last executing test programs: 3.677777292s ago: executing program 1 (id=848): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080102000000000047e89fd2f59fc0f0"], 0x34}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 3.161887474s ago: executing program 1 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_sample={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}}, 0x4000) 2.768584253s ago: executing program 1 (id=857): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet(0x2, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2.715646944s ago: executing program 3 (id=861): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.088934865s ago: executing program 3 (id=865): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x9eb9, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x91ff, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) 1.819258707s ago: executing program 1 (id=868): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x68040200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r9, 0x9}, &(0x7f00000002c0)=0x8) 1.786340381s ago: executing program 2 (id=869): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000003c0)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950028ffffff970ac2571b8775e05a0e00000000000000db1de319411d093471a30000000000000000000049326d17363a15", 0x5e}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) close(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140081ba061616e15113d5b5340000", @ANYRES16=r4, @ANYBLOB="478829bd70000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x40040) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.583387199s ago: executing program 0 (id=870): bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003ffe, 0x8, 0x0, 0x0}}, 0x10) 1.458172804s ago: executing program 2 (id=871): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)='gL', 0x2}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000080)=@gcm_128={{0x303}, "ceefacb02306e8f7", "c0b334a9697d76591283dfe06878ed36", "a1e13d8a", "a78964c9a8548a4d"}, 0x28) 1.429084261s ago: executing program 4 (id=872): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 1.364361695s ago: executing program 0 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, r1, 0xffffffffffffffff, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}}, 0x90) 1.275378384s ago: executing program 0 (id=874): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7c07e1fdf9c70acd, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48040) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xeb2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x800452d2, &(0x7f0000000100)) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x4bc, 0x1, 0x5, 0x80, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x7}, 0xe, 0xdd, 0x2, 0x76, 0x17, 'syz0\x00', "aa99d859036a6b889eee6d506f2d3302ee3adf6356c96a6f2511f64f55b7071e", "6d468e56433f37f7eef55bbeb359290a2550ae2a92f8dec203bdd1300463274e", [{0x9, 0x0, {0x1, 0x83c}}, {0x0, 0x6, {0x2}}, {0x9a3, 0x52, {0x3, 0x5}}, {0xfff, 0x1, {0x0, 0xb21a}}, {0xe0, 0x3ff, {0x1, 0x6}}, {0x5b, 0x1, {0x1, 0xf}}, {0x53, 0x9, {0x2, 0x8}}, {0x400, 0x9, {0x2, 0x7fff}}, {0x3, 0x8, {0x3, 0xc1}}, {0x3, 0x805, {0x1, 0x3076}}, {0x1, 0x0, {0xca953729eeb0453e, 0x100}}, {0xf000, 0x2, {0x1, 0x2}}, {0x3, 0x46, {0x1}}, {0x2, 0xb, {0x2, 0x4}}, {0x1, 0x2, {0x2, 0x8}}, {0x0, 0x76, {0x3, 0xffff8307}}, {0x3, 0x9, {0x3, 0x821e}}, {0xffff, 0x1000, {0x2, 0x17a7000}}, {0x26c, 0x3}, {0x0, 0x3, {0x3, 0x100}}, {0x5, 0xb9, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x6}}, {0x8, 0x8, {0x2, 0x66a}}, {0xd03, 0x40, {0x3, 0x352}}, {0x5, 0x3}, {0x1, 0x10, {0x1, 0x9}}, {0x3, 0x5, {0x1, 0xffffff5d}}, {0xfff8, 0x7, {0x1, 0x1}}, {0x6, 0x8, {0x2, 0x4}}, {0x7, 0x7, {0x3, 0x1}}, {0x7fff, 0x0, {0x1, 0x6}}, {0x2, 0x72a, {0x2, 0x80000001}}, {0x6, 0xf6b, {0x2, 0x1000}}, {0x0, 0x7, {0x2, 0xfffffffc}}, {0x2, 0x6, {0x1, 0x5}}, {0x33, 0x1000, {0x0, 0x4}}, {0x2, 0x0, {0x3, 0xfffffffb}}, {0xaca3, 0x6, {0x0, 0xff}}, {0x6, 0xb1d3, {0x0, 0x2}}, {0x20, 0x5, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x80}, 0x7e, 0x6, 0x0, 0xe, 0x1, 'syz1\x00', "969d62ce6277ac8fea891c43c99d24debfb7f7fda2a714bad4f13f2898adb25c", "3677935d751dcd4a3a0bf3a3cfdfd86846b87ea80ace125684c50f8ca7bc63a5", [{0x4, 0x8, {0x1, 0x4}}, {0x4b, 0x0, {0x0, 0x1d}}, {0x2, 0x8c9d, {0x1, 0x1}}, {0xf73b, 0xf, {0x1, 0x410}}, {0xc, 0x1, {0x0, 0x5}}, {0x8, 0x9, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0xa23}}, {0x8, 0x7, {0x1, 0x1}}, {0x8, 0xffff, {0x2, 0x92d}}, {0x4, 0xc41, {0x3, 0x5}}, {0x9, 0x646a, {0x3, 0x7}}, {0xfd7, 0xa, {0x1, 0x8}}, {0xffff, 0x8, {0x3, 0xa}}, {0x5, 0xb4a8, {0x1, 0x9}}, {0x0, 0x8, {0x1, 0x4c33c71a}}, {0xfe01, 0xff, {0x3, 0x6b6}}, {0x203, 0x3, {0x1, 0x8000}}, {0x2, 0x8, {0x1, 0x7}}, {0x1, 0x4000, {0x3, 0xffffffff}}, {0x3, 0x6, {0x0, 0x80000001}}, {0x1, 0x9, {0x0, 0x1}}, {0x9, 0x8001, {0x249932e8c63cf6ff, 0x7}}, {0x6, 0x5, {0x0, 0xf740}}, {0x1, 0x101, {0x2, 0x1f5}}, {0x7, 0x7ff, {0x2, 0x401}}, {0xdf5, 0x1, {0x2, 0x6}}, {0x16, 0xf9, {0x3, 0x40}}, {0x1, 0xfffb, {0x1, 0x81}}, {0x8, 0x2, {0x1, 0x6}}, {0xb, 0x400, {0x3, 0x8}}, {0x7, 0x4, {0x3}}, {0x9, 0x270, {0x0, 0x800570d}}, {0x36c, 0x5, {0x2, 0x7}}, {0x9, 0x7, {0x2, 0x10}}, {0x5, 0x7, {0x0, 0xcd2}}, {0x3, 0x7fff, {0x3, 0x638}}, {0x7ff, 0x3, {0x3, 0xfffffff4}}, {0xadf8, 0x7fff, {0x0, 0x1}}, {0x3ff, 0x6, {0x1, 0x5}}, {0x5, 0x800, {0x2, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x66}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB="800000000906010800000000000000000000000005000100070000000900020073797a32000000000900020073797a3000000000000000000000003b08000b400000ae2908000a400000036305000100070000001c000780050003000f000000080006400000000205000300e20000007c6d3150a2e1b7583b8888d6b3d03356fb2256906cb9e9407760f35c9fe32e85a7a6c61dafb095ed1e9d77016ee8cf6fc1fca512a5538906aa30cb05d281c6de3d62de584142d544780148c79bc0b4a57d85ae777b11405dabb334a9db668ac58a0f8ef7589cda85346be223b6f5ec6cb6ffc6f42dbc17f5c58a148c560a949032e0fb1c3b16442515669b1f96568239a201f1eb9c6abafce7f51cc07858e5dd551a4e56004ddb8993214ffa21590605000000c5de656619063dc7c8c6effd51a38abe04a513a89400"/328], 0x80}, 0x1, 0x0, 0x0, 0xab65375e4cf40d69}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000000000000002004e23e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e010100000000000000000000000000000000000000000000000000000000000000000000000088369a4800"/528], 0x210) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x114, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xac}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8e}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000891}, 0x20000800) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) 1.239876738s ago: executing program 2 (id=875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.220691242s ago: executing program 4 (id=876): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b20400fffd0c", 0x6, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) 1.068248606s ago: executing program 3 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b"], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x200, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8734d5b0159a3af9093fccc28476fa362e06ad58ea35f8c5feec7c2a8ff7301fdf19be900a3517c21962801aa233f57fb92c54c0bada11c5e5252f455122035e1eb1e7b26e64d71dd4cea592fb6b23a6b07238d152c947144e2bd43b67c0e778b1e9b89f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, @in={0x2, 0x4e20, @local}], 0x7c) r5 = accept4(r4, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a00000000fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000740)="bbc492c6e581bfbc24c5f6a2a848e5cbd0f2e8acda491e17574cfc2844e67bd01d61ad150944f49d662df96836a95208dafe2b86b213864a0d920db4a040a496c1a6c3ee825d7ace2eda1bc2f751f430ff7fb064c433968d9ccf", 0x5a}, {&(0x7f0000000940)="3d64092b706c1b726e23a0483a08ff1a7d78fcdaac80830dd6f7d9bffff0729d974dd646b0f22a2fc383485627c877fe21a84b143f1f2563271c6da05c9529d092de5c5e87cc07b5c85c9e8d6ee2f908f683abf758881bf366f75b0e2a117ad55ee214eb8bf0c44d1654326e8d18d3cc56f382724617627adc50f873dea41d241602ab237d57981a34180b1039382a", 0x8f}, {&(0x7f0000000a00)="cee51689136cd44a9382b59e0592e357a6e6376bc3761f19a358eb6124b4197d2e784708f5eb6ef14360d711c870e8f271ac5ecb19cc325e95218d6eecd739c55fb3e28a52614b5330661d56c41fb263d4fb995bc3251b89bf5a42fea91bcdc3304b1b4c1eeaa0a5935ced17103a1a506d800559e3a427c2", 0x78}, {&(0x7f0000000b80)="a332333aa954040c156a028fbd313ecad1c0a4284c08e4614753ac6614cfd6734d1feee5f493437dc9c4cbac3ff72e917325b2aa94f8027db83439647b33e87f62afd7fe500ce81a1f7d9dc62c0d8dcb7bcc775940651513244f6389d9f6de88cb2af7e9229a6a2a792293cb49c2694dec502d5f828cfeed594b5b5158b06bd5ee61e4756bf51a6b4f6a2b09f443ca189e09425b34fd47d120e3e36fc8135bac5607cf33b2162066d0a4c7e781faa184b2f4e3d87a", 0xb5}], 0x7, &(0x7f0000000380), 0x0, 0x4800}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="29000300010003", 0x7) 1.038401341s ago: executing program 2 (id=878): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8918, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e20, @multicast2}}) 960.522715ms ago: executing program 4 (id=879): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030001ac0f0011000100cabee339084eeef109002471f40000000800070000"], 0x60}}, 0x0) 875.652348ms ago: executing program 0 (id=880): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 780.752432ms ago: executing program 1 (id=881): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) listen(r0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x80801, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c064", 0x14}], 0x1}}], 0x1, 0x24004044) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffab, @private1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000002000000000e50003000000000085100000fc026e696e0000f6ffffffffffffff00000000000000009d50bc32001a627fc29eb51b11822c46faa3cb560f102732871cf51a0201d1a531a4f38a2f962207e40d4ebedcfa48d578a33afdf9d6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x200007, 0x4) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) recvfrom$inet6(r2, 0x0, 0x0, 0x12000, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x4f0, 0x138, 0xffffffff, 0x370, 0x0, 0x608, 0x608, 0xffffffff, 0x608, 0x608, 0x5, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffff00, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'dummy0\x00', {0xff}, {0xff}, 0x84, 0xf, 0x6, 0xc28627634e0e09ee}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@loopback, @ipv6=@mcast2, @icmp_id=0x67, @gre_key=0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@local, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, @icmp_id=0x64, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xb, @ipv4=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}, @gre_key=0x3, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}, @port=0x4e21, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000840)=""/241, 0xf6}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80), 0x6}, 0xb0}, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x4a}, 0x6}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1, &(0x7f0000000340)=""/146, 0x92}, 0x8}], 0x9, 0x20, 0x0) bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) 676.403075ms ago: executing program 0 (id=882): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000003c0)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950028ffffff970ac2571b8775e05a0e00000000000000db1de319411d093471a30000000000000000000049326d17363a15", 0x5e}], 0x2}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) close(r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140081ba061616e15113d5b5340000", @ANYRES16=r4, @ANYBLOB="478829bd70000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x40040) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 663.50927ms ago: executing program 3 (id=883): bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003ffe, 0x8, 0x0, 0x0}}, 0x10) 515.9313ms ago: executing program 4 (id=884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, r1, 0xffffffffffffffff, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}}, 0x90) 424.575608ms ago: executing program 2 (id=885): getsockopt(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000000)=""/19, &(0x7f0000003300)=0x13) 356.259631ms ago: executing program 3 (id=886): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 355.594134ms ago: executing program 0 (id=887): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) socket$kcm(0x2, 0x3, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(r4, &(0x7f00000000c0), 0x26) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="010000000300"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) sendto$packet(r0, &(0x7f0000000140)="33aaf14f564b1bf220cb1137d54b407511ce09dfd9657fe35b6e5e7d6f4002e47989e9f25a962052eeca00cc37a1f105fd65344cc8c425f200"/72, 0x48, 0x40, &(0x7f0000000200)={0x11, 0x2, r2, 0x1, 0x8, 0x6, @local}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x13}}}, 0x24}}, 0x0) 237.088697ms ago: executing program 3 (id=888): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x68040200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r9, 0x9}, &(0x7f00000002c0)=0x8) 230.475755ms ago: executing program 4 (id=889): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b20400fffd0c", 0x6, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r0, 0x1) 174.905844ms ago: executing program 1 (id=890): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x400) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r5}) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)="93a7", 0x2}], 0x1}, 0x40) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="bf3b7fd13dd270067bfbf92a4b73f5cb64e35b8b81bb878c9333e5c34a59668ae8c3dd44c768893f0ee18f29eb38e12af456ba33f7604901817b0f23cbf011d07dc54e057dc9cc763df971ae", @ANYRESOCT=r0, @ANYRES32=r11, @ANYRESDEC=r10], 0x58}, 0x1, 0x0, 0x0, 0x48010}, 0x20008014) socket$nl_generic(0x10, 0x3, 0x10) 100.278413ms ago: executing program 2 (id=891): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7c07e1fdf9c70acd, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48040) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xeb2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x800452d2, &(0x7f0000000100)) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x4bc, 0x1, 0x5, 0x80, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x7}, 0xe, 0xdd, 0x2, 0x76, 0x17, 'syz0\x00', "aa99d859036a6b889eee6d506f2d3302ee3adf6356c96a6f2511f64f55b7071e", "6d468e56433f37f7eef55bbeb359290a2550ae2a92f8dec203bdd1300463274e", [{0x9, 0x0, {0x1, 0x83c}}, {0x0, 0x6, {0x2}}, {0x9a3, 0x52, {0x3, 0x5}}, {0xfff, 0x1, {0x0, 0xb21a}}, {0xe0, 0x3ff, {0x1, 0x6}}, {0x5b, 0x1, {0x1, 0xf}}, {0x53, 0x9, {0x2, 0x8}}, {0x400, 0x9, {0x2, 0x7fff}}, {0x3, 0x8, {0x3, 0xc1}}, {0x3, 0x805, {0x1, 0x3076}}, {0x1, 0x0, {0xca953729eeb0453e, 0x100}}, {0xf000, 0x2, {0x1, 0x2}}, {0x3, 0x46, {0x1}}, {0x2, 0xb, {0x2, 0x4}}, {0x1, 0x2, {0x2, 0x8}}, {0x0, 0x76, {0x3, 0xffff8307}}, {0x3, 0x9, {0x3, 0x821e}}, {0xffff, 0x1000, {0x2, 0x17a7000}}, {0x26c, 0x3}, {0x0, 0x3, {0x3, 0x100}}, {0x5, 0xb9, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x6}}, {0x8, 0x8, {0x2, 0x66a}}, {0xd03, 0x40, {0x3, 0x352}}, {0x5, 0x3}, {0x1, 0x10, {0x1, 0x9}}, {0x3, 0x5, {0x1, 0xffffff5d}}, {0xfff8, 0x7, {0x1, 0x1}}, {0x6, 0x8, {0x2, 0x4}}, {0x7, 0x7, {0x3, 0x1}}, {0x7fff, 0x0, {0x1, 0x6}}, {0x2, 0x72a, {0x2, 0x80000001}}, {0x6, 0xf6b, {0x2, 0x1000}}, {0x0, 0x7, {0x2, 0xfffffffc}}, {0x2, 0x6, {0x1, 0x5}}, {0x33, 0x1000, {0x0, 0x4}}, {0x2, 0x0, {0x3, 0xfffffffb}}, {0xaca3, 0x6, {0x0, 0xff}}, {0x6, 0xb1d3, {0x0, 0x2}}, {0x20, 0x5, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x80}, 0x7e, 0x6, 0x0, 0xe, 0x1, 'syz1\x00', "969d62ce6277ac8fea891c43c99d24debfb7f7fda2a714bad4f13f2898adb25c", "3677935d751dcd4a3a0bf3a3cfdfd86846b87ea80ace125684c50f8ca7bc63a5", [{0x4, 0x8, {0x1, 0x4}}, {0x4b, 0x0, {0x0, 0x1d}}, {0x2, 0x8c9d, {0x1, 0x1}}, {0xf73b, 0xf, {0x1, 0x410}}, {0xc, 0x1, {0x0, 0x5}}, {0x8, 0x9, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0xa23}}, {0x8, 0x7, {0x1, 0x1}}, {0x8, 0xffff, {0x2, 0x92d}}, {0x4, 0xc41, {0x3, 0x5}}, {0x9, 0x646a, {0x3, 0x7}}, {0xfd7, 0xa, {0x1, 0x8}}, {0xffff, 0x8, {0x3, 0xa}}, {0x5, 0xb4a8, {0x1, 0x9}}, {0x0, 0x8, {0x1, 0x4c33c71a}}, {0xfe01, 0xff, {0x3, 0x6b6}}, {0x203, 0x3, {0x1, 0x8000}}, {0x2, 0x8, {0x1, 0x7}}, {0x1, 0x4000, {0x3, 0xffffffff}}, {0x3, 0x6, {0x0, 0x80000001}}, {0x1, 0x9, {0x0, 0x1}}, {0x9, 0x8001, {0x249932e8c63cf6ff, 0x7}}, {0x6, 0x5, {0x0, 0xf740}}, {0x1, 0x101, {0x2, 0x1f5}}, {0x7, 0x7ff, {0x2, 0x401}}, {0xdf5, 0x1, {0x2, 0x6}}, {0x16, 0xf9, {0x3, 0x40}}, {0x1, 0xfffb, {0x1, 0x81}}, {0x8, 0x2, {0x1, 0x6}}, {0xb, 0x400, {0x3, 0x8}}, {0x7, 0x4, {0x3}}, {0x9, 0x270, {0x0, 0x800570d}}, {0x36c, 0x5, {0x2, 0x7}}, {0x9, 0x7, {0x2, 0x10}}, {0x5, 0x7, {0x0, 0xcd2}}, {0x3, 0x7fff, {0x3, 0x638}}, {0x7ff, 0x3, {0x3, 0xfffffff4}}, {0xadf8, 0x7fff, {0x0, 0x1}}, {0x3ff, 0x6, {0x1, 0x5}}, {0x5, 0x800, {0x2, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x66}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB="800000000906010800000000000000000000000005000100070000000900020073797a32000000000900020073797a3000000000000000000000003b08000b400000ae2908000a400000036305000100070000001c000780050003000f000000080006400000000205000300e20000007c6d3150a2e1b7583b8888d6b3d03356fb2256906cb9e9407760f35c9fe32e85a7a6c61dafb095ed1e9d77016ee8cf6fc1fca512a5538906aa30cb05d281c6de3d62de584142d544780148c79bc0b4a57d85ae777b11405dabb334a9db668ac58a0f8ef7589cda85346be223b6f5ec6cb6ffc6f42dbc17f5c58a148c560a949032e0fb1c3b16442515669b1f96568239a201f1eb9c6abafce7f51cc07858e5dd551a4e56004ddb8993214ffa21590605000000c5de656619063dc7c8c6effd51a38abe04a513a89400"/328], 0x80}, 0x1, 0x0, 0x0, 0xab65375e4cf40d69}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000000000000002004e23e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e010100000000000000000000000000000000000000000000000000000000000000000000000088369a4800"/528], 0x210) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x114, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xac}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8e}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000891}, 0x20000800) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) 0s ago: executing program 4 (id=892): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) kernel console output (not intermixed with test programs): 0] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.087314][ T5840] bridge_slave_1: entered allmulticast mode [ 89.094972][ T5840] bridge_slave_1: entered promiscuous mode [ 89.184253][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 89.259836][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.325391][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.406874][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.414255][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.421984][ T5839] bridge_slave_0: entered allmulticast mode [ 89.430515][ T5839] bridge_slave_0: entered promiscuous mode [ 89.472673][ T5840] team0: Port device team_slave_0 added [ 89.479671][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.492797][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.500198][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.507583][ T5839] bridge_slave_1: entered allmulticast mode [ 89.515998][ T5839] bridge_slave_1: entered promiscuous mode [ 89.542868][ T5840] team0: Port device team_slave_1 added [ 89.595211][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.603018][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.610525][ T5844] bridge_slave_0: entered allmulticast mode [ 89.617924][ T5844] bridge_slave_0: entered promiscuous mode [ 89.647544][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.654566][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.680556][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.711797][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.734912][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.742562][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.749882][ T5844] bridge_slave_1: entered allmulticast mode [ 89.757170][ T5844] bridge_slave_1: entered promiscuous mode [ 89.783257][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.790543][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.816893][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.839154][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.861971][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.869562][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.876759][ T5841] bridge_slave_0: entered allmulticast mode [ 89.884365][ T5841] bridge_slave_0: entered promiscuous mode [ 89.949433][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.957144][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.964690][ T5841] bridge_slave_1: entered allmulticast mode [ 89.972354][ T5841] bridge_slave_1: entered promiscuous mode [ 90.026769][ T5839] team0: Port device team_slave_0 added [ 90.050603][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.064091][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.092677][ T5840] hsr_slave_0: entered promiscuous mode [ 90.099190][ T5840] hsr_slave_1: entered promiscuous mode [ 90.108576][ T5839] team0: Port device team_slave_1 added [ 90.116948][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.153871][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.161150][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.169183][ T5843] bridge_slave_0: entered allmulticast mode [ 90.176369][ T5843] bridge_slave_0: entered promiscuous mode [ 90.200910][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.238984][ T5855] Bluetooth: hci0: command tx timeout [ 90.247998][ T55] Bluetooth: hci1: command tx timeout [ 90.256918][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.264531][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.272010][ T5843] bridge_slave_1: entered allmulticast mode [ 90.279924][ T5843] bridge_slave_1: entered promiscuous mode [ 90.316406][ T5844] team0: Port device team_slave_0 added [ 90.318354][ T5855] Bluetooth: hci3: command tx timeout [ 90.322749][ T5857] Bluetooth: hci2: command tx timeout [ 90.327492][ T55] Bluetooth: hci4: command tx timeout [ 90.337085][ T5844] team0: Port device team_slave_1 added [ 90.365867][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.373122][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.399898][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.412804][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.420014][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.445980][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.460114][ T5841] team0: Port device team_slave_0 added [ 90.513828][ T5841] team0: Port device team_slave_1 added [ 90.549235][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.556205][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.582772][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.605086][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.618598][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.642780][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.649901][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.677259][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.727338][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.734654][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.760742][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.801749][ T5843] team0: Port device team_slave_0 added [ 90.821643][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.828963][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.855116][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.895722][ T5843] team0: Port device team_slave_1 added [ 90.907095][ T5839] hsr_slave_0: entered promiscuous mode [ 90.913701][ T5839] hsr_slave_1: entered promiscuous mode [ 90.920287][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.928061][ T5839] Cannot create hsr debugfs directory [ 91.034346][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.042043][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.068379][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.081490][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.089179][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.115523][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.132865][ T5841] hsr_slave_0: entered promiscuous mode [ 91.139278][ T5841] hsr_slave_1: entered promiscuous mode [ 91.145320][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.152945][ T5841] Cannot create hsr debugfs directory [ 91.252742][ T5844] hsr_slave_0: entered promiscuous mode [ 91.259220][ T5844] hsr_slave_1: entered promiscuous mode [ 91.265344][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.273090][ T5844] Cannot create hsr debugfs directory [ 91.417377][ T5843] hsr_slave_0: entered promiscuous mode [ 91.424361][ T5843] hsr_slave_1: entered promiscuous mode [ 91.431124][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.439975][ T5843] Cannot create hsr debugfs directory [ 91.671458][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.718351][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.737279][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.778615][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.868016][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.903846][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.914591][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.923041][ T9] cfg80211: failed to load regulatory.db [ 91.951290][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.007512][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.024811][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.063103][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.074497][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.146951][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.175060][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.185730][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.220382][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.268289][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.318823][ T5855] Bluetooth: hci1: command tx timeout [ 92.318840][ T55] Bluetooth: hci0: command tx timeout [ 92.364285][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.374540][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.398159][ T55] Bluetooth: hci3: command tx timeout [ 92.398634][ T5857] Bluetooth: hci4: command tx timeout [ 92.409547][ T5855] Bluetooth: hci2: command tx timeout [ 92.418839][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.431862][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.452705][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.483399][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.490690][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.537043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.544221][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.597034][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.647342][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.660530][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.686158][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.727837][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.754880][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.780830][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.788056][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.806160][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.851348][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.858565][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.884743][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.891926][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.903544][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.910756][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.950830][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.023901][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.031042][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.066707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.073849][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.157807][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.176318][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.252283][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.315566][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.383764][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.390991][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.456171][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.463410][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.596533][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.774914][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.815428][ T5840] veth0_vlan: entered promiscuous mode [ 93.862044][ T5839] veth0_vlan: entered promiscuous mode [ 93.904788][ T5839] veth1_vlan: entered promiscuous mode [ 93.927232][ T5840] veth1_vlan: entered promiscuous mode [ 93.996333][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.040421][ T5841] veth0_vlan: entered promiscuous mode [ 94.060484][ T5841] veth1_vlan: entered promiscuous mode [ 94.107354][ T5839] veth0_macvtap: entered promiscuous mode [ 94.121117][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.140731][ T5840] veth0_macvtap: entered promiscuous mode [ 94.155966][ T5839] veth1_macvtap: entered promiscuous mode [ 94.181470][ T5841] veth0_macvtap: entered promiscuous mode [ 94.197385][ T5840] veth1_macvtap: entered promiscuous mode [ 94.230219][ T5841] veth1_macvtap: entered promiscuous mode [ 94.250380][ T5844] veth0_vlan: entered promiscuous mode [ 94.280405][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.294178][ T5844] veth1_vlan: entered promiscuous mode [ 94.314014][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.325942][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.336721][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.348903][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.359524][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.370982][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.381566][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.392971][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.404130][ T5855] Bluetooth: hci0: command tx timeout [ 94.409758][ T5857] Bluetooth: hci1: command tx timeout [ 94.415915][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.437909][ T5843] veth0_vlan: entered promiscuous mode [ 94.447215][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.457330][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.466198][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.475007][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.484161][ T5855] Bluetooth: hci3: command tx timeout [ 94.488102][ T5857] Bluetooth: hci4: command tx timeout [ 94.495371][ T5855] Bluetooth: hci2: command tx timeout [ 94.507232][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.518777][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.530121][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.548494][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.561375][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.571929][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.582981][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.594449][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.616480][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.626010][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.635016][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.645053][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.672086][ T5843] veth1_vlan: entered promiscuous mode [ 94.690320][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.700289][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.709589][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.720784][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.741809][ T5844] veth0_macvtap: entered promiscuous mode [ 94.773508][ T5844] veth1_macvtap: entered promiscuous mode [ 94.867718][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.882908][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.892832][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.903399][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.913354][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.923894][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.935238][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.960785][ T5843] veth0_macvtap: entered promiscuous mode [ 94.981195][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.990331][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.002083][ T5843] veth1_macvtap: entered promiscuous mode [ 95.016181][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.026950][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.036995][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.049235][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.059114][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.069653][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.080970][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.115366][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.125541][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.134987][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.144120][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.173936][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.188252][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.231289][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.240923][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.252264][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.265069][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.275940][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.287463][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.297431][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.308625][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.318586][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.329108][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.341105][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.376543][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.387317][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.399664][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.410551][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.420683][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.431182][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.441394][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.452762][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.464566][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.491878][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.493706][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.515228][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.526085][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.540256][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.549857][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.594380][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.609539][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.614411][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.764549][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.788347][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.875478][ T5930] Bluetooth: MGMT ver 1.23 [ 95.898721][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.916856][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.983813][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.011495][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.063044][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.105836][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.250376][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.296256][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.380482][ T5943] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7'. [ 96.411858][ T5934] syzkaller0: entered promiscuous mode [ 96.417394][ T5934] syzkaller0: entered allmulticast mode [ 96.476236][ T5893] IPVS: starting estimator thread 0... [ 96.489344][ T5857] Bluetooth: hci1: command tx timeout [ 96.494835][ T5855] Bluetooth: hci0: command tx timeout [ 96.552716][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'. [ 96.568380][ T5855] Bluetooth: hci2: command tx timeout [ 96.574352][ T5857] Bluetooth: hci4: command tx timeout [ 96.578060][ T55] Bluetooth: hci3: command tx timeout [ 96.599041][ T5946] IPVS: using max 29 ests per chain, 69600 per kthread [ 99.926403][ T30] audit: type=1800 audit(1745388413.689:2): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="memory.events" dev="tmpfs" ino=38 res=0 errno=0 [ 99.949990][ T6006] xt_hashlimit: max too large, truncated to 1048576 [ 100.002680][ T30] audit: type=1804 audit(1745388413.699:3): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.20" name="/newroot/4/memory.events" dev="tmpfs" ino=38 res=1 errno=0 [ 100.054595][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 100.068495][ T6013] trusted_key: syz.0.19 sent an empty control message without MSG_MORE. [ 100.744637][ T6028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.971512][ T6028] Zero length message leads to an empty skb [ 101.095948][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 101.366521][ T6039] netlink: 76 bytes leftover after parsing attributes in process `syz.4.28'. [ 101.468556][ T6045] xt_hashlimit: max too large, truncated to 1048576 [ 101.637696][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 101.954674][ T5894] IPVS: starting estimator thread 0... [ 102.060248][ T6060] IPVS: using max 26 ests per chain, 62400 per kthread [ 102.321006][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 102.663870][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 102.724756][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 102.763137][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 102.795358][ T6072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.996396][ T6072] sctp: [Deprecated]: syz.1.35 (pid 6072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.996396][ T6072] Use struct sctp_sack_info instead [ 103.162612][ T6070] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 103.168634][ T6073] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 103.281508][ T6070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.415208][ T6085] IPv6: syztnl2: Disabled Multicast RS [ 103.487398][ T6087] xt_hashlimit: max too large, truncated to 1048576 [ 103.700139][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 103.707072][ T6093] syz.4.40 uses obsolete (PF_INET,SOCK_PACKET) [ 103.927304][ T6095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.980353][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 104.133001][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.147070][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.157017][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.168344][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.415938][ T5833] IPVS: starting estimator thread 0... [ 104.475807][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 104.548717][ T6105] IPVS: using max 26 ests per chain, 62400 per kthread [ 104.554467][ T6113] xt_hashlimit: max too large, truncated to 1048576 [ 104.646778][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 104.667799][ T6112] netlink: 76 bytes leftover after parsing attributes in process `syz.0.46'. [ 104.808346][ T5833] IPVS: starting estimator thread 0... [ 104.918487][ T6118] IPVS: using max 27 ests per chain, 64800 per kthread [ 107.423685][ T6172] xt_hashlimit: max too large, truncated to 1048576 [ 107.727659][ T6170] __nla_validate_parse: 2 callbacks suppressed [ 107.727682][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 108.032008][ T9] IPVS: starting estimator thread 0... [ 108.148410][ T6183] IPVS: using max 25 ests per chain, 60000 per kthread [ 108.591048][ T6194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.67'. [ 108.952729][ T6205] unsupported nlmsg_type 40 [ 108.981304][ T6203] bridge_slave_0: left allmulticast mode [ 108.998255][ T6203] bridge_slave_0: left promiscuous mode [ 109.026265][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.130863][ T6203] bridge_slave_1: left allmulticast mode [ 109.181882][ T6203] bridge_slave_1: left promiscuous mode [ 109.188177][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.211826][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.258647][ T6203] bond0: (slave bond_slave_0): Releasing backup interface [ 109.276088][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.330357][ T6203] bond0: (slave bond_slave_1): Releasing backup interface [ 109.361159][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.394194][ T6196] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 109.396455][ T6203] team0: Port device team_slave_0 removed [ 109.434225][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 109.484431][ T6203] team0: Port device team_slave_1 removed [ 109.748712][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.788164][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.968248][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.068713][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.099170][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.188176][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.229843][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.315345][ T6248] ip6t_srh: unknown srh match flags 5294 [ 110.372590][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.382955][ T6244] can: request_module (can-proto-4) failed. [ 110.448578][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.518481][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.728644][ T55] Bluetooth: hci3: command 0x0401 tx timeout [ 110.863555][ T6263] FAULT_INJECTION: forcing a failure. [ 110.863555][ T6263] name failslab, interval 1, probability 0, space 0, times 1 [ 111.018601][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.1.82 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 111.018632][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.018648][ T6263] Call Trace: [ 111.018656][ T6263] [ 111.018665][ T6263] dump_stack_lvl+0x241/0x360 [ 111.018707][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.018735][ T6263] ? __pfx__printk+0x10/0x10 [ 111.018765][ T6263] ? is_bpf_text_address+0x26/0x2a0 [ 111.018802][ T6263] should_fail_ex+0x424/0x570 [ 111.018835][ T6263] should_failslab+0xac/0x100 [ 111.018858][ T6263] __kmalloc_noprof+0xdf/0x4d0 [ 111.018877][ T6263] ? dev_prep_valid_name+0x20c/0x860 [ 111.018911][ T6263] dev_prep_valid_name+0x20c/0x860 [ 111.018943][ T6263] ? __pfx___might_resched+0x10/0x10 [ 111.018974][ T6263] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 111.019012][ T6263] ? __raw_spin_lock_init+0x45/0x100 [ 111.019038][ T6263] register_netdevice+0x53e/0x1b80 [ 111.019069][ T6263] ? net_generic+0x1f/0x240 [ 111.019088][ T6263] ? net_generic+0x1f0/0x240 [ 111.019115][ T6263] ? vxlan_vni_in_use+0x3a5/0x3e0 [ 111.019136][ T6263] ? __pfx_register_netdevice+0x10/0x10 [ 111.019161][ T6263] ? vxlan_config_apply+0x2a3/0x830 [ 111.019186][ T6263] ? __asan_memcpy+0x40/0x70 [ 111.019212][ T6263] ? __vxlan_dev_create+0x154/0x6f0 [ 111.019258][ T6263] __vxlan_dev_create+0x181/0x6f0 [ 111.019290][ T6263] ? __pfx___vxlan_dev_create+0x10/0x10 [ 111.019324][ T6263] vxlan_newlink+0x186/0x1f0 [ 111.019351][ T6263] ? __pfx_vxlan_newlink+0x10/0x10 [ 111.019391][ T6263] ? rtnl_create_link+0x964/0xc90 [ 111.019419][ T6263] ? __pfx_vxlan_newlink+0x10/0x10 [ 111.019444][ T6263] rtnl_newlink_create+0x3a1/0xc30 [ 111.019467][ T6263] ? __mutex_lock+0x380/0x10c0 [ 111.019491][ T6263] ? __pfx_aa_get_newest_label+0x10/0x10 [ 111.019520][ T6263] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 111.019546][ T6263] ? __pfx___mutex_lock+0x10/0x10 [ 111.019576][ T6263] ? ns_capable+0x8a/0xf0 [ 111.019609][ T6263] rtnl_newlink+0x18b0/0x1fe0 [ 111.019662][ T6263] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.019690][ T6263] ? dev_hard_start_xmit+0x2d9/0x830 [ 111.019712][ T6263] ? __dev_queue_xmit+0x1b80/0x3f60 [ 111.019735][ T6263] ? __netlink_deliver_tap+0x561/0x7f0 [ 111.019764][ T6263] ? netlink_deliver_tap+0x19d/0x1b0 [ 111.019793][ T6263] ? netlink_unicast+0x7c6/0x9a0 [ 111.019817][ T6263] ? netlink_sendmsg+0x8c3/0xcd0 [ 111.019846][ T6263] ? __sock_sendmsg+0x221/0x270 [ 111.019873][ T6263] ? ____sys_sendmsg+0x523/0x860 [ 111.019894][ T6263] ? __sys_sendmmsg+0x3a0/0x7b0 [ 111.019914][ T6263] ? __x64_sys_sendmmsg+0xa0/0xb0 [ 111.019936][ T6263] ? do_syscall_64+0xf3/0x210 [ 111.019954][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.020014][ T6263] ? kasan_quarantine_put+0xdc/0x230 [ 111.020039][ T6263] ? lockdep_hardirqs_on+0x9d/0x150 [ 111.020074][ T6263] ? nlmon_xmit+0xaf/0x100 [ 111.020108][ T6263] ? __local_bh_enable_ip+0x168/0x200 [ 111.020137][ T6263] ? lockdep_hardirqs_on+0x9d/0x150 [ 111.020178][ T6263] ? aa_get_newest_label+0x101/0x6f0 [ 111.020211][ T6263] ? __lock_acquire+0xad5/0xd80 [ 111.020263][ T6263] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.020296][ T6263] rtnetlink_rcv_msg+0x80f/0xd70 [ 111.020325][ T6263] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 111.020362][ T6263] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.020402][ T6263] ? ref_tracker_free+0x63e/0x7e0 [ 111.020435][ T6263] netlink_rcv_skb+0x208/0x480 [ 111.020467][ T6263] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.020501][ T6263] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.020552][ T6263] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.020597][ T6263] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.020648][ T6263] netlink_unicast+0x7f8/0x9a0 [ 111.020684][ T6263] ? __pfx_netlink_unicast+0x10/0x10 [ 111.020715][ T6263] ? skb_put+0x114/0x1f0 [ 111.020740][ T6263] netlink_sendmsg+0x8c3/0xcd0 [ 111.020784][ T6263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.020821][ T6263] ? aa_sock_msg_perm+0x91/0x160 [ 111.020854][ T6263] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.020882][ T6263] __sock_sendmsg+0x221/0x270 [ 111.020916][ T6263] ____sys_sendmsg+0x523/0x860 [ 111.020950][ T6263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.020971][ T6263] ? __fget_files+0x2a/0x420 [ 111.020994][ T6263] ? __fget_files+0x2a/0x420 [ 111.021025][ T6263] __sys_sendmmsg+0x3a0/0x7b0 [ 111.021063][ T6263] ? __pfx___sys_sendmmsg+0x10/0x10 [ 111.021133][ T6263] ? rcu_read_lock_any_held+0xbb/0x160 [ 111.021156][ T6263] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 111.021181][ T6263] ? vfs_write+0xb29/0xd10 [ 111.021220][ T6263] ? ksys_write+0x24e/0x2d0 [ 111.021252][ T6263] ? __mutex_unlock_slowpath+0x229/0x800 [ 111.021306][ T6263] ? ksys_write+0x275/0x2d0 [ 111.021347][ T6263] __x64_sys_sendmmsg+0xa0/0xb0 [ 111.021375][ T6263] do_syscall_64+0xf3/0x210 [ 111.021395][ T6263] ? clear_bhb_loop+0x45/0xa0 [ 111.021420][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.021441][ T6263] RIP: 0033:0x7f604d38e169 [ 111.021466][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.021482][ T6263] RSP: 002b:00007f604e2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 111.021505][ T6263] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38e169 [ 111.021520][ T6263] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 111.021534][ T6263] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.021546][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.021558][ T6263] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8 [ 111.021591][ T6263] [ 111.826571][ T6268] netlink: 48 bytes leftover after parsing attributes in process `syz.4.84'. [ 111.958240][ T6272] xt_hashlimit: max too large, truncated to 1048576 [ 112.013214][ T6275] netlink: 48 bytes leftover after parsing attributes in process `syz.1.85'. [ 112.041012][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 112.155199][ T6282] xt_hashlimit: max too large, truncated to 1048576 [ 112.474531][ T6292] xt_hashlimit: max too large, truncated to 1048576 [ 112.476253][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 112.760952][ T6304] __nla_validate_parse: 1 callbacks suppressed [ 112.760974][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.92'. [ 112.862875][ T6306] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.266370][ T6325] xt_hashlimit: max too large, truncated to 1048576 [ 113.492753][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 113.752245][ T6348] xt_hashlimit: max too large, truncated to 1048576 [ 113.843656][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.104'. [ 114.135515][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.109'. [ 114.296471][ T6365] netlink: 'syz.4.110': attribute type 3 has an invalid length. [ 114.671998][ T6377] FAULT_INJECTION: forcing a failure. [ 114.671998][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 114.727686][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.116 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 114.727725][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.727738][ T6377] Call Trace: [ 114.727746][ T6377] [ 114.727755][ T6377] dump_stack_lvl+0x241/0x360 [ 114.727792][ T6377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.727829][ T6377] ? __pfx__printk+0x10/0x10 [ 114.727865][ T6377] ? __pfx___might_resched+0x10/0x10 [ 114.727901][ T6377] should_fail_ex+0x424/0x570 [ 114.727930][ T6377] should_failslab+0xac/0x100 [ 114.727954][ T6377] __kvmalloc_node_noprof+0x170/0x5a0 [ 114.727976][ T6377] ? bpf_test_run_xdp_live+0x292/0x2220 [ 114.728013][ T6377] bpf_test_run_xdp_live+0x292/0x2220 [ 114.728057][ T6377] ? bpf_dispatcher_change_prog+0xd7b/0xf00 [ 114.728090][ T6377] ? __mutex_unlock_slowpath+0x229/0x800 [ 114.728122][ T6377] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 114.728150][ T6377] ? synchronize_rcu+0x11e/0x370 [ 114.728170][ T6377] ? __pfx_synchronize_rcu+0x10/0x10 [ 114.728212][ T6377] ? 0xffffffffa0003b40 [ 114.728231][ T6377] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 114.728258][ T6377] ? 0xffffffffa0000948 [ 114.728297][ T6377] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 114.728347][ T6377] ? _copy_from_user+0x95/0xb0 [ 114.728385][ T6377] ? bpf_test_init+0x130/0x170 [ 114.728411][ T6377] ? xdp_convert_md_to_buff+0x5b/0x330 [ 114.728444][ T6377] bpf_prog_test_run_xdp+0x809/0x1200 [ 114.728494][ T6377] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.728525][ T6377] ? __fget_files+0x2a/0x420 [ 114.728548][ T6377] ? __fget_files+0x2a/0x420 [ 114.728571][ T6377] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 114.728604][ T6377] bpf_prog_test_run+0x2e4/0x360 [ 114.728635][ T6377] __sys_bpf+0x4ee/0x8b0 [ 114.728663][ T6377] ? __pfx___sys_bpf+0x10/0x10 [ 114.728702][ T6377] ? ksys_write+0x275/0x2d0 [ 114.728744][ T6377] __x64_sys_bpf+0x7c/0x90 [ 114.728769][ T6377] do_syscall_64+0xf3/0x210 [ 114.728789][ T6377] ? clear_bhb_loop+0x45/0xa0 [ 114.728821][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.728841][ T6377] RIP: 0033:0x7f325198e169 [ 114.728859][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.728875][ T6377] RSP: 002b:00007f325282c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.728897][ T6377] RAX: ffffffffffffffda RBX: 00007f3251bb5fa0 RCX: 00007f325198e169 [ 114.728913][ T6377] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 114.728925][ T6377] RBP: 00007f325282c090 R08: 0000000000000000 R09: 0000000000000000 [ 114.728938][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.728950][ T6377] R13: 0000000000000000 R14: 00007f3251bb5fa0 R15: 00007ffdd5de25f8 [ 114.728981][ T6377] [ 115.137667][ T6381] netlink: 'syz.3.117': attribute type 1 has an invalid length. [ 115.338467][ T6394] xt_hashlimit: max too large, truncated to 1048576 [ 115.347664][ T6381] bond1: entered promiscuous mode [ 115.362124][ T6381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.370534][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.122'. [ 115.471115][ T6390] bond1: (slave bridge2): making interface the new active one [ 115.490082][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 115.492483][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 115.533575][ T6390] bridge2: entered promiscuous mode [ 115.619244][ T6390] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 116.987637][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.132'. [ 117.033792][ T6442] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 117.432729][ T6461] FAULT_INJECTION: forcing a failure. [ 117.432729][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.515136][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.1.136 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 117.515168][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.515181][ T6461] Call Trace: [ 117.515189][ T6461] [ 117.515198][ T6461] dump_stack_lvl+0x241/0x360 [ 117.515234][ T6461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.515263][ T6461] ? __pfx__printk+0x10/0x10 [ 117.515303][ T6461] should_fail_ex+0x424/0x570 [ 117.515332][ T6461] _copy_to_user+0x31/0xb0 [ 117.515366][ T6461] simple_read_from_buffer+0xc4/0x170 [ 117.515401][ T6461] proc_fail_nth_read+0x1ef/0x260 [ 117.515437][ T6461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.515485][ T6461] ? rw_verify_area+0x246/0x630 [ 117.515511][ T6461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.515545][ T6461] vfs_read+0x21f/0xb90 [ 117.515578][ T6461] ? __pfx___mutex_lock+0x10/0x10 [ 117.515600][ T6461] ? __pfx_vfs_read+0x10/0x10 [ 117.515639][ T6461] ? __fget_files+0x2a/0x420 [ 117.515660][ T6461] ? __fget_files+0x39d/0x420 [ 117.515677][ T6461] ? __fget_files+0x2a/0x420 [ 117.515706][ T6461] ksys_read+0x19d/0x2d0 [ 117.515736][ T6461] ? __pfx_ksys_read+0x10/0x10 [ 117.515770][ T6461] ? do_syscall_64+0xb6/0x210 [ 117.515795][ T6461] do_syscall_64+0xf3/0x210 [ 117.515815][ T6461] ? clear_bhb_loop+0x45/0xa0 [ 117.515840][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.515860][ T6461] RIP: 0033:0x7f604d38cb7c [ 117.515879][ T6461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.515897][ T6461] RSP: 002b:00007f604e2bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.515920][ T6461] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38cb7c [ 117.515935][ T6461] RDX: 000000000000000f RSI: 00007f604e2bf0a0 RDI: 0000000000000006 [ 117.515948][ T6461] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 117.515961][ T6461] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.515974][ T6461] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8 [ 117.516006][ T6461] [ 118.023085][ T6483] xt_hashlimit: max too large, truncated to 1048576 [ 118.139371][ T6481] Illegal XDP return value 4294967274 on prog (id 53) dev N/A, expect packet loss! [ 118.166886][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 118.383040][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'. [ 118.556642][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'. [ 119.167815][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'. [ 119.903274][ T6538] FAULT_INJECTION: forcing a failure. [ 119.903274][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.943980][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.2.154 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 119.944012][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.944024][ T6538] Call Trace: [ 119.944032][ T6538] [ 119.944041][ T6538] dump_stack_lvl+0x241/0x360 [ 119.944084][ T6538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.944113][ T6538] ? __pfx__printk+0x10/0x10 [ 119.944154][ T6538] should_fail_ex+0x424/0x570 [ 119.944183][ T6538] _copy_from_user+0x2d/0xb0 [ 119.944215][ T6538] move_addr_to_kernel+0x7f/0x170 [ 119.944248][ T6538] copy_msghdr_from_user+0x477/0x580 [ 119.944284][ T6538] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 119.944311][ T6538] ? __fget_files+0x2a/0x420 [ 119.944334][ T6538] ? __fget_files+0x2a/0x420 [ 119.944362][ T6538] __sys_sendmsg+0x20a/0x360 [ 119.944392][ T6538] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.944474][ T6538] ? do_syscall_64+0xb6/0x210 [ 119.944498][ T6538] do_syscall_64+0xf3/0x210 [ 119.944518][ T6538] ? clear_bhb_loop+0x45/0xa0 [ 119.944543][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.944569][ T6538] RIP: 0033:0x7f325198e169 [ 119.944588][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.944604][ T6538] RSP: 002b:00007f325282c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.944627][ T6538] RAX: ffffffffffffffda RBX: 00007f3251bb5fa0 RCX: 00007f325198e169 [ 119.944642][ T6538] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 119.944659][ T6538] RBP: 00007f325282c090 R08: 0000000000000000 R09: 0000000000000000 [ 119.944671][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.944683][ T6538] R13: 0000000000000000 R14: 00007f3251bb5fa0 R15: 00007ffdd5de25f8 [ 119.944721][ T6538] [ 120.846197][ T6565] FAULT_INJECTION: forcing a failure. [ 120.846197][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 120.937248][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.1.161 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 120.937278][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 120.937291][ T6565] Call Trace: [ 120.937299][ T6565] [ 120.937308][ T6565] dump_stack_lvl+0x241/0x360 [ 120.937346][ T6565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.937376][ T6565] ? __pfx__printk+0x10/0x10 [ 120.937409][ T6565] ? __pfx___might_resched+0x10/0x10 [ 120.937445][ T6565] should_fail_ex+0x424/0x570 [ 120.937474][ T6565] should_failslab+0xac/0x100 [ 120.937497][ T6565] __kmalloc_node_noprof+0xe7/0x4d0 [ 120.937519][ T6565] ? qdisc_alloc+0x9a/0xa80 [ 120.937554][ T6565] qdisc_alloc+0x9a/0xa80 [ 120.937586][ T6565] ? qdisc_create+0x11e/0xeb0 [ 120.937618][ T6565] qdisc_create+0x12e/0xeb0 [ 120.937661][ T6565] tc_modify_qdisc+0x1a18/0x2620 [ 120.937706][ T6565] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 120.937729][ T6565] ? trace_contention_end+0x3c/0x120 [ 120.937751][ T6565] ? __mutex_lock+0x380/0x10c0 [ 120.937772][ T6565] ? aa_get_newest_label+0x101/0x6f0 [ 120.937835][ T6565] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 120.937861][ T6565] rtnetlink_rcv_msg+0x7c2/0xd70 [ 120.937891][ T6565] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 120.937926][ T6565] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.937965][ T6565] ? ref_tracker_free+0x63e/0x7e0 [ 120.937995][ T6565] netlink_rcv_skb+0x208/0x480 [ 120.938027][ T6565] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 120.938058][ T6565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.938106][ T6565] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.938139][ T6565] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.938172][ T6565] netlink_unicast+0x7f8/0x9a0 [ 120.938208][ T6565] ? __pfx_netlink_unicast+0x10/0x10 [ 120.938238][ T6565] ? skb_put+0x114/0x1f0 [ 120.938264][ T6565] netlink_sendmsg+0x8c3/0xcd0 [ 120.938309][ T6565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.938344][ T6565] ? aa_sock_msg_perm+0x91/0x160 [ 120.938376][ T6565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.938405][ T6565] __sock_sendmsg+0x221/0x270 [ 120.938438][ T6565] ____sys_sendmsg+0x523/0x860 [ 120.938471][ T6565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.938493][ T6565] ? __fget_files+0x2a/0x420 [ 120.938515][ T6565] ? __fget_files+0x2a/0x420 [ 120.938544][ T6565] __sys_sendmsg+0x271/0x360 [ 120.938574][ T6565] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.938663][ T6565] ? do_syscall_64+0xb6/0x210 [ 120.938687][ T6565] do_syscall_64+0xf3/0x210 [ 120.938707][ T6565] ? clear_bhb_loop+0x45/0xa0 [ 120.938732][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.938752][ T6565] RIP: 0033:0x7f604d38e169 [ 120.938770][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.938787][ T6565] RSP: 002b:00007f604e2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.938810][ T6565] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38e169 [ 120.938825][ T6565] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005 [ 120.938837][ T6565] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 120.938850][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.938862][ T6565] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8 [ 120.938894][ T6565] [ 120.943288][ T6570] xt_hashlimit: max too large, truncated to 1048576 [ 121.246918][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 121.285131][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 121.840414][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.167'. [ 122.200542][ T6624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.298972][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'. [ 123.167627][ T6659] xt_hashlimit: max too large, truncated to 1048576 [ 123.259453][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 123.320716][ T6671] netlink: 220 bytes leftover after parsing attributes in process `syz.2.182'. [ 123.544375][ T6673] tipc: Started in network mode [ 123.608091][ T6673] tipc: Node identity 4, cluster identity 4711 [ 123.619232][ T6673] tipc: Node number set to 4 [ 125.482951][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.202'. [ 125.535566][ T6748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 125.982528][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 126.221094][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 126.454653][ T6782] netlink: 'syz.2.211': attribute type 5 has an invalid length. [ 126.617625][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.212'. [ 126.857016][ T6795] netlink: 64 bytes leftover after parsing attributes in process `syz.0.215'. [ 126.998802][ T6800] FAULT_INJECTION: forcing a failure. [ 126.998802][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.019990][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.217'. [ 127.058455][ T6800] CPU: 1 UID: 0 PID: 6800 Comm: syz.3.216 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 127.058484][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.058497][ T6800] Call Trace: [ 127.058505][ T6800] [ 127.058513][ T6800] dump_stack_lvl+0x241/0x360 [ 127.058550][ T6800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.058577][ T6800] ? __pfx__printk+0x10/0x10 [ 127.058618][ T6800] should_fail_ex+0x424/0x570 [ 127.058648][ T6800] _copy_from_user+0x2d/0xb0 [ 127.058680][ T6800] copy_msghdr_from_user+0xb3/0x580 [ 127.058717][ T6800] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 127.058745][ T6800] ? __fget_files+0x2a/0x420 [ 127.058768][ T6800] ? __fget_files+0x2a/0x420 [ 127.058794][ T6800] __sys_sendmmsg+0x361/0x7b0 [ 127.058830][ T6800] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.058890][ T6800] ? rcu_read_lock_any_held+0xbb/0x160 [ 127.058913][ T6800] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 127.058939][ T6800] ? vfs_write+0xb29/0xd10 [ 127.058991][ T6800] ? ksys_write+0x24e/0x2d0 [ 127.059024][ T6800] ? __mutex_unlock_slowpath+0x229/0x800 [ 127.059077][ T6800] ? ksys_write+0x275/0x2d0 [ 127.059118][ T6800] __x64_sys_sendmmsg+0xa0/0xb0 [ 127.059146][ T6800] do_syscall_64+0xf3/0x210 [ 127.059165][ T6800] ? clear_bhb_loop+0x45/0xa0 [ 127.059189][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.059209][ T6800] RIP: 0033:0x7fac5ad8e169 [ 127.059226][ T6800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.059243][ T6800] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.059265][ T6800] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169 [ 127.059279][ T6800] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 127.059292][ T6800] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.059304][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.059315][ T6800] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818 [ 127.059345][ T6800] [ 127.446147][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 127.612148][ T6812] team_slave_0: entered promiscuous mode [ 127.618086][ T6812] team_slave_1: entered promiscuous mode [ 127.624197][ T6812] vlan0: entered promiscuous mode [ 127.630069][ T6812] team0: entered promiscuous mode [ 127.688218][ T6815] xt_hashlimit: max too large, truncated to 1048576 [ 127.819953][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 128.564381][ T6841] FAULT_INJECTION: forcing a failure. [ 128.564381][ T6841] name failslab, interval 1, probability 0, space 0, times 0 [ 128.593290][ T6842] __nla_validate_parse: 1 callbacks suppressed [ 128.593324][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 128.594338][ T6841] CPU: 1 UID: 0 PID: 6841 Comm: syz.3.230 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 128.594371][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.594385][ T6841] Call Trace: [ 128.594394][ T6841] [ 128.594403][ T6841] dump_stack_lvl+0x241/0x360 [ 128.594446][ T6841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.594477][ T6841] ? __pfx__printk+0x10/0x10 [ 128.594512][ T6841] ? __pfx___might_resched+0x10/0x10 [ 128.594544][ T6841] ? lock_acquire+0x167/0x2f0 [ 128.594578][ T6841] should_fail_ex+0x424/0x570 [ 128.594609][ T6841] should_failslab+0xac/0x100 [ 128.594633][ T6841] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 128.594658][ T6841] ? __alloc_skb+0x1c2/0x480 [ 128.594684][ T6841] __alloc_skb+0x1c2/0x480 [ 128.594714][ T6841] ? __pfx___alloc_skb+0x10/0x10 [ 128.594737][ T6841] ? __asan_memset+0x23/0x50 [ 128.594765][ T6841] ? nla_strscpy+0x115/0x180 [ 128.594797][ T6841] nldev_get_chardev+0x530/0xbf0 [ 128.594826][ T6841] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 128.594872][ T6841] ? __pfx_nldev_get_chardev+0x10/0x10 [ 128.595005][ T6841] ? down_read+0x813/0xa50 [ 128.595035][ T6841] ? stack_depot_save_flags+0x44/0x940 [ 128.595058][ T6841] ? __pfx_stack_trace_save+0x1/0x10 [ 128.595094][ T6841] ? kmem_cache_alloc_node_noprof+0x1f2/0x3b0 [ 128.595115][ T6841] ? kmalloc_reserve+0xa8/0x2a0 [ 128.595135][ T6841] ? __alloc_skb+0x1f2/0x480 [ 128.595153][ T6841] ? netlink_sendmsg+0x638/0xcd0 [ 128.595184][ T6841] ? __sock_sendmsg+0x221/0x270 [ 128.595213][ T6841] ? ____sys_sendmsg+0x523/0x860 [ 128.595240][ T6841] ? __pfx_nldev_get_chardev+0x10/0x10 [ 128.595266][ T6841] rdma_nl_rcv+0x6e5/0x9e0 [ 128.595305][ T6841] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 128.595335][ T6841] ? __lock_acquire+0xad5/0xd80 [ 128.595390][ T6841] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.595426][ T6841] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.595463][ T6841] netlink_unicast+0x7f8/0x9a0 [ 128.595503][ T6841] ? __pfx_netlink_unicast+0x10/0x10 [ 128.595536][ T6841] ? skb_put+0x114/0x1f0 [ 128.595564][ T6841] netlink_sendmsg+0x8c3/0xcd0 [ 128.595612][ T6841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.595650][ T6841] ? aa_sock_msg_perm+0x91/0x160 [ 128.595686][ T6841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.595716][ T6841] __sock_sendmsg+0x221/0x270 [ 128.595751][ T6841] ____sys_sendmsg+0x523/0x860 [ 128.595786][ T6841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.595808][ T6841] ? __fget_files+0x2a/0x420 [ 128.595840][ T6841] ? __fget_files+0x2a/0x420 [ 128.595871][ T6841] __sys_sendmsg+0x271/0x360 [ 128.595903][ T6841] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.595997][ T6841] ? do_syscall_64+0xb6/0x210 [ 128.596023][ T6841] do_syscall_64+0xf3/0x210 [ 128.596044][ T6841] ? clear_bhb_loop+0x45/0xa0 [ 128.596070][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.596093][ T6841] RIP: 0033:0x7fac5ad8e169 [ 128.596112][ T6841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.596130][ T6841] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.596153][ T6841] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169 [ 128.596169][ T6841] RDX: 0000000000008810 RSI: 0000200000000600 RDI: 0000000000000004 [ 128.596183][ T6841] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.596197][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.596209][ T6841] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818 [ 128.596245][ T6841] [ 128.791927][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 128.965561][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 129.376385][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'. [ 129.376613][ T6863] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 129.422516][ T6868] netlink: 14 bytes leftover after parsing attributes in process `syz.3.238'. [ 129.535449][ T6859] veth0_macvtap: left promiscuous mode [ 129.630558][ T6876] netlink: 76 bytes leftover after parsing attributes in process `syz.2.237'. [ 129.640197][ C0] hrtimer: interrupt took 721064 ns [ 130.851633][ T6902] netlink: 76 bytes leftover after parsing attributes in process `syz.2.245'. [ 130.932715][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 131.400802][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 131.411760][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'. [ 132.679386][ T6962] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 133.245678][ T6980] xt_hashlimit: max too large, truncated to 1048576 [ 133.947260][ T7001] __nla_validate_parse: 7 callbacks suppressed [ 133.947282][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 134.540493][ T7019] netlink: 76 bytes leftover after parsing attributes in process `syz.1.278'. [ 134.857143][ T7030] netlink: 788 bytes leftover after parsing attributes in process `syz.3.281'. [ 135.574124][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 135.700565][ T7040] vlan0: entered promiscuous mode [ 135.733694][ T7040] hsr0: entered promiscuous mode [ 135.747226][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 136.752520][ T7064] netlink: 'syz.1.295': attribute type 29 has an invalid length. [ 136.843509][ T7064] netlink: 'syz.1.295': attribute type 29 has an invalid length. [ 137.024112][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 137.641478][ T7096] xt_hashlimit: max too large, truncated to 1048576 [ 137.796509][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 138.013304][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.020267][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.066215][ T7110] FAULT_INJECTION: forcing a failure. [ 138.066215][ T7110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.106691][ T7110] CPU: 0 UID: 0 PID: 7110 Comm: syz.3.312 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 138.106725][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.106738][ T7110] Call Trace: [ 138.106746][ T7110] [ 138.106755][ T7110] dump_stack_lvl+0x241/0x360 [ 138.106793][ T7110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.106823][ T7110] ? __pfx__printk+0x10/0x10 [ 138.106865][ T7110] should_fail_ex+0x424/0x570 [ 138.106894][ T7110] _copy_from_user+0x2d/0xb0 [ 138.106926][ T7110] copy_msghdr_from_user+0xb3/0x580 [ 138.106963][ T7110] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 138.106990][ T7110] ? __fget_files+0x2a/0x420 [ 138.107013][ T7110] ? __fget_files+0x2a/0x420 [ 138.107042][ T7110] __sys_sendmmsg+0x361/0x7b0 [ 138.107079][ T7110] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.107125][ T7110] ? __asan_memset+0x23/0x50 [ 138.107164][ T7110] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 138.107199][ T7110] ? kvm_sched_clock_read+0x11/0x20 [ 138.107227][ T7110] ? sched_clock+0x4a/0x70 [ 138.107256][ T7110] ? sched_clock_cpu+0x77/0x4d0 [ 138.107287][ T7110] ? net_tx_action+0x704/0xa50 [ 138.107317][ T7110] ? net_tx_action+0x9d7/0xa50 [ 138.107346][ T7110] ? __pfx_sched_clock_cpu+0x10/0x10 [ 138.107376][ T7110] ? __pfx_net_tx_action+0x10/0x10 [ 138.107404][ T7110] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 138.107427][ T7110] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 138.107453][ T7110] ? __irq_exit_rcu+0xfb/0x220 [ 138.107533][ T7110] __x64_sys_sendmmsg+0xa0/0xb0 [ 138.107560][ T7110] do_syscall_64+0xf3/0x210 [ 138.107581][ T7110] ? clear_bhb_loop+0x45/0xa0 [ 138.107606][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.107625][ T7110] RIP: 0033:0x7fac5ad8e169 [ 138.107644][ T7110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.107660][ T7110] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.107683][ T7110] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169 [ 138.107698][ T7110] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004 [ 138.107711][ T7110] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.107724][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.107736][ T7110] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818 [ 138.107768][ T7110] [ 138.394536][ T55] Bluetooth: hci4: link tx timeout [ 138.399899][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.409406][ T5857] Bluetooth: hci4: link tx timeout [ 138.414670][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.944420][ T5857] Bluetooth: hci4: link tx timeout [ 138.949701][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.544177][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 139.599498][ T7137] tun0: tun_chr_ioctl cmd 2147767520 [ 140.058405][ T7150] FAULT_INJECTION: forcing a failure. [ 140.058405][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 140.098002][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.3.327 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 140.098038][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.098051][ T7150] Call Trace: [ 140.098060][ T7150] [ 140.098069][ T7150] dump_stack_lvl+0x241/0x360 [ 140.098107][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.098136][ T7150] ? __pfx__printk+0x10/0x10 [ 140.098166][ T7150] ? ref_tracker_alloc+0x159/0x4c0 [ 140.098193][ T7150] ? __pfx___might_resched+0x10/0x10 [ 140.098233][ T7150] should_fail_ex+0x424/0x570 [ 140.098262][ T7150] should_failslab+0xac/0x100 [ 140.098286][ T7150] __kmalloc_cache_noprof+0x73/0x370 [ 140.098306][ T7150] ? subflow_ulp_init+0xcb/0x560 [ 140.098337][ T7150] subflow_ulp_init+0xcb/0x560 [ 140.098367][ T7150] tcp_set_ulp+0x537/0x5f0 [ 140.098401][ T7150] mptcp_subflow_create_socket+0x676/0xd10 [ 140.098436][ T7150] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 140.098483][ T7150] __mptcp_nmpc_sk+0x18c/0x830 [ 140.098507][ T7150] ? __local_bh_enable_ip+0x168/0x200 [ 140.098538][ T7150] ? mptcp_bind+0x9d/0x1c0 [ 140.098556][ T7150] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 140.098591][ T7150] mptcp_bind+0xa5/0x1c0 [ 140.098614][ T7150] __sys_bind+0x1de/0x290 [ 140.098667][ T7150] ? __pfx___sys_bind+0x10/0x10 [ 140.098725][ T7150] __x64_sys_bind+0x7a/0x90 [ 140.098758][ T7150] do_syscall_64+0xf3/0x210 [ 140.098779][ T7150] ? clear_bhb_loop+0x45/0xa0 [ 140.098803][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.098823][ T7150] RIP: 0033:0x7fac5ad8e169 [ 140.098842][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.098858][ T7150] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 140.098880][ T7150] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169 [ 140.098895][ T7150] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 140.098908][ T7150] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.098921][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.098934][ T7150] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818 [ 140.098967][ T7150] [ 140.478755][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 140.981704][ T7171] FAULT_INJECTION: forcing a failure. [ 140.981704][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 141.025462][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.3.332 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 141.025494][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.025507][ T7171] Call Trace: [ 141.025516][ T7171] [ 141.025525][ T7171] dump_stack_lvl+0x241/0x360 [ 141.025565][ T7171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.025594][ T7171] ? __pfx__printk+0x10/0x10 [ 141.025637][ T7171] should_fail_ex+0x424/0x570 [ 141.025668][ T7171] should_failslab+0xac/0x100 [ 141.025691][ T7171] __kmalloc_cache_noprof+0x73/0x370 [ 141.025712][ T7171] ? sctp_add_bind_addr+0x89/0x3a0 [ 141.025741][ T7171] sctp_add_bind_addr+0x89/0x3a0 [ 141.025769][ T7171] sctp_copy_local_addr_list+0x313/0x500 [ 141.025794][ T7171] ? sctp_copy_local_addr_list+0xad/0x500 [ 141.025818][ T7171] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 141.025845][ T7171] ? sctp_v4_is_any+0x35/0x60 [ 141.025868][ T7171] ? sctp_copy_one_addr+0x94/0x360 [ 141.025895][ T7171] sctp_bind_addr_copy+0xad/0x3b0 [ 141.025918][ T7171] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 141.025960][ T7171] sctp_connect_new_asoc+0x337/0x700 [ 141.025996][ T7171] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 141.026026][ T7171] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 141.026058][ T7171] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 141.026083][ T7171] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 141.026108][ T7171] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 141.026139][ T7171] sctp_sendmsg+0x2009/0x3620 [ 141.026192][ T7171] ? __pfx_sctp_sendmsg+0x10/0x10 [ 141.026223][ T7171] ? aa_sk_perm+0x96f/0xac0 [ 141.026267][ T7171] ? inet_sendmsg+0x330/0x390 [ 141.026298][ T7171] __sock_sendmsg+0x1a6/0x270 [ 141.026333][ T7171] ____sys_sendmsg+0x523/0x860 [ 141.026368][ T7171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.026390][ T7171] ? __fget_files+0x2a/0x420 [ 141.026414][ T7171] ? __fget_files+0x2a/0x420 [ 141.026444][ T7171] __sys_sendmmsg+0x3a0/0x7b0 [ 141.026484][ T7171] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.026551][ T7171] ? rcu_read_lock_any_held+0xbb/0x160 [ 141.026574][ T7171] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 141.026600][ T7171] ? vfs_write+0xb29/0xd10 [ 141.026639][ T7171] ? ksys_write+0x24e/0x2d0 [ 141.026672][ T7171] ? __mutex_unlock_slowpath+0x229/0x800 [ 141.026728][ T7171] ? ksys_write+0x275/0x2d0 [ 141.026770][ T7171] __x64_sys_sendmmsg+0xa0/0xb0 [ 141.026798][ T7171] do_syscall_64+0xf3/0x210 [ 141.026820][ T7171] ? clear_bhb_loop+0x45/0xa0 [ 141.026845][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.026866][ T7171] RIP: 0033:0x7fac5ad8e169 [ 141.026885][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.026901][ T7171] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.026924][ T7171] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169 [ 141.026939][ T7171] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 141.026958][ T7171] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.026971][ T7171] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 141.026984][ T7171] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818 [ 141.027017][ T7171] [ 141.664342][ T7185] netlink: 92 bytes leftover after parsing attributes in process `syz.2.337'. [ 141.676459][ T7185] tc_dump_action: action bad kind [ 142.074115][ T7195] syz_tun: entered promiscuous mode [ 142.113636][ T7195] batadv_slave_1: entered promiscuous mode [ 142.126861][ T7195] hsr1: entered allmulticast mode [ 142.135813][ T7195] syz_tun: entered allmulticast mode [ 142.146473][ T7195] batadv_slave_1: entered allmulticast mode [ 142.433370][ T7216] FAULT_INJECTION: forcing a failure. [ 142.433370][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.453201][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.4.346 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 142.453233][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.453247][ T7216] Call Trace: [ 142.453255][ T7216] [ 142.453264][ T7216] dump_stack_lvl+0x241/0x360 [ 142.453303][ T7216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.453333][ T7216] ? __pfx__printk+0x10/0x10 [ 142.453374][ T7216] should_fail_ex+0x424/0x570 [ 142.453404][ T7216] _copy_from_user+0x2d/0xb0 [ 142.453436][ T7216] sctp_setsockopt+0xc9/0x11e0 [ 142.453467][ T7216] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 142.453497][ T7216] do_sock_setsockopt+0x3b1/0x710 [ 142.453527][ T7216] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 142.453548][ T7216] ? __fget_files+0x2a/0x420 [ 142.453569][ T7216] ? __fget_files+0x39d/0x420 [ 142.453587][ T7216] ? __fget_files+0x2a/0x420 [ 142.453614][ T7216] __x64_sys_setsockopt+0x187/0x210 [ 142.453644][ T7216] do_syscall_64+0xf3/0x210 [ 142.453665][ T7216] ? clear_bhb_loop+0x45/0xa0 [ 142.453690][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.453711][ T7216] RIP: 0033:0x7f6e57f8e169 [ 142.453729][ T7216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.453745][ T7216] RSP: 002b:00007f6e58dfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.453768][ T7216] RAX: ffffffffffffffda RBX: 00007f6e581b6080 RCX: 00007f6e57f8e169 [ 142.453784][ T7216] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 142.453796][ T7216] RBP: 00007f6e58dfa090 R08: 0000000000000008 R09: 0000000000000000 [ 142.453809][ T7216] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 142.453822][ T7216] R13: 0000000000000000 R14: 00007f6e581b6080 R15: 00007ffc27049d08 [ 142.453860][ T7216] [ 142.676711][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 142.973386][ T7228] netlink: 52 bytes leftover after parsing attributes in process `syz.3.351'. [ 142.983945][ T7228] netlink: 48 bytes leftover after parsing attributes in process `syz.3.351'. [ 143.400636][ T7240] ip6tnl1: entered promiscuous mode [ 143.433303][ T7240] ip6tnl1: entered allmulticast mode [ 143.593531][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 143.717666][ T7256] netlink: 'syz.2.362': attribute type 1 has an invalid length. [ 143.788255][ T7256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.362'. [ 143.818409][ T7258] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 144.366052][ T7277] FAULT_INJECTION: forcing a failure. [ 144.366052][ T7277] name failslab, interval 1, probability 0, space 0, times 0 [ 144.416354][ T7277] CPU: 1 UID: 0 PID: 7277 Comm: syz.0.371 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 144.416384][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.416397][ T7277] Call Trace: [ 144.416405][ T7277] [ 144.416414][ T7277] dump_stack_lvl+0x241/0x360 [ 144.416453][ T7277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.416481][ T7277] ? __pfx__printk+0x10/0x10 [ 144.416516][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 144.416522][ T7277] should_fail_ex+0x424/0x570 [ 144.416552][ T7277] should_failslab+0xac/0x100 [ 144.416575][ T7277] __kmalloc_cache_noprof+0x73/0x370 [ 144.416592][ T7277] ? sctp_add_bind_addr+0x89/0x3a0 [ 144.416621][ T7277] sctp_add_bind_addr+0x89/0x3a0 [ 144.416650][ T7277] sctp_copy_local_addr_list+0x313/0x500 [ 144.416679][ T7277] ? sctp_copy_local_addr_list+0xad/0x500 [ 144.416705][ T7277] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 144.416731][ T7277] ? sctp_v6_is_any+0x60/0x70 [ 144.416758][ T7277] ? sctp_copy_one_addr+0x94/0x360 [ 144.416786][ T7277] sctp_bind_addr_copy+0xad/0x3b0 [ 144.416810][ T7277] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 144.416848][ T7277] sctp_connect_new_asoc+0x337/0x700 [ 144.416881][ T7277] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 144.416909][ T7277] ? sctp_sendmsg+0xf30/0x3620 [ 144.416944][ T7277] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 144.416970][ T7277] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 144.417012][ T7277] sctp_sendmsg+0x2009/0x3620 [ 144.417066][ T7277] ? __pfx_sctp_sendmsg+0x10/0x10 [ 144.417099][ T7277] ? aa_sk_perm+0x96f/0xac0 [ 144.417153][ T7277] ? inet_sendmsg+0x330/0x390 [ 144.417185][ T7277] __sock_sendmsg+0x1a6/0x270 [ 144.417221][ T7277] ____sys_sendmsg+0x523/0x860 [ 144.417259][ T7277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.417281][ T7277] ? __fget_files+0x2a/0x420 [ 144.417307][ T7277] ? __fget_files+0x2a/0x420 [ 144.417338][ T7277] __sys_sendmmsg+0x3a0/0x7b0 [ 144.417378][ T7277] ? __pfx___sys_sendmmsg+0x10/0x10 [ 144.417448][ T7277] ? rcu_read_lock_any_held+0xbb/0x160 [ 144.417471][ T7277] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 144.417497][ T7277] ? vfs_write+0xb29/0xd10 [ 144.417554][ T7277] ? ksys_write+0x24e/0x2d0 [ 144.417599][ T7277] ? __mutex_unlock_slowpath+0x229/0x800 [ 144.417657][ T7277] ? ksys_write+0x275/0x2d0 [ 144.417701][ T7277] __x64_sys_sendmmsg+0xa0/0xb0 [ 144.417730][ T7277] do_syscall_64+0xf3/0x210 [ 144.417751][ T7277] ? clear_bhb_loop+0x45/0xa0 [ 144.417779][ T7277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.417800][ T7277] RIP: 0033:0x7fb17878e169 [ 144.417825][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.417843][ T7277] RSP: 002b:00007fb17957d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.417867][ T7277] RAX: ffffffffffffffda RBX: 00007fb1789b5fa0 RCX: 00007fb17878e169 [ 144.417883][ T7277] RDX: 0000000000000002 RSI: 00002000000027c0 RDI: 0000000000000003 [ 144.417897][ T7277] RBP: 00007fb17957d090 R08: 0000000000000000 R09: 0000000000000000 [ 144.417910][ T7277] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 144.417923][ T7277] R13: 0000000000000000 R14: 00007fb1789b5fa0 R15: 00007ffce25cda98 [ 144.417958][ T7277] [ 144.807496][ T7286] xt_hashlimit: max too large, truncated to 1048576 [ 144.840370][ T7276] bridge_slave_1: left allmulticast mode [ 144.846555][ T7276] bridge_slave_1: left promiscuous mode [ 144.862582][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.885679][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 144.912144][ T7276] bridge_slave_0: left allmulticast mode [ 144.948159][ T7276] bridge_slave_0: left promiscuous mode [ 144.954650][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.050174][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 145.378964][ T7298] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 145.418047][ T7298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.379'. [ 145.692919][ T7307] FAULT_INJECTION: forcing a failure. [ 145.692919][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 145.742304][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.0.382 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 145.742340][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.742352][ T7307] Call Trace: [ 145.742361][ T7307] [ 145.742371][ T7307] dump_stack_lvl+0x241/0x360 [ 145.742408][ T7307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.742437][ T7307] ? __pfx__printk+0x10/0x10 [ 145.742480][ T7307] should_fail_ex+0x424/0x570 [ 145.742509][ T7307] should_failslab+0xac/0x100 [ 145.742533][ T7307] __kmalloc_cache_noprof+0x73/0x370 [ 145.742589][ T7307] ? sctp_add_bind_addr+0x89/0x3a0 [ 145.742616][ T7307] sctp_add_bind_addr+0x89/0x3a0 [ 145.742644][ T7307] sctp_copy_local_addr_list+0x313/0x500 [ 145.742668][ T7307] ? sctp_copy_local_addr_list+0xad/0x500 [ 145.742691][ T7307] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 145.742718][ T7307] ? sctp_v6_is_any+0x60/0x70 [ 145.742743][ T7307] ? sctp_copy_one_addr+0x94/0x360 [ 145.742770][ T7307] sctp_bind_addr_copy+0xad/0x3b0 [ 145.742792][ T7307] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 145.742828][ T7307] sctp_connect_new_asoc+0x337/0x700 [ 145.742860][ T7307] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 145.742886][ T7307] ? sctp_sendmsg+0xf30/0x3620 [ 145.742920][ T7307] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 145.742945][ T7307] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 145.742977][ T7307] sctp_sendmsg+0x2009/0x3620 [ 145.743028][ T7307] ? __pfx_sctp_sendmsg+0x10/0x10 [ 145.743059][ T7307] ? aa_sk_perm+0x96f/0xac0 [ 145.743102][ T7307] ? inet_sendmsg+0x330/0x390 [ 145.743133][ T7307] __sock_sendmsg+0x1a6/0x270 [ 145.743167][ T7307] ____sys_sendmsg+0x523/0x860 [ 145.743203][ T7307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.743225][ T7307] ? __fget_files+0x2a/0x420 [ 145.743249][ T7307] ? __fget_files+0x2a/0x420 [ 145.743278][ T7307] __sys_sendmmsg+0x3a0/0x7b0 [ 145.743317][ T7307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.743384][ T7307] ? rcu_read_lock_any_held+0xbb/0x160 [ 145.743407][ T7307] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 145.743432][ T7307] ? vfs_write+0xb29/0xd10 [ 145.743472][ T7307] ? ksys_write+0x24e/0x2d0 [ 145.743501][ T7307] ? __mutex_unlock_slowpath+0x229/0x800 [ 145.743563][ T7307] ? ksys_write+0x275/0x2d0 [ 145.743604][ T7307] __x64_sys_sendmmsg+0xa0/0xb0 [ 145.743632][ T7307] do_syscall_64+0xf3/0x210 [ 145.743653][ T7307] ? clear_bhb_loop+0x45/0xa0 [ 145.743679][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.743698][ T7307] RIP: 0033:0x7fb17878e169 [ 145.743715][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.743732][ T7307] RSP: 002b:00007fb17957d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 145.743755][ T7307] RAX: ffffffffffffffda RBX: 00007fb1789b5fa0 RCX: 00007fb17878e169 [ 145.743771][ T7307] RDX: 0000000000000002 RSI: 00002000000027c0 RDI: 0000000000000003 [ 145.743783][ T7307] RBP: 00007fb17957d090 R08: 0000000000000000 R09: 0000000000000000 [ 145.743797][ T7307] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 145.743809][ T7307] R13: 0000000000000000 R14: 00007fb1789b5fa0 R15: 00007ffce25cda98 [ 145.743842][ T7307] [ 146.277692][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 146.359224][ T7313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.385'. [ 146.381955][ T7313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 147.004601][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 147.092459][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'. [ 147.231912][ T7358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.393'. [ 147.446237][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 147.460261][ T5927] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 147.460282][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.518294][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.575193][ T7340] syz.2.393 (7340) used greatest stack depth: 18920 bytes left [ 147.648603][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.777380][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 147.848952][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.008408][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.058272][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.109743][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.198104][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.280612][ T7405] FAULT_INJECTION: forcing a failure. [ 148.280612][ T7405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.317315][ T7402] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 148.358027][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.4.402 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 148.358059][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.358072][ T7405] Call Trace: [ 148.358080][ T7405] [ 148.358089][ T7405] dump_stack_lvl+0x241/0x360 [ 148.358127][ T7405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.358155][ T7405] ? __pfx__printk+0x10/0x10 [ 148.358199][ T7405] should_fail_ex+0x424/0x570 [ 148.358228][ T7405] _copy_from_user+0x2d/0xb0 [ 148.358261][ T7405] copy_msghdr_from_user+0xb3/0x580 [ 148.358299][ T7405] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 148.358326][ T7405] ? __fget_files+0x2a/0x420 [ 148.358349][ T7405] ? __fget_files+0x2a/0x420 [ 148.358378][ T7405] __sys_sendmsg+0x20a/0x360 [ 148.358409][ T7405] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.358493][ T7405] ? do_syscall_64+0xb6/0x210 [ 148.358517][ T7405] do_syscall_64+0xf3/0x210 [ 148.358537][ T7405] ? clear_bhb_loop+0x45/0xa0 [ 148.358562][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.358582][ T7405] RIP: 0033:0x7f6e57f8e169 [ 148.358607][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.358624][ T7405] RSP: 002b:00007f6e58dd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.358647][ T7405] RAX: ffffffffffffffda RBX: 00007f6e581b6160 RCX: 00007f6e57f8e169 [ 148.358661][ T7405] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 148.358674][ T7405] RBP: 00007f6e58dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 148.358687][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.358699][ T7405] R13: 0000000000000001 R14: 00007f6e581b6160 R15: 00007ffc27049d08 [ 148.358732][ T7405] [ 148.630770][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.793127][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.926116][ T7402] bond1: entered promiscuous mode [ 148.953496][ T7402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.055594][ T7411] bond1: (slave bridge1): making interface the new active one [ 149.085327][ T7411] bridge1: entered promiscuous mode [ 149.110984][ T7411] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 149.512806][ T7425] macsec1: entered promiscuous mode [ 149.546938][ T7425] macsec1: entered allmulticast mode [ 149.902375][ T7440] __nla_validate_parse: 3 callbacks suppressed [ 149.902399][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 150.492298][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'. [ 150.574822][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'. [ 150.814208][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 150.853162][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'. [ 151.088460][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 152.355763][ T7498] netlink: 76 bytes leftover after parsing attributes in process `syz.0.436'. [ 152.505255][ T7501] warning: `syz.3.437' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.571696][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 152.622344][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 152.752069][ T7506] netlink: 'syz.0.439': attribute type 10 has an invalid length. [ 152.801821][ T7506] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 153.663447][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 154.034330][ T7545] FAULT_INJECTION: forcing a failure. [ 154.034330][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.080793][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.2.452 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 154.080826][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.080839][ T7545] Call Trace: [ 154.080847][ T7545] [ 154.080856][ T7545] dump_stack_lvl+0x241/0x360 [ 154.080895][ T7545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.080925][ T7545] ? __pfx__printk+0x10/0x10 [ 154.080980][ T7545] should_fail_ex+0x424/0x570 [ 154.081010][ T7545] _copy_from_user+0x2d/0xb0 [ 154.081044][ T7545] csum_and_copy_from_iter_full+0x1ec/0x21a0 [ 154.081090][ T7545] ? rcu_is_watching+0x15/0xb0 [ 154.081112][ T7545] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 154.081136][ T7545] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 154.081168][ T7545] ? __build_skb_around+0x247/0x3d0 [ 154.081198][ T7545] ip_generic_getfrag+0x151/0x320 [ 154.081227][ T7545] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 154.081252][ T7545] ? __lock_acquire+0xad5/0xd80 [ 154.081288][ T7545] __ip6_append_data+0x3acd/0x41b0 [ 154.081341][ T7545] ? __pfx_raw6_getfrag+0x10/0x10 [ 154.081391][ T7545] ? __pfx___ip6_append_data+0x10/0x10 [ 154.081424][ T7545] ? ip6_setup_cork+0xaaf/0x11c0 [ 154.081463][ T7545] ip6_append_data+0x25f/0x380 [ 154.081500][ T7545] ? __pfx_raw6_getfrag+0x10/0x10 [ 154.081525][ T7545] rawv6_sendmsg+0x1855/0x23c0 [ 154.081566][ T7545] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 154.081593][ T7545] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 154.081653][ T7545] ? sock_rps_record_flow+0x1a/0x410 [ 154.081682][ T7545] ? inet_sendmsg+0x330/0x390 [ 154.081712][ T7545] __sock_sendmsg+0x1a6/0x270 [ 154.081746][ T7545] ____sys_sendmsg+0x523/0x860 [ 154.081781][ T7545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.081802][ T7545] ? __fget_files+0x2a/0x420 [ 154.081824][ T7545] ? __fget_files+0x2a/0x420 [ 154.081851][ T7545] __sys_sendmsg+0x271/0x360 [ 154.081881][ T7545] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.081979][ T7545] ? do_syscall_64+0xb6/0x210 [ 154.082005][ T7545] do_syscall_64+0xf3/0x210 [ 154.082026][ T7545] ? clear_bhb_loop+0x45/0xa0 [ 154.082051][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.082071][ T7545] RIP: 0033:0x7f325198e169 [ 154.082090][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.082107][ T7545] RSP: 002b:00007f325280b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.082129][ T7545] RAX: ffffffffffffffda RBX: 00007f3251bb6080 RCX: 00007f325198e169 [ 154.082144][ T7545] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 154.082158][ T7545] RBP: 00007f325280b090 R08: 0000000000000000 R09: 0000000000000000 [ 154.082170][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.082182][ T7545] R13: 0000000000000001 R14: 00007f3251bb6080 R15: 00007ffdd5de25f8 [ 154.082215][ T7545] [ 155.092590][ T7561] xt_TCPMSS: Only works on TCP SYN packets [ 155.256112][ T7567] __nla_validate_parse: 1 callbacks suppressed [ 155.256134][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 155.348167][ T7567] netlink: 72 bytes leftover after parsing attributes in process `syz.3.461'. [ 155.465465][ T7571] netlink: 76 bytes leftover after parsing attributes in process `syz.0.462'. [ 155.629056][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 155.654517][ T7577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.465'. [ 155.986725][ T7586] netlink: 224 bytes leftover after parsing attributes in process `syz.2.469'. [ 156.752000][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 156.785840][ T7603] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.871165][ T7605] FAULT_INJECTION: forcing a failure. [ 156.871165][ T7605] name failslab, interval 1, probability 0, space 0, times 0 [ 156.944446][ T7605] CPU: 1 UID: 0 PID: 7605 Comm: syz.1.475 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 156.944477][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.944490][ T7605] Call Trace: [ 156.944498][ T7605] [ 156.944507][ T7605] dump_stack_lvl+0x241/0x360 [ 156.944545][ T7605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.944575][ T7605] ? __pfx__printk+0x10/0x10 [ 156.944602][ T7605] ? __lock_acquire+0xad5/0xd80 [ 156.944642][ T7605] should_fail_ex+0x424/0x570 [ 156.944672][ T7605] should_failslab+0xac/0x100 [ 156.944695][ T7605] kmem_cache_alloc_noprof+0x78/0x390 [ 156.944716][ T7605] ? skb_clone+0x20c/0x390 [ 156.944746][ T7605] skb_clone+0x20c/0x390 [ 156.944776][ T7605] __netlink_deliver_tap+0x3c4/0x7f0 [ 156.944822][ T7605] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.944852][ T7605] netlink_deliver_tap+0x19d/0x1b0 [ 156.944884][ T7605] netlink_unicast+0x7c6/0x9a0 [ 156.944924][ T7605] ? __pfx_netlink_unicast+0x10/0x10 [ 156.944955][ T7605] ? skb_put+0x114/0x1f0 [ 156.944986][ T7605] netlink_sendmsg+0x8c3/0xcd0 [ 156.945031][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.945072][ T7605] ? aa_sock_msg_perm+0x91/0x160 [ 156.945105][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.945134][ T7605] __sock_sendmsg+0x221/0x270 [ 156.945167][ T7605] ____sys_sendmsg+0x523/0x860 [ 156.945201][ T7605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.945240][ T7605] __sys_sendmmsg+0x3a0/0x7b0 [ 156.945276][ T7605] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.945337][ T7605] ? rcu_read_lock_any_held+0xbb/0x160 [ 156.945359][ T7605] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 156.945384][ T7605] ? vfs_write+0xb29/0xd10 [ 156.945423][ T7605] ? ksys_write+0x24e/0x2d0 [ 156.945455][ T7605] ? __mutex_unlock_slowpath+0x229/0x800 [ 156.945507][ T7605] ? ksys_write+0x275/0x2d0 [ 156.945548][ T7605] __x64_sys_sendmmsg+0xa0/0xb0 [ 156.945575][ T7605] do_syscall_64+0xf3/0x210 [ 156.945597][ T7605] ? clear_bhb_loop+0x45/0xa0 [ 156.945622][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.945642][ T7605] RIP: 0033:0x7f604d38e169 [ 156.945661][ T7605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.945678][ T7605] RSP: 002b:00007f604e2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.945700][ T7605] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38e169 [ 156.945715][ T7605] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 156.945729][ T7605] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 156.945742][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.945754][ T7605] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8 [ 156.945788][ T7605] [ 158.546927][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.489'. [ 158.603887][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'. [ 158.666001][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.489'. [ 160.472519][ T7671] FAULT_INJECTION: forcing a failure. [ 160.472519][ T7671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.568013][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.1.503 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 160.568046][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.568058][ T7671] Call Trace: [ 160.568066][ T7671] [ 160.568075][ T7671] dump_stack_lvl+0x241/0x360 [ 160.568114][ T7671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.568141][ T7671] ? __pfx__printk+0x10/0x10 [ 160.568194][ T7671] should_fail_ex+0x424/0x570 [ 160.568223][ T7671] _copy_to_user+0x31/0xb0 [ 160.568257][ T7671] simple_read_from_buffer+0xc4/0x170 [ 160.568291][ T7671] proc_fail_nth_read+0x1ef/0x260 [ 160.568327][ T7671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.568361][ T7671] ? rw_verify_area+0x246/0x630 [ 160.568386][ T7671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.568419][ T7671] vfs_read+0x21f/0xb90 [ 160.568450][ T7671] ? __pfx___mutex_lock+0x10/0x10 [ 160.568471][ T7671] ? __pfx_vfs_read+0x10/0x10 [ 160.568500][ T7671] ? __fget_files+0x2a/0x420 [ 160.568520][ T7671] ? __fget_files+0x39d/0x420 [ 160.568536][ T7671] ? __fget_files+0x2a/0x420 [ 160.568564][ T7671] ksys_read+0x19d/0x2d0 [ 160.568593][ T7671] ? __pfx_ksys_read+0x10/0x10 [ 160.568626][ T7671] ? do_syscall_64+0xb6/0x210 [ 160.568649][ T7671] do_syscall_64+0xf3/0x210 [ 160.568669][ T7671] ? clear_bhb_loop+0x45/0xa0 [ 160.568693][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.568720][ T7671] RIP: 0033:0x7f604d38cb7c [ 160.568738][ T7671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.568754][ T7671] RSP: 002b:00007f604e2bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.568776][ T7671] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38cb7c [ 160.568791][ T7671] RDX: 000000000000000f RSI: 00007f604e2bf0a0 RDI: 0000000000000004 [ 160.568804][ T7671] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 160.568816][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.568827][ T7671] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8 [ 160.568859][ T7671] [ 160.876069][ T7677] netlink: 830 bytes leftover after parsing attributes in process `syz.2.505'. [ 161.253845][ T7682] bond0: (slave netdevsim0): Releasing backup interface [ 161.826665][ T7706] xt_hashlimit: max too large, truncated to 1048576 [ 161.889917][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 162.750563][ T7721] Bluetooth: MGMT ver 1.23 [ 163.309373][ T7735] netdevsim netdevsim4: Direct firmware load for / [ 163.309373][ T7735] failed with error -2 [ 163.356319][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 163.378400][ T7735] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 163.378400][ T7735] [ 164.003116][ T7751] netlink: 76 bytes leftover after parsing attributes in process `syz.3.530'. [ 164.343580][ T7757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.671582][ T7757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.704738][ T7768] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.736592][ T7768] tipc: Enabled bearer , priority 10 [ 164.839664][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.894584][ T7757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.108272][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.110829][ T7757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.533540][ T7757] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.637939][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.651550][ T7757] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.745418][ T7757] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.884772][ T7757] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.718002][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.758038][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.176199][ T7793] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 168.208477][ T7793] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 168.426071][ T7797] netlink: 44 bytes leftover after parsing attributes in process `syz.4.544'. [ 168.443392][ T7797] ip_vti0: entered promiscuous mode [ 168.797999][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 169.088977][ T7803] syzkaller0: entered promiscuous mode [ 169.105272][ T7803] syzkaller0: entered allmulticast mode [ 169.838015][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.878044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.918848][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.171051][ T30] audit: type=1800 audit(1745388485.969:4): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.565" name="memory.events" dev="tmpfs" ino=581 res=0 errno=0 [ 172.269773][ T30] audit: type=1804 audit(1745388486.019:5): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.565" name="/newroot/110/memory.events" dev="tmpfs" ino=581 res=1 errno=0 [ 172.774873][ T7875] batman_adv: batadv0: Adding interface: ip6gretap1 [ 172.810403][ T7875] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.897977][ T7875] batman_adv: batadv0: Interface activated: ip6gretap1 [ 172.957958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.002008][ T7883] xt_hashlimit: max too large, truncated to 1048576 [ 173.207090][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 173.848860][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'. [ 173.984914][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 173.998095][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.022454][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 174.214686][ T7925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.584'. [ 174.424159][ T7932] xt_hashlimit: max too large, truncated to 1048576 [ 174.514307][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 175.038024][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 175.096240][ T7945] netlink: 224 bytes leftover after parsing attributes in process `syz.2.590'. [ 175.158694][ T7945] syzkaller1: entered promiscuous mode [ 175.174114][ T7945] syzkaller1: entered allmulticast mode [ 175.426040][ T7951] FAULT_INJECTION: forcing a failure. [ 175.426040][ T7951] name failslab, interval 1, probability 0, space 0, times 0 [ 175.489311][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.0.591 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 175.489343][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.489356][ T7951] Call Trace: [ 175.489364][ T7951] [ 175.489373][ T7951] dump_stack_lvl+0x241/0x360 [ 175.489418][ T7951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.489448][ T7951] ? __pfx__printk+0x10/0x10 [ 175.489475][ T7951] ? __lock_acquire+0xad5/0xd80 [ 175.489514][ T7951] should_fail_ex+0x424/0x570 [ 175.489544][ T7951] should_failslab+0xac/0x100 [ 175.489566][ T7951] kmem_cache_alloc_noprof+0x78/0x390 [ 175.489587][ T7951] ? skb_clone+0x20c/0x390 [ 175.489617][ T7951] skb_clone+0x20c/0x390 [ 175.489648][ T7951] __netlink_deliver_tap+0x3c4/0x7f0 [ 175.489692][ T7951] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.489721][ T7951] netlink_deliver_tap+0x19d/0x1b0 [ 175.489754][ T7951] netlink_unicast+0x7c6/0x9a0 [ 175.489792][ T7951] ? __pfx_netlink_unicast+0x10/0x10 [ 175.489822][ T7951] ? skb_put+0x114/0x1f0 [ 175.489848][ T7951] netlink_sendmsg+0x8c3/0xcd0 [ 175.489894][ T7951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.489930][ T7951] ? aa_sock_msg_perm+0x91/0x160 [ 175.489962][ T7951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.489992][ T7951] __sock_sendmsg+0x221/0x270 [ 175.490025][ T7951] ____sys_sendmsg+0x523/0x860 [ 175.490059][ T7951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.490081][ T7951] ? __fget_files+0x2a/0x420 [ 175.490103][ T7951] ? __fget_files+0x2a/0x420 [ 175.490133][ T7951] __sys_sendmsg+0x271/0x360 [ 175.490163][ T7951] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.490248][ T7951] ? do_syscall_64+0xb6/0x210 [ 175.490272][ T7951] do_syscall_64+0xf3/0x210 [ 175.490293][ T7951] ? clear_bhb_loop+0x45/0xa0 [ 175.490318][ T7951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.490341][ T7951] RIP: 0033:0x7fb17878e169 [ 175.490389][ T7951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.490406][ T7951] RSP: 002b:00007fb17955c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.490428][ T7951] RAX: ffffffffffffffda RBX: 00007fb1789b6080 RCX: 00007fb17878e169 [ 175.490443][ T7951] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 175.490456][ T7951] RBP: 00007fb17955c090 R08: 0000000000000000 R09: 0000000000000000 [ 175.490469][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.490480][ T7951] R13: 0000000000000000 R14: 00007fb1789b6080 R15: 00007ffce25cda98 [ 175.490512][ T7951] [ 175.935018][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 175.971627][ T7957] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.009186][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 176.190340][ T7961] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.300150][ T7973] xt_hashlimit: max too large, truncated to 1048576 [ 176.380599][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 176.410467][ T7979] tipc: New replicast peer: 255.255.255.255 [ 176.452942][ T7979] tipc: Enabled bearer , priority 10 [ 176.491690][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 176.532156][ T7981] tipc: Disabling bearer [ 176.603042][ T7961] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.898597][ T7981] vxcan3: entered allmulticast mode [ 177.006949][ T7961] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.080980][ T7961] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.453807][ T7961] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.537206][ T7961] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.605184][ T7961] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.732655][ T8006] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 177.758894][ T7961] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.859161][ T8006] bond1: entered promiscuous mode [ 177.864293][ T8006] bond1: entered allmulticast mode [ 177.941145][ T8007] ip6gretap1: entered promiscuous mode [ 177.947442][ T8007] ip6gretap1: entered allmulticast mode [ 177.964376][ T8007] bond1: (slave ip6gretap1): making interface the new active one [ 177.983627][ T8007] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 178.292778][ T8016] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 178.411314][ T8025] xt_hashlimit: max too large, truncated to 1048576 [ 178.564815][ T8032] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 178.702973][ T8023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.717092][ T8023] bond2: (slave bond3): making interface the new active one [ 178.731150][ T8023] bond2: (slave bond3): Enslaving as an active interface with an up link [ 178.840483][ T8035] macsec1: entered promiscuous mode [ 178.846502][ T8035] bond2: entered promiscuous mode [ 178.852611][ T8035] bond3: entered promiscuous mode [ 178.859497][ T8035] macsec1: entered allmulticast mode [ 178.865428][ T8035] bond2: entered allmulticast mode [ 178.871921][ T8035] bond3: entered allmulticast mode [ 178.900000][ T8036] __nla_validate_parse: 3 callbacks suppressed [ 178.900023][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 178.995667][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 179.026199][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 179.097183][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 179.125447][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 179.146201][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 179.155843][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 179.177795][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 179.193064][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 179.207471][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 180.482968][ T8073] xt_hashlimit: max too large, truncated to 1048576 [ 180.558755][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 181.087694][ T8085] FAULT_INJECTION: forcing a failure. [ 181.087694][ T8085] name failslab, interval 1, probability 0, space 0, times 0 [ 181.124502][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: syz.4.628 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 181.124535][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.124552][ T8085] Call Trace: [ 181.124561][ T8085] [ 181.124569][ T8085] dump_stack_lvl+0x241/0x360 [ 181.124615][ T8085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.124644][ T8085] ? __pfx__printk+0x10/0x10 [ 181.124675][ T8085] ? __pfx___might_resched+0x10/0x10 [ 181.124710][ T8085] should_fail_ex+0x424/0x570 [ 181.124737][ T8085] should_failslab+0xac/0x100 [ 181.124759][ T8085] __kvmalloc_node_noprof+0x170/0x5a0 [ 181.124780][ T8085] ? bpf_test_run_xdp_live+0x21f/0x2220 [ 181.124818][ T8085] bpf_test_run_xdp_live+0x21f/0x2220 [ 181.124862][ T8085] ? bpf_dispatcher_change_prog+0xd7b/0xf00 [ 181.124895][ T8085] ? __mutex_unlock_slowpath+0x229/0x800 [ 181.124925][ T8085] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 181.124954][ T8085] ? synchronize_rcu+0x11e/0x370 [ 181.124974][ T8085] ? __pfx_synchronize_rcu+0x10/0x10 [ 181.125016][ T8085] ? 0xffffffffa0003b40 [ 181.125042][ T8085] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 181.125071][ T8085] ? 0xffffffffa0002034 [ 181.125108][ T8085] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 181.125158][ T8085] ? _copy_from_user+0x95/0xb0 [ 181.125192][ T8085] ? bpf_test_init+0x130/0x170 [ 181.125219][ T8085] ? xdp_convert_md_to_buff+0x5b/0x330 [ 181.125252][ T8085] bpf_prog_test_run_xdp+0x809/0x1200 [ 181.125311][ T8085] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 181.125343][ T8085] ? __fget_files+0x2a/0x420 [ 181.125366][ T8085] ? __fget_files+0x2a/0x420 [ 181.125389][ T8085] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 181.125421][ T8085] bpf_prog_test_run+0x2e4/0x360 [ 181.125452][ T8085] __sys_bpf+0x4ee/0x8b0 [ 181.125481][ T8085] ? __pfx___sys_bpf+0x10/0x10 [ 181.125539][ T8085] __x64_sys_bpf+0x7c/0x90 [ 181.125563][ T8085] do_syscall_64+0xf3/0x210 [ 181.125584][ T8085] ? clear_bhb_loop+0x45/0xa0 [ 181.125609][ T8085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.125628][ T8085] RIP: 0033:0x7f6e57f8e169 [ 181.125645][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.125662][ T8085] RSP: 002b:00007f6e58e1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.125692][ T8085] RAX: ffffffffffffffda RBX: 00007f6e581b5fa0 RCX: 00007f6e57f8e169 [ 181.125707][ T8085] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 181.125720][ T8085] RBP: 00007f6e58e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 181.125732][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.125744][ T8085] R13: 0000000000000000 R14: 00007f6e581b5fa0 R15: 00007ffc27049d08 [ 181.125777][ T8085] [ 182.710926][ T8125] xt_hashlimit: max too large, truncated to 1048576 [ 183.776020][ T8143] netlink: 'syz.0.649': attribute type 11 has an invalid length. [ 184.475458][ T8161] __nla_validate_parse: 45 callbacks suppressed [ 184.475480][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 184.839066][ T8174] netlink: 68 bytes leftover after parsing attributes in process `syz.1.657'. [ 184.921887][ T8177] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 185.267287][ T8180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.292027][ T8180] bond1: (slave bond2): making interface the new active one [ 185.340937][ T8180] bond1: (slave bond2): Enslaving as an active interface with an up link [ 185.434770][ T8197] sctp: [Deprecated]: syz.2.662 (pid 8197) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.434770][ T8197] Use struct sctp_sack_info instead [ 185.515382][ T8185] netlink: 76 bytes leftover after parsing attributes in process `syz.4.661'. [ 186.117274][ T8216] syzkaller1: entered promiscuous mode [ 186.123562][ T8216] syzkaller1: entered allmulticast mode [ 186.220569][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 186.255082][ T8226] netlink: 68 bytes leftover after parsing attributes in process `syz.0.670'. [ 186.524804][ T8234] netlink: 212392 bytes leftover after parsing attributes in process `syz.3.672'. [ 186.557649][ T8234] openvswitch: netlink: Message has 4 unknown bytes. [ 186.581211][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 187.045783][ T8245] netlink: 76 bytes leftover after parsing attributes in process `syz.3.676'. [ 188.150313][ T8264] netlink: 68 bytes leftover after parsing attributes in process `syz.3.681'. [ 188.495988][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 188.916380][ T8276] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 189.543266][ T8300] __nla_validate_parse: 1 callbacks suppressed [ 189.543288][ T8300] netlink: 68 bytes leftover after parsing attributes in process `syz.0.694'. [ 191.631856][ T8365] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.759589][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 191.784453][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 191.840496][ T8365] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 191.882492][ T8365] netlink: 10 bytes leftover after parsing attributes in process `syz.1.712'. [ 191.947565][ T8373] netlink: 'syz.3.716': attribute type 8 has an invalid length. [ 192.350153][ T8385] netlink: 'syz.1.721': attribute type 39 has an invalid length. [ 192.400171][ T8388] sctp: [Deprecated]: syz.4.720 (pid 8388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.400171][ T8388] Use struct sctp_sack_info instead [ 192.463279][ T8382] pimreg: entered allmulticast mode [ 192.551046][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 192.578358][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'. [ 192.766560][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 193.383488][ T8411] xt_hashlimit: max too large, truncated to 1048576 [ 193.485322][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 194.083031][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 194.398234][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 195.500659][ T8471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.745'. [ 195.684233][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 195.739557][ T8475] FAULT_INJECTION: forcing a failure. [ 195.739557][ T8475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.807870][ T8475] CPU: 0 UID: 0 PID: 8475 Comm: syz.2.747 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 195.807901][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.807925][ T8475] Call Trace: [ 195.807933][ T8475] [ 195.807942][ T8475] dump_stack_lvl+0x241/0x360 [ 195.807978][ T8475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.808006][ T8475] ? __pfx__printk+0x10/0x10 [ 195.808048][ T8475] should_fail_ex+0x424/0x570 [ 195.808077][ T8475] _copy_from_user+0x2d/0xb0 [ 195.808109][ T8475] __sys_bpf+0x1c5/0x8b0 [ 195.808138][ T8475] ? __pfx___sys_bpf+0x10/0x10 [ 195.808178][ T8475] ? ksys_write+0x275/0x2d0 [ 195.808221][ T8475] __x64_sys_bpf+0x7c/0x90 [ 195.808245][ T8475] do_syscall_64+0xf3/0x210 [ 195.808267][ T8475] ? clear_bhb_loop+0x45/0xa0 [ 195.808292][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.808313][ T8475] RIP: 0033:0x7f325198e169 [ 195.808331][ T8475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.808347][ T8475] RSP: 002b:00007f325282c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.808370][ T8475] RAX: ffffffffffffffda RBX: 00007f3251bb5fa0 RCX: 00007f325198e169 [ 195.808385][ T8475] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000003 [ 195.808398][ T8475] RBP: 00007f325282c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.808411][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.808423][ T8475] R13: 0000000000000000 R14: 00007f3251bb5fa0 R15: 00007ffdd5de25f8 [ 195.808455][ T8475] [ 196.232022][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 196.502980][ T8498] xt_hashlimit: max too large, truncated to 1048576 [ 196.633407][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 196.691440][ T8507] netlink: 'syz.4.757': attribute type 1 has an invalid length. [ 196.858210][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 196.977309][ T8507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.992660][ T8507] bond1: (slave bond2): making interface the new active one [ 197.041713][ T8507] bond1: (slave bond2): Enslaving as an active interface with an up link [ 197.118418][ T8524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.761'. [ 197.825273][ T8539] batadv_slave_1: entered promiscuous mode [ 197.883624][ T8541] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 197.978118][ T8537] batadv_slave_1: left promiscuous mode [ 198.959021][ T8557] netlink: 'syz.1.770': attribute type 10 has an invalid length. [ 199.331680][ T8568] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.775'. [ 199.399522][ T8571] FAULT_INJECTION: forcing a failure. [ 199.399522][ T8571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.444520][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.468001][ T8571] CPU: 0 UID: 0 PID: 8571 Comm: syz.4.776 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 199.468009][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.468033][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.468046][ T8571] Call Trace: [ 199.468054][ T8571] [ 199.468062][ T8571] dump_stack_lvl+0x241/0x360 [ 199.468099][ T8571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.468133][ T8571] ? __pfx__printk+0x10/0x10 [ 199.468178][ T8571] should_fail_ex+0x424/0x570 [ 199.468209][ T8571] _copy_to_user+0x31/0xb0 [ 199.468246][ T8571] simple_read_from_buffer+0xc4/0x170 [ 199.468285][ T8571] proc_fail_nth_read+0x1ef/0x260 [ 199.468324][ T8571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.468363][ T8571] ? rw_verify_area+0x246/0x630 [ 199.468392][ T8571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.468428][ T8571] vfs_read+0x21f/0xb90 [ 199.468463][ T8571] ? __pfx___mutex_lock+0x10/0x10 [ 199.468487][ T8571] ? __pfx_vfs_read+0x10/0x10 [ 199.468520][ T8571] ? __fget_files+0x2a/0x420 [ 199.468543][ T8571] ? __fget_files+0x39d/0x420 [ 199.468561][ T8571] ? __fget_files+0x2a/0x420 [ 199.468593][ T8571] ksys_read+0x19d/0x2d0 [ 199.468646][ T8571] ? __pfx_ksys_read+0x10/0x10 [ 199.468693][ T8571] ? do_syscall_64+0xb6/0x210 [ 199.468720][ T8571] do_syscall_64+0xf3/0x210 [ 199.468742][ T8571] ? clear_bhb_loop+0x45/0xa0 [ 199.468769][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.468791][ T8571] RIP: 0033:0x7f6e57f8cb7c [ 199.468811][ T8571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 199.468830][ T8571] RSP: 002b:00007f6e58e1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.468854][ T8571] RAX: ffffffffffffffda RBX: 00007f6e581b5fa0 RCX: 00007f6e57f8cb7c [ 199.468870][ T8571] RDX: 000000000000000f RSI: 00007f6e58e1b0a0 RDI: 0000000000000003 [ 199.468884][ T8571] RBP: 00007f6e58e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 199.468898][ T8571] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 199.468911][ T8571] R13: 0000000000000001 R14: 00007f6e581b5fa0 R15: 00007ffc27049d08 [ 199.468947][ T8571] [ 199.772943][ T8577] netlink: 'syz.1.778': attribute type 29 has an invalid length. [ 199.988772][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'. [ 200.085362][ T8587] IPVS: length: 165 != 24 [ 200.149545][ T8595] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 200.407016][ T8606] netlink: 'syz.1.785': attribute type 2 has an invalid length. [ 200.455987][ T8600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.466009][ T8600] bond2: (slave bond3): making interface the new active one [ 200.474262][ T8600] bond2: (slave bond3): Enslaving as an active interface with an up link [ 201.486996][ T8630] pimreg: left allmulticast mode [ 202.724329][ T8656] xt_CT: No such helper "snmp" [ 203.671024][ T8684] bridge_slave_0: entered promiscuous mode [ 203.711269][ T8684] bridge_slave_0: entered allmulticast mode [ 204.024324][ T8694] vlan0: entered allmulticast mode [ 204.048903][ T8694] veth0_to_batadv: entered allmulticast mode [ 204.083583][ T8694] bridge0: port 3(vlan0) entered blocking state [ 204.118933][ T8694] bridge0: port 3(vlan0) entered disabled state [ 204.186622][ T8694] vlan0: entered promiscuous mode [ 204.242426][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'. [ 204.242911][ T8694] veth0_to_batadv: entered promiscuous mode [ 204.284308][ T8694] bridge0: port 3(vlan0) entered blocking state [ 204.291583][ T8694] bridge0: port 3(vlan0) entered forwarding state [ 204.416071][ T8707] veth5: entered promiscuous mode [ 205.130105][ T8737] sit0: entered promiscuous mode [ 205.166639][ T8737] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 205.201398][ T8737] netlink: 1 bytes leftover after parsing attributes in process `syz.3.840'. [ 205.770693][ T8754] netlink: 104 bytes leftover after parsing attributes in process `syz.2.847'. [ 206.292924][ T8767] netlink: 'syz.4.852': attribute type 10 has an invalid length. [ 206.360801][ T8771] dummy0: entered promiscuous mode [ 206.366342][ T8771] vlan1: entered promiscuous mode [ 206.803094][ T8785] netlink: 'syz.3.861': attribute type 1 has an invalid length. [ 207.098008][ T8788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.167783][ T8788] bond4: (slave bond5): making interface the new active one [ 207.209454][ T8796] xt_bpf: check failed: parse error [ 207.216825][ T8796] netlink: 124 bytes leftover after parsing attributes in process `syz.0.863'. [ 207.228903][ T8788] bond4: (slave bond5): Enslaving as an active interface with an up link [ 207.243337][ T8793] syz_tun: entered allmulticast mode [ 207.265597][ T8789] syz_tun: left allmulticast mode [ 207.386090][ T8800] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 207.455375][ T8800] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 208.308929][ T8826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.874'. [ 208.559740][ T8833] Bluetooth: MGMT ver 1.23 [ 208.745852][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.879'. [ 208.907540][ T8843] xt_CT: No such helper "snmp" [ 209.257719][ T8859] hsr0: entered promiscuous mode [ 209.269993][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 209.301266][ T8859] hsr_slave_0: left promiscuous mode [ 209.332984][ T8859] hsr_slave_1: left promiscuous mode [ 209.394154][ T8859] hsr0 (unregistering): left promiscuous mode [ 209.418738][ T8859] ------------[ cut here ]------------ [ 209.424275][ T8859] WARNING: CPU: 1 PID: 8859 at net/core/dev.c:12067 unregister_netdevice_many_notify+0x20b7/0x2640 [ 209.435331][ T8859] Modules linked in: [ 209.439463][ T8859] CPU: 1 UID: 0 PID: 8859 Comm: syz.0.887 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 209.451548][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.461832][ T8859] RIP: 0010:unregister_netdevice_many_notify+0x20b7/0x2640 [ 209.469242][ T8859] Code: f0 3e f8 48 8b 4c 24 10 48 8b 09 4c 39 f9 0f 84 89 01 00 00 48 89 cb e8 67 b1 d4 f7 48 89 d9 e9 75 ed ff ff e8 5a b1 d4 f7 90 <0f> 0b 90 e9 49 ff ff ff e8 4c b1 d4 f7 90 0f 0b 90 eb 97 e8 41 b1 [ 209.489173][ T8859] RSP: 0018:ffffc9000466ef80 EFLAGS: 00010287 [ 209.495307][ T8859] RAX: ffffffff89ee0966 RBX: ffff88807ed321a8 RCX: 0000000000080000 [ 209.503438][ T8859] RDX: ffffc9000bc02000 RSI: 00000000000126d1 RDI: 00000000000126d2 [ 209.511654][ T8859] RBP: ffffc9000466f190 R08: ffffffff89ee086b R09: 1ffffffff201fd24 [ 209.522927][ T8859] R10: dffffc0000000000 R11: fffffbfff201fd25 R12: ffff88807ed32000 [ 209.532164][ T8859] R13: dffffc0000000000 R14: ffff8880570f6780 R15: ffffc9000466f200 [ 209.540762][ T8859] FS: 00007fb17957d6c0(0000) GS:ffff8881250aa000(0000) knlGS:0000000000000000 [ 209.550319][ T8859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.557454][ T8859] CR2: 0000001b30f1bff8 CR3: 000000005adaa000 CR4: 00000000003526f0 [ 209.565874][ T8859] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.573998][ T8859] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.582261][ T8859] Call Trace: [ 209.585579][ T8859] [ 209.588654][ T8859] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 209.591131][ T8877] netlink: 76 bytes leftover after parsing attributes in process `syz.2.891'. [ 209.595452][ T8859] ? kasan_quarantine_put+0xdc/0x230 [ 209.595523][ T8859] ? lockdep_hardirqs_on+0x9d/0x150 [ 209.595566][ T8859] ? unregister_netdevice_queue+0x2c4/0x400 [ 209.595608][ T8859] ? hsr_del_nodes+0x78/0x90 [ 209.595635][ T8859] ? __pfx_hsr_dellink+0x10/0x10 [ 209.595669][ T8859] rtnl_dellink+0x53c/0x8c0 [ 209.595703][ T8859] ? do_syscall_64+0xf3/0x210 [ 209.595732][ T8859] ? __pfx_rtnl_dellink+0x10/0x10 [ 209.595863][ T8859] ? __pfx_rtnl_dellink+0x10/0x10 [ 209.652168][ T8859] rtnetlink_rcv_msg+0x80f/0xd70 [ 209.657189][ T8859] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 209.662445][ T8859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.668052][ T8859] ? ref_tracker_free+0x63e/0x7e0 [ 209.673138][ T8859] netlink_rcv_skb+0x208/0x480 [ 209.684080][ T8859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.690259][ T8859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.695633][ T8859] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.700943][ T8859] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.706200][ T8859] netlink_unicast+0x7f8/0x9a0 [ 209.711097][ T8859] ? __pfx_netlink_unicast+0x10/0x10 [ 209.716436][ T8859] ? skb_put+0x114/0x1f0 [ 209.721556][ T8859] netlink_sendmsg+0x8c3/0xcd0 [ 209.726403][ T8859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.732484][ T8859] ? aa_sock_msg_perm+0x91/0x160 [ 209.737491][ T8859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.742921][ T8859] __sock_sendmsg+0x221/0x270 [ 209.747657][ T8859] ____sys_sendmsg+0x523/0x860 [ 209.752621][ T8859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.758350][ T8859] ? __fget_files+0x2a/0x420 [ 209.762994][ T8859] ? __fget_files+0x2a/0x420 [ 209.767635][ T8859] __sys_sendmsg+0x271/0x360 [ 209.772367][ T8859] ? __pfx_futex_wake+0x10/0x10 [ 209.777271][ T8859] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.782597][ T8859] ? do_syscall_64+0xb6/0x210 [ 209.787322][ T8859] do_syscall_64+0xf3/0x210 [ 209.791947][ T8859] ? clear_bhb_loop+0x45/0xa0 [ 209.796679][ T8859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.802695][ T8859] RIP: 0033:0x7fb17878e169 [ 209.807152][ T8859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.827746][ T8859] RSP: 002b:00007fb17957d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.836939][ T8859] RAX: ffffffffffffffda RBX: 00007fb1789b5fa0 RCX: 00007fb17878e169 [ 209.845162][ T8859] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 209.853262][ T8859] RBP: 00007fb178810a68 R08: 0000000000000000 R09: 0000000000000000 [ 209.861364][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.869434][ T8859] R13: 0000000000000000 R14: 00007fb1789b5fa0 R15: 00007ffce25cda98 [ 209.877469][ T8859] [ 209.880615][ T8859] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 209.887938][ T8859] CPU: 1 UID: 0 PID: 8859 Comm: syz.0.887 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) [ 209.899875][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.910061][ T8859] Call Trace: [ 209.913375][ T8859] [ 209.916340][ T8859] dump_stack_lvl+0x241/0x360 [ 209.921070][ T8859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.926320][ T8859] ? __pfx__printk+0x10/0x10 [ 209.930978][ T8859] ? vscnprintf+0x5d/0x90 [ 209.935356][ T8859] panic+0x349/0x880 [ 209.939295][ T8859] ? __warn+0x174/0x4d0 [ 209.943496][ T8859] ? __pfx_panic+0x10/0x10 [ 209.947982][ T8859] __warn+0x344/0x4d0 [ 209.952012][ T8859] ? unregister_netdevice_many_notify+0x20b7/0x2640 [ 209.958656][ T8859] report_bug+0x2b3/0x500 [ 209.963042][ T8859] ? unregister_netdevice_many_notify+0x20b7/0x2640 [ 209.969686][ T8859] ? unregister_netdevice_many_notify+0x20b7/0x2640 [ 209.976327][ T8859] ? unregister_netdevice_many_notify+0x20b9/0x2640 [ 209.982978][ T8859] handle_bug+0x89/0x170 [ 209.987267][ T8859] exc_invalid_op+0x1a/0x50 [ 209.991816][ T8859] asm_exc_invalid_op+0x1a/0x20 [ 209.996702][ T8859] RIP: 0010:unregister_netdevice_many_notify+0x20b7/0x2640 [ 210.003934][ T8859] Code: f0 3e f8 48 8b 4c 24 10 48 8b 09 4c 39 f9 0f 84 89 01 00 00 48 89 cb e8 67 b1 d4 f7 48 89 d9 e9 75 ed ff ff e8 5a b1 d4 f7 90 <0f> 0b 90 e9 49 ff ff ff e8 4c b1 d4 f7 90 0f 0b 90 eb 97 e8 41 b1 [ 210.023578][ T8859] RSP: 0018:ffffc9000466ef80 EFLAGS: 00010287 [ 210.029678][ T8859] RAX: ffffffff89ee0966 RBX: ffff88807ed321a8 RCX: 0000000000080000 [ 210.037669][ T8859] RDX: ffffc9000bc02000 RSI: 00000000000126d1 RDI: 00000000000126d2 [ 210.045656][ T8859] RBP: ffffc9000466f190 R08: ffffffff89ee086b R09: 1ffffffff201fd24 [ 210.053645][ T8859] R10: dffffc0000000000 R11: fffffbfff201fd25 R12: ffff88807ed32000 [ 210.061633][ T8859] R13: dffffc0000000000 R14: ffff8880570f6780 R15: ffffc9000466f200 [ 210.069624][ T8859] ? unregister_netdevice_many_notify+0x1fbb/0x2640 [ 210.076260][ T8859] ? unregister_netdevice_many_notify+0x20b6/0x2640 [ 210.082897][ T8859] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 210.089774][ T8859] ? kasan_quarantine_put+0xdc/0x230 [ 210.095080][ T8859] ? lockdep_hardirqs_on+0x9d/0x150 [ 210.100306][ T8859] ? unregister_netdevice_queue+0x2c4/0x400 [ 210.106252][ T8859] ? hsr_del_nodes+0x78/0x90 [ 210.110861][ T8859] ? __pfx_hsr_dellink+0x10/0x10 [ 210.115824][ T8859] rtnl_dellink+0x53c/0x8c0 [ 210.120396][ T8859] ? do_syscall_64+0xf3/0x210 [ 210.125116][ T8859] ? __pfx_rtnl_dellink+0x10/0x10 [ 210.130293][ T8859] ? __pfx_rtnl_dellink+0x10/0x10 [ 210.135356][ T8859] rtnetlink_rcv_msg+0x80f/0xd70 [ 210.140325][ T8859] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 210.145484][ T8859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.150997][ T8859] ? ref_tracker_free+0x63e/0x7e0 [ 210.156082][ T8859] netlink_rcv_skb+0x208/0x480 [ 210.160892][ T8859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.166516][ T8859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.171855][ T8859] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.177088][ T8859] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.182404][ T8859] netlink_unicast+0x7f8/0x9a0 [ 210.187240][ T8859] ? __pfx_netlink_unicast+0x10/0x10 [ 210.192556][ T8859] ? skb_put+0x114/0x1f0 [ 210.196822][ T8859] netlink_sendmsg+0x8c3/0xcd0 [ 210.201633][ T8859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.206962][ T8859] ? aa_sock_msg_perm+0x91/0x160 [ 210.211928][ T8859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.217239][ T8859] __sock_sendmsg+0x221/0x270 [ 210.221944][ T8859] ____sys_sendmsg+0x523/0x860 [ 210.226733][ T8859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.232055][ T8859] ? __fget_files+0x2a/0x420 [ 210.236674][ T8859] ? __fget_files+0x2a/0x420 [ 210.241291][ T8859] __sys_sendmsg+0x271/0x360 [ 210.245907][ T8859] ? __pfx_futex_wake+0x10/0x10 [ 210.250789][ T8859] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.255966][ T8859] ? do_syscall_64+0xb6/0x210 [ 210.260661][ T8859] do_syscall_64+0xf3/0x210 [ 210.265178][ T8859] ? clear_bhb_loop+0x45/0xa0 [ 210.269871][ T8859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.275778][ T8859] RIP: 0033:0x7fb17878e169 [ 210.280210][ T8859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.300005][ T8859] RSP: 002b:00007fb17957d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.308468][ T8859] RAX: ffffffffffffffda RBX: 00007fb1789b5fa0 RCX: 00007fb17878e169 [ 210.316451][ T8859] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 210.324437][ T8859] RBP: 00007fb178810a68 R08: 0000000000000000 R09: 0000000000000000 [ 210.332429][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.340424][ T8859] R13: 0000000000000000 R14: 00007fb1789b5fa0 R15: 00007ffce25cda98 [ 210.348427][ T8859] [ 210.351754][ T8859] Kernel Offset: disabled [ 210.356092][ T8859] Rebooting in 86400 seconds..