rand_addr=0x64010100]}, @cipso={0x86, 0x48, 0x3, [{0x5, 0x4, "6de2"}, {0x2, 0xa, "930381a262fb82c8"}, {0x1, 0x2}, {0x6, 0x6, '-Cn\b'}, {0x5, 0xf, "7e5c3e13675257795988828551"}, {0x0, 0xb, "993a27464c68873760"}, {0x7, 0x12, "e83b35555311f78b07c1493be86b0512"}]}]}}}}}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@loopback}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r3}, 0x14) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x20, 0xd7bc8aab98a67e32, 0x88, 0x8, {{0x36, 0x4, 0x0, 0x29, 0xd8, 0x64, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @loopback, {[@rr={0x7, 0x17, 0x3d, [@rand_addr=0x64010102, @rand_addr=0x64010102, @private=0xa010102, @multicast2, @empty]}, @rr={0x7, 0xb, 0xdc, [@rand_addr=0x64010100, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x0, [{@loopback, 0x3}, {@remote}, {@multicast2, 0x5}]}, @timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0xfffffffc, 0x4]}, @timestamp_prespec={0x44, 0xc, 0xfa, 0x3, 0xb, [{@private=0xa010100, 0xe}]}, @end, @rr={0x7, 0xf, 0xf1, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @lsrr={0x83, 0x27, 0xab, [@local, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x42}]}, @lsrr={0x83, 0x1b, 0x16, [@dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @empty, @local]}, @rr={0x7, 0x1b, 0x79, [@local, @private=0xa010100, @broadcast, @multicast2, @broadcast, @multicast1]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800090300000000000000000a0000000000000b0000010008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100040000"], 0x38}}, 0x1000c840) 2.73935964s ago: executing program 1 (id=4018): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x40000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.656881401s ago: executing program 4 (id=4020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000840) recvmsg$can_j1939(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x24008804) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01c5d854f89ceea35300240000002400000003000000000000000200001302000000010000000000000000000000fdffffff0000000000000000002e0087400a53b8a70500a9c3a275725db855ab0eb5c1732c80037659b76f7015464d1460cb78a523eecefe7d9c8810325cd2d29137a26f72e5b536fa0f646c8ec7c632a8bc796aee56dac4aa3bb31e80b490"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="400100001000330600000000fcfffffffe8000000000000000000000000000aaffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f0000000030f36531707bd57a3c609f5d000000000000000000000000320000000a0101020000000000000000000000002703000000000000050000000000000000000000000000000400000000000000ff0f00000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000008f000000000000800800000028bd7000000000000a0001000000000000000000080016000600000048000200656362286369706865725f6e756c6c2900"/260], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000300)=0x80000004, 0x4) write(r4, &(0x7f0000000040)="05000000010000", 0x7) 2.536511053s ago: executing program 1 (id=4023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005304040026bd7000ffdbdf25c00000004445b151d0bae2789dda237702bafc9e26d8d9ffd3891cb933556ac49cabf6e4a7130bda6450088e87bde7c6b8896fd76eccda8e35a00d68"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800) 1.994288928s ago: executing program 1 (id=4025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000070000ea00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000003bdb0000000000000300"/28], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {0xfffffffffffffffd, 0x400000000000000}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e23, @in=@broadcast}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e00cd0214fffffffffffff80765", 0x12) ppoll(0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)={[0x3725]}, 0x8) r6 = socket(0x23, 0xa, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x24048854}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(ccm(anubis))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="04010000100053", @ANYRES64=r4, @ANYRES16=r8, @ANYRES32=r4], 0x104}, 0x1, 0x0, 0x0, 0x40890}, 0x2400c0d0) r10 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r12, 0x913e0000) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f0000000300)={0x7, &(0x7f0000000ac0)=[{0xc3c9, 0xa7, &(0x7f00000003c0)="76187c240570f9e99a6690e35d3689067e0688a21115cd9131172ebac7aea2080814371d356b908f75f769fd5bd06af6edbaab2fe5f500b76adcdb08cebf0e9b872bb2ce2c642ab826414e672ca7668961fd8eb32308ff196953e4a546c6039516ac2b4f92b5eaee81b4bb37e6b39befbb7fe1d64be4060dcff55742545033d0f799ec661e2890ed5ac2d6ea4c67bad036f2917f9b304e373ae3b16690d416bf79d69160bfddf3", 0x1}, {0x5b4e, 0xa3, &(0x7f0000000540)="bee2456b34085908dc1888c7cf508a5d3c282d161fb21d6e96cbe2cb358fdf371a16779e2dc69c0be3ad13c80ac60813884904499f71b81957a96849a2cae08847be124d6eadc1938504955628a49a9b74d5dfd2e874914bc63791227e083ee2a6d4c17e2b986d8a92e4c5eb22345134ae9896f3f67025f76980dd5cf094ba07866f23e477bb46be07f9d0dac9e4beec8cad324ecf98644518a7159c13bcad3ec779ab", 0x1, 0x1}, {0x56d7, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x22, &(0x7f0000000280)="1ad2d34cde85484302a4724bb5666d89bab2fbec67645b969fc3d470d96028bad4ba", 0x1, 0x1}, {0x80000001, 0x5e, &(0x7f0000000600)="94dbe62640d3afd4f3bd5eb027d142e8bad6f8427adeff58b1c544171cc3efb4f6784c1be86c19fceabd37d90ecbdb4175503d9909917838c9965d63b0adacba2048bec5316501f5b1f9d40029a016d24258f35630a4edab8645d10e4dd2", 0x0, 0x1}, {0x5, 0xf3, &(0x7f0000000680)="9ed53e01417b2cf71ae4c7cef7b2d9480f0d9c93428b19687f1e3f738f58728175cdbefc16e8624b602a8da4372947fc3e833ccecdf842e532a688bcdc8014ce57a76c33b18167d5b6d44b7570baa58cb0ee66fd9f51937cbc39c382ebdd5846516e0848856d57fabc6ecefaf66c05f01db752ec553d9b44f8c27e865e077521d0247d55bf1e6c8a0f3b2aa9971a4b535544e7484330ceded10e620f23bbe1454c2a94813c2ddcc8b43089a072427e3a9ffdeda9a8b88bb21d9de29d1df94d7025a0083dbe479ca645a9412900dceaf77c61a6234086cd7841ac8eaf67c423ffbb905acde95384ce44ed4af9fa9846b942f8bf", 0x1, 0x1}, {0x7f, 0x80, &(0x7f0000000780)="090cbf5d3f650dcf23bf836bd9c1b8894c234a46d2a2f1617f65bf6b9c2eb6d66785c89778df4d9c59077d1c53e79ab189afe48dbb467d0da897dc00d2bf53bb0bac1979146f4e81cfc53e15137e4df7c616b99c5bb200dae84d0a021927c007bd4f1dba74bf0ffa41d471b11d6bb93c96c4c6942c351a6e5332a182bf1818d3"}]}) close(r0) 1.99373833s ago: executing program 2 (id=4026): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) close(0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000100003040000ef000000000000000000", @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0xba01}, 0x0) 1.760116645s ago: executing program 0 (id=4027): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x80000001}, &(0x7f00000000c0)=0x8) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030400"/20, @ANYRES32=r6, @ANYBLOB="a5fdad88000000000a000100aa"], 0x2c}}, 0x0) 1.641581746s ago: executing program 3 (id=4028): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e1f0a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.546306067s ago: executing program 2 (id=4029): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000200000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.509880166s ago: executing program 0 (id=4030): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x48) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x41}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0) 1.397673699s ago: executing program 3 (id=4031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000f00)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}, 0x1, 0x0, 0x600000000000000, 0x4000004}, 0x40000) 1.342241691s ago: executing program 2 (id=4032): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="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", 0x12c}], 0x1}, 0x0) 1.340777197s ago: executing program 0 (id=4033): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r3, 0x1) sendmmsg(r1, &(0x7f0000006400)=[{{&(0x7f00000003c0)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)}, {&(0x7f0000000440)="bd65fb379ae45e83ff0bc47bcef26de934cb56073d61f81a836252871a38f14655ba78566975443171ba630f2fcd8834dc27954ee19ede964fbcf62375e1680253f24b2c83aaa437cb498b2bcdc8eb279cd0623fbf06e16c977d", 0x5a}, {&(0x7f0000000180)="0279943a205aa18033bb1559cf34dc1437202a7a7aec685f5679c100", 0x1c}, {&(0x7f0000000540)="12171d12c3b5883c83e545668d7aeb19623f4a8ac6f8ce9c3e1b821e152b33034227108b126c2ee7ad72cc4febf087e3d1b4d4926d84d1630e2fd6655f86da3930ae2e50feb912ebdbbab0d52f0909559039a2e86c242e3e105da2e2691d59b025d2", 0x62}, {&(0x7f0000000200)="e0ec56879e17c8aa804630d5fdc472ed3f5634", 0x13}, {&(0x7f00000005c0)="398614716fd00c0daba02020e85103260a683107298ad89a048b3f09dd667dabc8ba95b8c0845d506e24346e24ed289d49407e92f66c5908a85ae5dda326671cdbaee64bc704afd89aa174006bcc33c5416d4803e9348a56f1d5d577dcc5a3fc9319d9a1315d10f32b384149c84703a551304bdfab2737b10b273e8322bbc5c60fd6db84bd4524571a3802551421fec8f278b015269b9c50829eea37d02f89239de8", 0xa2}], 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/488], 0x1e8}}, {{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000bc0)=[{0x70, 0x110, 0xe, "a7467a3f52ecc1d8eba343bb54b4dba51e1401f064634bfba8423a1e6a79410261b25807165ef573790900dc5e7867dac788a5567c63576497c4f96e63848ca0d7d1bdbc9f0996cdb6cd02da054f00f0e7e6bfde96605b5ffd81078573ae81"}, {0x80, 0x115, 0x7, "d5ecdc93efb8e364443bb913ac9c8be1f285eb24bd157604b62ab7888d9ea04f5aaedc28c0864a8816be43eb0fb8da695862210f00c683cf5e0a0a94ce061f4c9bb6e15b8e45f2d1f08b454a84d3af2c875a70a59b387082df63b6097bb46a577d8fb0742351282d25063bad09b8"}, {0x18, 0x1c, 0x2, "ba1a325eb36a6e"}, {0xd0, 0x116, 0x3, "8324cb045f05f9cd82e5415990519b41511c0a2430f34e6f363e53aece6f509e0c4f1955349b5b59c8a60ca042bd88dd5b4c6b8a9ae99bd1c95c1f3b3ffc734c4385fe86ff867306b91df8c921778b4ff2e04b22ae81ad4123abcaa1d41d0f5c6d4bbb9bdafd87c92ad29b49acef949d2e4fb8bb8507c630509c24a8db431f007c869167af53dd9f575db0ace5400217bd0852652694490788991e82432d04e9806e9b37cd42cce84d2287c784110be4cccdcc48b0781849fe0b"}, {0x110, 0x111, 0x0, "5626ea8649fe7e37067e265bbda922118783a2452956b52b234d4ec2fea09da3f0ee0a16501495428277fbd5bf63d54d6088ffc5d0f15ba220be1c8a27f9e1cdb3e1f82cd1f2013f4147a367d40694fe2ee5a407d35ffddfd0e8a234da634eacf2e2569a3eaa5da8d078f3d174e2140ae76718485bfe114d3fb6ce73a542980121d1ee68bae265ba7c6dc7acf1f88df3eb67055f58f7c63e5b96e7b4a517fae938e054879eea1d8d96f6faffb0060f4fb6a2a6de2bc3ffad15ea3de0696d2234c70a27e3a9a33b06d0b698ed4262f0df172ea528fdb32d0f3ca49adcb776b5eab33421d84555be8bdafabab68349a186cd32b3cf0c011d27e0710965"}, {0x10, 0x115, 0x3}, {0x80, 0x117, 0x5, "b53a8b2fc202122bd3915f19e1a9cde026fe88596fe1df42cac49da971dac95d2a3b7720d593ffa4fb5ce05337e173d613e4585dcfdb862aa9400bb74009556f12a6b2e8b7173c8512f1732bc244ab30369e68846b8a6879933a3f1fc38ad871fe1b107ca07a586760d32befbe63aaa6"}, {0xe8, 0x10d, 0x113, "58ac07b47603c918805275b937f1ec77f65792ecb8e9eba0b28717d99ce703bfc948ee38a71792db4cb98ddd34024919063babab106b4cebcc05bd35f346894bf3080bd098d38402e5e337791cfa1eebc96176531ee8c220c6d5a59b8c977b28d9243797f458cca3e62adb9a376705711e249e0e975d866b56ae0cbc7e9f581d8fd947be62ab7d0546be4ed09f98480a8f858b4e5591e8e06ee7522deb4e686b46cf612a2e862277f2240c47b3450b44a8a80b2912889aa89d1810afe028ae208092ebef5de264c404ee0f7e4d7c045cc2"}, {0x58, 0x117, 0x4, "04394d30d4e45633b4d8e392da20b58cc7e2fd3dc0612dc95f0932609035bddade5ca8eb5393b00b2fa17cea47f281b4b27085f9fab22560e8aca2d5bc19c094bc5c"}], 0x4b8}}, {{&(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x22, 0x3, 0x3, 0x3, {0xa, 0x4e22, 0x800, @loopback, 0x3ff}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000a00)="c8ec1778bc4ddd587d40b9e605303b83413d9322c35c18ec7cf6b7c174c0d29537180c816eda41b47688496b04c3f7f95e08c53fc4a052e6455421404d8f05698c", 0x41}, {&(0x7f0000001080)="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", 0xfa}, {&(0x7f0000001180)="aafccd4b9439266a48390578c7ac008778a40c70c3baa2b69e5572b21ab18f43efdf0358c878ee18abb2a21218366f07dbe879843c0d9a644deb49d281772211638cdba83525f14e44c7061f862cc389d0335e20811177090d5ee64c8f0d23ccbe75a904efabb85fa94598c6aa339670d016c094e86a8c72d2a50da08a985f6ed05f5f", 0x83}, {&(0x7f00000004c0)="d2ebc450b3dd9c7870c2848909fcb83633967c903b3ca30cd25f5c4661d1f10408", 0x21}, {&(0x7f0000000a80)="fc3fe007907c5cf57909de7e88429c188e707eb3041d145789e20454551662e32792a3dfc53f00eb69d8d35642b54533ce4d99b5365c204dd8f5833ac6838ebc8599fd5a9ee5ee0e7d16e28b", 0x4c}], 0x5, &(0x7f00000012c0)=[{0x40, 0x115, 0x9, "6a3fde44734c5e6e949c3e1d294f8ef2f728533bb4d1b0d8651d0875ed9ff0615a4d1b38e370855aa2ee9df2ccd612a3"}, {0x78, 0xae855f70f3f5f47b, 0x6, "e4ae6d87145d5654c5f18323adb8f00dc97bd62bd6a3507bfa1c6b457085159525efb99f34cba2fbda748f07a61add0b4357d429aadfa52d9a3bb384d7dfc297cdac9c60c6b64536d2c54c210d986a062242de5c6f31d723f82b5f533394054108dd3f"}], 0xb8}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="721b5cfc9d6bd05c986c6e4c76d4eb026cc4225c0244837d0feec120234cf2af17eebfd623d2add6bc2532df2b5519c34d3dedd7fc62282a1ef9122334a6442f7e2a863044b184b4a3577de00bc01ee4a5e6541e821d663ff113c0ad6d9ddf4fcd27fdb7c7777d840761e833cd79eaa65d993796c81e09ef0af65eae56d958fb95c0bd6ce5ec061bdceab2968e283ef50f8f87f9474fdb163f96e3be3818d4801aaa64c48f810202af54a55605a0ee21c98cc71db611593dcf29a23989f116f6d0e5e26d84c87192330d2be287a45e14af8711f3e4b5ba79e1548bfa5c363358114f2e3b77106bbd7ff42a8f", 0xec}, {&(0x7f0000002480)="c4ea48e147fd2ea14c0910163faff56d5a235fec86599ce36dea5b0e6146f4c584e9ad2e19320b5582f8581e7deeaa934d541d27d49265c1d7d7d9d5427dc237ed2cc20005427da1ead8a82cfe5d9aefed3a5968a637a5c61377dbe6c3e124545f47efba38b82556bbe7c1905e0b75e5f11b5cbc75e394be5005b6db6b0770f714180fd95eacaaeb68131fe66caa99cf52d78a10569a23164f262be031e3f0461223ad499e8415b9c8102421e41f85b6560b79526208e4b2b4ae20f6c861cbb8547c037cc3ba640f2539e3dcd40719a16c9230556a32904023890541cbc5b6bc307a0913d3406072784db8", 0xeb}, {&(0x7f0000000980)="d7c9b0ff3c7e2a85840309bb54ce3bb7b221a27b4a952035899cc93d5fafdc54370e9706233c32d94f56273358fd1977d1320f8091", 0x35}, {&(0x7f0000002580)="2c7e4b7e6507c142ba2eb843add4c98c0515da33c556f3d973aa558f81b2377335f70c450da84be32b62c20a32c2e57aa4e91f6782401833cceff6eff59265fe8849e7ad5dc08c4ffe11c77ba4eb58a38981ef28560d0733f77852b53db8beb96612cd3fc7d6ffb8f91f0e02d8e6fc305981a78e46ff11c1c35d1c90c4620db8c34d3449394f15d8281fc53daadd8e4f09ca5c1f8d042ca53e6a5b3d5f97d4806f23a4c86fce6366401b867b7aba443b38e816872116a94df2c0fe05c9c71d893b7f4b19e8b398a41eb252f03775f8bf467c4f63ff4e253b74cdd83f8735c57a619b43a09e1306538b333c4ddf0e24a2388b4b1de3b6b47c4258d723cd40f243338d2650d592860a8dc702f462ff724ec4beb258a9488e65a0cfde3f55a0b87f477ef62fbfbfb22a0cccbca5bebd2948dff277006f9dd1acceef4d0beb79c0131cf1f3307ec2ef0da1271355db7ceb02e2f53343bbbf06801583fa74a9be1e64f90b7a4746d4fbb2c745cc70dd124b247a3eeaa7150953c1efe74cd103dd287ad1445950ba445dacb1b09876f86b99b27fd6c50f2ffc31392c8867b4f8e296b4a6c4b21eb0ec10a28a2f86b8f9d47b693fbf295aa3dad5d45d55349554d867ef26a0fc366e8ec0421c449788161f61419f8ba677f9199788ea31d6003ad5fa0e790e8c7384e36dabf1cad85291ea3eaa2c154a64966774d20bdfb03fc9a3c989b15ec52ff9b7bece1daeea08783773838456162b92a0573dc7be410c08363fd3c13d0c6af0bc7d652e51cf1abe80263d8350394bfdfb77654caf48063adff3b3e4a92fd7b04cf108bb66f570471d53106a44244c2d9739c140b0a8a44360cf17802d74994a7c01c1afcdc7a748734a2379d33f3f9e3aad6f5c1dd54d221486801c8783f84f61ec7e24b2f17e93e958cd64f1acdb90d2782a9ca7a08d095e6922fb678422cfbb4b304af3030ba05186203595ed082bb820081adce5c370b88ee27c0dfff031a292cff46b580c7c5108c170ce2f4236805084a039d55beb23d8248ed3d4dfc60ff2c0a7af6f80ddc92503d8d62e1a78b189ac164d0738ea666aadcdd1ddb933facdb5ed915b2afa0dde0172c8e5e746a304b08e1cb4b3cf96c0af02cf70fedf2a4575ef19af798201f6854f10a00bb815f8f1320790565083fa87d8c7f1d85e044e029888fc27145f812b3f30c7128d64c934619289c3b13a61869d9094fadeb4a1c78843a50ba3b6af94d632861de1d8e2a2908d0d1c4701f392a27003ffff5164b93c19c2930b4c5d66739387f395210ebb6e71bdddf754fc74be58212a9e80e01951affc7b0af4604b172eaa40e2d63c60b34468adc9beb6802cb0dd33dd276ae74de74cc2d6bcdc082066b414fa846482b7403c5be9a5ccda05c91fe986932c013538b0cdc684d558fb54e303dcf7481f480f646763747dccc88af4df06895413db9c05010d65d0a96df72b819408ce2a0a2127b00261fd05a26eff547507e621f425a5cad330d7603ba9466a1876b32fa7c619ea4f7d0f6f94dc8425ef26c1e9bc0b5922418e2e279d232b873fd2d65ae249c8c6cadee833890460c1ca4b32e7e24b9b01fa24bde5dcb4bb279b36f16886c94fad42e28a70d2e29d76da5e3e10f360a8cc9d6e3e76e3dcbb00fa76b6b069841ffd72fe00420fa36a383f8729c92164e104fb4b6466b9e3a44fc1d74120cafa5340dcda0ce0798bc7f4bde497eb2e7aecb12114e22f546cf07c6d8a97c70522356fd75c3df88fa35e0475e6038834a8bfd044427330cbb2a5afbcffbdc9a8d6c6b92c30a6d0bf7f76b2bf282893134b1a04b9e995b361b593209727916ff0c16076b99b484cb76de75c2427d8c396622ea4020b226dd3d1b135d4c58c865bc98190edac5566340f890d790b365adf1646f7b37480e846c3f6fdd678d2d737c4434389ac3cfbf87adc5f810d88c4ec3e73c2d4a9df5bfb6feba664cffbc10396ff6b98bbd4c0b44cb39a52e0ace1823543d1ae3868d98173ee568cd250701884b6f85098f5173dd4b51a0549794f3965ac345cf3293f73d7b5f89c08bb8a5cab27923e5cd101f74ede8303639fc9647006f7f78b6ee313ffa9a8cd9f8628793c9733b214a685a0576befcdd244d4e0c7b640bc35c3b08c1796f32583a272f9f185b72541b73188eddd43309c190f78a551d0ae8c7cbeff69c05989fb88dbd87bf9e4c36f69c1633fe97048010edf563d84363296a468b26b81e2e188a98f03d3be1849cee52837f2bb38c901c6c2be0b974815c20550ba17136505c12a7f6a447eaa6c304049723aa2fd862a8cae733cc551a95956aaf324fc7067503892e613ee7623d1ae81c9fac360ae4bf1f0e7a961d39c6f1c0f69fbb6cc11051053a79b1f924ebea8fdb50598de7c4dbc0d7c71a7f8877ec0923a695bf5eddca35c98012b77124526b343d3988043cfef9ed6f7ac21b7fc42aeb6b27579b9f5cc2593b31e48d981fc41c6b17583070bb07a88210835a2f08b89625c5766668483ad58ffc4283ebc77d353f64fd67b4f4dc4d6dbf5810289a870152c3c9f1b71bde309cce62eaabb6df549c75e7d3d21e7b756c42d1bf8a69fbd2d53bb56fbdfc813018bac5c936f8e330c1070f7c8e510dd37c3a4035abcfeb1dadca2773786ca6f9884c4c479bc93c4d031cad28d2d553dca8449379401e4a2ff065b3a2417997c6fd3b37fecf1a50d17db8120973f14cef514b7f081453e82537a3098263ad14cba68394e80f1d5501ff30830d74860f069ee93d306cfa6eec0ac026f574e25f3d1bfb530a4c47ab80d16c9dd0275a08f9a0cc4ff20f1a022232e7afd4f3f91f335d56245dd8cbcf6fb694dc75a66d64e5bd785cd80425b7db4b4070156587cc8fe3f1a58cd9707c95d17765dafe0d3bc130534211c68fbeaaa09eeecde36daa96ffd6e34ddd38b9fbef3b04002bb3b215410c3ddba199e81f5f3702b1cc34a60f4edf8df2f9e2b3f159943882940b3a8dbb7cc6991561f1b4ba204967b6b570acebd7ac94511ee879fb720d21350964314e9557250f57a932e908a53ce16082eb9c4680ca7fec248e1e877a33b33f7f0baf30ae515905a587999bd63a841cf18a1b42c01bf676d75750eb3f999edfd905752b14e118542906732580df201c7ca34e798ff044719192963a9899ae3fc983097115f8afa6e6ddd0a87302e3a0886a38982e7d0cf736a1de68f28484030789c96a9feb4f99c26f2b2355fcc6aba7eea7b69d38b283f10834d92834f1265f83aa538a1d78d2a4233b90d6439523c6cbe3e7c4667431c3fbd428932bcced4b0a11c1f26311f824152336d6a35cfe1cfd572589d5eb65a64326a767836cd3dd382fd239ad0bb288d9c6dffaa0caced0ca8a0e00a25082973119b7980e6c8302ee6c43e7d52ed8103b3db563c44d134a00ffa18ff2dbeebc45b8c0dc775b5ce5ff2e6df61b247bcf09b9c3f72830447f87c674f9d55a4c46669e9908648b91e06db46b786bdbd1848521785ea80645c95151b162a0ba44a13c13105e63b473f924f7d1f2c00e8ea181f859dcea134606c6ce316fe51300785485e2a1f704209fd9a5b79042d0f51c6e54d7eb5631a8ceae0d6e42af08a4abb1afae20da72c5b236d7d4e70a3311700bd86bdead2740637b8efd6dc6551463858fc970fdad9e2d679833e9d3808653f6d3840d9714dc209860361fdb2ed167daba0fbc7d00b1d3ca65a3fd8dfb9340f19396cccd0b2953c139c56f032d88485a512caae8ae0690011ddc2fc7321f2d47c008758b6c0719f2b54f81c51de8d3ff7641b59f87ff388b0d2d8d218cc40e0b7cbb72a8bbf16c24cebc60f00de86d189df2568b237ad23b048d0e0f475bf10096e800cf1a0c3edc4560ffd97ac44b7ff73ea993a16a7717f6a8e671f853878a34b85d3fd4475f956b789c62ac330cb009628d90298241a6076c92c8eab88801f05c2d3603f5aabb2c75c396b9b84c6d5984718a360abe43d9225f5af321ab1ee7308d40e6ff68f0b057d52b8bc4a4063660f57cdcf0d36cec94f61d6d4be2442e02dc64ae260855ffb6a0f6cac738326fd61881aa1c55f9f2f0216f64e14082fe1ffc8328a8a08b8102eca011ecab75dacbdbbdf35abcfe24b3e2d7e5c1ab73fb2770301c64d283f8e232a3f8f60b016063244278b7012bc4b7a2a3bd320e07364ce5028d94fc8fb087036897331724b2e43eef7c89399bf6f8696ca286c223e88893115a04456c39052f6e91ee8d0ab82ee67d421cea9b103d362ea18aff89356b02e6a6fb6b66c976abc260b499304b113fa89cba368df36193c0de6b3cc683f08acdd4991a081b0141ed05311f16ab08b0b8c7f4636f16a4d1af684e3d7dd5a82c77cfff5c00054bc309af945dce3f359431b4e01450d2b327e3ba2d46ac50035b08c2e3b7a1ae5c7a091de5a07826cff9d0854e0fbe0d900981ebd7358d1a5b3c5a3a78ca635845af3a0410a2e0312eea7f48eaef7860680d1fc181e873e1a968f30e56c63bfb827a47ec59573b4d6c252dde39dc6ab7d2c5c32a5cecee956dfa391e995f6161d482c185251cb806f2c9e5c4616f6223ae14ff0bd824aacb7fa14a18d05a6361560b86f4fae1135083614127fa15633858dc618dcf265d033daa52746c1fafeaa1f24407858a75cafafa8ae5ef766894469828866eb015ebcdc9eba9f8def53a646191a94b83dac8da8bbe38b6c41e9529108948f641b60ebbc7dab506c0b8c0067e5c63b3ce34ac7f4bdde2371752b8ebbdcb6d272e92768c65687914758fd97f25d426c6dd500eed93748b0499cf0e311564b195f790c454060dd63ff92c23d126b33a38448f118bd56254e8bc9385b790926baf2f8a20ce6fd16eb1dbafd0359388e475982ee4d72645f3d1b3b2d0e19fe783de9d753e19c0d343d68fcc2168d9809a629f5cb4adff9455748352619333f7b2c5a80ad80375f29e64fce065105e26ebb75dff76a73da494c5de7f17442df158a07edc4ad0b37da5fa7e0e457afcd55788d096b0378013198597d4578d45bf86158cb0b2b00d881fd26f26ff97af3f6bad9362fa2aad4674d394c5fd93d104286b7f6c536bfbd5c27e130d23b487a277c60109e4e52919f7af91e0e5f6352fe7534cf3afbf65f2c94dadd0c954be2e70065769b3b6350212af9278f17d3ff44f638d615099ab781d951cb4c0502e1aa5d0bc9299850ccdf2499f1fc105709f0177a61a374e03a561b0f8b1df58b14036c96d6ebfb50024b18312ae5308295da63b21f8224fdfe929ab73620f4aeabddd2446c44527fa562153849d6c2afab567cfffa9a7f0f83a0d2fd7eba800dd380855b5e929b272cedd7ded5d4862302fb8d43b3fa8dfaa3bfb6af1ca01918c1a4aafdbbc487ffe81b7726535e10b4e273244776604aa709ebc78f709b8ea5ecad492cd93b38ca5d1e98f3492d50496bb0780486ee2ab64b616cf46f62c092ac5ff098edfefc4ad13dfd7d15b66002605619e2314478f479d76075f8c82e84a3ca561d907fe9a3a4bd24fb63217618d449d301c43277d91ef0af1a4dcdd530ee94fc33e563bec57e43ed1b3a1ddd0e96710e796cb5e615fc1c4c2f25f264f51d442cfac5299732bf5ec7903b1ad9d141e67556be3fb252d89393702fc2d78dc4014839b20e5c5b46afdc37a819314bfac43c4c51b184b35d0862a8fb86e82ee34fdac5f01358d535d12c9c36d9338a338e737dfd6b79983e170b91dbd92ebeb14a550f32006cf259e0dbf1dc2bba1891ff8e82509d619534268474e86aeba9bd899c1a13", 0x1000}, {&(0x7f0000003580)="ec6134fdb58acecd201908cada597297f3446d66f99a3332b8262558fbf161040097be53e6e3a59fa73667de5d9b0a342531e4de626c662d58d9e4224d34bc7a251131de", 0x44}, {&(0x7f0000003600)="897c05232229bb7fc225a2e3176a5d9c690e8e220a3066dd4c406c29fc7a270ae572744cf3f81b237c21a6251dee7666583513d21e17ba0777b576166a3e8555b6f49378fc34c020f65f5338a49dd165bcb9414becf1faa30274038dbaff4695d7d2ba3a1e4ebca914dd2001a783ae1b13f558d00675ea01519281a253a50bdef21efaca3c6864f3922b51e1b7ba2c65488ea0254969f9bb7be45649", 0x9c}, {&(0x7f00000036c0)="5bc39915fc759256fe6a84", 0xb}, {&(0x7f0000003700)="12d1d965f66443fbc7a31c06f74a5ece4a", 0x11}, {&(0x7f0000003740)="003a8896b492d0c2e5be5fb2b73697a24da675665c75819e84cb22433b80bd352e456ad85289eb04c3b647dbf3fffc6644523322a3e49af34f9d57383c732048a17c215a8297dcc666eca0a17949168936c531fc5d6186dde0bd962d45baa6071a8792a9f85a1d29adac60985e3abab745630d39f1f565f4b91e233ad44e79c7ae4ff50462", 0x85}], 0xa}}, {{&(0x7f00000038c0)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003940)="c1f2231ddb87d477836bcfee1f810c812758ca3c3cc461bcb28504d13cbb5b00fd6ddeb1c8460901fb364bf58f660096b2f0f3e21dd193fea72e03f6e4891b4c930f77c679f84e9920c5e14eae84efb2451a602b412a441cd42a33b095ac4c56790f59f2595433d9fce6daff78aa0c680694115b968cebc1cb31c12473d1d60ebfb6905dfd1c693f6f7f84559cd9bf7b44e59fa82306ad188e65d3d484bf0479cf19d31140a2281cded23d96341cc2dcc8279aea562b481637a23f900c56d0f979214e2390c778ed5f2e3fdf8e9a5a5f1ec06c", 0xd3}, {&(0x7f0000003a40)="03da61edad416ad5fb298b269dfc86a73a7cd1a1937142391f0bd49380f4a77fcff686fea46dd9c5fbe08967979bbaf9627ef8c727977376fcb5142e1b1f", 0x3e}], 0x2, &(0x7f0000003b00)=[{0x40, 0x10c, 0x8, "038f651b08afef4657122dfb392680ae9de9fbb2ac98653225f8f7b01768dd9d9f935776c915c2f1334f6b570a"}, {0x18, 0x84, 0x3, "782dd8857bf9e7f3"}, {0x108, 0x111, 0x80000000, "a9ce9c28dc0b701977a15cebbcbf1c185ad44bc7ec85c187864ca18dc2eb64dd18a6ec81d76e7d4543925e1085ad1ca499183217855f22d40847f346786a1eb421cfe54e6fef79287ed539f9c8831e4ec2edf4da15e571c134216ef195582d4c30a0cb3a4bd8c146fec4e075a06a98805ad190ce942563c18fb47ed2bd49004d06f2b4dca09941c1f1b8bc792cf26841bb5c8679a64422cb60937b5d589541403fb9c349b44cab7956c45d94d87055442c8a0f51b2ee10e4b478b99b3711913bc91f81a9ec555c5aa257cc10abf9dd16ff37f58180ac0bc8ac7bf2a2662e5c43ec407e687450908739939ba9c0996153613c"}, {0xb0, 0x107, 0x2, "f2bad32a7dd6a51d446165bfdbff11b43d42a23f7ae87e551bc90cd1f68fc5b9a6f718d37e582ff31ad3e21cd98c4f8d1d25028b77c29097240ea240afc84ff52da0f935f1f293ca44c27d2c4da15f06d0f189a68fe9c83f084d3abe786116a6555be4f709b7b7de0c0bab8b4db608ccfb6cdc3cf69b33c5f9106a8e8c5862ff99d85fe96bea2db2e6cfc1d63082ac1f37ad8f70c7b0052bc0"}, {0x1010, 0x115, 0x49a3, "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"}, {0x38, 0x10a, 0x3, "bcf0923e5ebb41e1bdc9aac26365a529ff24da048e1bef2a467d5ae125c3ffa9277fb427"}, {0x80, 0x107, 0x40100, "9beb023d340f05d63fd9a8a8cbabe8225ca59ae58d3afb288f6969a37d111131fd6a674536d72273ba7f2fa2421d6b6b3640154a07864062571857d8e1e0c0effdbb0755e1bd01a44e91da58933368dff25dc7680043cadc50a2347dc31690a740c2be812e678eba17d41028853b88e9"}, {0x88, 0x103, 0x1, "b50927d1b899711fb7cc89cc7dd95c6a630e1f0be989c183e3ecc529df8cd65d17c043300aab6dab78dd6ce465edd85a2b524c5e5eabdf888392730e03551ae4367ec8c4b44e2ff124ef73ed0be47186409dda9ffca377d38177f820685349d9ae13cc8f514df610acacbd65470b937412950ef4dee3d90a"}, {0x1010, 0x11, 0x5, "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"}, {0x60, 0x101, 0x4, "109b61e1536379b507b891e6a145a4ae1eabe12b75ab63de572661b5556aa9303671279bd4f873143f61134119f699707639bdc29744a71a77b1ece3ed24ad392177ac9af0f842b48c4e"}], 0x23d0}}, {{&(0x7f0000005f00)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x3, 0x3, {0xa, 0x4e20, 0x2, @private0, 0x4}}}, 0x80, &(0x7f0000006340)=[{&(0x7f0000006040)="393fda482b999970db778d8ea9af7099c72f5558397754bbd6cc244667d7", 0x1e}, {&(0x7f0000006880)="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", 0x150}, {&(0x7f0000006180)="4c76512fb6360afefacdc8c46bdb6fd9da118c6faea1d76b6a6627f059dd19ff4a7f06b236886dae2ebebe4b7af8ae37da878a6d3978f9b57034c3b3d24a9514ad6ef0532cbf33465051863f1d4a9703fce3b39cfee99d8aae6a82ed78c5464f683baefc84168709f6e1b0f0dc7cc7f023e2e17a696ac19b5b7abfc27d658b6eaf58df7021f246ba870fc804f92e13ca85fbe2477524a8a16671f7323b5e0a503ec926fd37440d427374c2f88bb5ab1387ecfaf523f85e5fe2acaa70452ee539c82fca45c795556efd3a8d4b5ad8c6b89a60c580a7bb39a209", 0xd9}, {&(0x7f0000006300)}], 0x4, &(0x7f0000006a00)=[{0xa0, 0x0, 0x90000, "1d0612199f1afaf03cff5e689874fe68e5ef7d019242dbfd0e994ac7fa50f48b169b14d581753ebf7f2f10a6297aedd0f122fe7af557e4faca49b93e67e127f4e8295715d21540114db174578e0400d3d19319fcb2374a42c740bb9d497c0cf5c72602647a9d5d54ce75025d5242e805235ebabbe63704e7562730f2fb32d241489c73bf4c0a665dfd24c3eca33fa42f"}, {0x60, 0x107, 0x5, "9a28986b53e64361d691290357208b0bf83fa8a8c58c166501a657539a7ff033f03ca1d4192933c2aacca2cb596e7590844cdfe721bafe65bcdc1a0935abead4f7cc91156f62af757e"}, {0x168, 0xff, 0xffffff7f, "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"}, {0xe0, 0x88, 0xf, "b06619eb09dfb81aca421364c9b1bfcba94540ac0a8157d39996ee2f81b96a055ee0ad6ac0a70804de5d78585c4f820d034df50f80f8c9f0da3da11063c93c2bc65a78fd0ef8110f3555aaff72b60d31fe92e5660bf3cbea2e9cad4542c9992725e561053eee9e6d55fc13a7e3a179aa2cc07c5185ed43934cd442802eb9b42436c85404380e7e5337c60269410094697ed5ea46f61eba3792f38dfdd468f1cb9ec2724e643dcd1237561bb1cf784303bc93d184450f4b41ea37bb0fc839163bb41bbb0597b8da99d6cd72dc3b1d06"}], 0x348}}], 0x6, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x5c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9cdbd9d15d2dcd393701e"]}]}, 0x5c}], 0x1}, 0x0) 1.286775853s ago: executing program 1 (id=4034): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r1) socket$key(0xf, 0x3, 0x2) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000012140100000000000000000008004b0013000000040001"], 0x20}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e000000100000000000000000000000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b\x00\b\x00\x00K{'], 0x70}}, 0x4004040) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000700)=@assoc_value, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x4c000}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000000000000000000052b62a3100000000", @ANYRESDEC=r7, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14144008000700e000000108000a00019c5d778007c3f55c1b04bb1f1c2c3edaedd8a8590e072a823d56feb08e3bf7d250d2b240128f317379c15f8482a59e34d881432a15ec86b8", @ANYRESDEC=r8], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.235379079s ago: executing program 2 (id=4035): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@txtime={{0x24, 0x1, 0x3d, 0x7}}], 0x18}}], 0x2, 0x10048000) 1.154517171s ago: executing program 3 (id=4036): r0 = socket(0x2, 0x3, 0xff) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @rand_addr=0x64010100}, 0x2, 0x0, 0xfffd}}, 0x26) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x3c}}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) unshare(0x2000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000880000014"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x4}, 0x20) listen(r8, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f900f500180601fe8000000000850000000000000000aafe80000000000000000000efdddb0b0e21c0f0d9743f0600000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e020000"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x4040, &(0x7f0000000400)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) 1.050238236s ago: executing program 2 (id=4037): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffc, @remote}, 0x2}}, 0x2e) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffc, @remote}, 0x2}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e23, @empty}, 0x10) (async) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x4e23, @empty}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) (async) setsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.048931327s ago: executing program 1 (id=4038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="02"], 0x10) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$netlink(0x10, 0x3, 0xe) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14009c72d1c254acbe233b4f0000900001009b097700bfdd007c8ad80000000007000000f2ffffff00000000f5515a4dd58a6d1dfdc63a6d0161060098974c861ab3ea821cc4e3250bfdd48330cdec6afbdef62f0231835eb24643376a24e8383334dac899d2cdebfdfe9337d8a4cc58ab056bed0bc9a2cb2217b845a07f58526cb6"], 0x3c}, 0x1, 0x1200}, 0x0) 1.020901124s ago: executing program 0 (id=4039): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x12, 0x0, &(0x7f0000000a00)="2cbd805c88d340ee699d2e7150f677048003", 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 12) 978.303276ms ago: executing program 3 (id=4040): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce6", 0x4}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b43", 0xef}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc258060000000000006e", 0x60}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acc2ef0a9b0f9964d5705db134bdd9f261b7349aeede1c42e31b1082eec37b959d16afb967f54c471f2c7922c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5", 0xae}], 0x4}}], 0x2, 0xc0) 689.07738ms ago: executing program 3 (id=4041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000d00018110000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2a, &(0x7f0000000100)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f0359", 0x3}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff3}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 670.896751ms ago: executing program 2 (id=4042): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000840) recvmsg$can_j1939(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x128}, 0x24008804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="400100001000330600000000fcfffffffe8000000000000000000000000000aaffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f0000000030f36531707bd57a3c609f5d000000000000000000000000320000000a0101020000000000000000000000002703000000000000050000000000000000000000000000000400000000000000ff0f00000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000008f000000000000800800000028bd7000000000000a0001000000000000000000080016000600000048000200656362286369706865725f6e756c6c2900"/260], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet(0x2, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0x22, &(0x7f0000000300)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) write(r7, &(0x7f0000000040)="05000000010000", 0x7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8) 579.844575ms ago: executing program 0 (id=4043): r0 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x15}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20002000) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x45, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0xa00, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 186.093368ms ago: executing program 0 (id=4044): socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x20}}], 0x1, 0x167e) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) sendto$packet(r0, &(0x7f00000006c0), 0x0, 0x20008800, &(0x7f0000000100)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480), 0x0, 0x4004c}}], 0x1, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xf5ff, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 124.423766ms ago: executing program 1 (id=4045): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x900}, 0x0) 0s ago: executing program 3 (id=4046): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) accept4(r2, 0x0, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000010001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) kernel console output (not intermixed with test programs): tr [ 436.055696][T16922] block nbd0: shutting down sockets [ 436.544881][T16824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.572322][T16824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.601374][T16824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.603864][T16947] netlink: 'syz.0.3194': attribute type 10 has an invalid length. [ 436.619775][T16824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.649983][T16947] team0: Port device dummy0 added [ 436.823081][T16954] team0: Port device dummy0 removed [ 436.873790][T16824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.905901][T16824] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.929668][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.936935][T11105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.970837][ T4977] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.978090][ T4977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.108677][T16961] __nla_validate_parse: 7 callbacks suppressed [ 437.108697][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'. [ 437.136970][T16963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3198'. [ 437.207347][T16963] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3198'. [ 437.417612][T16824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.562152][T16824] veth0_vlan: entered promiscuous mode [ 437.581369][T16824] veth1_vlan: entered promiscuous mode [ 437.628859][T16824] veth0_macvtap: entered promiscuous mode [ 437.663993][T16824] veth1_macvtap: entered promiscuous mode [ 437.712105][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.724104][T16976] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3204'. [ 437.735947][T16974] netlink: 'syz.3.3203': attribute type 58 has an invalid length. [ 437.743910][T16974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3203'. [ 437.766186][T16977] FAULT_INJECTION: forcing a failure. [ 437.766186][T16977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.785206][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.794736][T16977] CPU: 0 UID: 0 PID: 16977 Comm: syz.0.3202 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 437.794775][T16977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.794791][T16977] Call Trace: [ 437.794800][T16977] [ 437.794812][T16977] dump_stack_lvl+0x241/0x360 [ 437.794849][T16977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.794876][T16977] ? __pfx__printk+0x10/0x10 [ 437.794901][T16977] ? __pfx_lock_release+0x10/0x10 [ 437.794947][T16977] should_fail_ex+0x40a/0x550 [ 437.794988][T16977] _copy_from_user+0x2d/0xb0 [ 437.795026][T16977] copy_msghdr_from_user+0xae/0x680 [ 437.795058][T16977] ? __pfx___might_resched+0x10/0x10 [ 437.795089][T16977] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 437.795127][T16977] ? do_recvmmsg+0x44e/0xab0 [ 437.795154][T16977] ? __might_fault+0xaa/0x120 [ 437.795179][T16977] do_recvmmsg+0x3bd/0xab0 [ 437.795215][T16977] ? __pfx_do_recvmmsg+0x10/0x10 [ 437.795264][T16977] ? ksys_write+0x22a/0x2b0 [ 437.795287][T16977] ? __pfx_lock_release+0x10/0x10 [ 437.795326][T16977] ? sb_end_write+0xe9/0x1c0 [ 437.795359][T16977] ? vfs_write+0x7fa/0xd10 [ 437.795387][T16977] ? __mutex_unlock_slowpath+0x227/0x800 [ 437.795450][T16977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.795481][T16977] ? __fget_files+0x2a/0x410 [ 437.795531][T16977] __x64_sys_recvmmsg+0x199/0x250 [ 437.795563][T16977] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 437.795613][T16977] ? do_syscall_64+0x100/0x230 [ 437.795651][T16977] ? do_syscall_64+0xb6/0x230 [ 437.795690][T16977] do_syscall_64+0xf3/0x230 [ 437.795737][T16977] ? clear_bhb_loop+0x35/0x90 [ 437.795773][T16977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.795805][T16977] RIP: 0033:0x7f1cb1f8d169 [ 437.795826][T16977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.795847][T16977] RSP: 002b:00007f1cb2dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 437.795871][T16977] RAX: ffffffffffffffda RBX: 00007f1cb21a5fa0 RCX: 00007f1cb1f8d169 [ 437.795889][T16977] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000006 [ 437.795904][T16977] RBP: 00007f1cb2dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.795918][T16977] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 437.795933][T16977] R13: 0000000000000000 R14: 00007f1cb21a5fa0 R15: 00007ffd570e8658 [ 437.795966][T16977] [ 438.037655][T16824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.049650][T16976] vti0: entered promiscuous mode [ 438.057833][T16824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.068688][T16824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.080270][T16824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.090438][T16982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 438.206313][T16824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.227439][T16990] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3209'. [ 438.237269][T16824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.261822][T16824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.297927][T16824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.322354][T16999] netlink: 'syz.4.3211': attribute type 10 has an invalid length. [ 438.342333][T16994] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3207'. [ 438.367211][T17003] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3210'. [ 438.382985][T16999] team0: Port device dummy0 added [ 438.441793][T16999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3211'. [ 438.530092][T17009] IPVS: Error connecting to the multicast addr [ 438.640794][T17013] team0: Port device dummy0 removed [ 438.673689][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.698530][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.763136][T11110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.781591][T11110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.340952][T17014] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 439.446297][T17032] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 439.707395][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.715050][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.148719][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 440.160453][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 440.170016][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 440.180503][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 440.188763][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 440.549291][T17037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.575590][T17037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.668586][T17037] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.683989][T17037] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.693061][T17037] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.702496][T17037] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.748999][T17045] IPVS: Error connecting to the multicast addr [ 440.932006][T17061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.940319][T17061] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.958911][T17061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.027853][T17061] syz.4.3225 (17061) used greatest stack depth: 17520 bytes left [ 441.060390][T17075] macsec1: entered promiscuous mode [ 441.075439][T17075] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 441.082709][T17075] macsec1: entered allmulticast mode [ 441.119011][T17075] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 441.133773][T17074] IPVS: Error connecting to the multicast addr [ 441.261745][T17057] lo speed is unknown, defaulting to 1000 [ 441.377208][T17087] tipc: Enabling of bearer rejected, failed to enable media [ 441.425391][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 441.435383][T17054] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 441.516445][T17089] FAULT_INJECTION: forcing a failure. [ 441.516445][T17089] name failslab, interval 1, probability 0, space 0, times 0 [ 441.558114][T17089] CPU: 0 UID: 0 PID: 17089 Comm: syz.4.3233 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 441.558145][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 441.558159][T17089] Call Trace: [ 441.558167][T17089] [ 441.558176][T17089] dump_stack_lvl+0x241/0x360 [ 441.558208][T17089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.558231][T17089] ? __pfx__printk+0x10/0x10 [ 441.558256][T17089] ? __kmalloc_cache_noprof+0x48/0x390 [ 441.558287][T17089] ? __pfx___might_resched+0x10/0x10 [ 441.558320][T17089] should_fail_ex+0x40a/0x550 [ 441.558375][T17089] should_failslab+0xac/0x100 [ 441.558431][T17089] __kmalloc_cache_noprof+0x70/0x390 [ 441.558460][T17089] ? __inet_diag_dump_start+0x9d/0xa50 [ 441.558495][T17089] __inet_diag_dump_start+0x9d/0xa50 [ 441.558532][T17089] __netlink_dump_start+0x45c/0x790 [ 441.558578][T17089] inet_diag_handler_cmd+0x1de/0x2b0 [ 441.558610][T17089] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 441.558637][T17089] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 441.558664][T17089] ? __pfx_inet_diag_dump+0x10/0x10 [ 441.558689][T17089] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 441.558725][T17089] ? sock_diag_lock_handler+0x19/0x280 [ 441.558757][T17089] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 441.558788][T17089] sock_diag_rcv_msg+0x3dc/0x5f0 [ 441.558826][T17089] netlink_rcv_skb+0x206/0x480 [ 441.558861][T17089] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 441.558897][T17089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.558958][T17089] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.558983][T17089] netlink_unicast+0x7f6/0x990 [ 441.559024][T17089] ? __pfx_netlink_unicast+0x10/0x10 [ 441.559053][T17089] ? __virt_addr_valid+0x45f/0x530 [ 441.559075][T17089] ? __phys_addr_symbol+0x2f/0x70 [ 441.559099][T17089] ? __check_object_size+0x47a/0x730 [ 441.559135][T17089] netlink_sendmsg+0x8de/0xcb0 [ 441.559171][T17089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.559198][T17089] ? aa_sock_msg_perm+0x91/0x160 [ 441.559238][T17089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.559259][T17089] __sock_sendmsg+0x221/0x270 [ 441.559296][T17089] sock_write_iter+0x2d7/0x3f0 [ 441.559331][T17089] ? __pfx_sock_write_iter+0x10/0x10 [ 441.559394][T17089] do_iter_readv_writev+0x71a/0x9d0 [ 441.559428][T17089] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 441.559461][T17089] ? bpf_lsm_file_permission+0x9/0x10 [ 441.559494][T17089] ? rw_verify_area+0x243/0x630 [ 441.559532][T17089] vfs_writev+0x38b/0xbc0 [ 441.559579][T17089] ? __pfx_vfs_writev+0x10/0x10 [ 441.559624][T17089] ? do_sys_openat2+0x17a/0x1d0 [ 441.559655][T17089] ? __fget_files+0x2a/0x410 [ 441.559688][T17089] ? __fget_files+0x395/0x410 [ 441.559716][T17089] ? __fget_files+0x2a/0x410 [ 441.559757][T17089] do_writev+0x1b6/0x360 [ 441.559792][T17089] ? __pfx_do_writev+0x10/0x10 [ 441.559823][T17089] ? do_syscall_64+0x100/0x230 [ 441.559859][T17089] ? do_syscall_64+0xb6/0x230 [ 441.559894][T17089] do_syscall_64+0xf3/0x230 [ 441.559925][T17089] ? clear_bhb_loop+0x35/0x90 [ 441.559958][T17089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.559986][T17089] RIP: 0033:0x7faf8378d169 [ 441.560005][T17089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.560023][T17089] RSP: 002b:00007faf8463b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 441.560046][T17089] RAX: ffffffffffffffda RBX: 00007faf839a5fa0 RCX: 00007faf8378d169 [ 441.560062][T17089] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 441.560075][T17089] RBP: 00007faf8463b090 R08: 0000000000000000 R09: 0000000000000000 [ 441.560088][T17089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.560100][T17089] R13: 0000000000000000 R14: 00007faf839a5fa0 R15: 00007ffc12ee0f58 [ 441.560133][T17089] [ 442.025620][T17091] xt_hashlimit: size too large, truncated to 1048576 [ 442.116188][T17099] __nla_validate_parse: 2 callbacks suppressed [ 442.116210][T17099] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3236'. [ 442.178431][T17074] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 442.321546][T17106] vlan2: entered promiscuous mode [ 442.328255][T17106] batadv0: entered promiscuous mode [ 442.362907][T17057] chnl_net:caif_netlink_parms(): no params data found [ 442.465776][ T5841] Bluetooth: hci3: command tx timeout [ 442.635732][T17119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.725226][T17057] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.748027][T17057] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.765621][T17057] bridge_slave_0: entered allmulticast mode [ 442.781504][T17057] bridge_slave_0: entered promiscuous mode [ 442.811362][T17057] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.835571][T17057] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.842926][T17057] bridge_slave_1: entered allmulticast mode [ 442.864762][T17057] bridge_slave_1: entered promiscuous mode [ 443.043442][T17128] IPVS: Error connecting to the multicast addr [ 443.081496][T17057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.126611][T17129] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 443.140250][T17057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.313164][T17057] team0: Port device team_slave_0 added [ 443.349287][T17057] team0: Port device team_slave_1 added [ 443.389829][T17110] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3239'. [ 443.561539][T17057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.575494][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.615946][T17057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.630557][T17057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.638264][T17057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.664732][T17057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.821323][T17143] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 443.830187][T17057] hsr_slave_0: entered promiscuous mode [ 443.842720][T17057] hsr_slave_1: entered promiscuous mode [ 443.858220][T17057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.875417][T17057] Cannot create hsr debugfs directory [ 444.050067][T17155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3250'. [ 444.059809][T17150] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 444.474791][T17163] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 444.509973][T17163] audit: out of memory in audit_log_start [ 444.545782][ T5848] Bluetooth: hci3: command tx timeout [ 444.632652][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'. [ 444.694541][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3254'. [ 444.718452][T17155] lo speed is unknown, defaulting to 1000 [ 444.937907][T17171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3257'. [ 445.139830][T17174] xt_CT: No such helper "snmp" [ 445.186908][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 445.197513][T17134] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 445.256825][T17057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.339976][T17057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.394442][T17057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.428883][T17057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.712126][T17057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.802191][T17057] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.851237][ T4977] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.858444][ T4977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.935728][T17192] can: request_module (can-proto-3) failed. [ 445.968680][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.975943][T11105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.986888][T17192] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3264'. [ 446.091663][T17199] vti0: left promiscuous mode [ 446.294474][T17206] IPVS: Error connecting to the multicast addr [ 446.610795][T17210] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 446.613191][T17057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.625447][ T5850] Bluetooth: hci3: command tx timeout [ 446.711872][T17202] lo speed is unknown, defaulting to 1000 [ 446.762784][T17215] IPVS: Error connecting to the multicast addr [ 446.958510][T17057] veth0_vlan: entered promiscuous mode [ 446.998580][T17057] veth1_vlan: entered promiscuous mode [ 447.107299][T17057] veth0_macvtap: entered promiscuous mode [ 447.148224][T17057] veth1_macvtap: entered promiscuous mode [ 447.218311][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.236123][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.261460][T17057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.365478][T17057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.387518][T17057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.414044][T17057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.445740][T17229] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3273'. [ 447.504438][T17057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.526620][T17057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.545199][T17057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.561808][T17057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.739007][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.765403][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.829604][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.851520][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.867495][T17244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3276'. [ 447.886202][T17244] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 448.052068][T17250] sctp: [Deprecated]: syz.2.3278 (pid 17250) Use of int in maxseg socket option. [ 448.052068][T17250] Use struct sctp_assoc_value instead [ 448.078922][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3277'. [ 448.272710][T17260] netlink: 'syz.4.3280': attribute type 10 has an invalid length. [ 448.281063][T17260] team0: Cannot enslave team device to itself [ 448.424659][T17264] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3281'. [ 448.706184][ T5850] Bluetooth: hci3: command 0x0419 tx timeout [ 448.714123][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 448.722748][T17220] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 448.927389][T17285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3288'. [ 449.187812][T17301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3293'. [ 449.262466][T17302] veth3: entered promiscuous mode [ 449.490770][T17312] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3295'. [ 450.208217][T17321] bond_slave_0: entered promiscuous mode [ 450.214273][T17321] bond_slave_1: entered promiscuous mode [ 450.240880][T17321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 450.269720][T17321] team0: Port device macvlan2 added [ 450.458687][T17335] netlink: 'syz.1.3306': attribute type 3 has an invalid length. [ 450.480223][T17335] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3306'. [ 450.801315][ T5848] Bluetooth: hci3: command 0x0419 tx timeout [ 450.908245][T17346] vlan2: entered promiscuous mode [ 450.913348][T17346] bond0: entered promiscuous mode [ 451.618009][T17368] ip6tnl1: left promiscuous mode [ 451.623025][T17368] ip6tnl1: left allmulticast mode [ 451.663133][T17368] veth3: left promiscuous mode [ 451.796316][T17376] netlink: 'syz.3.3321': attribute type 2 has an invalid length. [ 451.824609][T17376] netlink: 'syz.3.3321': attribute type 8 has an invalid length. [ 451.852946][T17376] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3321'. [ 451.867586][T17373] bridge0: port 1(gretap0) entered blocking state [ 451.874283][T17373] bridge0: port 1(gretap0) entered disabled state [ 451.882586][T17373] gretap0: entered allmulticast mode [ 451.894492][T17381] FAULT_INJECTION: forcing a failure. [ 451.894492][T17381] name failslab, interval 1, probability 0, space 0, times 0 [ 451.898799][T17373] gretap0: entered promiscuous mode [ 451.907651][T17381] CPU: 0 UID: 0 PID: 17381 Comm: syz.2.3322 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 451.907680][T17381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 451.907693][T17381] Call Trace: [ 451.907702][T17381] [ 451.907718][T17381] dump_stack_lvl+0x241/0x360 [ 451.907748][T17381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.907772][T17381] ? __pfx__printk+0x10/0x10 [ 451.907806][T17381] should_fail_ex+0x40a/0x550 [ 451.907842][T17381] should_failslab+0xac/0x100 [ 451.907869][T17381] ? skb_clone+0x20c/0x390 [ 451.907895][T17381] kmem_cache_alloc_noprof+0x70/0x380 [ 451.907931][T17381] skb_clone+0x20c/0x390 [ 451.907963][T17381] packet_rcv+0x633/0x14b0 [ 451.908002][T17381] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 451.908028][T17381] __netif_receive_skb_core+0x38f4/0x4bb0 [ 451.908074][T17381] ? 0xffffffffa000094c [ 451.908092][T17381] ? 0xffffffffa000094c [ 451.908112][T17381] ? is_bpf_text_address+0x26/0x2a0 [ 451.908133][T17381] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.908168][T17381] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 451.908198][T17381] ? unwind_get_return_address+0x4d/0x90 [ 451.908230][T17381] ? arch_stack_walk+0xfd/0x150 [ 451.908285][T17381] __netif_receive_skb_list_core+0x2b1/0x980 [ 451.908332][T17381] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 451.908401][T17381] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 451.908435][T17381] netif_receive_skb_list_internal+0xa51/0xe30 [ 451.908474][T17381] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 451.908509][T17381] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 451.908543][T17381] ? __pfx_eth_type_trans+0x10/0x10 [ 451.908570][T17381] ? __phys_addr+0xba/0x170 [ 451.908589][T17381] ? build_skb_around+0x111/0x260 [ 451.908617][T17381] ? __xdp_build_skb_from_frame+0x340/0x720 [ 451.908649][T17381] netif_receive_skb_list+0x55/0x4b0 [ 451.908685][T17381] bpf_test_run_xdp_live+0x1bd4/0x2220 [ 451.908727][T17381] ? __pfx_lock_release+0x10/0x10 [ 451.908784][T17381] ? bpf_test_run_xdp_live+0x5d6/0x2220 [ 451.908823][T17381] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 451.908858][T17381] ? synchronize_rcu+0x11b/0x360 [ 451.908888][T17381] ? __pfx_synchronize_rcu+0x10/0x10 [ 451.908941][T17381] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 451.909003][T17381] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 451.909047][T17381] ? _copy_from_user+0x95/0xb0 [ 451.909081][T17381] ? bpf_test_init+0x137/0x160 [ 451.909114][T17381] ? xdp_convert_md_to_buff+0x5b/0x330 [ 451.909154][T17381] bpf_prog_test_run_xdp+0x805/0x11e0 [ 451.909199][T17381] ? __pfx_lock_release+0x10/0x10 [ 451.909245][T17381] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 451.909285][T17381] ? __fget_files+0x2a/0x410 [ 451.909323][T17381] ? __fget_files+0x2a/0x410 [ 451.909361][T17381] ? fput+0x21b/0x290 [ 451.909393][T17381] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 451.909434][T17381] bpf_prog_test_run+0x2e4/0x360 [ 451.909472][T17381] __sys_bpf+0x487/0x820 [ 451.909508][T17381] ? __pfx___sys_bpf+0x10/0x10 [ 451.909556][T17381] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 451.909595][T17381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 451.909632][T17381] ? do_syscall_64+0x100/0x230 [ 451.909674][T17381] __x64_sys_bpf+0x7c/0x90 [ 451.909706][T17381] do_syscall_64+0xf3/0x230 [ 451.909747][T17381] ? clear_bhb_loop+0x35/0x90 [ 451.909785][T17381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.909816][T17381] RIP: 0033:0x7f155298d169 [ 451.909837][T17381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.909856][T17381] RSP: 002b:00007f15537f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.909881][T17381] RAX: ffffffffffffffda RBX: 00007f1552ba5fa0 RCX: 00007f155298d169 [ 451.909899][T17381] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 451.909914][T17381] RBP: 00007f15537f2090 R08: 0000000000000000 R09: 0000000000000000 [ 451.909929][T17381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.909943][T17381] R13: 0000000000000000 R14: 00007f1552ba5fa0 R15: 00007ffc97eb4498 [ 451.909979][T17381] [ 452.375492][T17383] gretap0: left allmulticast mode [ 452.380695][T17383] gretap0: left promiscuous mode [ 452.455480][T17383] bridge0: port 1(gretap0) entered disabled state [ 452.672666][T17391] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3325'. [ 452.763030][T17394] netlink: 'syz.4.3326': attribute type 1 has an invalid length. [ 452.834227][T17394] bond2: entered promiscuous mode [ 452.876808][T17394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.974951][T17399] smc: net device bond0 applied user defined pnetid SYZ0 [ 452.992829][T17398] bond2: (slave bridge3): making interface the new active one [ 453.027209][T17398] bridge3: entered promiscuous mode [ 453.046410][T17398] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 453.463731][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3330'. [ 453.493332][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3330'. [ 453.525165][T17407] netlink: 'syz.3.3330': attribute type 1 has an invalid length. [ 453.533089][T17407] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3330'. [ 453.595193][T17407] nbd: socks must be embedded in a SOCK_ITEM attr [ 453.619527][T17407] block nbd0: shutting down sockets [ 453.840580][T17413] netlink: 'syz.3.3332': attribute type 10 has an invalid length. [ 453.858246][T17411] FAULT_INJECTION: forcing a failure. [ 453.858246][T17411] name failslab, interval 1, probability 0, space 0, times 0 [ 453.877291][T17413] team0: Port device dummy0 added [ 453.925203][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.4.3333 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 453.925238][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.925252][T17411] Call Trace: [ 453.925260][T17411] [ 453.925277][T17411] dump_stack_lvl+0x241/0x360 [ 453.925311][T17411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.925336][T17411] ? __pfx__printk+0x10/0x10 [ 453.925361][T17411] ? kmem_cache_alloc_noprof+0x48/0x380 [ 453.925393][T17411] ? __pfx___might_resched+0x10/0x10 [ 453.925428][T17411] should_fail_ex+0x40a/0x550 [ 453.925468][T17411] should_failslab+0xac/0x100 [ 453.925499][T17411] ? alloc_vfsmnt+0x23/0x490 [ 453.925521][T17411] kmem_cache_alloc_noprof+0x70/0x380 [ 453.925558][T17411] alloc_vfsmnt+0x23/0x490 [ 453.925586][T17411] clone_mnt+0x6b/0xc90 [ 453.925608][T17411] ? do_raw_spin_unlock+0x13c/0x8b0 [ 453.925639][T17411] ? attach_mnt+0x4ed/0x600 [ 453.925667][T17411] copy_tree+0x482/0x940 [ 453.925702][T17411] ? copy_mnt_ns+0x185/0x960 [ 453.925735][T17411] copy_mnt_ns+0x185/0x960 [ 453.925762][T17411] ? rcu_is_watching+0x15/0xb0 [ 453.925787][T17411] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 453.925815][T17411] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 453.925850][T17411] create_new_namespaces+0xd3/0x7b0 [ 453.925884][T17411] ? bpf_lsm_capable+0x9/0x10 [ 453.925903][T17411] ? security_capable+0x7e/0x2d0 [ 453.925944][T17411] unshare_nsproxy_namespaces+0x124/0x180 [ 453.925976][T17411] ksys_unshare+0x57d/0xa70 [ 453.926017][T17411] ? __pfx_ksys_unshare+0x10/0x10 [ 453.926048][T17411] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 453.926082][T17411] ? do_syscall_64+0x100/0x230 [ 453.926124][T17411] __x64_sys_unshare+0x38/0x40 [ 453.926153][T17411] do_syscall_64+0xf3/0x230 [ 453.926186][T17411] ? clear_bhb_loop+0x35/0x90 [ 453.926220][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.926250][T17411] RIP: 0033:0x7faf8378d169 [ 453.926275][T17411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.926293][T17411] RSP: 002b:00007faf8463b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 453.926316][T17411] RAX: ffffffffffffffda RBX: 00007faf839a5fa0 RCX: 00007faf8378d169 [ 453.926332][T17411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 453.926345][T17411] RBP: 00007faf8463b090 R08: 0000000000000000 R09: 0000000000000000 [ 453.926359][T17411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.926372][T17411] R13: 0000000000000000 R14: 00007faf839a5fa0 R15: 00007ffc12ee0f58 [ 453.926405][T17411] [ 453.932362][T17413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3332'. [ 454.286120][T17307] Set syz1 is full, maxelem 65536 reached [ 454.325631][T17416] team0: Port device dummy0 removed [ 454.365916][T17416] bridge_slave_0: left allmulticast mode [ 454.371649][T17416] bridge_slave_0: left promiscuous mode [ 454.385719][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.396977][T17416] bridge_slave_1: left allmulticast mode [ 454.402762][T17416] bridge_slave_1: left promiscuous mode [ 454.455641][T17422] openvswitch: netlink: IP tunnel dst address not specified [ 454.464493][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.485378][T17422] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3337'. [ 454.494404][T17422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3337'. [ 454.530201][T17416] bond0: (slave bond_slave_0): Releasing backup interface [ 454.568916][T17416] bond0: (slave bond_slave_1): Releasing backup interface [ 454.629911][T17416] team0: Port device team_slave_0 removed [ 454.677030][T17416] team0: Port device team_slave_1 removed [ 454.700299][T17416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.766469][T17416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.868056][T17439] IPVS: Error connecting to the multicast addr [ 454.981375][T17442] netlink: 'syz.2.3344': attribute type 3 has an invalid length. [ 455.159096][T17450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3346'. [ 455.296264][T17452] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 455.309620][T17452] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 455.326252][T17452] macsec1: left promiscuous mode [ 455.347068][T17452] macsec1: left allmulticast mode [ 455.740311][T17447] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 455.789353][T17465] x_tables: duplicate underflow at hook 2 [ 455.868911][T17469] IPVS: Error connecting to the multicast addr [ 456.031749][T17475] IPVS: Error connecting to the multicast addr [ 456.228029][T17480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3357'. [ 456.268666][T17480] netlink: 'syz.3.3357': attribute type 1 has an invalid length. [ 456.641137][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 457.519940][T17494] bond2: left promiscuous mode [ 457.524795][T17494] bridge3: left promiscuous mode [ 457.740693][T17501] IPVS: Error connecting to the multicast addr [ 457.747489][T17499] netlink: 'syz.4.3363': attribute type 1 has an invalid length. [ 457.800633][T17499] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.825580][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 457.834712][T17503] bond3: (slave gretap1): making interface the new active one [ 457.844763][T17476] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 457.853415][T17503] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 457.853470][T17475] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 458.227359][T17513] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3367'. [ 458.584510][T17501] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 458.971413][T17528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3372'. [ 459.105791][T17534] pim6reg1: entered promiscuous mode [ 459.122353][T17534] pim6reg1: entered allmulticast mode [ 459.136849][T17537] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3375'. [ 459.204954][T17537] macvtap1: entered promiscuous mode [ 459.212210][T17537] bond0: entered promiscuous mode [ 459.232453][T17537] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 459.240496][T17537] team0: Device macvtap1 failed to register rx_handler [ 459.329692][T17537] bond0: left promiscuous mode [ 459.400103][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3377'. [ 459.567944][T17551] netlink: 'syz.0.3380': attribute type 39 has an invalid length. [ 459.607557][T17549] IPVS: Error connecting to the multicast addr [ 459.669762][T17547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3382'. [ 459.833986][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 460.175103][T17572] openvswitch: netlink: IPv4 tunnel dst address is zero [ 460.287935][T17574] FAULT_INJECTION: forcing a failure. [ 460.287935][T17574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.321478][T17574] CPU: 0 UID: 0 PID: 17574 Comm: syz.4.3388 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 460.321515][T17574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.321528][T17574] Call Trace: [ 460.321537][T17574] [ 460.321547][T17574] dump_stack_lvl+0x241/0x360 [ 460.321580][T17574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.321604][T17574] ? __pfx__printk+0x10/0x10 [ 460.321627][T17574] ? __pfx_lock_release+0x10/0x10 [ 460.321668][T17574] should_fail_ex+0x40a/0x550 [ 460.321712][T17574] _copy_from_user+0x2d/0xb0 [ 460.321744][T17574] move_addr_to_kernel+0x82/0x150 [ 460.321779][T17574] __sys_sendto+0x268/0x4c0 [ 460.321810][T17574] ? __pfx___sys_sendto+0x10/0x10 [ 460.321848][T17574] ? __fget_files+0x2a/0x410 [ 460.321890][T17574] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 460.321926][T17574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.321965][T17574] __x64_sys_sendto+0xde/0x100 [ 460.322000][T17574] do_syscall_64+0xf3/0x230 [ 460.322034][T17574] ? clear_bhb_loop+0x35/0x90 [ 460.322068][T17574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.322096][T17574] RIP: 0033:0x7faf8378d169 [ 460.322115][T17574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.322133][T17574] RSP: 002b:00007faf8463b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 460.322155][T17574] RAX: ffffffffffffffda RBX: 00007faf839a5fa0 RCX: 00007faf8378d169 [ 460.322170][T17574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 460.322182][T17574] RBP: 00007faf8463b090 R08: 0000200000000400 R09: 0000000000000010 [ 460.322195][T17574] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001 [ 460.322207][T17574] R13: 0000000000000000 R14: 00007faf839a5fa0 R15: 00007ffc12ee0f58 [ 460.322238][T17574] [ 460.625706][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 460.632347][T17549] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 460.827231][T17587] syzkaller1: entered promiscuous mode [ 460.833406][T17587] syzkaller1: entered allmulticast mode [ 461.187018][T17606] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 461.248629][T17606] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.346672][T17610] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.354192][T17610] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.510658][T17610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.529264][T17610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.637357][T17610] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.647609][T17610] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.657442][T17610] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.668253][T17610] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.842432][T17619] netlink: 'syz.4.3406': attribute type 1 has an invalid length. [ 462.380465][T17642] netlink: 'syz.2.3417': attribute type 10 has an invalid length. [ 462.418499][ T26] IPVS: starting estimator thread 0... [ 462.493812][T17649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3417'. [ 462.525948][T17644] IPVS: using max 19 ests per chain, 45600 per kthread [ 462.599758][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.607466][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.864700][T17636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.894120][T17659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3419'. [ 462.923518][T17636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.157561][T17636] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.179176][T17636] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.215398][T17636] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.224736][T17636] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.310922][T17642] team0: Port device dummy0 added [ 463.317304][T17643] bridge0: port 3(gretap0) entered blocking state [ 463.324226][T17643] bridge0: port 3(gretap0) entered disabled state [ 463.331555][T17643] gretap0: entered allmulticast mode [ 463.338888][T17643] gretap0: entered promiscuous mode [ 463.358212][T17647] gretap0: left allmulticast mode [ 463.363304][T17647] gretap0: left promiscuous mode [ 463.388490][T17647] bridge0: port 3(gretap0) entered disabled state [ 463.428264][T17651] team0: Port device dummy0 removed [ 463.652142][T17674] xt_hashlimit: size too large, truncated to 1048576 [ 463.735676][T17681] pim6reg1: entered promiscuous mode [ 463.745652][T17681] pim6reg1: entered allmulticast mode [ 464.345632][T17707] netlink: 'syz.1.3434': attribute type 10 has an invalid length. [ 464.477352][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3434'. [ 464.534862][T17696] lo speed is unknown, defaulting to 1000 [ 464.582093][T17707] team0: Port device dummy0 added [ 464.594458][T17708] IPv6: Can't replace route, no match found [ 464.814977][T17707] team0: Port device dummy0 removed [ 464.845726][T17707] bridge_slave_0: left allmulticast mode [ 464.851606][T17707] bridge_slave_0: left promiscuous mode [ 464.873200][T17707] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.900844][T17707] bridge_slave_1: left allmulticast mode [ 464.931438][T17707] bridge_slave_1: left promiscuous mode [ 464.951622][T17707] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.977614][T17707] bond0: (slave bond_slave_0): Releasing backup interface [ 464.995983][T17707] bond_slave_0: left promiscuous mode [ 465.009871][T17707] bond0: (slave bond_slave_1): Releasing backup interface [ 465.029055][T17707] bond_slave_1: left promiscuous mode [ 465.045854][T17707] team0: Port device team_slave_0 removed [ 465.054656][T17707] team0: Port device team_slave_1 removed [ 465.061363][T17707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.070209][T17707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.083703][T17707] team0: Port device macvlan2 removed [ 465.215407][T17726] tipc: Enabling of bearer rejected, failed to enable media [ 465.483973][T17741] FAULT_INJECTION: forcing a failure. [ 465.483973][T17741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.498934][T17741] CPU: 1 UID: 0 PID: 17741 Comm: syz.4.3442 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 465.498963][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 465.498977][T17741] Call Trace: [ 465.498985][T17741] [ 465.498994][T17741] dump_stack_lvl+0x241/0x360 [ 465.499025][T17741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.499049][T17741] ? __pfx__printk+0x10/0x10 [ 465.499072][T17741] ? __pfx_lock_release+0x10/0x10 [ 465.499113][T17741] should_fail_ex+0x40a/0x550 [ 465.499150][T17741] _copy_from_user+0x2d/0xb0 [ 465.499179][T17741] copy_msghdr_from_user+0xae/0x680 [ 465.499212][T17741] ? __pfx___might_resched+0x10/0x10 [ 465.499244][T17741] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 465.499282][T17741] ? do_recvmmsg+0x44e/0xab0 [ 465.499309][T17741] ? __might_fault+0xaa/0x120 [ 465.499335][T17741] do_recvmmsg+0x3bd/0xab0 [ 465.499374][T17741] ? __pfx_do_recvmmsg+0x10/0x10 [ 465.499424][T17741] ? ksys_write+0x22a/0x2b0 [ 465.499447][T17741] ? __pfx_lock_release+0x10/0x10 [ 465.499492][T17741] ? sb_end_write+0xe9/0x1c0 [ 465.499524][T17741] ? vfs_write+0x7fa/0xd10 [ 465.499549][T17741] ? __mutex_unlock_slowpath+0x227/0x800 [ 465.499592][T17741] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.499624][T17741] ? __fget_files+0x2a/0x410 [ 465.499671][T17741] __x64_sys_recvmmsg+0x199/0x250 [ 465.499702][T17741] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 465.499733][T17741] ? do_syscall_64+0x100/0x230 [ 465.499769][T17741] ? do_syscall_64+0xb6/0x230 [ 465.499803][T17741] do_syscall_64+0xf3/0x230 [ 465.499835][T17741] ? clear_bhb_loop+0x35/0x90 [ 465.499867][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.499895][T17741] RIP: 0033:0x7faf8378d169 [ 465.499913][T17741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.499931][T17741] RSP: 002b:00007faf8463b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 465.499953][T17741] RAX: ffffffffffffffda RBX: 00007faf839a5fa0 RCX: 00007faf8378d169 [ 465.499968][T17741] RDX: 0000000000000003 RSI: 0000200000001500 RDI: 0000000000000003 [ 465.499980][T17741] RBP: 00007faf8463b090 R08: 0000000000000000 R09: 0000000000000000 [ 465.499994][T17741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.500006][T17741] R13: 0000000000000000 R14: 00007faf839a5fa0 R15: 00007ffc12ee0f58 [ 465.500035][T17741] [ 465.949139][T17748] tipc: Trying to set illegal importance in message [ 465.978975][T17749] tipc: Trying to set illegal importance in message [ 465.988616][T17748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3444'. [ 466.036030][T17748] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3444'. [ 466.279348][T17753] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3446'. [ 466.570196][T17765] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3450'. [ 466.590419][T17767] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3450'. [ 466.618834][T17764] xt_CT: No such helper "snmp" [ 466.870319][T17778] netlink: 'syz.3.3453': attribute type 11 has an invalid length. [ 466.889677][T17778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3453'. [ 467.041826][T17787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3455'. [ 467.074123][T17787] netlink: zone id is out of range [ 467.100571][T17787] netlink: set zone limit has 8 unknown bytes [ 467.486489][T17801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.524291][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3460'. [ 467.831780][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'. [ 468.807531][T17856] xt_hashlimit: size too large, truncated to 1048576 [ 468.993579][T17866] xt_nfacct: accounting object `syz1' does not exists [ 469.129173][T17868] FAULT_INJECTION: forcing a failure. [ 469.129173][T17868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.181520][T17868] CPU: 1 UID: 0 PID: 17868 Comm: syz.1.3480 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 469.181551][T17868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.181565][T17868] Call Trace: [ 469.181573][T17868] [ 469.181583][T17868] dump_stack_lvl+0x241/0x360 [ 469.181616][T17868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.181641][T17868] ? __pfx__printk+0x10/0x10 [ 469.181669][T17868] ? snprintf+0xda/0x120 [ 469.181698][T17868] should_fail_ex+0x40a/0x550 [ 469.181736][T17868] _copy_to_user+0x31/0xb0 [ 469.181773][T17868] simple_read_from_buffer+0xca/0x150 [ 469.181806][T17868] proc_fail_nth_read+0x1e9/0x250 [ 469.181841][T17868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.181884][T17868] ? rw_verify_area+0x243/0x630 [ 469.181906][T17868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.181940][T17868] vfs_read+0x1f8/0xb40 [ 469.181964][T17868] ? fdget_pos+0x254/0x320 [ 469.181998][T17868] ? __pfx___mutex_lock+0x10/0x10 [ 469.182032][T17868] ? __pfx_vfs_read+0x10/0x10 [ 469.182058][T17868] ? __fget_files+0x2a/0x410 [ 469.182092][T17868] ? __fget_files+0x395/0x410 [ 469.182122][T17868] ? __fget_files+0x2a/0x410 [ 469.182165][T17868] ksys_read+0x18f/0x2b0 [ 469.182190][T17868] ? __pfx_ksys_read+0x10/0x10 [ 469.182215][T17868] ? do_syscall_64+0x100/0x230 [ 469.182252][T17868] ? do_syscall_64+0xb6/0x230 [ 469.182289][T17868] do_syscall_64+0xf3/0x230 [ 469.182322][T17868] ? clear_bhb_loop+0x35/0x90 [ 469.182357][T17868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.182386][T17868] RIP: 0033:0x7f485358bb7c [ 469.182405][T17868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 469.182424][T17868] RSP: 002b:00007f485438e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.182447][T17868] RAX: ffffffffffffffda RBX: 00007f48537a5fa0 RCX: 00007f485358bb7c [ 469.182463][T17868] RDX: 000000000000000f RSI: 00007f485438e0a0 RDI: 0000000000000004 [ 469.182477][T17868] RBP: 00007f485438e090 R08: 0000000000000000 R09: 0000000000000010 [ 469.182491][T17868] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001 [ 469.182504][T17868] R13: 0000000000000000 R14: 00007f48537a5fa0 R15: 00007ffd4d1b84c8 [ 469.182538][T17868] [ 469.458506][T17871] gtp0: entered promiscuous mode [ 469.463823][T17877] netlink: 'syz.0.3483': attribute type 9 has an invalid length. [ 469.504870][T17871] ksmbd: Unknown IPC event: 4, ignore. [ 469.527374][T17878] __nla_validate_parse: 2 callbacks suppressed [ 469.527397][T17878] netlink: 504 bytes leftover after parsing attributes in process `syz.3.3482'. [ 469.662276][T17888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3485'. [ 470.022478][T17894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3486'. [ 470.239697][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'. [ 470.256878][T17911] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 470.532446][T17923] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.3491'. [ 470.543431][T17925] FAULT_INJECTION: forcing a failure. [ 470.543431][T17925] name failslab, interval 1, probability 0, space 0, times 0 [ 470.556125][T17925] CPU: 1 UID: 0 PID: 17925 Comm: syz.0.3492 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 470.556153][T17925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.556167][T17925] Call Trace: [ 470.556175][T17925] [ 470.556184][T17925] dump_stack_lvl+0x241/0x360 [ 470.556216][T17925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.556241][T17925] ? __pfx__printk+0x10/0x10 [ 470.556277][T17925] should_fail_ex+0x40a/0x550 [ 470.556315][T17925] should_failslab+0xac/0x100 [ 470.556344][T17925] ? skb_clone+0x20c/0x390 [ 470.556371][T17925] kmem_cache_alloc_noprof+0x70/0x380 [ 470.556406][T17925] skb_clone+0x20c/0x390 [ 470.556438][T17925] packet_rcv+0x633/0x14b0 [ 470.556476][T17925] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 470.556501][T17925] __netif_receive_skb_core+0x38f4/0x4bb0 [ 470.556547][T17925] ? 0xffffffffa0000954 [ 470.556565][T17925] ? 0xffffffffa0000954 [ 470.556584][T17925] ? is_bpf_text_address+0x26/0x2a0 [ 470.556606][T17925] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 470.556640][T17925] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 470.556670][T17925] ? unwind_get_return_address+0x4d/0x90 [ 470.556699][T17925] ? arch_stack_walk+0xfd/0x150 [ 470.556756][T17925] __netif_receive_skb_list_core+0x2b1/0x980 [ 470.556801][T17925] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 470.556851][T17925] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 470.556883][T17925] netif_receive_skb_list_internal+0xa51/0xe30 [ 470.556922][T17925] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 470.556957][T17925] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 470.557000][T17925] ? __pfx_eth_type_trans+0x10/0x10 [ 470.557026][T17925] ? __phys_addr+0xba/0x170 [ 470.557047][T17925] ? build_skb_around+0x111/0x260 [ 470.557076][T17925] ? __xdp_build_skb_from_frame+0x340/0x720 [ 470.557109][T17925] netif_receive_skb_list+0x55/0x4b0 [ 470.557144][T17925] bpf_test_run_xdp_live+0x1bd4/0x2220 [ 470.557179][T17925] ? __pfx_lock_release+0x10/0x10 [ 470.557236][T17925] ? bpf_test_run_xdp_live+0x5d6/0x2220 [ 470.557276][T17925] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 470.557308][T17925] ? synchronize_rcu+0x11b/0x360 [ 470.557334][T17925] ? __pfx_synchronize_rcu+0x10/0x10 [ 470.557385][T17925] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 470.557418][T17925] ? 0xffffffffa0001d54 [ 470.557458][T17925] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 470.557500][T17925] ? _copy_from_user+0x95/0xb0 [ 470.557531][T17925] ? bpf_test_init+0x137/0x160 [ 470.557561][T17925] ? xdp_convert_md_to_buff+0x5b/0x330 [ 470.557598][T17925] bpf_prog_test_run_xdp+0x805/0x11e0 [ 470.557639][T17925] ? __pfx_lock_release+0x10/0x10 [ 470.557682][T17925] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 470.557718][T17925] ? __fget_files+0x2a/0x410 [ 470.557754][T17925] ? __fget_files+0x2a/0x410 [ 470.557789][T17925] ? fput+0x21b/0x290 [ 470.557818][T17925] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 470.557854][T17925] bpf_prog_test_run+0x2e4/0x360 [ 470.557892][T17925] __sys_bpf+0x487/0x820 [ 470.557924][T17925] ? __pfx___sys_bpf+0x10/0x10 [ 470.557969][T17925] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.558011][T17925] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.558045][T17925] ? do_syscall_64+0x100/0x230 [ 470.558082][T17925] __x64_sys_bpf+0x7c/0x90 [ 470.558109][T17925] do_syscall_64+0xf3/0x230 [ 470.558141][T17925] ? clear_bhb_loop+0x35/0x90 [ 470.558174][T17925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.558201][T17925] RIP: 0033:0x7f9fdc38d169 [ 470.558220][T17925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.558238][T17925] RSP: 002b:00007f9fdd237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 470.558261][T17925] RAX: ffffffffffffffda RBX: 00007f9fdc5a5fa0 RCX: 00007f9fdc38d169 [ 470.558276][T17925] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 470.558290][T17925] RBP: 00007f9fdd237090 R08: 0000000000000000 R09: 0000000000000000 [ 470.558303][T17925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.558316][T17925] R13: 0000000000000000 R14: 00007f9fdc5a5fa0 R15: 00007ffc09a38848 [ 470.558349][T17925] [ 471.008489][T17923] netlink: 'syz.1.3491': attribute type 2 has an invalid length. [ 471.095502][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 471.199975][T17932] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3494'. [ 471.238373][T17927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3493'. [ 471.343212][T17930] lo speed is unknown, defaulting to 1000 [ 471.620797][T17938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.950010][T17952] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3501'. [ 472.008583][T17954] netlink: del zone limit has 4 unknown bytes [ 472.042165][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'. [ 472.289233][T17964] netlink: 'syz.4.3506': attribute type 58 has an invalid length. [ 472.313201][T17964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3506'. [ 472.348054][T17966] IPVS: Error connecting to the multicast addr [ 472.538203][T17972] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 472.741435][T17977] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 472.753697][T17975] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 473.186309][T17988] pim6reg1: entered promiscuous mode [ 473.191673][T17988] pim6reg1: entered allmulticast mode [ 473.216888][T17990] xt_hashlimit: size too large, truncated to 1048576 [ 473.478059][T17996] IPVS: Error connecting to the multicast addr [ 473.695235][T18000] sctp: [Deprecated]: syz.4.3518 (pid 18000) Use of int in maxseg socket option. [ 473.695235][T18000] Use struct sctp_assoc_value instead [ 474.580664][T18016] IPVS: Error connecting to the multicast addr [ 474.743439][T18014] netlink: 'syz.4.3523': attribute type 9 has an invalid length. [ 474.796675][T18014] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 474.875213][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 474.882599][T18003] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 474.923934][T18020] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 475.028467][T17873] Set syz1 is full, maxelem 65536 reached [ 475.285915][T18027] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 475.421667][T18034] __nla_validate_parse: 1 callbacks suppressed [ 475.421691][T18034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3529'. [ 475.442125][T18032] IPVS: Error connecting to the multicast addr [ 475.517850][T18037] IPVS: Error connecting to the multicast addr [ 476.142700][T18034] lo speed is unknown, defaulting to 1000 [ 476.456926][T18050] IPVS: Error connecting to the multicast addr [ 477.025406][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 477.037724][T18037] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 477.045301][T18047] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 477.148019][T18058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3533'. [ 477.193272][T18058] FAULT_INJECTION: forcing a failure. [ 477.193272][T18058] name failslab, interval 1, probability 0, space 0, times 0 [ 477.196033][T18061] netlink: 'syz.2.3534': attribute type 10 has an invalid length. [ 477.232134][T18058] CPU: 0 UID: 0 PID: 18058 Comm: syz.3.3533 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 477.232169][T18058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 477.232183][T18058] Call Trace: [ 477.232191][T18058] [ 477.232201][T18058] dump_stack_lvl+0x241/0x360 [ 477.232235][T18058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.232259][T18058] ? __pfx__printk+0x10/0x10 [ 477.232284][T18058] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 477.232317][T18058] ? __pfx___might_resched+0x10/0x10 [ 477.232343][T18058] ? trace_contention_end+0x3c/0x120 [ 477.232373][T18058] should_fail_ex+0x40a/0x550 [ 477.232418][T18058] should_failslab+0xac/0x100 [ 477.232449][T18058] kmem_cache_alloc_node_noprof+0x77/0x380 [ 477.232479][T18058] ? __alloc_skb+0x1c3/0x440 [ 477.232501][T18058] ? rtnl_mdb_add+0x39f/0x4c0 [ 477.232528][T18058] __alloc_skb+0x1c3/0x440 [ 477.232559][T18058] ? __pfx___alloc_skb+0x10/0x10 [ 477.232589][T18058] ? netlink_ack_tlv_len+0x6e/0x200 [ 477.232626][T18058] netlink_ack+0x145/0xa60 [ 477.232656][T18058] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 477.232695][T18058] netlink_rcv_skb+0x294/0x480 [ 477.232730][T18058] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 477.232754][T18058] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.232812][T18058] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.232835][T18058] netlink_unicast+0x7f6/0x990 [ 477.232876][T18058] ? __pfx_netlink_unicast+0x10/0x10 [ 477.232905][T18058] ? __virt_addr_valid+0x45f/0x530 [ 477.232927][T18058] ? __phys_addr_symbol+0x2f/0x70 [ 477.232947][T18058] ? __check_object_size+0x47a/0x730 [ 477.232981][T18058] netlink_sendmsg+0x8de/0xcb0 [ 477.233014][T18058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.233041][T18058] ? aa_sock_msg_perm+0x91/0x160 [ 477.233081][T18058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.233101][T18058] __sock_sendmsg+0x221/0x270 [ 477.233138][T18058] ____sys_sendmsg+0x53a/0x860 [ 477.233174][T18058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.233199][T18058] ? __fget_files+0x2a/0x410 [ 477.233235][T18058] ? __fget_files+0x2a/0x410 [ 477.233276][T18058] __sys_sendmsg+0x269/0x350 [ 477.233308][T18058] ? __pfx___sys_sendmsg+0x10/0x10 [ 477.233350][T18058] ? do_sys_openat2+0x17a/0x1d0 [ 477.233419][T18058] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 477.233455][T18058] ? do_syscall_64+0x100/0x230 [ 477.233492][T18058] ? do_syscall_64+0xb6/0x230 [ 477.233528][T18058] do_syscall_64+0xf3/0x230 [ 477.233561][T18058] ? clear_bhb_loop+0x35/0x90 [ 477.233595][T18058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.233626][T18058] RIP: 0033:0x7f50bb58d169 [ 477.233645][T18058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.233664][T18058] RSP: 002b:00007f50bc4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.233687][T18058] RAX: ffffffffffffffda RBX: 00007f50bb7a5fa0 RCX: 00007f50bb58d169 [ 477.233704][T18058] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 477.233717][T18058] RBP: 00007f50bc4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 477.233730][T18058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.233742][T18058] R13: 0000000000000000 R14: 00007f50bb7a5fa0 R15: 00007ffe7d00fa38 [ 477.233773][T18058] [ 477.267553][T18055] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 478.028243][T18077] IPVS: Error connecting to the multicast addr [ 478.397884][T18090] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 478.432083][T18093] netlink: 304 bytes leftover after parsing attributes in process `syz.2.3546'. [ 478.762779][T18106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3548'. [ 479.173777][T17951] Set syz1 is full, maxelem 65536 reached [ 479.207633][T18124] vlan0: entered promiscuous mode [ 479.212820][T18124] bond0: entered promiscuous mode [ 479.340814][T18130] netlink: 'syz.1.3555': attribute type 9 has an invalid length. [ 479.379815][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3556'. [ 479.718508][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3557'. [ 479.741351][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3557'. [ 479.753296][T18137] IPVS: Error connecting to the multicast addr [ 479.913103][T18150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3559'. [ 480.466863][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 480.520712][T18137] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 480.641749][T18159] lo speed is unknown, defaulting to 1000 [ 480.724172][T18181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3571'. [ 481.247612][T18199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 481.446162][T18203] netlink: 'syz.2.3580': attribute type 58 has an invalid length. [ 481.496297][T18203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3580'. [ 481.944099][T18193] lo speed is unknown, defaulting to 1000 [ 482.159158][T18226] netlink: 'syz.3.3591': attribute type 10 has an invalid length. [ 482.206802][T18226] team0: Cannot enslave team device to itself [ 482.298232][T18231] tipc: Started in network mode [ 482.315284][T18231] tipc: Node identity 00000000000000000000ffffac14142, cluster identity 4711 [ 482.334451][T18231] tipc: Enabling of bearer rejected, failed to enable media [ 482.409165][T18221] lo speed is unknown, defaulting to 1000 [ 482.457148][T18233] xt_NFQUEUE: number of total queues is 0 [ 482.612244][T18235] syzkaller1: entered promiscuous mode [ 482.619008][T18235] syzkaller1: entered allmulticast mode [ 483.602733][T18253] xt_hashlimit: size too large, truncated to 1048576 [ 484.094882][T18266] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3604'. [ 484.226905][T18270] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3605'. [ 484.622725][T18290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3612'. [ 484.636691][T18290] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 484.832362][T18296] FAULT_INJECTION: forcing a failure. [ 484.832362][T18296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.858134][T18296] CPU: 0 UID: 0 PID: 18296 Comm: syz.4.3615 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 484.858165][T18296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 484.858178][T18296] Call Trace: [ 484.858186][T18296] [ 484.858195][T18296] dump_stack_lvl+0x241/0x360 [ 484.858226][T18296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.858249][T18296] ? __pfx__printk+0x10/0x10 [ 484.858277][T18296] ? snprintf+0xda/0x120 [ 484.858306][T18296] should_fail_ex+0x40a/0x550 [ 484.858343][T18296] _copy_to_user+0x31/0xb0 [ 484.858375][T18296] simple_read_from_buffer+0xca/0x150 [ 484.858408][T18296] proc_fail_nth_read+0x1e9/0x250 [ 484.858442][T18296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.858482][T18296] ? rw_verify_area+0x243/0x630 [ 484.858502][T18296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 484.858534][T18296] vfs_read+0x1f8/0xb40 [ 484.858558][T18296] ? fdget_pos+0x254/0x320 [ 484.858591][T18296] ? __pfx___mutex_lock+0x10/0x10 [ 484.858624][T18296] ? __pfx_vfs_read+0x10/0x10 [ 484.858650][T18296] ? __fget_files+0x2a/0x410 [ 484.858682][T18296] ? __fget_files+0x395/0x410 [ 484.858711][T18296] ? __fget_files+0x2a/0x410 [ 484.858752][T18296] ksys_read+0x18f/0x2b0 [ 484.858778][T18296] ? __pfx_ksys_read+0x10/0x10 [ 484.858801][T18296] ? do_syscall_64+0x100/0x230 [ 484.858837][T18296] ? do_syscall_64+0xb6/0x230 [ 484.858873][T18296] do_syscall_64+0xf3/0x230 [ 484.858905][T18296] ? clear_bhb_loop+0x35/0x90 [ 484.858938][T18296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.858966][T18296] RIP: 0033:0x7faf8378bb7c [ 484.858985][T18296] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 484.859002][T18296] RSP: 002b:00007faf8463b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.859024][T18296] RAX: ffffffffffffffda RBX: 00007faf839a5fa0 RCX: 00007faf8378bb7c [ 484.859039][T18296] RDX: 000000000000000f RSI: 00007faf8463b0a0 RDI: 0000000000000004 [ 484.859052][T18296] RBP: 00007faf8463b090 R08: 0000000000000000 R09: 0000000000000000 [ 484.859065][T18296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.859078][T18296] R13: 0000000000000000 R14: 00007faf839a5fa0 R15: 00007ffc12ee0f58 [ 484.859111][T18296] [ 485.207350][T18299] tipc: Cannot configure node identity twice [ 485.419685][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'. [ 485.837621][T18336] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3627'. [ 485.974143][T18347] netlink: 'syz.4.3633': attribute type 10 has an invalid length. [ 485.987025][T18347] team0: Port device dummy0 added [ 486.022707][T18347] team0: Port device dummy0 removed [ 486.040995][T18347] bond2: (slave bridge3): Releasing backup interface [ 486.067302][T18347] bond3: (slave gretap1): Releasing active interface [ 486.140766][T18351] vlan2: entered promiscuous mode [ 486.157224][T18351] erspan0: entered promiscuous mode [ 486.203601][T18356] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3636'. [ 486.269955][T18358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3637'. [ 486.357597][T18363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3639'. [ 486.638510][T18370] x_tables: duplicate underflow at hook 2 [ 486.747213][T18375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3644'. [ 486.765779][T18373] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 486.815709][T18358] lo speed is unknown, defaulting to 1000 [ 486.895836][T18378] netlink: 'syz.3.3645': attribute type 10 has an invalid length. [ 486.925981][T18378] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.940105][T18378] bond0: (slave team0): Enslaving as an active interface with an up link [ 486.975850][T18380] xt_hashlimit: size too large, truncated to 1048576 [ 487.128213][T18386] IPVS: Error connecting to the multicast addr [ 487.446908][T18392] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 487.785479][T18400] macvlan3: entered promiscuous mode [ 487.794337][T18400] macvlan3: entered allmulticast mode [ 487.813072][T18400] bond0: entered allmulticast mode [ 487.833326][T18400] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 487.849426][T18400] team0: Port device macvlan3 added [ 487.875259][T18402] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3653'. [ 488.021400][T18411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3656'. [ 488.206213][T18419] xt_nfacct: accounting object `syz1' does not exists [ 488.226359][T18420] netlink: 'syz.1.3659': attribute type 1 has an invalid length. [ 488.262462][T18420] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3659'. [ 488.327680][T18420] xt_hashlimit: size too large, truncated to 1048576 [ 488.740090][T18434] IPVS: Error connecting to the multicast addr [ 488.777970][T18433] vlan2: left promiscuous mode [ 488.793051][T18433] erspan0: left promiscuous mode [ 488.840928][T18433] bond0: left allmulticast mode [ 488.862768][T18433] macvlan3: left promiscuous mode [ 488.879645][T18433] macvlan3: left allmulticast mode [ 489.154843][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 489.164411][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3671'. [ 489.505281][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 489.551881][T18446] FAULT_INJECTION: forcing a failure. [ 489.551881][T18446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.565639][T18446] CPU: 1 UID: 0 PID: 18446 Comm: syz.2.3670 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 489.565668][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 489.565682][T18446] Call Trace: [ 489.565690][T18446] [ 489.565699][T18446] dump_stack_lvl+0x241/0x360 [ 489.565730][T18446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.565754][T18446] ? __pfx__printk+0x10/0x10 [ 489.565778][T18446] ? __pfx_lock_release+0x10/0x10 [ 489.565819][T18446] should_fail_ex+0x40a/0x550 [ 489.565856][T18446] _copy_from_iter+0x1df/0x1c40 [ 489.565882][T18446] ? __virt_addr_valid+0x183/0x530 [ 489.565904][T18446] ? __pfx_lock_release+0x10/0x10 [ 489.565943][T18446] ? __alloc_skb+0x28f/0x440 [ 489.565966][T18446] ? __pfx__copy_from_iter+0x10/0x10 [ 489.565994][T18446] ? __virt_addr_valid+0x183/0x530 [ 489.566014][T18446] ? __virt_addr_valid+0x183/0x530 [ 489.566033][T18446] ? __virt_addr_valid+0x45f/0x530 [ 489.566054][T18446] ? __phys_addr_symbol+0x2f/0x70 [ 489.566073][T18446] ? __check_object_size+0x47a/0x730 [ 489.566107][T18446] netlink_sendmsg+0x742/0xcb0 [ 489.566142][T18446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.566167][T18446] ? aa_sock_msg_perm+0x91/0x160 [ 489.566207][T18446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.566226][T18446] __sock_sendmsg+0x221/0x270 [ 489.566267][T18446] ____sys_sendmsg+0x53a/0x860 [ 489.566303][T18446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.566327][T18446] ? __fget_files+0x2a/0x410 [ 489.566362][T18446] ? __fget_files+0x2a/0x410 [ 489.566401][T18446] __sys_sendmsg+0x269/0x350 [ 489.566436][T18446] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.566477][T18446] ? do_sys_openat2+0x17a/0x1d0 [ 489.566535][T18446] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 489.566568][T18446] ? do_syscall_64+0x100/0x230 [ 489.566604][T18446] ? do_syscall_64+0xb6/0x230 [ 489.566639][T18446] do_syscall_64+0xf3/0x230 [ 489.566671][T18446] ? clear_bhb_loop+0x35/0x90 [ 489.566703][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.566730][T18446] RIP: 0033:0x7f155298d169 [ 489.566749][T18446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.566766][T18446] RSP: 002b:00007f15537f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.566788][T18446] RAX: ffffffffffffffda RBX: 00007f1552ba5fa0 RCX: 00007f155298d169 [ 489.566803][T18446] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 489.566816][T18446] RBP: 00007f15537f2090 R08: 0000000000000000 R09: 0000000000000000 [ 489.566830][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.566842][T18446] R13: 0000000000000000 R14: 00007f1552ba5fa0 R15: 00007ffc97eb4498 [ 489.566873][T18446] [ 489.901076][T18444] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 490.254922][T18476] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 490.854327][T18512] netlink: 'syz.3.3688': attribute type 58 has an invalid length. [ 490.864779][T18512] __nla_validate_parse: 5 callbacks suppressed [ 490.864800][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3688'. [ 490.885273][T18507] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 490.986980][T18471] lo speed is unknown, defaulting to 1000 [ 491.607125][T18530] FAULT_INJECTION: forcing a failure. [ 491.607125][T18530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.625300][T18530] CPU: 0 UID: 0 PID: 18530 Comm: syz.4.3693 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 491.625333][T18530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 491.625347][T18530] Call Trace: [ 491.625355][T18530] [ 491.625364][T18530] dump_stack_lvl+0x241/0x360 [ 491.625407][T18530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.625431][T18530] ? __pfx__printk+0x10/0x10 [ 491.625459][T18530] ? snprintf+0xda/0x120 [ 491.625487][T18530] should_fail_ex+0x40a/0x550 [ 491.625523][T18530] _copy_to_user+0x31/0xb0 [ 491.625555][T18530] simple_read_from_buffer+0xca/0x150 [ 491.625587][T18530] proc_fail_nth_read+0x1e9/0x250 [ 491.625620][T18530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.625653][T18530] ? rw_verify_area+0x243/0x630 [ 491.625673][T18530] ? aa_sk_perm+0x96d/0xab0 [ 491.625701][T18530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.625732][T18530] vfs_read+0x1f8/0xb40 [ 491.625758][T18530] ? __pfx_inet6_bind_sk+0x10/0x10 [ 491.625786][T18530] ? __pfx_vfs_read+0x10/0x10 [ 491.625805][T18530] ? do_sys_openat2+0x17a/0x1d0 [ 491.625842][T18530] ? __sys_bind+0x20a/0x290 [ 491.625866][T18530] ? __pfx___sys_bind+0x10/0x10 [ 491.625901][T18530] ksys_read+0x18f/0x2b0 [ 491.625926][T18530] ? __pfx_ksys_read+0x10/0x10 [ 491.625949][T18530] ? do_syscall_64+0x100/0x230 [ 491.625985][T18530] ? do_syscall_64+0xb6/0x230 [ 491.626019][T18530] do_syscall_64+0xf3/0x230 [ 491.626051][T18530] ? clear_bhb_loop+0x35/0x90 [ 491.626084][T18530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.626112][T18530] RIP: 0033:0x7faf8378bb7c [ 491.626129][T18530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 491.626147][T18530] RSP: 002b:00007faf8463b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.626169][T18530] RAX: ffffffffffffffda RBX: 00007faf839a5fa0 RCX: 00007faf8378bb7c [ 491.626184][T18530] RDX: 000000000000000f RSI: 00007faf8463b0a0 RDI: 0000000000000004 [ 491.626197][T18530] RBP: 00007faf8463b090 R08: 0000000000000000 R09: 0000000000000000 [ 491.626210][T18530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.626222][T18530] R13: 0000000000000000 R14: 00007faf839a5fa0 R15: 00007ffc12ee0f58 [ 491.626253][T18530] [ 492.219575][T18545] FAULT_INJECTION: forcing a failure. [ 492.219575][T18545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 492.245254][T18545] CPU: 0 UID: 0 PID: 18545 Comm: syz.1.3699 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 492.245288][T18545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 492.245303][T18545] Call Trace: [ 492.245311][T18545] [ 492.245321][T18545] dump_stack_lvl+0x241/0x360 [ 492.245355][T18545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.245380][T18545] ? __pfx__printk+0x10/0x10 [ 492.245415][T18545] should_fail_ex+0x40a/0x550 [ 492.245454][T18545] prepare_alloc_pages+0x1da/0x5b0 [ 492.245488][T18545] __alloc_frozen_pages_noprof+0x16f/0x710 [ 492.245518][T18545] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 492.245566][T18545] alloc_pages_mpol+0x311/0x660 [ 492.245603][T18545] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 492.245642][T18545] alloc_pages_noprof+0x121/0x190 [ 492.245675][T18545] get_free_pages_noprof+0xc/0x30 [ 492.245699][T18545] kasan_populate_vmalloc_pte+0x38/0xe0 [ 492.245725][T18545] __apply_to_page_range+0x806/0xde0 [ 492.245766][T18545] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 492.245796][T18545] ? __pfx___apply_to_page_range+0x10/0x10 [ 492.245840][T18545] ? do_raw_spin_unlock+0x13c/0x8b0 [ 492.245879][T18545] alloc_vmap_area+0x1d4e/0x2400 [ 492.245936][T18545] ? __pfx_alloc_vmap_area+0x10/0x10 [ 492.245971][T18545] ? __kasan_kmalloc+0x98/0xb0 [ 492.245998][T18545] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 492.246031][T18545] ? __get_vm_area_node+0x132/0x2d0 [ 492.246067][T18545] ? dev_map_alloc+0x141/0x540 [ 492.246097][T18545] __get_vm_area_node+0x1c8/0x2d0 [ 492.246138][T18545] __vmalloc_node_range_noprof+0x344/0x1380 [ 492.246161][T18545] ? dev_map_alloc+0x141/0x540 [ 492.246221][T18545] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.246247][T18545] ? rcu_is_watching+0x15/0xb0 [ 492.246273][T18545] ? trace_kmalloc+0x1f/0xd0 [ 492.246306][T18545] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 492.246337][T18545] ? bpf_map_area_alloc+0x64/0x120 [ 492.246374][T18545] bpf_map_area_alloc+0xfc/0x120 [ 492.246408][T18545] ? dev_map_alloc+0x141/0x540 [ 492.246441][T18545] dev_map_alloc+0x141/0x540 [ 492.246470][T18545] ? ns_capable+0x8a/0xf0 [ 492.246501][T18545] map_create+0x946/0x11c0 [ 492.246542][T18545] __sys_bpf+0x6d3/0x820 [ 492.246575][T18545] ? __pfx___sys_bpf+0x10/0x10 [ 492.246620][T18545] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 492.246657][T18545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 492.246693][T18545] ? do_syscall_64+0x100/0x230 [ 492.246732][T18545] __x64_sys_bpf+0x7c/0x90 [ 492.246761][T18545] do_syscall_64+0xf3/0x230 [ 492.246795][T18545] ? clear_bhb_loop+0x35/0x90 [ 492.246837][T18545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.246867][T18545] RIP: 0033:0x7f485358d169 [ 492.246899][T18545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.246917][T18545] RSP: 002b:00007f485438e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.246940][T18545] RAX: ffffffffffffffda RBX: 00007f48537a5fa0 RCX: 00007f485358d169 [ 492.246956][T18545] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 492.246969][T18545] RBP: 00007f485438e090 R08: 0000000000000000 R09: 0000000000000000 [ 492.246982][T18545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 492.246994][T18545] R13: 0000000000000001 R14: 00007f48537a5fa0 R15: 00007ffd4d1b84c8 [ 492.247025][T18545] [ 492.756138][T18551] netlink: 'syz.3.3701': attribute type 1 has an invalid length. [ 492.811862][T18551] bond1: entered promiscuous mode [ 492.826868][T18551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.914868][T18551] bond1: (slave bridge1): making interface the new active one [ 492.958000][T18551] bridge1: entered promiscuous mode [ 492.964409][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 492.964830][T18551] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 493.075415][T18563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3706'. [ 493.120784][T18563] vti0: entered promiscuous mode [ 493.162315][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3706'. [ 493.338095][T18569] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3707'. [ 493.398388][T18566] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 493.897149][T18590] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3715'. [ 494.161242][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3718'. [ 494.192471][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3718'. [ 494.277501][T18585] lo speed is unknown, defaulting to 1000 [ 494.324238][T18608] netlink: 'syz.1.3719': attribute type 1 has an invalid length. [ 494.517406][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3720'. [ 494.520743][T18612] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 494.706624][T18626] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 494.717751][T18626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3723'. [ 494.737896][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3723'. [ 495.155398][T18645] vlan2: entered promiscuous mode [ 495.185475][T18645] gretap0: entered promiscuous mode [ 495.205726][T18585] netlink: 'syz.4.3713': attribute type 1 has an invalid length. [ 495.312765][T18638] lo speed is unknown, defaulting to 1000 [ 495.425673][T18653] FAULT_INJECTION: forcing a failure. [ 495.425673][T18653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.456070][T18653] CPU: 0 UID: 0 PID: 18653 Comm: syz.2.3732 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 495.456102][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 495.456116][T18653] Call Trace: [ 495.456124][T18653] [ 495.456134][T18653] dump_stack_lvl+0x241/0x360 [ 495.456167][T18653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.456191][T18653] ? __pfx__printk+0x10/0x10 [ 495.456219][T18653] ? snprintf+0xda/0x120 [ 495.456248][T18653] should_fail_ex+0x40a/0x550 [ 495.456286][T18653] _copy_to_user+0x31/0xb0 [ 495.456317][T18653] simple_read_from_buffer+0xca/0x150 [ 495.456350][T18653] proc_fail_nth_read+0x1e9/0x250 [ 495.456383][T18653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.456416][T18653] ? rw_verify_area+0x243/0x630 [ 495.456438][T18653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 495.456469][T18653] vfs_read+0x1f8/0xb40 [ 495.456492][T18653] ? fdget_pos+0x254/0x320 [ 495.456531][T18653] ? __pfx___mutex_lock+0x10/0x10 [ 495.456563][T18653] ? __pfx_vfs_read+0x10/0x10 [ 495.456582][T18653] ? do_sys_openat2+0x17a/0x1d0 [ 495.456616][T18653] ? __rcu_read_unlock+0xa1/0x110 [ 495.456645][T18653] ? __fget_files+0x2a/0x410 [ 495.456678][T18653] ? __fget_files+0x395/0x410 [ 495.456707][T18653] ? __fget_files+0x2a/0x410 [ 495.456747][T18653] ksys_read+0x18f/0x2b0 [ 495.456772][T18653] ? __pfx_ksys_read+0x10/0x10 [ 495.456796][T18653] ? do_syscall_64+0x100/0x230 [ 495.456831][T18653] ? do_syscall_64+0xb6/0x230 [ 495.456867][T18653] do_syscall_64+0xf3/0x230 [ 495.456898][T18653] ? clear_bhb_loop+0x35/0x90 [ 495.456932][T18653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.456964][T18653] RIP: 0033:0x7f155298bb7c [ 495.456983][T18653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 495.457001][T18653] RSP: 002b:00007f15537f2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 495.457025][T18653] RAX: ffffffffffffffda RBX: 00007f1552ba5fa0 RCX: 00007f155298bb7c [ 495.457040][T18653] RDX: 000000000000000f RSI: 00007f15537f20a0 RDI: 0000000000000005 [ 495.457054][T18653] RBP: 00007f15537f2090 R08: 0000000000000000 R09: 0000000000000000 [ 495.457067][T18653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.457079][T18653] R13: 0000000000000000 R14: 00007f1552ba5fa0 R15: 00007ffc97eb4498 [ 495.457111][T18653] [ 495.689193][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 495.742458][T18654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.873943][T18657] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 495.884797][T18657] __nla_validate_parse: 4 callbacks suppressed [ 495.884820][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 495.922030][T18659] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3735'. [ 495.936024][T18659] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 495.939691][T18663] netlink: 'syz.0.3737': attribute type 39 has an invalid length. [ 496.185929][T18668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 496.662893][T18688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3746'. [ 496.839471][T18699] vlan3: entered promiscuous mode [ 496.853941][T18699] bond0: entered promiscuous mode [ 496.864521][T18699] team0: entered promiscuous mode [ 496.925251][T18690] netlink: 'syz.2.3747': attribute type 17 has an invalid length. [ 497.184800][T18708] bond1: left promiscuous mode [ 497.190177][T18708] bridge1: left promiscuous mode [ 497.239872][T18708] vlan2: left promiscuous mode [ 497.244813][T18708] gretap0: left promiscuous mode [ 497.460906][T18715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3755'. [ 497.605289][T18719] netlink: 'syz.2.3757': attribute type 9 has an invalid length. [ 497.620901][T18717] batadv0: entered promiscuous mode [ 497.646588][T18717] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 497.667821][T18717] Cannot create hsr debugfs directory [ 497.681490][T18717] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 497.705264][T18717] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 497.736506][T18717] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 497.767095][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'. [ 497.776229][T18725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3759'. [ 497.800134][T18725] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3759'. [ 497.837275][T18722] xt_CT: No such helper "snmp" [ 498.038551][T18715] lo speed is unknown, defaulting to 1000 [ 498.129209][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3762'. [ 498.168846][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3762'. [ 498.622038][T18748] FAULT_INJECTION: forcing a failure. [ 498.622038][T18748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.645196][T18748] CPU: 1 UID: 0 PID: 18748 Comm: syz.2.3766 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 498.645230][T18748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 498.645244][T18748] Call Trace: [ 498.645253][T18748] [ 498.645262][T18748] dump_stack_lvl+0x241/0x360 [ 498.645296][T18748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.645321][T18748] ? __pfx__printk+0x10/0x10 [ 498.645345][T18748] ? __pfx_lock_release+0x10/0x10 [ 498.645388][T18748] should_fail_ex+0x40a/0x550 [ 498.645427][T18748] _copy_from_iter+0x1df/0x1c40 [ 498.645463][T18748] ? __virt_addr_valid+0x183/0x530 [ 498.645485][T18748] ? __pfx_lock_release+0x10/0x10 [ 498.645530][T18748] ? __alloc_skb+0x28f/0x440 [ 498.645554][T18748] ? __pfx__copy_from_iter+0x10/0x10 [ 498.645581][T18748] ? __virt_addr_valid+0x183/0x530 [ 498.645600][T18748] ? __virt_addr_valid+0x183/0x530 [ 498.645617][T18748] ? __virt_addr_valid+0x45f/0x530 [ 498.645638][T18748] ? __phys_addr_symbol+0x2f/0x70 [ 498.645657][T18748] ? __check_object_size+0x47a/0x730 [ 498.645695][T18748] netlink_sendmsg+0x742/0xcb0 [ 498.645728][T18748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.645755][T18748] ? aa_sock_msg_perm+0x91/0x160 [ 498.645793][T18748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.645812][T18748] __sock_sendmsg+0x221/0x270 [ 498.645849][T18748] ____sys_sendmsg+0x53a/0x860 [ 498.645884][T18748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.645909][T18748] ? __fget_files+0x2a/0x410 [ 498.645943][T18748] ? __fget_files+0x2a/0x410 [ 498.645984][T18748] __sys_sendmsg+0x269/0x350 [ 498.646016][T18748] ? __pfx___sys_sendmsg+0x10/0x10 [ 498.646057][T18748] ? do_sys_openat2+0x17a/0x1d0 [ 498.646115][T18748] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 498.646149][T18748] ? do_syscall_64+0x100/0x230 [ 498.646186][T18748] ? do_syscall_64+0xb6/0x230 [ 498.646221][T18748] do_syscall_64+0xf3/0x230 [ 498.646252][T18748] ? clear_bhb_loop+0x35/0x90 [ 498.646285][T18748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.646314][T18748] RIP: 0033:0x7f155298d169 [ 498.646333][T18748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.646351][T18748] RSP: 002b:00007f15537f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.646374][T18748] RAX: ffffffffffffffda RBX: 00007f1552ba5fa0 RCX: 00007f155298d169 [ 498.646389][T18748] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 498.646402][T18748] RBP: 00007f15537f2090 R08: 0000000000000000 R09: 0000000000000000 [ 498.646415][T18748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.646428][T18748] R13: 0000000000000000 R14: 00007f1552ba5fa0 R15: 00007ffc97eb4498 [ 498.646459][T18748] [ 498.882444][T18730] FAULT_INJECTION: forcing a failure. [ 498.882444][T18730] name failslab, interval 1, probability 0, space 0, times 0 [ 499.019940][T18730] CPU: 1 UID: 0 PID: 18730 Comm: syz.0.3760 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 499.019971][T18730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 499.019986][T18730] Call Trace: [ 499.019993][T18730] [ 499.020003][T18730] dump_stack_lvl+0x241/0x360 [ 499.020038][T18730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.020063][T18730] ? __pfx__printk+0x10/0x10 [ 499.020080][T18730] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 499.020115][T18730] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.020156][T18730] should_fail_ex+0x40a/0x550 [ 499.020194][T18730] should_failslab+0xac/0x100 [ 499.020225][T18730] kmem_cache_alloc_node_noprof+0x77/0x380 [ 499.020257][T18730] ? __alloc_skb+0x1c3/0x440 [ 499.020288][T18730] __alloc_skb+0x1c3/0x440 [ 499.020319][T18730] ? __pfx___alloc_skb+0x10/0x10 [ 499.020356][T18730] xfrm_send_policy_notify+0x293/0x1a30 [ 499.020391][T18730] ? __pfx_lock_acquire+0x10/0x10 [ 499.020428][T18730] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 499.020462][T18730] ? __pfx_xfrm_policy_bysel_ctx+0x10/0x10 [ 499.020499][T18730] ? rcu_is_watching+0x15/0xb0 [ 499.020523][T18730] ? do_trace_netlink_extack+0x8b/0x1f0 [ 499.020555][T18730] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 499.020586][T18730] km_policy_notify+0x126/0x210 [ 499.020614][T18730] ? km_policy_notify+0x2e/0x210 [ 499.020646][T18730] xfrm_get_policy+0xa0d/0x1060 [ 499.020707][T18730] ? __pfx_xfrm_get_policy+0x10/0x10 [ 499.020739][T18730] ? __pfx_aa_get_newest_label+0x10/0x10 [ 499.020785][T18730] ? apparmor_capable+0x13b/0x1b0 [ 499.020815][T18730] ? __nla_parse+0x40/0x60 [ 499.020842][T18730] xfrm_user_rcv_msg+0x975/0xc20 [ 499.020881][T18730] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 499.020949][T18730] ? __mutex_trylock_common+0x183/0x2e0 [ 499.020975][T18730] ? __pfx___might_resched+0x10/0x10 [ 499.021006][T18730] ? __pfx___mutex_trylock_common+0x10/0x10 [ 499.021044][T18730] netlink_rcv_skb+0x206/0x480 [ 499.021079][T18730] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 499.021113][T18730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.021198][T18730] xfrm_netlink_rcv+0x79/0x90 [ 499.021230][T18730] netlink_unicast+0x7f6/0x990 [ 499.021272][T18730] ? __pfx_netlink_unicast+0x10/0x10 [ 499.021301][T18730] ? __virt_addr_valid+0x45f/0x530 [ 499.021324][T18730] ? __phys_addr_symbol+0x2f/0x70 [ 499.021344][T18730] ? __check_object_size+0x47a/0x730 [ 499.021379][T18730] netlink_sendmsg+0x8de/0xcb0 [ 499.021416][T18730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.021443][T18730] ? aa_sock_msg_perm+0x91/0x160 [ 499.021489][T18730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.021506][T18730] __sock_sendmsg+0x221/0x270 [ 499.021539][T18730] ____sys_sendmsg+0x53a/0x860 [ 499.021572][T18730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.021595][T18730] ? __fget_files+0x2a/0x410 [ 499.021626][T18730] ? __fget_files+0x2a/0x410 [ 499.021663][T18730] __sys_sendmsg+0x269/0x350 [ 499.021692][T18730] ? __pfx___sys_sendmsg+0x10/0x10 [ 499.021744][T18730] ? do_sys_openat2+0x17a/0x1d0 [ 499.021804][T18730] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.021856][T18730] ? do_syscall_64+0x100/0x230 [ 499.021893][T18730] ? do_syscall_64+0xb6/0x230 [ 499.021929][T18730] do_syscall_64+0xf3/0x230 [ 499.021962][T18730] ? clear_bhb_loop+0x35/0x90 [ 499.021996][T18730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.022025][T18730] RIP: 0033:0x7f9fdc38d169 [ 499.022045][T18730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.022062][T18730] RSP: 002b:00007f9fdd237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.022085][T18730] RAX: ffffffffffffffda RBX: 00007f9fdc5a5fa0 RCX: 00007f9fdc38d169 [ 499.022100][T18730] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 499.022114][T18730] RBP: 00007f9fdd237090 R08: 0000000000000000 R09: 0000000000000000 [ 499.022126][T18730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.022138][T18730] R13: 0000000000000000 R14: 00007f9fdc5a5fa0 R15: 00007ffc09a38848 [ 499.022172][T18730] [ 499.476049][ T5848] Bluetooth: hci3: command 0x0419 tx timeout [ 499.720384][T18763] FAULT_INJECTION: forcing a failure. [ 499.720384][T18763] name failslab, interval 1, probability 0, space 0, times 0 [ 499.752276][T18765] netlink: 'syz.4.3772': attribute type 1 has an invalid length. [ 499.761889][T18763] CPU: 1 UID: 0 PID: 18763 Comm: syz.2.3771 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 499.761919][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 499.761932][T18763] Call Trace: [ 499.761940][T18763] [ 499.761949][T18763] dump_stack_lvl+0x241/0x360 [ 499.761981][T18763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.762005][T18763] ? __pfx__printk+0x10/0x10 [ 499.762029][T18763] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 499.762062][T18763] ? __pfx___might_resched+0x10/0x10 [ 499.762088][T18763] ? ida_alloc_range+0xa08/0xa80 [ 499.762124][T18763] should_fail_ex+0x40a/0x550 [ 499.762174][T18763] should_failslab+0xac/0x100 [ 499.762205][T18763] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 499.762236][T18763] ? register_pidns_sysctls+0x4d/0x1d0 [ 499.762263][T18763] kmemdup_noprof+0x2b/0x70 [ 499.762315][T18763] register_pidns_sysctls+0x4d/0x1d0 [ 499.762343][T18763] copy_pid_ns+0x573/0xb80 [ 499.762372][T18763] ? __pfx_copy_pid_ns+0x10/0x10 [ 499.762398][T18763] ? copy_mnt_ns+0x857/0x960 [ 499.762439][T18763] create_new_namespaces+0x2c7/0x7b0 [ 499.762472][T18763] ? bpf_lsm_capable+0x9/0x10 [ 499.762500][T18763] unshare_nsproxy_namespaces+0x124/0x180 [ 499.762532][T18763] ksys_unshare+0x57d/0xa70 [ 499.762573][T18763] ? __pfx_ksys_unshare+0x10/0x10 [ 499.762604][T18763] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.762638][T18763] ? do_syscall_64+0x100/0x230 [ 499.762678][T18763] __x64_sys_unshare+0x38/0x40 [ 499.762708][T18763] do_syscall_64+0xf3/0x230 [ 499.762740][T18763] ? clear_bhb_loop+0x35/0x90 [ 499.762774][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.762802][T18763] RIP: 0033:0x7f155298d169 [ 499.762822][T18763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.762840][T18763] RSP: 002b:00007f15537f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 499.762862][T18763] RAX: ffffffffffffffda RBX: 00007f1552ba5fa0 RCX: 00007f155298d169 [ 499.762878][T18763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 499.762891][T18763] RBP: 00007f15537f2090 R08: 0000000000000000 R09: 0000000000000000 [ 499.762904][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.762917][T18763] R13: 0000000000000000 R14: 00007f1552ba5fa0 R15: 00007ffc97eb4498 [ 499.762948][T18763] [ 500.076309][T18765] nbd: socks must be embedded in a SOCK_ITEM attr [ 500.082937][T18765] block nbd1: shutting down sockets [ 500.630022][T18784] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 501.876879][T18820] xt_TPROXY: Can be used only with -p tcp or -p udp [ 501.949824][T18820] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 502.343434][T18839] netlink: 'syz.3.3799': attribute type 10 has an invalid length. [ 502.381206][T18842] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 502.418878][T18839] dummy0: entered promiscuous mode [ 502.424795][T18839] team0: Port device dummy0 added [ 502.575699][T18839] __nla_validate_parse: 11 callbacks suppressed [ 502.575721][T18839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3799'. [ 502.627268][T18851] netlink: 'syz.1.3801': attribute type 29 has an invalid length. [ 502.643643][T18851] netlink: 'syz.1.3801': attribute type 29 has an invalid length. [ 502.658965][T18851] netlink: 508 bytes leftover after parsing attributes in process `syz.1.3801'. [ 502.706793][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 502.892172][T18842] lo speed is unknown, defaulting to 1000 [ 502.906096][T18858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3805'. [ 502.951052][T18843] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 503.027227][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3806'. [ 503.339822][T18870] netlink: 'syz.3.3809': attribute type 10 has an invalid length. [ 503.371104][T18874] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3810'. [ 503.421448][T18873] Bluetooth: MGMT ver 1.23 [ 503.591559][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 503.832140][T18889] netlink: 'syz.3.3813': attribute type 11 has an invalid length. [ 504.053154][T18858] lo speed is unknown, defaulting to 1000 [ 504.059640][T18891] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3815'. [ 504.327846][T18886] lo speed is unknown, defaulting to 1000 [ 504.883274][T18908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3820'. [ 505.330186][T18923] netlink: 'syz.3.3823': attribute type 1 has an invalid length. [ 505.415248][T18923] bond2: entered promiscuous mode [ 505.420620][T18923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.523643][T18925] bond2: (slave bridge3): making interface the new active one [ 505.555797][T18925] bridge3: entered promiscuous mode [ 505.562439][T18925] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 505.610539][T18932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3825'. [ 505.645368][T18932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3825'. [ 505.929956][T18944] netlink: 'syz.4.3827': attribute type 8 has an invalid length. [ 506.367621][T18965] macvtap1: entered promiscuous mode [ 506.390526][T18965] bond0: entered promiscuous mode [ 506.412027][T18965] bond_slave_0: entered promiscuous mode [ 506.429617][T18965] bond_slave_1: entered promiscuous mode [ 506.487807][T18965] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 506.494317][T18971] netlink: 'syz.1.3837': attribute type 1 has an invalid length. [ 506.501569][T18965] team0: Device macvtap1 failed to register rx_handler [ 506.529890][T18971] netlink: 'syz.1.3837': attribute type 3 has an invalid length. [ 506.537935][T18965] bond0: left promiscuous mode [ 506.544868][T18965] bond_slave_0: left promiscuous mode [ 506.552858][T18965] bond_slave_1: left promiscuous mode [ 506.674926][T18974] bond2: left promiscuous mode [ 506.685288][T18974] bridge3: left promiscuous mode [ 506.856064][T18983] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 506.890434][T18983] gtp0: left promiscuous mode [ 507.339236][T19013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.556143][T19025] vlan3: entered promiscuous mode [ 507.565345][T19025] batadv0: entered promiscuous mode [ 507.665055][ T5850] Bluetooth: hci3: link tx timeout [ 507.670719][ T5850] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 507.890937][T19041] xt_hashlimit: size too large, truncated to 1048576 [ 508.314717][T19059] __nla_validate_parse: 13 callbacks suppressed [ 508.314741][T19059] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3867'. [ 508.541520][T19064] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 508.742176][T19067] FAULT_INJECTION: forcing a failure. [ 508.742176][T19067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.758195][T19068] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3869'. [ 508.779533][T19067] CPU: 1 UID: 0 PID: 19067 Comm: syz.3.3872 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 508.779564][T19067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 508.779578][T19067] Call Trace: [ 508.779586][T19067] [ 508.779595][T19067] dump_stack_lvl+0x241/0x360 [ 508.779627][T19067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.779652][T19067] ? __pfx__printk+0x10/0x10 [ 508.779677][T19067] ? __pfx_lock_release+0x10/0x10 [ 508.779731][T19067] should_fail_ex+0x40a/0x550 [ 508.779768][T19067] _copy_from_user+0x2d/0xb0 [ 508.779797][T19067] copy_msghdr_from_user+0xae/0x680 [ 508.779830][T19067] ? __pfx___might_resched+0x10/0x10 [ 508.779860][T19067] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 508.779898][T19067] ? do_recvmmsg+0x44e/0xab0 [ 508.779926][T19067] ? __might_fault+0xaa/0x120 [ 508.779951][T19067] do_recvmmsg+0x3bd/0xab0 [ 508.779989][T19067] ? __pfx_do_recvmmsg+0x10/0x10 [ 508.780037][T19067] ? ksys_write+0x22a/0x2b0 [ 508.780060][T19067] ? __pfx_lock_release+0x10/0x10 [ 508.780097][T19067] ? sb_end_write+0xe9/0x1c0 [ 508.780127][T19067] ? vfs_write+0x7fa/0xd10 [ 508.780152][T19067] ? __mutex_unlock_slowpath+0x227/0x800 [ 508.780194][T19067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 508.780226][T19067] ? __fget_files+0x2a/0x410 [ 508.780272][T19067] __x64_sys_recvmmsg+0x199/0x250 [ 508.780304][T19067] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 508.780334][T19067] ? do_syscall_64+0x100/0x230 [ 508.780379][T19067] ? do_syscall_64+0xb6/0x230 [ 508.780414][T19067] do_syscall_64+0xf3/0x230 [ 508.780447][T19067] ? clear_bhb_loop+0x35/0x90 [ 508.780481][T19067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.780509][T19067] RIP: 0033:0x7f50bb58d169 [ 508.780527][T19067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.780545][T19067] RSP: 002b:00007f50bc4a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 508.780567][T19067] RAX: ffffffffffffffda RBX: 00007f50bb7a5fa0 RCX: 00007f50bb58d169 [ 508.780583][T19067] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000006 [ 508.780597][T19067] RBP: 00007f50bc4a3090 R08: 0000000000000000 R09: 0000000000000000 [ 508.780610][T19067] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 508.780623][T19067] R13: 0000000000000000 R14: 00007f50bb7a5fa0 R15: 00007ffe7d00fa38 [ 508.780652][T19067] [ 509.312074][T19079] syzkaller0: entered promiscuous mode [ 509.317782][T19079] syzkaller0: entered allmulticast mode [ 509.416044][T19086] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3878'. [ 509.745878][ T5850] Bluetooth: hci3: command 0x0419 tx timeout [ 509.758539][T19096] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 510.275384][T19114] xt_hashlimit: size too large, truncated to 1048576 [ 511.835237][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 512.753023][T19104] tipc: Enabling of bearer rejected, failed to enable media [ 513.000533][T19148] netlink: 'syz.2.3892': attribute type 10 has an invalid length. [ 513.027098][T19148] team0: Port device dummy0 added [ 513.052154][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3895'. [ 513.091819][T19148] team0: Port device dummy0 removed [ 513.238144][T19142] netlink: 'syz.3.3895': attribute type 8 has an invalid length. [ 513.277970][T19158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3897'. [ 513.299935][T19158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3897'. [ 513.509804][T19165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.565781][T19151] lo speed is unknown, defaulting to 1000 [ 513.769202][T19169] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3902'. [ 513.815768][T19169] vti0: entered promiscuous mode [ 513.860991][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3902'. [ 513.965831][T19156] lo speed is unknown, defaulting to 1000 [ 514.122547][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 514.139523][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3907'. [ 514.155199][T19180] netlink: 'syz.3.3907': attribute type 1 has an invalid length. [ 514.173354][T19180] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3907'. [ 514.189301][T19181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.236594][T19180] nbd: socks must be embedded in a SOCK_ITEM attr [ 514.243103][T19180] block nbd1: shutting down sockets [ 514.331384][T19184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3909'. [ 514.445095][T19191] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3910'. [ 514.662457][T19198] FAULT_INJECTION: forcing a failure. [ 514.662457][T19198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.707158][T19198] CPU: 1 UID: 0 PID: 19198 Comm: syz.2.3913 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 514.707189][T19198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 514.707202][T19198] Call Trace: [ 514.707211][T19198] [ 514.707220][T19198] dump_stack_lvl+0x241/0x360 [ 514.707251][T19198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.707276][T19198] ? __pfx__printk+0x10/0x10 [ 514.707300][T19198] ? __pfx_lock_release+0x10/0x10 [ 514.707341][T19198] should_fail_ex+0x40a/0x550 [ 514.707379][T19198] _copy_from_iter+0x1df/0x1c40 [ 514.707405][T19198] ? __virt_addr_valid+0x183/0x530 [ 514.707426][T19198] ? __pfx_lock_release+0x10/0x10 [ 514.707465][T19198] ? __alloc_skb+0x28f/0x440 [ 514.707489][T19198] ? __pfx__copy_from_iter+0x10/0x10 [ 514.707517][T19198] ? __virt_addr_valid+0x183/0x530 [ 514.707537][T19198] ? __virt_addr_valid+0x183/0x530 [ 514.707556][T19198] ? __virt_addr_valid+0x45f/0x530 [ 514.707577][T19198] ? __phys_addr_symbol+0x2f/0x70 [ 514.707597][T19198] ? __check_object_size+0x47a/0x730 [ 514.707632][T19198] netlink_sendmsg+0x742/0xcb0 [ 514.707666][T19198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.707693][T19198] ? aa_sock_msg_perm+0x91/0x160 [ 514.707732][T19198] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.707751][T19198] __sock_sendmsg+0x221/0x270 [ 514.707788][T19198] sock_write_iter+0x2d7/0x3f0 [ 514.707822][T19198] ? __pfx_sock_write_iter+0x10/0x10 [ 514.707876][T19198] do_iter_readv_writev+0x71a/0x9d0 [ 514.707908][T19198] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 514.707939][T19198] ? bpf_lsm_file_permission+0x9/0x10 [ 514.707971][T19198] ? rw_verify_area+0x243/0x630 [ 514.707997][T19198] vfs_writev+0x38b/0xbc0 [ 514.708043][T19198] ? __pfx_vfs_writev+0x10/0x10 [ 514.708094][T19198] ? do_sys_openat2+0x17a/0x1d0 [ 514.708125][T19198] ? __fget_files+0x2a/0x410 [ 514.708157][T19198] ? __fget_files+0x395/0x410 [ 514.708186][T19198] ? __fget_files+0x2a/0x410 [ 514.708226][T19198] do_writev+0x1b6/0x360 [ 514.708262][T19198] ? __pfx_do_writev+0x10/0x10 [ 514.708293][T19198] ? do_syscall_64+0x100/0x230 [ 514.708330][T19198] ? do_syscall_64+0xb6/0x230 [ 514.708365][T19198] do_syscall_64+0xf3/0x230 [ 514.708397][T19198] ? clear_bhb_loop+0x35/0x90 [ 514.708430][T19198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.708458][T19198] RIP: 0033:0x7f155298d169 [ 514.708478][T19198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.708495][T19198] RSP: 002b:00007f15537f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 514.708518][T19198] RAX: ffffffffffffffda RBX: 00007f1552ba5fa0 RCX: 00007f155298d169 [ 514.708534][T19198] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 514.708547][T19198] RBP: 00007f15537f2090 R08: 0000000000000000 R09: 0000000000000000 [ 514.708560][T19198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.708573][T19198] R13: 0000000000000000 R14: 00007f1552ba5fa0 R15: 00007ffc97eb4498 [ 514.708604][T19198] [ 515.033169][T19196] pim6reg1: entered promiscuous mode [ 515.040568][T19196] pim6reg1: entered allmulticast mode [ 515.337692][T19205] netlink: 'syz.2.3914': attribute type 2 has an invalid length. [ 515.395352][T19201] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 515.583173][T19213] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 515.613151][T19211] xt_hashlimit: size too large, truncated to 1048576 [ 515.677998][T19217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3918'. [ 515.948803][T19223] FAULT_INJECTION: forcing a failure. [ 515.948803][T19223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.962225][T19223] CPU: 0 UID: 0 PID: 19223 Comm: syz.0.3920 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 515.962250][T19223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 515.962261][T19223] Call Trace: [ 515.962268][T19223] [ 515.962275][T19223] dump_stack_lvl+0x241/0x360 [ 515.962300][T19223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.962318][T19223] ? __pfx__printk+0x10/0x10 [ 515.962336][T19223] ? __pfx_lock_release+0x10/0x10 [ 515.962369][T19223] should_fail_ex+0x40a/0x550 [ 515.962398][T19223] _copy_from_user+0x2d/0xb0 [ 515.962423][T19223] copy_msghdr_from_user+0xae/0x680 [ 515.962450][T19223] ? __pfx___might_resched+0x10/0x10 [ 515.962474][T19223] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 515.962502][T19223] ? do_recvmmsg+0x44e/0xab0 [ 515.962524][T19223] ? __might_fault+0xaa/0x120 [ 515.962545][T19223] do_recvmmsg+0x3bd/0xab0 [ 515.962576][T19223] ? __pfx_do_recvmmsg+0x10/0x10 [ 515.962613][T19223] ? ksys_write+0x22a/0x2b0 [ 515.962632][T19223] ? __pfx_lock_release+0x10/0x10 [ 515.962663][T19223] ? sb_end_write+0xe9/0x1c0 [ 515.962691][T19223] ? vfs_write+0x7fa/0xd10 [ 515.962712][T19223] ? __mutex_unlock_slowpath+0x227/0x800 [ 515.962749][T19223] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 515.962775][T19223] ? __fget_files+0x2a/0x410 [ 515.962813][T19223] __x64_sys_recvmmsg+0x199/0x250 [ 515.962839][T19223] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 515.962862][T19223] ? do_syscall_64+0x100/0x230 [ 515.962893][T19223] ? do_syscall_64+0xb6/0x230 [ 515.962922][T19223] do_syscall_64+0xf3/0x230 [ 515.962960][T19223] ? clear_bhb_loop+0x35/0x90 [ 515.962987][T19223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.963009][T19223] RIP: 0033:0x7f9fdc38d169 [ 515.963024][T19223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.963038][T19223] RSP: 002b:00007f9fdd237038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 515.963073][T19223] RAX: ffffffffffffffda RBX: 00007f9fdc5a5fa0 RCX: 00007f9fdc38d169 [ 515.963086][T19223] RDX: 0000000000001003 RSI: 00002000000048c0 RDI: 0000000000000006 [ 515.963098][T19223] RBP: 00007f9fdd237090 R08: 0000000000000000 R09: 0000000000000000 [ 515.963110][T19223] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 515.963122][T19223] R13: 0000000000000000 R14: 00007f9fdc5a5fa0 R15: 00007ffc09a38848 [ 515.963151][T19223] [ 516.505488][T19230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3922'. [ 516.555153][T19230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3922'. [ 516.730656][T19242] netlink: 'syz.1.3927': attribute type 39 has an invalid length. [ 516.960666][ T30] audit: type=1107 audit(1742994964.078:7): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='À' [ 517.127859][T19262] vlan0: entered promiscuous mode [ 517.348575][T19265] xt_hashlimit: max too large, truncated to 1048576 [ 517.376298][T19264] netlink: 'syz.1.3933': attribute type 1 has an invalid length. [ 517.430041][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 517.455102][T19256] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 517.579289][T19258] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 517.866239][T19279] tipc: Enabled bearer , priority 0 [ 517.896839][T19275] +: renamed from syzkaller0 [ 517.933902][T19275] tipc: Disabling bearer [ 518.011667][T19284] x_tables: duplicate underflow at hook 2 [ 518.056253][T19286] xt_TPROXY: Can be used only with -p tcp or -p udp [ 518.407088][T19295] xt_hashlimit: size too large, truncated to 1048576 [ 518.501823][T19298] netlink: 'syz.3.3949': attribute type 9 has an invalid length. [ 518.602480][T19305] netlink: 'syz.4.3950': attribute type 1 has an invalid length. [ 518.653419][T19305] bond4: entered promiscuous mode [ 518.668901][T19305] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.775783][T19305] bond4: (slave bridge4): making interface the new active one [ 518.813793][T19305] bridge4: entered promiscuous mode [ 518.836839][T19305] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 519.220884][T19321] FAULT_INJECTION: forcing a failure. [ 519.220884][T19321] name failslab, interval 1, probability 0, space 0, times 0 [ 519.271137][T19321] CPU: 0 UID: 0 PID: 19321 Comm: syz.2.3956 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 519.271169][T19321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 519.271182][T19321] Call Trace: [ 519.271190][T19321] [ 519.271199][T19321] dump_stack_lvl+0x241/0x360 [ 519.271232][T19321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.271256][T19321] ? __pfx__printk+0x10/0x10 [ 519.271280][T19321] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 519.271331][T19321] ? __pfx___might_resched+0x10/0x10 [ 519.271371][T19321] should_fail_ex+0x40a/0x550 [ 519.271428][T19321] should_failslab+0xac/0x100 [ 519.271460][T19321] kmem_cache_alloc_node_noprof+0x77/0x380 [ 519.271491][T19321] ? __alloc_skb+0x1c3/0x440 [ 519.271520][T19321] __alloc_skb+0x1c3/0x440 [ 519.271550][T19321] ? __pfx___alloc_skb+0x10/0x10 [ 519.271578][T19321] ? netlink_autobind+0xd6/0x2f0 [ 519.271600][T19321] ? netlink_autobind+0x2b0/0x2f0 [ 519.271629][T19321] netlink_sendmsg+0x634/0xcb0 [ 519.271663][T19321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.271690][T19321] ? aa_sock_msg_perm+0x91/0x160 [ 519.271730][T19321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.271750][T19321] __sock_sendmsg+0x221/0x270 [ 519.271787][T19321] ____sys_sendmsg+0x53a/0x860 [ 519.271822][T19321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.271848][T19321] ? __fget_files+0x2a/0x410 [ 519.271883][T19321] ? __fget_files+0x2a/0x410 [ 519.271924][T19321] __sys_sendmsg+0x269/0x350 [ 519.271957][T19321] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.271997][T19321] ? do_sys_openat2+0x17a/0x1d0 [ 519.272057][T19321] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 519.272093][T19321] ? do_syscall_64+0x100/0x230 [ 519.272130][T19321] ? do_syscall_64+0xb6/0x230 [ 519.272166][T19321] do_syscall_64+0xf3/0x230 [ 519.272199][T19321] ? clear_bhb_loop+0x35/0x90 [ 519.272232][T19321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.272263][T19321] RIP: 0033:0x7f155298d169 [ 519.272282][T19321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.272301][T19321] RSP: 002b:00007f15537f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.272325][T19321] RAX: ffffffffffffffda RBX: 00007f1552ba5fa0 RCX: 00007f155298d169 [ 519.272350][T19321] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 519.272364][T19321] RBP: 00007f15537f2090 R08: 0000000000000000 R09: 0000000000000000 [ 519.272378][T19321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.272391][T19321] R13: 0000000000000000 R14: 00007f1552ba5fa0 R15: 00007ffc97eb4498 [ 519.272423][T19321] [ 519.625248][T19329] tipc: Started in network mode [ 519.630391][T19329] tipc: Node identity 0000000000002d200000000000000001, cluster identity 4711 [ 519.643450][T19329] tipc: Enabling of bearer rejected, failed to enable media [ 519.700693][T19326] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 519.756154][T19331] __nla_validate_parse: 2 callbacks suppressed [ 519.756175][T19331] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3961'. [ 519.865307][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3962'. [ 519.905344][T19340] tipc: Enabling of bearer rejected, failed to enable media [ 520.084360][T19351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3968'. [ 520.095830][T19351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3968'. [ 520.212857][T19357] netlink: 'syz.3.3973': attribute type 1 has an invalid length. [ 520.346189][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3972'. [ 521.059411][T19390] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 521.437856][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3988'. [ 521.475906][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3988'. [ 521.509498][T19401] netlink: 'syz.0.3988': attribute type 1 has an invalid length. [ 521.545137][T19401] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3988'. [ 521.645288][T19401] nbd: socks must be embedded in a SOCK_ITEM attr [ 521.666636][T19401] block nbd1: shutting down sockets [ 521.887712][T19416] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3993'. [ 521.970948][T19420] netlink: 'syz.0.3994': attribute type 15 has an invalid length. [ 522.244807][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3997'. [ 522.401958][T19437] erspan0: entered promiscuous mode [ 522.409157][T19437] gretap0: entered promiscuous mode [ 522.426623][T19437] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 522.443957][T19437] Cannot create hsr debugfs directory [ 522.457322][T19437] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 522.480609][T19437] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 522.777319][T19443] xt_CT: No such helper "snmp" [ 522.813489][T19446] Set syz1 is full, maxelem 65536 reached [ 522.894761][T19448] syz_tun: entered allmulticast mode [ 522.909531][T19448] lo: entered allmulticast mode [ 523.106678][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 523.135621][T19406] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 523.195226][T19428] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 523.340163][T19464] netlink: 'syz.2.4008': attribute type 10 has an invalid length. [ 523.454841][T19448] team0 (unregistering): Port device macvlan3 removed [ 523.540088][T19464] team0: Port device dummy0 added [ 523.571324][T19466] team0: Port device dummy0 removed [ 523.719480][T19447] syz_tun: left allmulticast mode [ 523.945884][T19494] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 523.981848][T19497] vti0: left promiscuous mode [ 524.027779][ T5885] IPVS: starting estimator thread 0... [ 524.039996][T19497] bridge0: port 1(gretap0) entered blocking state [ 524.047123][T19497] bridge0: port 1(gretap0) entered disabled state [ 524.053824][T19497] gretap0: entered allmulticast mode [ 524.071079][T19497] gretap0: entered promiscuous mode [ 524.090815][T19497] gretap0: left allmulticast mode [ 524.105419][T19497] gretap0: left promiscuous mode [ 524.115358][T19497] bridge0: port 1(gretap0) entered disabled state [ 524.135211][T19499] IPVS: using max 24 ests per chain, 57600 per kthread [ 524.149800][T19507] FAULT_INJECTION: forcing a failure. [ 524.149800][T19507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.184865][T19507] CPU: 0 UID: 0 PID: 19507 Comm: syz.0.4024 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 524.184899][T19507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 524.184914][T19507] Call Trace: [ 524.184924][T19507] [ 524.184935][T19507] dump_stack_lvl+0x241/0x360 [ 524.184980][T19507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.185004][T19507] ? __pfx__printk+0x10/0x10 [ 524.185029][T19507] ? __pfx_lock_release+0x10/0x10 [ 524.185072][T19507] should_fail_ex+0x40a/0x550 [ 524.185113][T19507] _copy_from_user+0x2d/0xb0 [ 524.185146][T19507] copy_msghdr_from_user+0xae/0x680 [ 524.185188][T19507] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 524.185221][T19507] ? __fget_files+0x2a/0x410 [ 524.185258][T19507] ? __fget_files+0x2a/0x410 [ 524.185301][T19507] __sys_sendmsg+0x209/0x350 [ 524.185336][T19507] ? __pfx___sys_sendmsg+0x10/0x10 [ 524.185379][T19507] ? do_sys_openat2+0x17a/0x1d0 [ 524.185454][T19507] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 524.185489][T19507] ? do_syscall_64+0x100/0x230 [ 524.185526][T19507] ? do_syscall_64+0xb6/0x230 [ 524.185561][T19507] do_syscall_64+0xf3/0x230 [ 524.185594][T19507] ? clear_bhb_loop+0x35/0x90 [ 524.185623][T19507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.185650][T19507] RIP: 0033:0x7f9fdc38d169 [ 524.185669][T19507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.185687][T19507] RSP: 002b:00007f9fdd237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.185711][T19507] RAX: ffffffffffffffda RBX: 00007f9fdc5a5fa0 RCX: 00007f9fdc38d169 [ 524.185726][T19507] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 524.185740][T19507] RBP: 00007f9fdd237090 R08: 0000000000000000 R09: 0000000000000000 [ 524.185753][T19507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.185765][T19507] R13: 0000000000000000 R14: 00007f9fdc5a5fa0 R15: 00007ffc09a38848 [ 524.185797][T19507] [ 524.805598][T19509] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 524.856103][T19530] __nla_validate_parse: 5 callbacks suppressed [ 524.856124][T19530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4025'. [ 525.020274][T19535] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4028'. [ 525.309203][T19550] netlink: 'syz.1.4034': attribute type 1 has an invalid length. [ 525.320101][T19550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4034'. [ 525.332817][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4034'. [ 525.342651][T19550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4034'. [ 525.577487][T19565] FAULT_INJECTION: forcing a failure. [ 525.577487][T19565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.600246][T19565] CPU: 0 UID: 0 PID: 19565 Comm: syz.0.4039 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 525.600276][T19565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 525.600291][T19565] Call Trace: [ 525.600299][T19565] [ 525.600308][T19565] dump_stack_lvl+0x241/0x360 [ 525.600340][T19565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.600365][T19565] ? __pfx__printk+0x10/0x10 [ 525.600390][T19565] ? 0xffffffffa0001d54 [ 525.600418][T19565] should_fail_ex+0x40a/0x550 [ 525.600456][T19565] _copy_to_user+0x31/0xb0 [ 525.600489][T19565] bpf_test_finish+0x212/0x890 [ 525.600532][T19565] ? __pfx_bpf_test_finish+0x10/0x10 [ 525.600573][T19565] ? bpf_test_init+0x137/0x160 [ 525.600608][T19565] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 525.600650][T19565] ? __pfx_lock_release+0x10/0x10 [ 525.600694][T19565] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 525.600730][T19565] ? __fget_files+0x2a/0x410 [ 525.600772][T19565] ? __fget_files+0x2a/0x410 [ 525.600808][T19565] ? fput+0x21b/0x290 [ 525.600838][T19565] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 525.600875][T19565] bpf_prog_test_run+0x2e4/0x360 [ 525.600911][T19565] __sys_bpf+0x487/0x820 [ 525.600944][T19565] ? __pfx___sys_bpf+0x10/0x10 [ 525.600989][T19565] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 525.601025][T19565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 525.601061][T19565] ? do_syscall_64+0x100/0x230 [ 525.601100][T19565] __x64_sys_bpf+0x7c/0x90 [ 525.601128][T19565] do_syscall_64+0xf3/0x230 [ 525.601161][T19565] ? clear_bhb_loop+0x35/0x90 [ 525.601195][T19565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.601224][T19565] RIP: 0033:0x7f9fdc38d169 [ 525.601242][T19565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.601260][T19565] RSP: 002b:00007f9fdd237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 525.601282][T19565] RAX: ffffffffffffffda RBX: 00007f9fdc5a5fa0 RCX: 00007f9fdc38d169 [ 525.601298][T19565] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 525.601312][T19565] RBP: 00007f9fdd237090 R08: 0000000000000000 R09: 0000000000000000 [ 525.601325][T19565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.601338][T19565] R13: 0000000000000000 R14: 00007f9fdc5a5fa0 R15: 00007ffc09a38848 [ 525.601370][T19565] [ 525.952620][T19573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.962068][T19573] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.994891][T19573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.052907][T19579] netlink: 'syz.0.4043': attribute type 1 has an invalid length. [ 526.100633][T19579] bond3: entered promiscuous mode [ 526.121202][T19579] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.170415][T19582] bond3: (slave bridge2): making interface the new active one [ 526.193652][T19582] bridge2: entered promiscuous mode [ 526.206450][T19582] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 526.865466][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 526.874872][T19514] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 526.904881][T19583] ================================================================== [ 526.913007][T19583] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500 [ 526.921368][T19583] Read of size 8 at addr ffff888081543858 by task syz.2.4042/19583 [ 526.929281][T19583] [ 526.931628][T19583] CPU: 1 UID: 0 PID: 19583 Comm: syz.2.4042 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 526.931655][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 526.931670][T19583] Call Trace: [ 526.931680][T19583] [ 526.931690][T19583] dump_stack_lvl+0x241/0x360 [ 526.931722][T19583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.931747][T19583] ? __pfx__printk+0x10/0x10 [ 526.931769][T19583] ? _printk+0xd5/0x120 [ 526.931789][T19583] ? __virt_addr_valid+0x183/0x530 [ 526.931811][T19583] ? __virt_addr_valid+0x183/0x530 [ 526.931833][T19583] print_report+0x16e/0x5b0 [ 526.931862][T19583] ? __virt_addr_valid+0x183/0x530 [ 526.931882][T19583] ? __virt_addr_valid+0x183/0x530 [ 526.931901][T19583] ? __virt_addr_valid+0x45f/0x530 [ 526.931921][T19583] ? __phys_addr+0xba/0x170 [ 526.931942][T19583] ? skb_queue_purge_reason+0xb9/0x500 [ 526.931970][T19583] kasan_report+0x143/0x180 [ 526.932000][T19583] ? skb_queue_purge_reason+0xb9/0x500 [ 526.932026][T19583] skb_queue_purge_reason+0xb9/0x500 [ 526.932052][T19583] ? __mutex_unlock_slowpath+0x227/0x800 [ 526.932100][T19583] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 526.932129][T19583] ? drain_workqueue+0x2d3/0x3a0 [ 526.932161][T19583] ? hci_conn_hash_flush+0x1da/0x240 [ 526.932195][T19583] vhci_flush+0x44/0x50 [ 526.932214][T19583] ? __pfx_vhci_flush+0x10/0x10 [ 526.932233][T19583] hci_dev_reset+0x42a/0x5d0 [ 526.932267][T19583] sock_do_ioctl+0x158/0x460 [ 526.932302][T19583] ? __pfx_sock_do_ioctl+0x10/0x10 [ 526.932345][T19583] sock_ioctl+0x626/0x8e0 [ 526.932376][T19583] ? __pfx_sock_ioctl+0x10/0x10 [ 526.932406][T19583] ? __fget_files+0x2a/0x410 [ 526.932438][T19583] ? __fget_files+0x2a/0x410 [ 526.932468][T19583] ? __pfx_sock_ioctl+0x10/0x10 [ 526.932497][T19583] __se_sys_ioctl+0xf5/0x170 [ 526.932521][T19583] do_syscall_64+0xf3/0x230 [ 526.932554][T19583] ? clear_bhb_loop+0x35/0x90 [ 526.932587][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.932616][T19583] RIP: 0033:0x7f155298d169 [ 526.932636][T19583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.932655][T19583] RSP: 002b:00007f155378f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.932678][T19583] RAX: ffffffffffffffda RBX: 00007f1552ba6240 RCX: 00007f155298d169 [ 526.932695][T19583] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000b [ 526.932709][T19583] RBP: 00007f1552a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 526.932722][T19583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.932735][T19583] R13: 0000000000000000 R14: 00007f1552ba6240 R15: 00007ffc97eb4498 [ 526.932759][T19583] [ 526.932768][T19583] [ 527.198725][T19583] Allocated by task 16824: [ 527.203154][T19583] kasan_save_track+0x3f/0x80 [ 527.207846][T19583] __kasan_kmalloc+0x98/0xb0 [ 527.212440][T19583] __kmalloc_cache_noprof+0x243/0x390 [ 527.217823][T19583] vhci_open+0x57/0x360 [ 527.221980][T19583] misc_open+0x2cc/0x340 [ 527.226235][T19583] chrdev_open+0x521/0x600 [ 527.230659][T19583] do_dentry_open+0xdec/0x1960 [ 527.235435][T19583] vfs_open+0x3b/0x370 [ 527.239523][T19583] path_openat+0x2c81/0x3590 [ 527.244112][T19583] do_filp_open+0x27f/0x4e0 [ 527.248620][T19583] do_sys_openat2+0x13e/0x1d0 [ 527.253306][T19583] __x64_sys_openat+0x247/0x2a0 [ 527.258168][T19583] do_syscall_64+0xf3/0x230 [ 527.262681][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.268591][T19583] [ 527.270919][T19583] Freed by task 16824: [ 527.274994][T19583] kasan_save_track+0x3f/0x80 [ 527.279692][T19583] kasan_save_free_info+0x40/0x50 [ 527.284753][T19583] __kasan_slab_free+0x59/0x70 [ 527.289537][T19583] kfree+0x196/0x430 [ 527.293453][T19583] vhci_release+0xbc/0xd0 [ 527.297795][T19583] __fput+0x3e9/0x9f0 [ 527.301790][T19583] task_work_run+0x24f/0x310 [ 527.306385][T19583] do_exit+0xa2a/0x2940 [ 527.310556][T19583] do_group_exit+0x207/0x2c0 [ 527.315184][T19583] __x64_sys_exit_group+0x3f/0x40 [ 527.320221][T19583] x64_sys_call+0x26a8/0x26b0 [ 527.324902][T19583] do_syscall_64+0xf3/0x230 [ 527.329419][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.335322][T19583] [ 527.337658][T19583] The buggy address belongs to the object at ffff888081543800 [ 527.337658][T19583] which belongs to the cache kmalloc-1k of size 1024 [ 527.351766][T19583] The buggy address is located 88 bytes inside of [ 527.351766][T19583] freed 1024-byte region [ffff888081543800, ffff888081543c00) [ 527.365577][T19583] [ 527.367906][T19583] The buggy address belongs to the physical page: [ 527.374371][T19583] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x81540 [ 527.383131][T19583] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 527.391626][T19583] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 527.399610][T19583] page_type: f5(slab) [ 527.403598][T19583] raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 527.412184][T19583] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 527.420785][T19583] head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 527.429483][T19583] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 527.438162][T19583] head: 00fff00000000003 ffffea0002055001 ffffffffffffffff 0000000000000000 [ 527.446835][T19583] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 527.455501][T19583] page dumped because: kasan: bad access detected [ 527.461922][T19583] page_owner tracks the page as allocated [ 527.467634][T19583] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5836, tgid 5836 (syz-executor), ts 431133447116, free_ts 271970556480 [ 527.487090][T19583] post_alloc_hook+0x1f4/0x240 [ 527.491874][T19583] get_page_from_freelist+0x365c/0x37a0 [ 527.497426][T19583] __alloc_frozen_pages_noprof+0x292/0x710 [ 527.503239][T19583] alloc_pages_mpol+0x311/0x660 [ 527.508101][T19583] allocate_slab+0x8f/0x3a0 [ 527.512611][T19583] ___slab_alloc+0xc27/0x14a0 [ 527.517289][T19583] __slab_alloc+0x58/0xa0 [ 527.521633][T19583] __kmalloc_noprof+0x2e6/0x4c0 [ 527.526493][T19583] ieee802_11_parse_elems_full+0x166/0x2ef0 [ 527.532395][T19583] ieee80211_inform_bss+0x15f/0x10d0 [ 527.537691][T19583] cfg80211_inform_single_bss_data+0xf5d/0x1ed0 [ 527.543945][T19583] cfg80211_inform_bss_data+0x3c3/0x5820 [ 527.549593][T19583] cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 527.555668][T19583] ieee80211_bss_info_update+0x8a7/0xbc0 [ 527.561308][T19583] ieee80211_scan_rx+0x526/0x9c0 [ 527.566249][T19583] ieee80211_rx_list+0x28c6/0x3480 [ 527.571369][T19583] page last free pid 11757 tgid 11757 stack trace: [ 527.577872][T19583] free_frozen_pages+0xe0d/0x10e0 [ 527.582899][T19583] packet_set_ring+0x1919/0x24a0 [ 527.587852][T19583] packet_release+0x7e9/0xcd0 [ 527.592543][T19583] sock_close+0xbc/0x240 [ 527.596803][T19583] __fput+0x3e9/0x9f0 [ 527.600802][T19583] task_work_run+0x24f/0x310 [ 527.605397][T19583] syscall_exit_to_user_mode+0x13f/0x340 [ 527.611044][T19583] do_syscall_64+0x100/0x230 [ 527.615646][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.621549][T19583] [ 527.623875][T19583] Memory state around the buggy address: [ 527.629504][T19583] ffff888081543700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 527.637584][T19583] ffff888081543780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 527.645660][T19583] >ffff888081543800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 527.653737][T19583] ^ [ 527.660670][T19583] ffff888081543880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 527.668734][T19583] ffff888081543900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 527.676796][T19583] ================================================================== [ 527.699411][T19583] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 527.706649][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.2.4042 Not tainted 6.14.0-rc7-syzkaller-01962-ga19f40d919ca #0 [ 527.717412][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 527.727485][T19583] Call Trace: [ 527.730785][T19583] [ 527.733749][T19583] dump_stack_lvl+0x241/0x360 [ 527.738546][T19583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.743748][T19583] ? __pfx__printk+0x10/0x10 [ 527.748348][T19583] ? preempt_schedule+0xe1/0xf0 [ 527.753204][T19583] ? vscnprintf+0x5d/0x90 [ 527.757559][T19583] panic+0x349/0x880 [ 527.761480][T19583] ? check_panic_on_warn+0x21/0xb0 [ 527.766632][T19583] ? __pfx_panic+0x10/0x10 [ 527.771071][T19583] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 527.777071][T19583] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 527.783408][T19583] ? print_report+0x519/0x5b0 [ 527.788090][T19583] check_panic_on_warn+0x86/0xb0 [ 527.793032][T19583] ? skb_queue_purge_reason+0xb9/0x500 [ 527.798489][T19583] end_report+0x77/0x160 [ 527.802745][T19583] kasan_report+0x154/0x180 [ 527.807282][T19583] ? skb_queue_purge_reason+0xb9/0x500 [ 527.812788][T19583] skb_queue_purge_reason+0xb9/0x500 [ 527.818114][T19583] ? __mutex_unlock_slowpath+0x227/0x800 [ 527.823775][T19583] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 527.829690][T19583] ? drain_workqueue+0x2d3/0x3a0 [ 527.834656][T19583] ? hci_conn_hash_flush+0x1da/0x240 [ 527.839968][T19583] vhci_flush+0x44/0x50 [ 527.844134][T19583] ? __pfx_vhci_flush+0x10/0x10 [ 527.848987][T19583] hci_dev_reset+0x42a/0x5d0 [ 527.853587][T19583] sock_do_ioctl+0x158/0x460 [ 527.858194][T19583] ? __pfx_sock_do_ioctl+0x10/0x10 [ 527.863328][T19583] sock_ioctl+0x626/0x8e0 [ 527.867667][T19583] ? __pfx_sock_ioctl+0x10/0x10 [ 527.872529][T19583] ? __fget_files+0x2a/0x410 [ 527.877140][T19583] ? __fget_files+0x2a/0x410 [ 527.881743][T19583] ? __pfx_sock_ioctl+0x10/0x10 [ 527.886602][T19583] __se_sys_ioctl+0xf5/0x170 [ 527.891198][T19583] do_syscall_64+0xf3/0x230 [ 527.895715][T19583] ? clear_bhb_loop+0x35/0x90 [ 527.900400][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.906313][T19583] RIP: 0033:0x7f155298d169 [ 527.910750][T19583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.930368][T19583] RSP: 002b:00007f155378f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.938791][T19583] RAX: ffffffffffffffda RBX: 00007f1552ba6240 RCX: 00007f155298d169 [ 527.946779][T19583] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 000000000000000b [ 527.954759][T19583] RBP: 00007f1552a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 527.962734][T19583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 527.970722][T19583] R13: 0000000000000000 R14: 00007f1552ba6240 R15: 00007ffc97eb4498 [ 527.978704][T19583] [ 527.982047][T19583] Kernel Offset: disabled [ 527.986373][T19583] Rebooting in 86400 seconds..