last executing test programs:

3.677777292s ago: executing program 1 (id=848):
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080102000000000047e89fd2f59fc0f0"], 0x34}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

3.161887474s ago: executing program 1 (id=854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x64, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_sample={0x30, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}}, 0x4000)

2.768584253s ago: executing program 1 (id=857):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
socket$unix(0x1, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socket$inet(0x2, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

2.715646944s ago: executing program 3 (id=861):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

2.088934865s ago: executing program 3 (id=865):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x9eb9, 0x4)
bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x91ff, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)

1.819258707s ago: executing program 1 (id=868):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x68040200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r9, 0x9}, &(0x7f00000002c0)=0x8)

1.786340381s ago: executing program 2 (id=869):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000003c0)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950028ffffff970ac2571b8775e05a0e00000000000000db1de319411d093471a30000000000000000000049326d17363a15", 0x5e}], 0x2}, 0x0)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
close(r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3)
sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140081ba061616e15113d5b5340000", @ANYRES16=r4, @ANYBLOB="478829bd70000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x40040)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.583387199s ago: executing program 0 (id=870):
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003ffe, 0x8, 0x0, 0x0}}, 0x10)

1.458172804s ago: executing program 2 (id=871):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)='gL', 0x2}], 0x1}}], 0x1, 0x2000c000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000080)=@gcm_128={{0x303}, "ceefacb02306e8f7", "c0b334a9697d76591283dfe06878ed36", "a1e13d8a", "a78964c9a8548a4d"}, 0x28)

1.429084261s ago: executing program 4 (id=872):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)

1.364361695s ago: executing program 0 (id=873):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, r1, 0xffffffffffffffff, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}}, 0x90)

1.275378384s ago: executing program 0 (id=874):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7c07e1fdf9c70acd, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48040)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x48, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xeb2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0), 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x800452d2, &(0x7f0000000100))
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x4bc, 0x1, 0x5, 0x80, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x7}, 0xe, 0xdd, 0x2, 0x76, 0x17, 'syz0\x00', "aa99d859036a6b889eee6d506f2d3302ee3adf6356c96a6f2511f64f55b7071e", "6d468e56433f37f7eef55bbeb359290a2550ae2a92f8dec203bdd1300463274e", [{0x9, 0x0, {0x1, 0x83c}}, {0x0, 0x6, {0x2}}, {0x9a3, 0x52, {0x3, 0x5}}, {0xfff, 0x1, {0x0, 0xb21a}}, {0xe0, 0x3ff, {0x1, 0x6}}, {0x5b, 0x1, {0x1, 0xf}}, {0x53, 0x9, {0x2, 0x8}}, {0x400, 0x9, {0x2, 0x7fff}}, {0x3, 0x8, {0x3, 0xc1}}, {0x3, 0x805, {0x1, 0x3076}}, {0x1, 0x0, {0xca953729eeb0453e, 0x100}}, {0xf000, 0x2, {0x1, 0x2}}, {0x3, 0x46, {0x1}}, {0x2, 0xb, {0x2, 0x4}}, {0x1, 0x2, {0x2, 0x8}}, {0x0, 0x76, {0x3, 0xffff8307}}, {0x3, 0x9, {0x3, 0x821e}}, {0xffff, 0x1000, {0x2, 0x17a7000}}, {0x26c, 0x3}, {0x0, 0x3, {0x3, 0x100}}, {0x5, 0xb9, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x6}}, {0x8, 0x8, {0x2, 0x66a}}, {0xd03, 0x40, {0x3, 0x352}}, {0x5, 0x3}, {0x1, 0x10, {0x1, 0x9}}, {0x3, 0x5, {0x1, 0xffffff5d}}, {0xfff8, 0x7, {0x1, 0x1}}, {0x6, 0x8, {0x2, 0x4}}, {0x7, 0x7, {0x3, 0x1}}, {0x7fff, 0x0, {0x1, 0x6}}, {0x2, 0x72a, {0x2, 0x80000001}}, {0x6, 0xf6b, {0x2, 0x1000}}, {0x0, 0x7, {0x2, 0xfffffffc}}, {0x2, 0x6, {0x1, 0x5}}, {0x33, 0x1000, {0x0, 0x4}}, {0x2, 0x0, {0x3, 0xfffffffb}}, {0xaca3, 0x6, {0x0, 0xff}}, {0x6, 0xb1d3, {0x0, 0x2}}, {0x20, 0x5, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x80}, 0x7e, 0x6, 0x0, 0xe, 0x1, 'syz1\x00', "969d62ce6277ac8fea891c43c99d24debfb7f7fda2a714bad4f13f2898adb25c", "3677935d751dcd4a3a0bf3a3cfdfd86846b87ea80ace125684c50f8ca7bc63a5", [{0x4, 0x8, {0x1, 0x4}}, {0x4b, 0x0, {0x0, 0x1d}}, {0x2, 0x8c9d, {0x1, 0x1}}, {0xf73b, 0xf, {0x1, 0x410}}, {0xc, 0x1, {0x0, 0x5}}, {0x8, 0x9, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0xa23}}, {0x8, 0x7, {0x1, 0x1}}, {0x8, 0xffff, {0x2, 0x92d}}, {0x4, 0xc41, {0x3, 0x5}}, {0x9, 0x646a, {0x3, 0x7}}, {0xfd7, 0xa, {0x1, 0x8}}, {0xffff, 0x8, {0x3, 0xa}}, {0x5, 0xb4a8, {0x1, 0x9}}, {0x0, 0x8, {0x1, 0x4c33c71a}}, {0xfe01, 0xff, {0x3, 0x6b6}}, {0x203, 0x3, {0x1, 0x8000}}, {0x2, 0x8, {0x1, 0x7}}, {0x1, 0x4000, {0x3, 0xffffffff}}, {0x3, 0x6, {0x0, 0x80000001}}, {0x1, 0x9, {0x0, 0x1}}, {0x9, 0x8001, {0x249932e8c63cf6ff, 0x7}}, {0x6, 0x5, {0x0, 0xf740}}, {0x1, 0x101, {0x2, 0x1f5}}, {0x7, 0x7ff, {0x2, 0x401}}, {0xdf5, 0x1, {0x2, 0x6}}, {0x16, 0xf9, {0x3, 0x40}}, {0x1, 0xfffb, {0x1, 0x81}}, {0x8, 0x2, {0x1, 0x6}}, {0xb, 0x400, {0x3, 0x8}}, {0x7, 0x4, {0x3}}, {0x9, 0x270, {0x0, 0x800570d}}, {0x36c, 0x5, {0x2, 0x7}}, {0x9, 0x7, {0x2, 0x10}}, {0x5, 0x7, {0x0, 0xcd2}}, {0x3, 0x7fff, {0x3, 0x638}}, {0x7ff, 0x3, {0x3, 0xfffffff4}}, {0xadf8, 0x7fff, {0x0, 0x1}}, {0x3ff, 0x6, {0x1, 0x5}}, {0x5, 0x800, {0x2, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x66}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"/328], 0x80}, 0x1, 0x0, 0x0, 0xab65375e4cf40d69}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000000000000002004e23e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e010100000000000000000000000000000000000000000000000000000000000000000000000088369a4800"/528], 0x210)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x114, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xac}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8e}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000891}, 0x20000800)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c)

1.239876738s ago: executing program 2 (id=875):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

1.220691242s ago: executing program 4 (id=876):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b20400fffd0c", 0x6, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
shutdown(r0, 0x1)

1.068248606s ago: executing program 3 (id=877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='6\x00'/12, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b"], 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x200, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8734d5b0159a3af9093fccc28476fa362e06ad58ea35f8c5feec7c2a8ff7301fdf19be900a3517c21962801aa233f57fb92c54c0bada11c5e5252f455122035e1eb1e7b26e64d71dd4cea592fb6b23a6b07238d152c947144e2bd43b67c0e778b1e9b89f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x10)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000006c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, @in={0x2, 0x4e20, @local}], 0x7c)
r5 = accept4(r4, 0x0, 0x0, 0x800)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a00000000fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000740)="bbc492c6e581bfbc24c5f6a2a848e5cbd0f2e8acda491e17574cfc2844e67bd01d61ad150944f49d662df96836a95208dafe2b86b213864a0d920db4a040a496c1a6c3ee825d7ace2eda1bc2f751f430ff7fb064c433968d9ccf", 0x5a}, {&(0x7f0000000940)="3d64092b706c1b726e23a0483a08ff1a7d78fcdaac80830dd6f7d9bffff0729d974dd646b0f22a2fc383485627c877fe21a84b143f1f2563271c6da05c9529d092de5c5e87cc07b5c85c9e8d6ee2f908f683abf758881bf366f75b0e2a117ad55ee214eb8bf0c44d1654326e8d18d3cc56f382724617627adc50f873dea41d241602ab237d57981a34180b1039382a", 0x8f}, {&(0x7f0000000a00)="cee51689136cd44a9382b59e0592e357a6e6376bc3761f19a358eb6124b4197d2e784708f5eb6ef14360d711c870e8f271ac5ecb19cc325e95218d6eecd739c55fb3e28a52614b5330661d56c41fb263d4fb995bc3251b89bf5a42fea91bcdc3304b1b4c1eeaa0a5935ced17103a1a506d800559e3a427c2", 0x78}, {&(0x7f0000000b80)="a332333aa954040c156a028fbd313ecad1c0a4284c08e4614753ac6614cfd6734d1feee5f493437dc9c4cbac3ff72e917325b2aa94f8027db83439647b33e87f62afd7fe500ce81a1f7d9dc62c0d8dcb7bcc775940651513244f6389d9f6de88cb2af7e9229a6a2a792293cb49c2694dec502d5f828cfeed594b5b5158b06bd5ee61e4756bf51a6b4f6a2b09f443ca189e09425b34fd47d120e3e36fc8135bac5607cf33b2162066d0a4c7e781faa184b2f4e3d87a", 0xb5}], 0x7, &(0x7f0000000380), 0x0, 0x4800}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000080)="29000300010003", 0x7)

1.038401341s ago: executing program 2 (id=878):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8918, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e20, @multicast2}})

960.522715ms ago: executing program 4 (id=879):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030001ac0f0011000100cabee339084eeef109002471f40000000800070000"], 0x60}}, 0x0)

875.652348ms ago: executing program 0 (id=880):
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

780.752432ms ago: executing program 1 (id=881):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000)
listen(r0, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2b, 0x80801, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c064", 0x14}], 0x1}}], 0x1, 0x24004044)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffab, @private1}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000002000000000e50003000000000085100000fc026e696e0000f6ffffffffffffff00000000000000009d50bc32001a627fc29eb51b11822c46faa3cb560f102732871cf51a0201d1a531a4f38a2f962207e40d4ebedcfa48d578a33afdf9d6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x200007, 0x4)
bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
recvfrom$inet6(r2, 0x0, 0x0, 0x12000, 0x0, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x4f0, 0x138, 0xffffffff, 0x370, 0x0, 0x608, 0x608, 0xffffffff, 0x608, 0x608, 0x5, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffff00, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'dummy0\x00', {0xff}, {0xff}, 0x84, 0xf, 0x6, 0xc28627634e0e09ee}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@loopback, @ipv6=@mcast2, @icmp_id=0x67, @gre_key=0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@local, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, @icmp_id=0x64, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xb, @ipv4=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}, @gre_key=0x3, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}, @port=0x4e21, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000840)=""/241, 0xf6}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80), 0x6}, 0xb0}, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x4a}, 0x6}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/188, 0xbc}], 0x1, &(0x7f0000000340)=""/146, 0x92}, 0x8}], 0x9, 0x20, 0x0)
bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24)

676.403075ms ago: executing program 0 (id=882):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000003c0)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950028ffffff970ac2571b8775e05a0e00000000000000db1de319411d093471a30000000000000000000049326d17363a15", 0x5e}], 0x2}, 0x0)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
close(r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3)
sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140081ba061616e15113d5b5340000", @ANYRES16=r4, @ANYBLOB="478829bd70000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x24048001}, 0x40040)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

663.50927ms ago: executing program 3 (id=883):
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003ffe, 0x8, 0x0, 0x0}}, 0x10)

515.9313ms ago: executing program 4 (id=884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, r1, 0xffffffffffffffff, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}}, 0x90)

424.575608ms ago: executing program 2 (id=885):
getsockopt(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000000)=""/19, &(0x7f0000003300)=0x13)

356.259631ms ago: executing program 3 (id=886):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)

355.594134ms ago: executing program 0 (id=887):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r2=>0x0})
socket$kcm(0x2, 0x3, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
socket$key(0xf, 0x3, 0x2)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
connect$can_bcm(r4, &(0x7f00000000c0), 0x26)
sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="010000000300"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0)
sendto$packet(r0, &(0x7f0000000140)="33aaf14f564b1bf220cb1137d54b407511ce09dfd9657fe35b6e5e7d6f4002e47989e9f25a962052eeca00cc37a1f105fd65344cc8c425f200"/72, 0x48, 0x40, &(0x7f0000000200)={0x11, 0x2, r2, 0x1, 0x8, 0x6, @local}, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x13}}}, 0x24}}, 0x0)

237.088697ms ago: executing program 3 (id=888):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x68040200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r9, 0x9}, &(0x7f00000002c0)=0x8)

230.475755ms ago: executing program 4 (id=889):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b20400fffd0c", 0x6, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
shutdown(r0, 0x1)

174.905844ms ago: executing program 1 (id=890):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r1 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x400)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r5})
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)="93a7", 0x2}], 0x1}, 0x40)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="bf3b7fd13dd270067bfbf92a4b73f5cb64e35b8b81bb878c9333e5c34a59668ae8c3dd44c768893f0ee18f29eb38e12af456ba33f7604901817b0f23cbf011d07dc54e057dc9cc763df971ae", @ANYRESOCT=r0, @ANYRES32=r11, @ANYRESDEC=r10], 0x58}, 0x1, 0x0, 0x0, 0x48010}, 0x20008014)
socket$nl_generic(0x10, 0x3, 0x10)

100.278413ms ago: executing program 2 (id=891):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7c07e1fdf9c70acd, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48040)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x48, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xeb2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0), 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x500}, 0x0)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r9, 0x800452d2, &(0x7f0000000100))
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x4bc, 0x1, 0x5, 0x80, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x7}, 0xe, 0xdd, 0x2, 0x76, 0x17, 'syz0\x00', "aa99d859036a6b889eee6d506f2d3302ee3adf6356c96a6f2511f64f55b7071e", "6d468e56433f37f7eef55bbeb359290a2550ae2a92f8dec203bdd1300463274e", [{0x9, 0x0, {0x1, 0x83c}}, {0x0, 0x6, {0x2}}, {0x9a3, 0x52, {0x3, 0x5}}, {0xfff, 0x1, {0x0, 0xb21a}}, {0xe0, 0x3ff, {0x1, 0x6}}, {0x5b, 0x1, {0x1, 0xf}}, {0x53, 0x9, {0x2, 0x8}}, {0x400, 0x9, {0x2, 0x7fff}}, {0x3, 0x8, {0x3, 0xc1}}, {0x3, 0x805, {0x1, 0x3076}}, {0x1, 0x0, {0xca953729eeb0453e, 0x100}}, {0xf000, 0x2, {0x1, 0x2}}, {0x3, 0x46, {0x1}}, {0x2, 0xb, {0x2, 0x4}}, {0x1, 0x2, {0x2, 0x8}}, {0x0, 0x76, {0x3, 0xffff8307}}, {0x3, 0x9, {0x3, 0x821e}}, {0xffff, 0x1000, {0x2, 0x17a7000}}, {0x26c, 0x3}, {0x0, 0x3, {0x3, 0x100}}, {0x5, 0xb9, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x6}}, {0x8, 0x8, {0x2, 0x66a}}, {0xd03, 0x40, {0x3, 0x352}}, {0x5, 0x3}, {0x1, 0x10, {0x1, 0x9}}, {0x3, 0x5, {0x1, 0xffffff5d}}, {0xfff8, 0x7, {0x1, 0x1}}, {0x6, 0x8, {0x2, 0x4}}, {0x7, 0x7, {0x3, 0x1}}, {0x7fff, 0x0, {0x1, 0x6}}, {0x2, 0x72a, {0x2, 0x80000001}}, {0x6, 0xf6b, {0x2, 0x1000}}, {0x0, 0x7, {0x2, 0xfffffffc}}, {0x2, 0x6, {0x1, 0x5}}, {0x33, 0x1000, {0x0, 0x4}}, {0x2, 0x0, {0x3, 0xfffffffb}}, {0xaca3, 0x6, {0x0, 0xff}}, {0x6, 0xb1d3, {0x0, 0x2}}, {0x20, 0x5, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x80}, 0x7e, 0x6, 0x0, 0xe, 0x1, 'syz1\x00', "969d62ce6277ac8fea891c43c99d24debfb7f7fda2a714bad4f13f2898adb25c", "3677935d751dcd4a3a0bf3a3cfdfd86846b87ea80ace125684c50f8ca7bc63a5", [{0x4, 0x8, {0x1, 0x4}}, {0x4b, 0x0, {0x0, 0x1d}}, {0x2, 0x8c9d, {0x1, 0x1}}, {0xf73b, 0xf, {0x1, 0x410}}, {0xc, 0x1, {0x0, 0x5}}, {0x8, 0x9, {0x1, 0x3}}, {0x8, 0x3, {0x1, 0xa23}}, {0x8, 0x7, {0x1, 0x1}}, {0x8, 0xffff, {0x2, 0x92d}}, {0x4, 0xc41, {0x3, 0x5}}, {0x9, 0x646a, {0x3, 0x7}}, {0xfd7, 0xa, {0x1, 0x8}}, {0xffff, 0x8, {0x3, 0xa}}, {0x5, 0xb4a8, {0x1, 0x9}}, {0x0, 0x8, {0x1, 0x4c33c71a}}, {0xfe01, 0xff, {0x3, 0x6b6}}, {0x203, 0x3, {0x1, 0x8000}}, {0x2, 0x8, {0x1, 0x7}}, {0x1, 0x4000, {0x3, 0xffffffff}}, {0x3, 0x6, {0x0, 0x80000001}}, {0x1, 0x9, {0x0, 0x1}}, {0x9, 0x8001, {0x249932e8c63cf6ff, 0x7}}, {0x6, 0x5, {0x0, 0xf740}}, {0x1, 0x101, {0x2, 0x1f5}}, {0x7, 0x7ff, {0x2, 0x401}}, {0xdf5, 0x1, {0x2, 0x6}}, {0x16, 0xf9, {0x3, 0x40}}, {0x1, 0xfffb, {0x1, 0x81}}, {0x8, 0x2, {0x1, 0x6}}, {0xb, 0x400, {0x3, 0x8}}, {0x7, 0x4, {0x3}}, {0x9, 0x270, {0x0, 0x800570d}}, {0x36c, 0x5, {0x2, 0x7}}, {0x9, 0x7, {0x2, 0x10}}, {0x5, 0x7, {0x0, 0xcd2}}, {0x3, 0x7fff, {0x3, 0x638}}, {0x7ff, 0x3, {0x3, 0xfffffff4}}, {0xadf8, 0x7fff, {0x0, 0x1}}, {0x3ff, 0x6, {0x1, 0x5}}, {0x5, 0x800, {0x2, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x66}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"/328], 0x80}, 0x1, 0x0, 0x0, 0xab65375e4cf40d69}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="060000000000000002004e23e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e010100000000000000000000000000000000000000000000000000000000000000000000000088369a4800"/528], 0x210)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x114, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xac}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8e}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000891}, 0x20000800)
setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c)

0s ago: executing program 4 (id=892):
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x87)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$tipc(0x1e, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10)

kernel console output (not intermixed with test programs):

0] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.087314][ T5840] bridge_slave_1: entered allmulticast mode
[   89.094972][ T5840] bridge_slave_1: entered promiscuous mode
[   89.184253][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   89.259836][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.325391][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.406874][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.414255][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.421984][ T5839] bridge_slave_0: entered allmulticast mode
[   89.430515][ T5839] bridge_slave_0: entered promiscuous mode
[   89.472673][ T5840] team0: Port device team_slave_0 added
[   89.479671][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   89.492797][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.500198][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.507583][ T5839] bridge_slave_1: entered allmulticast mode
[   89.515998][ T5839] bridge_slave_1: entered promiscuous mode
[   89.542868][ T5840] team0: Port device team_slave_1 added
[   89.595211][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.603018][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.610525][ T5844] bridge_slave_0: entered allmulticast mode
[   89.617924][ T5844] bridge_slave_0: entered promiscuous mode
[   89.647544][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.654566][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.680556][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.711797][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.734912][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.742562][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.749882][ T5844] bridge_slave_1: entered allmulticast mode
[   89.757170][ T5844] bridge_slave_1: entered promiscuous mode
[   89.783257][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.790543][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.816893][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.839154][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.861971][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.869562][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.876759][ T5841] bridge_slave_0: entered allmulticast mode
[   89.884365][ T5841] bridge_slave_0: entered promiscuous mode
[   89.949433][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.957144][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.964690][ T5841] bridge_slave_1: entered allmulticast mode
[   89.972354][ T5841] bridge_slave_1: entered promiscuous mode
[   90.026769][ T5839] team0: Port device team_slave_0 added
[   90.050603][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.064091][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.092677][ T5840] hsr_slave_0: entered promiscuous mode
[   90.099190][ T5840] hsr_slave_1: entered promiscuous mode
[   90.108576][ T5839] team0: Port device team_slave_1 added
[   90.116948][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.153871][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.161150][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.169183][ T5843] bridge_slave_0: entered allmulticast mode
[   90.176369][ T5843] bridge_slave_0: entered promiscuous mode
[   90.200910][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.238984][ T5855] Bluetooth: hci0: command tx timeout
[   90.247998][   T55] Bluetooth: hci1: command tx timeout
[   90.256918][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.264531][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.272010][ T5843] bridge_slave_1: entered allmulticast mode
[   90.279924][ T5843] bridge_slave_1: entered promiscuous mode
[   90.316406][ T5844] team0: Port device team_slave_0 added
[   90.318354][ T5855] Bluetooth: hci3: command tx timeout
[   90.322749][ T5857] Bluetooth: hci2: command tx timeout
[   90.327492][   T55] Bluetooth: hci4: command tx timeout
[   90.337085][ T5844] team0: Port device team_slave_1 added
[   90.365867][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.373122][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.399898][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.412804][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.420014][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.445980][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.460114][ T5841] team0: Port device team_slave_0 added
[   90.513828][ T5841] team0: Port device team_slave_1 added
[   90.549235][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.556205][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.582772][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.605086][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.618598][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.642780][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.649901][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.677259][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.727338][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.734654][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.760742][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.801749][ T5843] team0: Port device team_slave_0 added
[   90.821643][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.828963][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.855116][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.895722][ T5843] team0: Port device team_slave_1 added
[   90.907095][ T5839] hsr_slave_0: entered promiscuous mode
[   90.913701][ T5839] hsr_slave_1: entered promiscuous mode
[   90.920287][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.928061][ T5839] Cannot create hsr debugfs directory
[   91.034346][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.042043][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.068379][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.081490][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.089179][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.115523][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.132865][ T5841] hsr_slave_0: entered promiscuous mode
[   91.139278][ T5841] hsr_slave_1: entered promiscuous mode
[   91.145320][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.152945][ T5841] Cannot create hsr debugfs directory
[   91.252742][ T5844] hsr_slave_0: entered promiscuous mode
[   91.259220][ T5844] hsr_slave_1: entered promiscuous mode
[   91.265344][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.273090][ T5844] Cannot create hsr debugfs directory
[   91.417377][ T5843] hsr_slave_0: entered promiscuous mode
[   91.424361][ T5843] hsr_slave_1: entered promiscuous mode
[   91.431124][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.439975][ T5843] Cannot create hsr debugfs directory
[   91.671458][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.718351][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.737279][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.778615][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.868016][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.903846][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.914591][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.923041][    T9] cfg80211: failed to load regulatory.db
[   91.951290][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.007512][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.024811][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.063103][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.074497][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.146951][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.175060][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.185730][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.220382][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.268289][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.318823][ T5855] Bluetooth: hci1: command tx timeout
[   92.318840][   T55] Bluetooth: hci0: command tx timeout
[   92.364285][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.374540][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.398159][   T55] Bluetooth: hci3: command tx timeout
[   92.398634][ T5857] Bluetooth: hci4: command tx timeout
[   92.409547][ T5855] Bluetooth: hci2: command tx timeout
[   92.418839][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.431862][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.452705][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   92.483399][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.490690][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.537043][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.544221][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.597034][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.647342][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.660530][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.686158][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.727837][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   92.754880][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.780830][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.788056][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.806160][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   92.851348][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.858565][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.884743][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.891926][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.903544][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.910756][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.950830][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   93.023901][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.031042][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.066707][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.073849][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.157807][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.176318][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.252283][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.315566][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   93.383764][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.390991][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.456171][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.463410][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.596533][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.774914][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.815428][ T5840] veth0_vlan: entered promiscuous mode
[   93.862044][ T5839] veth0_vlan: entered promiscuous mode
[   93.904788][ T5839] veth1_vlan: entered promiscuous mode
[   93.927232][ T5840] veth1_vlan: entered promiscuous mode
[   93.996333][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.040421][ T5841] veth0_vlan: entered promiscuous mode
[   94.060484][ T5841] veth1_vlan: entered promiscuous mode
[   94.107354][ T5839] veth0_macvtap: entered promiscuous mode
[   94.121117][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.140731][ T5840] veth0_macvtap: entered promiscuous mode
[   94.155966][ T5839] veth1_macvtap: entered promiscuous mode
[   94.181470][ T5841] veth0_macvtap: entered promiscuous mode
[   94.197385][ T5840] veth1_macvtap: entered promiscuous mode
[   94.230219][ T5841] veth1_macvtap: entered promiscuous mode
[   94.250380][ T5844] veth0_vlan: entered promiscuous mode
[   94.280405][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.294178][ T5844] veth1_vlan: entered promiscuous mode
[   94.314014][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.325942][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.336721][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.348903][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.359524][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.370982][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.381566][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.392971][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.404130][ T5855] Bluetooth: hci0: command tx timeout
[   94.409758][ T5857] Bluetooth: hci1: command tx timeout
[   94.415915][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.437909][ T5843] veth0_vlan: entered promiscuous mode
[   94.447215][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.457330][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.466198][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.475007][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.484161][ T5855] Bluetooth: hci3: command tx timeout
[   94.488102][ T5857] Bluetooth: hci4: command tx timeout
[   94.495371][ T5855] Bluetooth: hci2: command tx timeout
[   94.507232][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.518777][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.530121][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.548494][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.561375][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.571929][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.582981][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.594449][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.616480][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.626010][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.635016][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.645053][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.672086][ T5843] veth1_vlan: entered promiscuous mode
[   94.690320][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.700289][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.709589][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.720784][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.741809][ T5844] veth0_macvtap: entered promiscuous mode
[   94.773508][ T5844] veth1_macvtap: entered promiscuous mode
[   94.867718][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.882908][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.892832][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.903399][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.913354][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.923894][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.935238][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.960785][ T5843] veth0_macvtap: entered promiscuous mode
[   94.981195][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.990331][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.002083][ T5843] veth1_macvtap: entered promiscuous mode
[   95.016181][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.026950][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.036995][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.049235][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.059114][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.069653][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.080970][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.115366][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.125541][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.134987][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.144120][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.173936][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.188252][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.231289][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.240923][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.252264][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.265069][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.275940][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.287463][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.297431][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.308625][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.318586][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.329108][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.341105][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.376543][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.387317][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.399664][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.410551][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.420683][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.431182][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.441394][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.452762][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.464566][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.491878][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.493706][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.515228][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.526085][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.540256][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.549857][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.594380][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.609539][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.614411][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.764549][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.788347][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.875478][ T5930] Bluetooth: MGMT ver 1.23
[   95.898721][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.916856][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.983813][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.011495][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.063044][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.105836][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.250376][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.296256][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.380482][ T5943] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7'.
[   96.411858][ T5934] syzkaller0: entered promiscuous mode
[   96.417394][ T5934] syzkaller0: entered allmulticast mode
[   96.476236][ T5893] IPVS: starting estimator thread 0...
[   96.489344][ T5857] Bluetooth: hci1: command tx timeout
[   96.494835][ T5855] Bluetooth: hci0: command tx timeout
[   96.552716][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'.
[   96.568380][ T5855] Bluetooth: hci2: command tx timeout
[   96.574352][ T5857] Bluetooth: hci4: command tx timeout
[   96.578060][   T55] Bluetooth: hci3: command tx timeout
[   96.599041][ T5946] IPVS: using max 29 ests per chain, 69600 per kthread
[   99.926403][   T30] audit: type=1800 audit(1745388413.689:2): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="memory.events" dev="tmpfs" ino=38 res=0 errno=0
[   99.949990][ T6006] xt_hashlimit: max too large, truncated to 1048576
[  100.002680][   T30] audit: type=1804 audit(1745388413.699:3): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.20" name="/newroot/4/memory.events" dev="tmpfs" ino=38 res=1 errno=0
[  100.054595][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'.
[  100.068495][ T6013] trusted_key: syz.0.19 sent an empty control message without MSG_MORE.
[  100.744637][ T6028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  100.971512][ T6028] Zero length message leads to an empty skb
[  101.095948][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'.
[  101.366521][ T6039] netlink: 76 bytes leftover after parsing attributes in process `syz.4.28'.
[  101.468556][ T6045] xt_hashlimit: max too large, truncated to 1048576
[  101.637696][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[  101.954674][ T5894] IPVS: starting estimator thread 0...
[  102.060248][ T6060] IPVS: using max 26 ests per chain, 62400 per kthread
[  102.321006][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'.
[  102.663870][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'.
[  102.724756][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'.
[  102.763137][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'.
[  102.795358][ T6072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  102.996396][ T6072] sctp: [Deprecated]: syz.1.35 (pid 6072) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.996396][ T6072] Use struct sctp_sack_info instead
[  103.162612][ T6070] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  103.168634][ T6073] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  103.281508][ T6070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  103.415208][ T6085] IPv6: syztnl2: Disabled Multicast RS
[  103.487398][ T6087] xt_hashlimit: max too large, truncated to 1048576
[  103.700139][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'.
[  103.707072][ T6093] syz.4.40 uses obsolete (PF_INET,SOCK_PACKET)
[  103.927304][ T6095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.980353][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'.
[  104.133001][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.147070][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.157017][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.168344][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.415938][ T5833] IPVS: starting estimator thread 0...
[  104.475807][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'.
[  104.548717][ T6105] IPVS: using max 26 ests per chain, 62400 per kthread
[  104.554467][ T6113] xt_hashlimit: max too large, truncated to 1048576
[  104.646778][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'.
[  104.667799][ T6112] netlink: 76 bytes leftover after parsing attributes in process `syz.0.46'.
[  104.808346][ T5833] IPVS: starting estimator thread 0...
[  104.918487][ T6118] IPVS: using max 27 ests per chain, 64800 per kthread
[  107.423685][ T6172] xt_hashlimit: max too large, truncated to 1048576
[  107.727659][ T6170] __nla_validate_parse: 2 callbacks suppressed
[  107.727682][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'.
[  108.032008][    T9] IPVS: starting estimator thread 0...
[  108.148410][ T6183] IPVS: using max 25 ests per chain, 60000 per kthread
[  108.591048][ T6194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.67'.
[  108.952729][ T6205] unsupported nlmsg_type 40
[  108.981304][ T6203] bridge_slave_0: left allmulticast mode
[  108.998255][ T6203] bridge_slave_0: left promiscuous mode
[  109.026265][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.130863][ T6203] bridge_slave_1: left allmulticast mode
[  109.181882][ T6203] bridge_slave_1: left promiscuous mode
[  109.188177][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.211826][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'.
[  109.258647][ T6203] bond0: (slave bond_slave_0): Releasing backup interface
[  109.276088][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.71'.
[  109.330357][ T6203] bond0: (slave bond_slave_1): Releasing backup interface
[  109.361159][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.3.71'.
[  109.394194][ T6196] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  109.396455][ T6203] team0: Port device team_slave_0 removed
[  109.434225][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'.
[  109.484431][ T6203] team0: Port device team_slave_1 removed
[  109.748712][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.788164][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.968248][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.068713][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.099170][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.188176][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.229843][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.315345][ T6248] ip6t_srh: unknown srh match flags  5294
[  110.372590][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.382955][ T6244] can: request_module (can-proto-4) failed.
[  110.448578][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.518481][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.728644][   T55] Bluetooth: hci3: command 0x0401 tx timeout
[  110.863555][ T6263] FAULT_INJECTION: forcing a failure.
[  110.863555][ T6263] name failslab, interval 1, probability 0, space 0, times 1
[  111.018601][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.1.82 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  111.018632][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  111.018648][ T6263] Call Trace:
[  111.018656][ T6263]  <TASK>
[  111.018665][ T6263]  dump_stack_lvl+0x241/0x360
[  111.018707][ T6263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.018735][ T6263]  ? __pfx__printk+0x10/0x10
[  111.018765][ T6263]  ? is_bpf_text_address+0x26/0x2a0
[  111.018802][ T6263]  should_fail_ex+0x424/0x570
[  111.018835][ T6263]  should_failslab+0xac/0x100
[  111.018858][ T6263]  __kmalloc_noprof+0xdf/0x4d0
[  111.018877][ T6263]  ? dev_prep_valid_name+0x20c/0x860
[  111.018911][ T6263]  dev_prep_valid_name+0x20c/0x860
[  111.018943][ T6263]  ? __pfx___might_resched+0x10/0x10
[  111.018974][ T6263]  ? __pfx_dev_prep_valid_name+0x10/0x10
[  111.019012][ T6263]  ? __raw_spin_lock_init+0x45/0x100
[  111.019038][ T6263]  register_netdevice+0x53e/0x1b80
[  111.019069][ T6263]  ? net_generic+0x1f/0x240
[  111.019088][ T6263]  ? net_generic+0x1f0/0x240
[  111.019115][ T6263]  ? vxlan_vni_in_use+0x3a5/0x3e0
[  111.019136][ T6263]  ? __pfx_register_netdevice+0x10/0x10
[  111.019161][ T6263]  ? vxlan_config_apply+0x2a3/0x830
[  111.019186][ T6263]  ? __asan_memcpy+0x40/0x70
[  111.019212][ T6263]  ? __vxlan_dev_create+0x154/0x6f0
[  111.019258][ T6263]  __vxlan_dev_create+0x181/0x6f0
[  111.019290][ T6263]  ? __pfx___vxlan_dev_create+0x10/0x10
[  111.019324][ T6263]  vxlan_newlink+0x186/0x1f0
[  111.019351][ T6263]  ? __pfx_vxlan_newlink+0x10/0x10
[  111.019391][ T6263]  ? rtnl_create_link+0x964/0xc90
[  111.019419][ T6263]  ? __pfx_vxlan_newlink+0x10/0x10
[  111.019444][ T6263]  rtnl_newlink_create+0x3a1/0xc30
[  111.019467][ T6263]  ? __mutex_lock+0x380/0x10c0
[  111.019491][ T6263]  ? __pfx_aa_get_newest_label+0x10/0x10
[  111.019520][ T6263]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  111.019546][ T6263]  ? __pfx___mutex_lock+0x10/0x10
[  111.019576][ T6263]  ? ns_capable+0x8a/0xf0
[  111.019609][ T6263]  rtnl_newlink+0x18b0/0x1fe0
[  111.019662][ T6263]  ? __pfx_rtnl_newlink+0x10/0x10
[  111.019690][ T6263]  ? dev_hard_start_xmit+0x2d9/0x830
[  111.019712][ T6263]  ? __dev_queue_xmit+0x1b80/0x3f60
[  111.019735][ T6263]  ? __netlink_deliver_tap+0x561/0x7f0
[  111.019764][ T6263]  ? netlink_deliver_tap+0x19d/0x1b0
[  111.019793][ T6263]  ? netlink_unicast+0x7c6/0x9a0
[  111.019817][ T6263]  ? netlink_sendmsg+0x8c3/0xcd0
[  111.019846][ T6263]  ? __sock_sendmsg+0x221/0x270
[  111.019873][ T6263]  ? ____sys_sendmsg+0x523/0x860
[  111.019894][ T6263]  ? __sys_sendmmsg+0x3a0/0x7b0
[  111.019914][ T6263]  ? __x64_sys_sendmmsg+0xa0/0xb0
[  111.019936][ T6263]  ? do_syscall_64+0xf3/0x210
[  111.019954][ T6263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.020014][ T6263]  ? kasan_quarantine_put+0xdc/0x230
[  111.020039][ T6263]  ? lockdep_hardirqs_on+0x9d/0x150
[  111.020074][ T6263]  ? nlmon_xmit+0xaf/0x100
[  111.020108][ T6263]  ? __local_bh_enable_ip+0x168/0x200
[  111.020137][ T6263]  ? lockdep_hardirqs_on+0x9d/0x150
[  111.020178][ T6263]  ? aa_get_newest_label+0x101/0x6f0
[  111.020211][ T6263]  ? __lock_acquire+0xad5/0xd80
[  111.020263][ T6263]  ? __pfx_rtnl_newlink+0x10/0x10
[  111.020296][ T6263]  rtnetlink_rcv_msg+0x80f/0xd70
[  111.020325][ T6263]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  111.020362][ T6263]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.020402][ T6263]  ? ref_tracker_free+0x63e/0x7e0
[  111.020435][ T6263]  netlink_rcv_skb+0x208/0x480
[  111.020467][ T6263]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.020501][ T6263]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  111.020552][ T6263]  ? netlink_deliver_tap+0x2e/0x1b0
[  111.020597][ T6263]  ? netlink_deliver_tap+0x2e/0x1b0
[  111.020648][ T6263]  netlink_unicast+0x7f8/0x9a0
[  111.020684][ T6263]  ? __pfx_netlink_unicast+0x10/0x10
[  111.020715][ T6263]  ? skb_put+0x114/0x1f0
[  111.020740][ T6263]  netlink_sendmsg+0x8c3/0xcd0
[  111.020784][ T6263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.020821][ T6263]  ? aa_sock_msg_perm+0x91/0x160
[  111.020854][ T6263]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.020882][ T6263]  __sock_sendmsg+0x221/0x270
[  111.020916][ T6263]  ____sys_sendmsg+0x523/0x860
[  111.020950][ T6263]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.020971][ T6263]  ? __fget_files+0x2a/0x420
[  111.020994][ T6263]  ? __fget_files+0x2a/0x420
[  111.021025][ T6263]  __sys_sendmmsg+0x3a0/0x7b0
[  111.021063][ T6263]  ? __pfx___sys_sendmmsg+0x10/0x10
[  111.021133][ T6263]  ? rcu_read_lock_any_held+0xbb/0x160
[  111.021156][ T6263]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  111.021181][ T6263]  ? vfs_write+0xb29/0xd10
[  111.021220][ T6263]  ? ksys_write+0x24e/0x2d0
[  111.021252][ T6263]  ? __mutex_unlock_slowpath+0x229/0x800
[  111.021306][ T6263]  ? ksys_write+0x275/0x2d0
[  111.021347][ T6263]  __x64_sys_sendmmsg+0xa0/0xb0
[  111.021375][ T6263]  do_syscall_64+0xf3/0x210
[  111.021395][ T6263]  ? clear_bhb_loop+0x45/0xa0
[  111.021420][ T6263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.021441][ T6263] RIP: 0033:0x7f604d38e169
[  111.021466][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.021482][ T6263] RSP: 002b:00007f604e2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  111.021505][ T6263] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38e169
[  111.021520][ T6263] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003
[  111.021534][ T6263] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000
[  111.021546][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  111.021558][ T6263] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8
[  111.021591][ T6263]  </TASK>
[  111.826571][ T6268] netlink: 48 bytes leftover after parsing attributes in process `syz.4.84'.
[  111.958240][ T6272] xt_hashlimit: max too large, truncated to 1048576
[  112.013214][ T6275] netlink: 48 bytes leftover after parsing attributes in process `syz.1.85'.
[  112.041012][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'.
[  112.155199][ T6282] xt_hashlimit: max too large, truncated to 1048576
[  112.474531][ T6292] xt_hashlimit: max too large, truncated to 1048576
[  112.476253][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'.
[  112.760952][ T6304] __nla_validate_parse: 1 callbacks suppressed
[  112.760974][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.92'.
[  112.862875][ T6306] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  113.266370][ T6325] xt_hashlimit: max too large, truncated to 1048576
[  113.492753][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'.
[  113.752245][ T6348] xt_hashlimit: max too large, truncated to 1048576
[  113.843656][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.104'.
[  114.135515][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.109'.
[  114.296471][ T6365] netlink: 'syz.4.110': attribute type 3 has an invalid length.
[  114.671998][ T6377] FAULT_INJECTION: forcing a failure.
[  114.671998][ T6377] name failslab, interval 1, probability 0, space 0, times 0
[  114.727686][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.116 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  114.727725][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  114.727738][ T6377] Call Trace:
[  114.727746][ T6377]  <TASK>
[  114.727755][ T6377]  dump_stack_lvl+0x241/0x360
[  114.727792][ T6377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.727829][ T6377]  ? __pfx__printk+0x10/0x10
[  114.727865][ T6377]  ? __pfx___might_resched+0x10/0x10
[  114.727901][ T6377]  should_fail_ex+0x424/0x570
[  114.727930][ T6377]  should_failslab+0xac/0x100
[  114.727954][ T6377]  __kvmalloc_node_noprof+0x170/0x5a0
[  114.727976][ T6377]  ? bpf_test_run_xdp_live+0x292/0x2220
[  114.728013][ T6377]  bpf_test_run_xdp_live+0x292/0x2220
[  114.728057][ T6377]  ? bpf_dispatcher_change_prog+0xd7b/0xf00
[  114.728090][ T6377]  ? __mutex_unlock_slowpath+0x229/0x800
[  114.728122][ T6377]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  114.728150][ T6377]  ? synchronize_rcu+0x11e/0x370
[  114.728170][ T6377]  ? __pfx_synchronize_rcu+0x10/0x10
[  114.728212][ T6377]  ? 0xffffffffa0003b40
[  114.728231][ T6377]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  114.728258][ T6377]  ? 0xffffffffa0000948
[  114.728297][ T6377]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  114.728347][ T6377]  ? _copy_from_user+0x95/0xb0
[  114.728385][ T6377]  ? bpf_test_init+0x130/0x170
[  114.728411][ T6377]  ? xdp_convert_md_to_buff+0x5b/0x330
[  114.728444][ T6377]  bpf_prog_test_run_xdp+0x809/0x1200
[  114.728494][ T6377]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  114.728525][ T6377]  ? __fget_files+0x2a/0x420
[  114.728548][ T6377]  ? __fget_files+0x2a/0x420
[  114.728571][ T6377]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  114.728604][ T6377]  bpf_prog_test_run+0x2e4/0x360
[  114.728635][ T6377]  __sys_bpf+0x4ee/0x8b0
[  114.728663][ T6377]  ? __pfx___sys_bpf+0x10/0x10
[  114.728702][ T6377]  ? ksys_write+0x275/0x2d0
[  114.728744][ T6377]  __x64_sys_bpf+0x7c/0x90
[  114.728769][ T6377]  do_syscall_64+0xf3/0x210
[  114.728789][ T6377]  ? clear_bhb_loop+0x45/0xa0
[  114.728821][ T6377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.728841][ T6377] RIP: 0033:0x7f325198e169
[  114.728859][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.728875][ T6377] RSP: 002b:00007f325282c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  114.728897][ T6377] RAX: ffffffffffffffda RBX: 00007f3251bb5fa0 RCX: 00007f325198e169
[  114.728913][ T6377] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a
[  114.728925][ T6377] RBP: 00007f325282c090 R08: 0000000000000000 R09: 0000000000000000
[  114.728938][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  114.728950][ T6377] R13: 0000000000000000 R14: 00007f3251bb5fa0 R15: 00007ffdd5de25f8
[  114.728981][ T6377]  </TASK>
[  115.137667][ T6381] netlink: 'syz.3.117': attribute type 1 has an invalid length.
[  115.338467][ T6394] xt_hashlimit: max too large, truncated to 1048576
[  115.347664][ T6381] bond1: entered promiscuous mode
[  115.362124][ T6381] 8021q: adding VLAN 0 to HW filter on device bond1
[  115.370534][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.122'.
[  115.471115][ T6390] bond1: (slave bridge2): making interface the new active one
[  115.490082][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'.
[  115.492483][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[  115.533575][ T6390] bridge2: entered promiscuous mode
[  115.619244][ T6390] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  116.987637][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.132'.
[  117.033792][ T6442] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  117.432729][ T6461] FAULT_INJECTION: forcing a failure.
[  117.432729][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  117.515136][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: syz.1.136 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  117.515168][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  117.515181][ T6461] Call Trace:
[  117.515189][ T6461]  <TASK>
[  117.515198][ T6461]  dump_stack_lvl+0x241/0x360
[  117.515234][ T6461]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.515263][ T6461]  ? __pfx__printk+0x10/0x10
[  117.515303][ T6461]  should_fail_ex+0x424/0x570
[  117.515332][ T6461]  _copy_to_user+0x31/0xb0
[  117.515366][ T6461]  simple_read_from_buffer+0xc4/0x170
[  117.515401][ T6461]  proc_fail_nth_read+0x1ef/0x260
[  117.515437][ T6461]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  117.515485][ T6461]  ? rw_verify_area+0x246/0x630
[  117.515511][ T6461]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  117.515545][ T6461]  vfs_read+0x21f/0xb90
[  117.515578][ T6461]  ? __pfx___mutex_lock+0x10/0x10
[  117.515600][ T6461]  ? __pfx_vfs_read+0x10/0x10
[  117.515639][ T6461]  ? __fget_files+0x2a/0x420
[  117.515660][ T6461]  ? __fget_files+0x39d/0x420
[  117.515677][ T6461]  ? __fget_files+0x2a/0x420
[  117.515706][ T6461]  ksys_read+0x19d/0x2d0
[  117.515736][ T6461]  ? __pfx_ksys_read+0x10/0x10
[  117.515770][ T6461]  ? do_syscall_64+0xb6/0x210
[  117.515795][ T6461]  do_syscall_64+0xf3/0x210
[  117.515815][ T6461]  ? clear_bhb_loop+0x45/0xa0
[  117.515840][ T6461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.515860][ T6461] RIP: 0033:0x7f604d38cb7c
[  117.515879][ T6461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  117.515897][ T6461] RSP: 002b:00007f604e2bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  117.515920][ T6461] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38cb7c
[  117.515935][ T6461] RDX: 000000000000000f RSI: 00007f604e2bf0a0 RDI: 0000000000000006
[  117.515948][ T6461] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000
[  117.515961][ T6461] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.515974][ T6461] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8
[  117.516006][ T6461]  </TASK>
[  118.023085][ T6483] xt_hashlimit: max too large, truncated to 1048576
[  118.139371][ T6481] Illegal XDP return value 4294967274 on prog  (id 53) dev N/A, expect packet loss!
[  118.166886][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'.
[  118.383040][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'.
[  118.556642][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.146'.
[  119.167815][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.151'.
[  119.903274][ T6538] FAULT_INJECTION: forcing a failure.
[  119.903274][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.943980][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.2.154 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  119.944012][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  119.944024][ T6538] Call Trace:
[  119.944032][ T6538]  <TASK>
[  119.944041][ T6538]  dump_stack_lvl+0x241/0x360
[  119.944084][ T6538]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.944113][ T6538]  ? __pfx__printk+0x10/0x10
[  119.944154][ T6538]  should_fail_ex+0x424/0x570
[  119.944183][ T6538]  _copy_from_user+0x2d/0xb0
[  119.944215][ T6538]  move_addr_to_kernel+0x7f/0x170
[  119.944248][ T6538]  copy_msghdr_from_user+0x477/0x580
[  119.944284][ T6538]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  119.944311][ T6538]  ? __fget_files+0x2a/0x420
[  119.944334][ T6538]  ? __fget_files+0x2a/0x420
[  119.944362][ T6538]  __sys_sendmsg+0x20a/0x360
[  119.944392][ T6538]  ? __pfx___sys_sendmsg+0x10/0x10
[  119.944474][ T6538]  ? do_syscall_64+0xb6/0x210
[  119.944498][ T6538]  do_syscall_64+0xf3/0x210
[  119.944518][ T6538]  ? clear_bhb_loop+0x45/0xa0
[  119.944543][ T6538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.944569][ T6538] RIP: 0033:0x7f325198e169
[  119.944588][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.944604][ T6538] RSP: 002b:00007f325282c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.944627][ T6538] RAX: ffffffffffffffda RBX: 00007f3251bb5fa0 RCX: 00007f325198e169
[  119.944642][ T6538] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003
[  119.944659][ T6538] RBP: 00007f325282c090 R08: 0000000000000000 R09: 0000000000000000
[  119.944671][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.944683][ T6538] R13: 0000000000000000 R14: 00007f3251bb5fa0 R15: 00007ffdd5de25f8
[  119.944721][ T6538]  </TASK>
[  120.846197][ T6565] FAULT_INJECTION: forcing a failure.
[  120.846197][ T6565] name failslab, interval 1, probability 0, space 0, times 0
[  120.937248][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.1.161 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  120.937278][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  120.937291][ T6565] Call Trace:
[  120.937299][ T6565]  <TASK>
[  120.937308][ T6565]  dump_stack_lvl+0x241/0x360
[  120.937346][ T6565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.937376][ T6565]  ? __pfx__printk+0x10/0x10
[  120.937409][ T6565]  ? __pfx___might_resched+0x10/0x10
[  120.937445][ T6565]  should_fail_ex+0x424/0x570
[  120.937474][ T6565]  should_failslab+0xac/0x100
[  120.937497][ T6565]  __kmalloc_node_noprof+0xe7/0x4d0
[  120.937519][ T6565]  ? qdisc_alloc+0x9a/0xa80
[  120.937554][ T6565]  qdisc_alloc+0x9a/0xa80
[  120.937586][ T6565]  ? qdisc_create+0x11e/0xeb0
[  120.937618][ T6565]  qdisc_create+0x12e/0xeb0
[  120.937661][ T6565]  tc_modify_qdisc+0x1a18/0x2620
[  120.937706][ T6565]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  120.937729][ T6565]  ? trace_contention_end+0x3c/0x120
[  120.937751][ T6565]  ? __mutex_lock+0x380/0x10c0
[  120.937772][ T6565]  ? aa_get_newest_label+0x101/0x6f0
[  120.937835][ T6565]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  120.937861][ T6565]  rtnetlink_rcv_msg+0x7c2/0xd70
[  120.937891][ T6565]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  120.937926][ T6565]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  120.937965][ T6565]  ? ref_tracker_free+0x63e/0x7e0
[  120.937995][ T6565]  netlink_rcv_skb+0x208/0x480
[  120.938027][ T6565]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  120.938058][ T6565]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  120.938106][ T6565]  ? netlink_deliver_tap+0x2e/0x1b0
[  120.938139][ T6565]  ? netlink_deliver_tap+0x2e/0x1b0
[  120.938172][ T6565]  netlink_unicast+0x7f8/0x9a0
[  120.938208][ T6565]  ? __pfx_netlink_unicast+0x10/0x10
[  120.938238][ T6565]  ? skb_put+0x114/0x1f0
[  120.938264][ T6565]  netlink_sendmsg+0x8c3/0xcd0
[  120.938309][ T6565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.938344][ T6565]  ? aa_sock_msg_perm+0x91/0x160
[  120.938376][ T6565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.938405][ T6565]  __sock_sendmsg+0x221/0x270
[  120.938438][ T6565]  ____sys_sendmsg+0x523/0x860
[  120.938471][ T6565]  ? __pfx_____sys_sendmsg+0x10/0x10
[  120.938493][ T6565]  ? __fget_files+0x2a/0x420
[  120.938515][ T6565]  ? __fget_files+0x2a/0x420
[  120.938544][ T6565]  __sys_sendmsg+0x271/0x360
[  120.938574][ T6565]  ? __pfx___sys_sendmsg+0x10/0x10
[  120.938663][ T6565]  ? do_syscall_64+0xb6/0x210
[  120.938687][ T6565]  do_syscall_64+0xf3/0x210
[  120.938707][ T6565]  ? clear_bhb_loop+0x45/0xa0
[  120.938732][ T6565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.938752][ T6565] RIP: 0033:0x7f604d38e169
[  120.938770][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.938787][ T6565] RSP: 002b:00007f604e2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.938810][ T6565] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38e169
[  120.938825][ T6565] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000005
[  120.938837][ T6565] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000
[  120.938850][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.938862][ T6565] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8
[  120.938894][ T6565]  </TASK>
[  120.943288][ T6570] xt_hashlimit: max too large, truncated to 1048576
[  121.246918][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'.
[  121.285131][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'.
[  121.840414][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.167'.
[  122.200542][ T6624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.298972][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.174'.
[  123.167627][ T6659] xt_hashlimit: max too large, truncated to 1048576
[  123.259453][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'.
[  123.320716][ T6671] netlink: 220 bytes leftover after parsing attributes in process `syz.2.182'.
[  123.544375][ T6673] tipc: Started in network mode
[  123.608091][ T6673] tipc: Node identity 4, cluster identity 4711
[  123.619232][ T6673] tipc: Node number set to 4
[  125.482951][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.202'.
[  125.535566][ T6748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  125.982528][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[  126.221094][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'.
[  126.454653][ T6782] netlink: 'syz.2.211': attribute type 5 has an invalid length.
[  126.617625][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.212'.
[  126.857016][ T6795] netlink: 64 bytes leftover after parsing attributes in process `syz.0.215'.
[  126.998802][ T6800] FAULT_INJECTION: forcing a failure.
[  126.998802][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.019990][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.217'.
[  127.058455][ T6800] CPU: 1 UID: 0 PID: 6800 Comm: syz.3.216 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  127.058484][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  127.058497][ T6800] Call Trace:
[  127.058505][ T6800]  <TASK>
[  127.058513][ T6800]  dump_stack_lvl+0x241/0x360
[  127.058550][ T6800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.058577][ T6800]  ? __pfx__printk+0x10/0x10
[  127.058618][ T6800]  should_fail_ex+0x424/0x570
[  127.058648][ T6800]  _copy_from_user+0x2d/0xb0
[  127.058680][ T6800]  copy_msghdr_from_user+0xb3/0x580
[  127.058717][ T6800]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  127.058745][ T6800]  ? __fget_files+0x2a/0x420
[  127.058768][ T6800]  ? __fget_files+0x2a/0x420
[  127.058794][ T6800]  __sys_sendmmsg+0x361/0x7b0
[  127.058830][ T6800]  ? __pfx___sys_sendmmsg+0x10/0x10
[  127.058890][ T6800]  ? rcu_read_lock_any_held+0xbb/0x160
[  127.058913][ T6800]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  127.058939][ T6800]  ? vfs_write+0xb29/0xd10
[  127.058991][ T6800]  ? ksys_write+0x24e/0x2d0
[  127.059024][ T6800]  ? __mutex_unlock_slowpath+0x229/0x800
[  127.059077][ T6800]  ? ksys_write+0x275/0x2d0
[  127.059118][ T6800]  __x64_sys_sendmmsg+0xa0/0xb0
[  127.059146][ T6800]  do_syscall_64+0xf3/0x210
[  127.059165][ T6800]  ? clear_bhb_loop+0x45/0xa0
[  127.059189][ T6800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.059209][ T6800] RIP: 0033:0x7fac5ad8e169
[  127.059226][ T6800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.059243][ T6800] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  127.059265][ T6800] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169
[  127.059279][ T6800] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004
[  127.059292][ T6800] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000
[  127.059304][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.059315][ T6800] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818
[  127.059345][ T6800]  </TASK>
[  127.446147][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'.
[  127.612148][ T6812] team_slave_0: entered promiscuous mode
[  127.618086][ T6812] team_slave_1: entered promiscuous mode
[  127.624197][ T6812] vlan0: entered promiscuous mode
[  127.630069][ T6812] team0: entered promiscuous mode
[  127.688218][ T6815] xt_hashlimit: max too large, truncated to 1048576
[  127.819953][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'.
[  128.564381][ T6841] FAULT_INJECTION: forcing a failure.
[  128.564381][ T6841] name failslab, interval 1, probability 0, space 0, times 0
[  128.593290][ T6842] __nla_validate_parse: 1 callbacks suppressed
[  128.593324][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'.
[  128.594338][ T6841] CPU: 1 UID: 0 PID: 6841 Comm: syz.3.230 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  128.594371][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  128.594385][ T6841] Call Trace:
[  128.594394][ T6841]  <TASK>
[  128.594403][ T6841]  dump_stack_lvl+0x241/0x360
[  128.594446][ T6841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.594477][ T6841]  ? __pfx__printk+0x10/0x10
[  128.594512][ T6841]  ? __pfx___might_resched+0x10/0x10
[  128.594544][ T6841]  ? lock_acquire+0x167/0x2f0
[  128.594578][ T6841]  should_fail_ex+0x424/0x570
[  128.594609][ T6841]  should_failslab+0xac/0x100
[  128.594633][ T6841]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  128.594658][ T6841]  ? __alloc_skb+0x1c2/0x480
[  128.594684][ T6841]  __alloc_skb+0x1c2/0x480
[  128.594714][ T6841]  ? __pfx___alloc_skb+0x10/0x10
[  128.594737][ T6841]  ? __asan_memset+0x23/0x50
[  128.594765][ T6841]  ? nla_strscpy+0x115/0x180
[  128.594797][ T6841]  nldev_get_chardev+0x530/0xbf0
[  128.594826][ T6841]  ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0
[  128.594872][ T6841]  ? __pfx_nldev_get_chardev+0x10/0x10
[  128.595005][ T6841]  ? down_read+0x813/0xa50
[  128.595035][ T6841]  ? stack_depot_save_flags+0x44/0x940
[  128.595058][ T6841]  ? __pfx_stack_trace_save+0x1/0x10
[  128.595094][ T6841]  ? kmem_cache_alloc_node_noprof+0x1f2/0x3b0
[  128.595115][ T6841]  ? kmalloc_reserve+0xa8/0x2a0
[  128.595135][ T6841]  ? __alloc_skb+0x1f2/0x480
[  128.595153][ T6841]  ? netlink_sendmsg+0x638/0xcd0
[  128.595184][ T6841]  ? __sock_sendmsg+0x221/0x270
[  128.595213][ T6841]  ? ____sys_sendmsg+0x523/0x860
[  128.595240][ T6841]  ? __pfx_nldev_get_chardev+0x10/0x10
[  128.595266][ T6841]  rdma_nl_rcv+0x6e5/0x9e0
[  128.595305][ T6841]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  128.595335][ T6841]  ? __lock_acquire+0xad5/0xd80
[  128.595390][ T6841]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.595426][ T6841]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.595463][ T6841]  netlink_unicast+0x7f8/0x9a0
[  128.595503][ T6841]  ? __pfx_netlink_unicast+0x10/0x10
[  128.595536][ T6841]  ? skb_put+0x114/0x1f0
[  128.595564][ T6841]  netlink_sendmsg+0x8c3/0xcd0
[  128.595612][ T6841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.595650][ T6841]  ? aa_sock_msg_perm+0x91/0x160
[  128.595686][ T6841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.595716][ T6841]  __sock_sendmsg+0x221/0x270
[  128.595751][ T6841]  ____sys_sendmsg+0x523/0x860
[  128.595786][ T6841]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.595808][ T6841]  ? __fget_files+0x2a/0x420
[  128.595840][ T6841]  ? __fget_files+0x2a/0x420
[  128.595871][ T6841]  __sys_sendmsg+0x271/0x360
[  128.595903][ T6841]  ? __pfx___sys_sendmsg+0x10/0x10
[  128.595997][ T6841]  ? do_syscall_64+0xb6/0x210
[  128.596023][ T6841]  do_syscall_64+0xf3/0x210
[  128.596044][ T6841]  ? clear_bhb_loop+0x45/0xa0
[  128.596070][ T6841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.596093][ T6841] RIP: 0033:0x7fac5ad8e169
[  128.596112][ T6841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.596130][ T6841] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.596153][ T6841] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169
[  128.596169][ T6841] RDX: 0000000000008810 RSI: 0000200000000600 RDI: 0000000000000004
[  128.596183][ T6841] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000
[  128.596197][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.596209][ T6841] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818
[  128.596245][ T6841]  </TASK>
[  128.791927][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'.
[  128.965561][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'.
[  129.376385][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'.
[  129.376613][ T6863] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  129.422516][ T6868] netlink: 14 bytes leftover after parsing attributes in process `syz.3.238'.
[  129.535449][ T6859] veth0_macvtap: left promiscuous mode
[  129.630558][ T6876] netlink: 76 bytes leftover after parsing attributes in process `syz.2.237'.
[  129.640197][    C0] hrtimer: interrupt took 721064 ns
[  130.851633][ T6902] netlink: 76 bytes leftover after parsing attributes in process `syz.2.245'.
[  130.932715][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'.
[  131.400802][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'.
[  131.411760][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'.
[  132.679386][ T6962] netlink: 'syz.3.261': attribute type 1 has an invalid length.
[  133.245678][ T6980] xt_hashlimit: max too large, truncated to 1048576
[  133.947260][ T7001] __nla_validate_parse: 7 callbacks suppressed
[  133.947282][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'.
[  134.540493][ T7019] netlink: 76 bytes leftover after parsing attributes in process `syz.1.278'.
[  134.857143][ T7030] netlink: 788 bytes leftover after parsing attributes in process `syz.3.281'.
[  135.574124][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'.
[  135.700565][ T7040] vlan0: entered promiscuous mode
[  135.733694][ T7040] hsr0: entered promiscuous mode
[  135.747226][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[  136.752520][ T7064] netlink: 'syz.1.295': attribute type 29 has an invalid length.
[  136.843509][ T7064] netlink: 'syz.1.295': attribute type 29 has an invalid length.
[  137.024112][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[  137.641478][ T7096] xt_hashlimit: max too large, truncated to 1048576
[  137.796509][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  138.013304][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  138.020267][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  138.066215][ T7110] FAULT_INJECTION: forcing a failure.
[  138.066215][ T7110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.106691][ T7110] CPU: 0 UID: 0 PID: 7110 Comm: syz.3.312 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  138.106725][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  138.106738][ T7110] Call Trace:
[  138.106746][ T7110]  <TASK>
[  138.106755][ T7110]  dump_stack_lvl+0x241/0x360
[  138.106793][ T7110]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.106823][ T7110]  ? __pfx__printk+0x10/0x10
[  138.106865][ T7110]  should_fail_ex+0x424/0x570
[  138.106894][ T7110]  _copy_from_user+0x2d/0xb0
[  138.106926][ T7110]  copy_msghdr_from_user+0xb3/0x580
[  138.106963][ T7110]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  138.106990][ T7110]  ? __fget_files+0x2a/0x420
[  138.107013][ T7110]  ? __fget_files+0x2a/0x420
[  138.107042][ T7110]  __sys_sendmmsg+0x361/0x7b0
[  138.107079][ T7110]  ? __pfx___sys_sendmmsg+0x10/0x10
[  138.107125][ T7110]  ? __asan_memset+0x23/0x50
[  138.107164][ T7110]  ? __pfx_xfrm_dev_backlog+0x10/0x10
[  138.107199][ T7110]  ? kvm_sched_clock_read+0x11/0x20
[  138.107227][ T7110]  ? sched_clock+0x4a/0x70
[  138.107256][ T7110]  ? sched_clock_cpu+0x77/0x4d0
[  138.107287][ T7110]  ? net_tx_action+0x704/0xa50
[  138.107317][ T7110]  ? net_tx_action+0x9d7/0xa50
[  138.107346][ T7110]  ? __pfx_sched_clock_cpu+0x10/0x10
[  138.107376][ T7110]  ? __pfx_net_tx_action+0x10/0x10
[  138.107404][ T7110]  ? seqcount_lockdep_reader_access+0x1c3/0x230
[  138.107427][ T7110]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  138.107453][ T7110]  ? __irq_exit_rcu+0xfb/0x220
[  138.107533][ T7110]  __x64_sys_sendmmsg+0xa0/0xb0
[  138.107560][ T7110]  do_syscall_64+0xf3/0x210
[  138.107581][ T7110]  ? clear_bhb_loop+0x45/0xa0
[  138.107606][ T7110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.107625][ T7110] RIP: 0033:0x7fac5ad8e169
[  138.107644][ T7110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.107660][ T7110] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  138.107683][ T7110] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169
[  138.107698][ T7110] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000004
[  138.107711][ T7110] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000
[  138.107724][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.107736][ T7110] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818
[  138.107768][ T7110]  </TASK>
[  138.394536][   T55] Bluetooth: hci4: link tx timeout
[  138.399899][   T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  138.409406][ T5857] Bluetooth: hci4: link tx timeout
[  138.414670][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  138.944420][ T5857] Bluetooth: hci4: link tx timeout
[  138.949701][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  139.544177][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'.
[  139.599498][ T7137] tun0: tun_chr_ioctl cmd 2147767520
[  140.058405][ T7150] FAULT_INJECTION: forcing a failure.
[  140.058405][ T7150] name failslab, interval 1, probability 0, space 0, times 0
[  140.098002][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.3.327 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  140.098038][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  140.098051][ T7150] Call Trace:
[  140.098060][ T7150]  <TASK>
[  140.098069][ T7150]  dump_stack_lvl+0x241/0x360
[  140.098107][ T7150]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.098136][ T7150]  ? __pfx__printk+0x10/0x10
[  140.098166][ T7150]  ? ref_tracker_alloc+0x159/0x4c0
[  140.098193][ T7150]  ? __pfx___might_resched+0x10/0x10
[  140.098233][ T7150]  should_fail_ex+0x424/0x570
[  140.098262][ T7150]  should_failslab+0xac/0x100
[  140.098286][ T7150]  __kmalloc_cache_noprof+0x73/0x370
[  140.098306][ T7150]  ? subflow_ulp_init+0xcb/0x560
[  140.098337][ T7150]  subflow_ulp_init+0xcb/0x560
[  140.098367][ T7150]  tcp_set_ulp+0x537/0x5f0
[  140.098401][ T7150]  mptcp_subflow_create_socket+0x676/0xd10
[  140.098436][ T7150]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  140.098483][ T7150]  __mptcp_nmpc_sk+0x18c/0x830
[  140.098507][ T7150]  ? __local_bh_enable_ip+0x168/0x200
[  140.098538][ T7150]  ? mptcp_bind+0x9d/0x1c0
[  140.098556][ T7150]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  140.098591][ T7150]  mptcp_bind+0xa5/0x1c0
[  140.098614][ T7150]  __sys_bind+0x1de/0x290
[  140.098667][ T7150]  ? __pfx___sys_bind+0x10/0x10
[  140.098725][ T7150]  __x64_sys_bind+0x7a/0x90
[  140.098758][ T7150]  do_syscall_64+0xf3/0x210
[  140.098779][ T7150]  ? clear_bhb_loop+0x45/0xa0
[  140.098803][ T7150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.098823][ T7150] RIP: 0033:0x7fac5ad8e169
[  140.098842][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.098858][ T7150] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  140.098880][ T7150] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169
[  140.098895][ T7150] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003
[  140.098908][ T7150] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000
[  140.098921][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  140.098934][ T7150] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818
[  140.098967][ T7150]  </TASK>
[  140.478755][ T5857] Bluetooth: hci4: command 0x0406 tx timeout
[  140.981704][ T7171] FAULT_INJECTION: forcing a failure.
[  140.981704][ T7171] name failslab, interval 1, probability 0, space 0, times 0
[  141.025462][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.3.332 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  141.025494][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  141.025507][ T7171] Call Trace:
[  141.025516][ T7171]  <TASK>
[  141.025525][ T7171]  dump_stack_lvl+0x241/0x360
[  141.025565][ T7171]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.025594][ T7171]  ? __pfx__printk+0x10/0x10
[  141.025637][ T7171]  should_fail_ex+0x424/0x570
[  141.025668][ T7171]  should_failslab+0xac/0x100
[  141.025691][ T7171]  __kmalloc_cache_noprof+0x73/0x370
[  141.025712][ T7171]  ? sctp_add_bind_addr+0x89/0x3a0
[  141.025741][ T7171]  sctp_add_bind_addr+0x89/0x3a0
[  141.025769][ T7171]  sctp_copy_local_addr_list+0x313/0x500
[  141.025794][ T7171]  ? sctp_copy_local_addr_list+0xad/0x500
[  141.025818][ T7171]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  141.025845][ T7171]  ? sctp_v4_is_any+0x35/0x60
[  141.025868][ T7171]  ? sctp_copy_one_addr+0x94/0x360
[  141.025895][ T7171]  sctp_bind_addr_copy+0xad/0x3b0
[  141.025918][ T7171]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  141.025960][ T7171]  sctp_connect_new_asoc+0x337/0x700
[  141.025996][ T7171]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  141.026026][ T7171]  ? sctp_endpoint_lookup_assoc+0x7c/0x250
[  141.026058][ T7171]  ? sctp_endpoint_lookup_assoc+0x7c/0x250
[  141.026083][ T7171]  ? sctp_endpoint_lookup_assoc+0x217/0x250
[  141.026108][ T7171]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  141.026139][ T7171]  sctp_sendmsg+0x2009/0x3620
[  141.026192][ T7171]  ? __pfx_sctp_sendmsg+0x10/0x10
[  141.026223][ T7171]  ? aa_sk_perm+0x96f/0xac0
[  141.026267][ T7171]  ? inet_sendmsg+0x330/0x390
[  141.026298][ T7171]  __sock_sendmsg+0x1a6/0x270
[  141.026333][ T7171]  ____sys_sendmsg+0x523/0x860
[  141.026368][ T7171]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.026390][ T7171]  ? __fget_files+0x2a/0x420
[  141.026414][ T7171]  ? __fget_files+0x2a/0x420
[  141.026444][ T7171]  __sys_sendmmsg+0x3a0/0x7b0
[  141.026484][ T7171]  ? __pfx___sys_sendmmsg+0x10/0x10
[  141.026551][ T7171]  ? rcu_read_lock_any_held+0xbb/0x160
[  141.026574][ T7171]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  141.026600][ T7171]  ? vfs_write+0xb29/0xd10
[  141.026639][ T7171]  ? ksys_write+0x24e/0x2d0
[  141.026672][ T7171]  ? __mutex_unlock_slowpath+0x229/0x800
[  141.026728][ T7171]  ? ksys_write+0x275/0x2d0
[  141.026770][ T7171]  __x64_sys_sendmmsg+0xa0/0xb0
[  141.026798][ T7171]  do_syscall_64+0xf3/0x210
[  141.026820][ T7171]  ? clear_bhb_loop+0x45/0xa0
[  141.026845][ T7171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.026866][ T7171] RIP: 0033:0x7fac5ad8e169
[  141.026885][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.026901][ T7171] RSP: 002b:00007fac58bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  141.026924][ T7171] RAX: ffffffffffffffda RBX: 00007fac5afb5fa0 RCX: 00007fac5ad8e169
[  141.026939][ T7171] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003
[  141.026958][ T7171] RBP: 00007fac58bf6090 R08: 0000000000000000 R09: 0000000000000000
[  141.026971][ T7171] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001
[  141.026984][ T7171] R13: 0000000000000000 R14: 00007fac5afb5fa0 R15: 00007ffe23125818
[  141.027017][ T7171]  </TASK>
[  141.664342][ T7185] netlink: 92 bytes leftover after parsing attributes in process `syz.2.337'.
[  141.676459][ T7185] tc_dump_action: action bad kind
[  142.074115][ T7195] syz_tun: entered promiscuous mode
[  142.113636][ T7195] batadv_slave_1: entered promiscuous mode
[  142.126861][ T7195] hsr1: entered allmulticast mode
[  142.135813][ T7195] syz_tun: entered allmulticast mode
[  142.146473][ T7195] batadv_slave_1: entered allmulticast mode
[  142.433370][ T7216] FAULT_INJECTION: forcing a failure.
[  142.433370][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  142.453201][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.4.346 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  142.453233][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  142.453247][ T7216] Call Trace:
[  142.453255][ T7216]  <TASK>
[  142.453264][ T7216]  dump_stack_lvl+0x241/0x360
[  142.453303][ T7216]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.453333][ T7216]  ? __pfx__printk+0x10/0x10
[  142.453374][ T7216]  should_fail_ex+0x424/0x570
[  142.453404][ T7216]  _copy_from_user+0x2d/0xb0
[  142.453436][ T7216]  sctp_setsockopt+0xc9/0x11e0
[  142.453467][ T7216]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  142.453497][ T7216]  do_sock_setsockopt+0x3b1/0x710
[  142.453527][ T7216]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  142.453548][ T7216]  ? __fget_files+0x2a/0x420
[  142.453569][ T7216]  ? __fget_files+0x39d/0x420
[  142.453587][ T7216]  ? __fget_files+0x2a/0x420
[  142.453614][ T7216]  __x64_sys_setsockopt+0x187/0x210
[  142.453644][ T7216]  do_syscall_64+0xf3/0x210
[  142.453665][ T7216]  ? clear_bhb_loop+0x45/0xa0
[  142.453690][ T7216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.453711][ T7216] RIP: 0033:0x7f6e57f8e169
[  142.453729][ T7216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.453745][ T7216] RSP: 002b:00007f6e58dfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  142.453768][ T7216] RAX: ffffffffffffffda RBX: 00007f6e581b6080 RCX: 00007f6e57f8e169
[  142.453784][ T7216] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003
[  142.453796][ T7216] RBP: 00007f6e58dfa090 R08: 0000000000000008 R09: 0000000000000000
[  142.453809][ T7216] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[  142.453822][ T7216] R13: 0000000000000000 R14: 00007f6e581b6080 R15: 00007ffc27049d08
[  142.453860][ T7216]  </TASK>
[  142.676711][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[  142.973386][ T7228] netlink: 52 bytes leftover after parsing attributes in process `syz.3.351'.
[  142.983945][ T7228] netlink: 48 bytes leftover after parsing attributes in process `syz.3.351'.
[  143.400636][ T7240] ip6tnl1: entered promiscuous mode
[  143.433303][ T7240] ip6tnl1: entered allmulticast mode
[  143.593531][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  143.717666][ T7256] netlink: 'syz.2.362': attribute type 1 has an invalid length.
[  143.788255][ T7256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.362'.
[  143.818409][ T7258] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  144.366052][ T7277] FAULT_INJECTION: forcing a failure.
[  144.366052][ T7277] name failslab, interval 1, probability 0, space 0, times 0
[  144.416354][ T7277] CPU: 1 UID: 0 PID: 7277 Comm: syz.0.371 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  144.416384][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  144.416397][ T7277] Call Trace:
[  144.416405][ T7277]  <TASK>
[  144.416414][ T7277]  dump_stack_lvl+0x241/0x360
[  144.416453][ T7277]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.416481][ T7277]  ? __pfx__printk+0x10/0x10
[  144.416516][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'.
[  144.416522][ T7277]  should_fail_ex+0x424/0x570
[  144.416552][ T7277]  should_failslab+0xac/0x100
[  144.416575][ T7277]  __kmalloc_cache_noprof+0x73/0x370
[  144.416592][ T7277]  ? sctp_add_bind_addr+0x89/0x3a0
[  144.416621][ T7277]  sctp_add_bind_addr+0x89/0x3a0
[  144.416650][ T7277]  sctp_copy_local_addr_list+0x313/0x500
[  144.416679][ T7277]  ? sctp_copy_local_addr_list+0xad/0x500
[  144.416705][ T7277]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  144.416731][ T7277]  ? sctp_v6_is_any+0x60/0x70
[  144.416758][ T7277]  ? sctp_copy_one_addr+0x94/0x360
[  144.416786][ T7277]  sctp_bind_addr_copy+0xad/0x3b0
[  144.416810][ T7277]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  144.416848][ T7277]  sctp_connect_new_asoc+0x337/0x700
[  144.416881][ T7277]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  144.416909][ T7277]  ? sctp_sendmsg+0xf30/0x3620
[  144.416944][ T7277]  ? sctp_endpoint_lookup_assoc+0xc9/0x250
[  144.416970][ T7277]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  144.417012][ T7277]  sctp_sendmsg+0x2009/0x3620
[  144.417066][ T7277]  ? __pfx_sctp_sendmsg+0x10/0x10
[  144.417099][ T7277]  ? aa_sk_perm+0x96f/0xac0
[  144.417153][ T7277]  ? inet_sendmsg+0x330/0x390
[  144.417185][ T7277]  __sock_sendmsg+0x1a6/0x270
[  144.417221][ T7277]  ____sys_sendmsg+0x523/0x860
[  144.417259][ T7277]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.417281][ T7277]  ? __fget_files+0x2a/0x420
[  144.417307][ T7277]  ? __fget_files+0x2a/0x420
[  144.417338][ T7277]  __sys_sendmmsg+0x3a0/0x7b0
[  144.417378][ T7277]  ? __pfx___sys_sendmmsg+0x10/0x10
[  144.417448][ T7277]  ? rcu_read_lock_any_held+0xbb/0x160
[  144.417471][ T7277]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  144.417497][ T7277]  ? vfs_write+0xb29/0xd10
[  144.417554][ T7277]  ? ksys_write+0x24e/0x2d0
[  144.417599][ T7277]  ? __mutex_unlock_slowpath+0x229/0x800
[  144.417657][ T7277]  ? ksys_write+0x275/0x2d0
[  144.417701][ T7277]  __x64_sys_sendmmsg+0xa0/0xb0
[  144.417730][ T7277]  do_syscall_64+0xf3/0x210
[  144.417751][ T7277]  ? clear_bhb_loop+0x45/0xa0
[  144.417779][ T7277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.417800][ T7277] RIP: 0033:0x7fb17878e169
[  144.417825][ T7277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.417843][ T7277] RSP: 002b:00007fb17957d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  144.417867][ T7277] RAX: ffffffffffffffda RBX: 00007fb1789b5fa0 RCX: 00007fb17878e169
[  144.417883][ T7277] RDX: 0000000000000002 RSI: 00002000000027c0 RDI: 0000000000000003
[  144.417897][ T7277] RBP: 00007fb17957d090 R08: 0000000000000000 R09: 0000000000000000
[  144.417910][ T7277] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  144.417923][ T7277] R13: 0000000000000000 R14: 00007fb1789b5fa0 R15: 00007ffce25cda98
[  144.417958][ T7277]  </TASK>
[  144.807496][ T7286] xt_hashlimit: max too large, truncated to 1048576
[  144.840370][ T7276] bridge_slave_1: left allmulticast mode
[  144.846555][ T7276] bridge_slave_1: left promiscuous mode
[  144.862582][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.885679][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'.
[  144.912144][ T7276] bridge_slave_0: left allmulticast mode
[  144.948159][ T7276] bridge_slave_0: left promiscuous mode
[  144.954650][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.050174][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[  145.378964][ T7298] netlink: 'syz.4.379': attribute type 1 has an invalid length.
[  145.418047][ T7298] netlink: 224 bytes leftover after parsing attributes in process `syz.4.379'.
[  145.692919][ T7307] FAULT_INJECTION: forcing a failure.
[  145.692919][ T7307] name failslab, interval 1, probability 0, space 0, times 0
[  145.742304][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.0.382 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  145.742340][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  145.742352][ T7307] Call Trace:
[  145.742361][ T7307]  <TASK>
[  145.742371][ T7307]  dump_stack_lvl+0x241/0x360
[  145.742408][ T7307]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.742437][ T7307]  ? __pfx__printk+0x10/0x10
[  145.742480][ T7307]  should_fail_ex+0x424/0x570
[  145.742509][ T7307]  should_failslab+0xac/0x100
[  145.742533][ T7307]  __kmalloc_cache_noprof+0x73/0x370
[  145.742589][ T7307]  ? sctp_add_bind_addr+0x89/0x3a0
[  145.742616][ T7307]  sctp_add_bind_addr+0x89/0x3a0
[  145.742644][ T7307]  sctp_copy_local_addr_list+0x313/0x500
[  145.742668][ T7307]  ? sctp_copy_local_addr_list+0xad/0x500
[  145.742691][ T7307]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  145.742718][ T7307]  ? sctp_v6_is_any+0x60/0x70
[  145.742743][ T7307]  ? sctp_copy_one_addr+0x94/0x360
[  145.742770][ T7307]  sctp_bind_addr_copy+0xad/0x3b0
[  145.742792][ T7307]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  145.742828][ T7307]  sctp_connect_new_asoc+0x337/0x700
[  145.742860][ T7307]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  145.742886][ T7307]  ? sctp_sendmsg+0xf30/0x3620
[  145.742920][ T7307]  ? sctp_endpoint_lookup_assoc+0xc9/0x250
[  145.742945][ T7307]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  145.742977][ T7307]  sctp_sendmsg+0x2009/0x3620
[  145.743028][ T7307]  ? __pfx_sctp_sendmsg+0x10/0x10
[  145.743059][ T7307]  ? aa_sk_perm+0x96f/0xac0
[  145.743102][ T7307]  ? inet_sendmsg+0x330/0x390
[  145.743133][ T7307]  __sock_sendmsg+0x1a6/0x270
[  145.743167][ T7307]  ____sys_sendmsg+0x523/0x860
[  145.743203][ T7307]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.743225][ T7307]  ? __fget_files+0x2a/0x420
[  145.743249][ T7307]  ? __fget_files+0x2a/0x420
[  145.743278][ T7307]  __sys_sendmmsg+0x3a0/0x7b0
[  145.743317][ T7307]  ? __pfx___sys_sendmmsg+0x10/0x10
[  145.743384][ T7307]  ? rcu_read_lock_any_held+0xbb/0x160
[  145.743407][ T7307]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  145.743432][ T7307]  ? vfs_write+0xb29/0xd10
[  145.743472][ T7307]  ? ksys_write+0x24e/0x2d0
[  145.743501][ T7307]  ? __mutex_unlock_slowpath+0x229/0x800
[  145.743563][ T7307]  ? ksys_write+0x275/0x2d0
[  145.743604][ T7307]  __x64_sys_sendmmsg+0xa0/0xb0
[  145.743632][ T7307]  do_syscall_64+0xf3/0x210
[  145.743653][ T7307]  ? clear_bhb_loop+0x45/0xa0
[  145.743679][ T7307]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.743698][ T7307] RIP: 0033:0x7fb17878e169
[  145.743715][ T7307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.743732][ T7307] RSP: 002b:00007fb17957d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  145.743755][ T7307] RAX: ffffffffffffffda RBX: 00007fb1789b5fa0 RCX: 00007fb17878e169
[  145.743771][ T7307] RDX: 0000000000000002 RSI: 00002000000027c0 RDI: 0000000000000003
[  145.743783][ T7307] RBP: 00007fb17957d090 R08: 0000000000000000 R09: 0000000000000000
[  145.743797][ T7307] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  145.743809][ T7307] R13: 0000000000000000 R14: 00007fb1789b5fa0 R15: 00007ffce25cda98
[  145.743842][ T7307]  </TASK>
[  146.277692][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'.
[  146.359224][ T7313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.385'.
[  146.381955][ T7313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  147.004601][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'.
[  147.092459][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.393'.
[  147.231912][ T7358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.393'.
[  147.446237][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'.
[  147.460261][ T5927] ip6_tnl_xmit_ctl: 4 callbacks suppressed
[  147.460282][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.518294][  T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.575193][ T7340] syz.2.393 (7340) used greatest stack depth: 18920 bytes left
[  147.648603][  T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.777380][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'.
[  147.848952][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.008408][  T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.058272][  T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.109743][  T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.198104][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.280612][ T7405] FAULT_INJECTION: forcing a failure.
[  148.280612][ T7405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.317315][ T7402] netlink: 'syz.1.403': attribute type 1 has an invalid length.
[  148.358027][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.4.402 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  148.358059][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  148.358072][ T7405] Call Trace:
[  148.358080][ T7405]  <TASK>
[  148.358089][ T7405]  dump_stack_lvl+0x241/0x360
[  148.358127][ T7405]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.358155][ T7405]  ? __pfx__printk+0x10/0x10
[  148.358199][ T7405]  should_fail_ex+0x424/0x570
[  148.358228][ T7405]  _copy_from_user+0x2d/0xb0
[  148.358261][ T7405]  copy_msghdr_from_user+0xb3/0x580
[  148.358299][ T7405]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  148.358326][ T7405]  ? __fget_files+0x2a/0x420
[  148.358349][ T7405]  ? __fget_files+0x2a/0x420
[  148.358378][ T7405]  __sys_sendmsg+0x20a/0x360
[  148.358409][ T7405]  ? __pfx___sys_sendmsg+0x10/0x10
[  148.358493][ T7405]  ? do_syscall_64+0xb6/0x210
[  148.358517][ T7405]  do_syscall_64+0xf3/0x210
[  148.358537][ T7405]  ? clear_bhb_loop+0x45/0xa0
[  148.358562][ T7405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.358582][ T7405] RIP: 0033:0x7f6e57f8e169
[  148.358607][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.358624][ T7405] RSP: 002b:00007f6e58dd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  148.358647][ T7405] RAX: ffffffffffffffda RBX: 00007f6e581b6160 RCX: 00007f6e57f8e169
[  148.358661][ T7405] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  148.358674][ T7405] RBP: 00007f6e58dd9090 R08: 0000000000000000 R09: 0000000000000000
[  148.358687][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.358699][ T7405] R13: 0000000000000001 R14: 00007f6e581b6160 R15: 00007ffc27049d08
[  148.358732][ T7405]  </TASK>
[  148.630770][  T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.793127][ T5927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.926116][ T7402] bond1: entered promiscuous mode
[  148.953496][ T7402] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.055594][ T7411] bond1: (slave bridge1): making interface the new active one
[  149.085327][ T7411] bridge1: entered promiscuous mode
[  149.110984][ T7411] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  149.512806][ T7425] macsec1: entered promiscuous mode
[  149.546938][ T7425] macsec1: entered allmulticast mode
[  149.902375][ T7440] __nla_validate_parse: 3 callbacks suppressed
[  149.902399][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'.
[  150.492298][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'.
[  150.574822][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'.
[  150.814208][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'.
[  150.853162][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.427'.
[  151.088460][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'.
[  152.355763][ T7498] netlink: 76 bytes leftover after parsing attributes in process `syz.0.436'.
[  152.505255][ T7501] warning: `syz.3.437' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  152.571696][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'.
[  152.622344][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'.
[  152.752069][ T7506] netlink: 'syz.0.439': attribute type 10 has an invalid length.
[  152.801821][ T7506] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  153.663447][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'.
[  154.034330][ T7545] FAULT_INJECTION: forcing a failure.
[  154.034330][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.080793][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.2.452 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  154.080826][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  154.080839][ T7545] Call Trace:
[  154.080847][ T7545]  <TASK>
[  154.080856][ T7545]  dump_stack_lvl+0x241/0x360
[  154.080895][ T7545]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.080925][ T7545]  ? __pfx__printk+0x10/0x10
[  154.080980][ T7545]  should_fail_ex+0x424/0x570
[  154.081010][ T7545]  _copy_from_user+0x2d/0xb0
[  154.081044][ T7545]  csum_and_copy_from_iter_full+0x1ec/0x21a0
[  154.081090][ T7545]  ? rcu_is_watching+0x15/0xb0
[  154.081112][ T7545]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  154.081136][ T7545]  ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0
[  154.081168][ T7545]  ? __build_skb_around+0x247/0x3d0
[  154.081198][ T7545]  ip_generic_getfrag+0x151/0x320
[  154.081227][ T7545]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  154.081252][ T7545]  ? __lock_acquire+0xad5/0xd80
[  154.081288][ T7545]  __ip6_append_data+0x3acd/0x41b0
[  154.081341][ T7545]  ? __pfx_raw6_getfrag+0x10/0x10
[  154.081391][ T7545]  ? __pfx___ip6_append_data+0x10/0x10
[  154.081424][ T7545]  ? ip6_setup_cork+0xaaf/0x11c0
[  154.081463][ T7545]  ip6_append_data+0x25f/0x380
[  154.081500][ T7545]  ? __pfx_raw6_getfrag+0x10/0x10
[  154.081525][ T7545]  rawv6_sendmsg+0x1855/0x23c0
[  154.081566][ T7545]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  154.081593][ T7545]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  154.081653][ T7545]  ? sock_rps_record_flow+0x1a/0x410
[  154.081682][ T7545]  ? inet_sendmsg+0x330/0x390
[  154.081712][ T7545]  __sock_sendmsg+0x1a6/0x270
[  154.081746][ T7545]  ____sys_sendmsg+0x523/0x860
[  154.081781][ T7545]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.081802][ T7545]  ? __fget_files+0x2a/0x420
[  154.081824][ T7545]  ? __fget_files+0x2a/0x420
[  154.081851][ T7545]  __sys_sendmsg+0x271/0x360
[  154.081881][ T7545]  ? __pfx___sys_sendmsg+0x10/0x10
[  154.081979][ T7545]  ? do_syscall_64+0xb6/0x210
[  154.082005][ T7545]  do_syscall_64+0xf3/0x210
[  154.082026][ T7545]  ? clear_bhb_loop+0x45/0xa0
[  154.082051][ T7545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.082071][ T7545] RIP: 0033:0x7f325198e169
[  154.082090][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.082107][ T7545] RSP: 002b:00007f325280b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.082129][ T7545] RAX: ffffffffffffffda RBX: 00007f3251bb6080 RCX: 00007f325198e169
[  154.082144][ T7545] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003
[  154.082158][ T7545] RBP: 00007f325280b090 R08: 0000000000000000 R09: 0000000000000000
[  154.082170][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  154.082182][ T7545] R13: 0000000000000001 R14: 00007f3251bb6080 R15: 00007ffdd5de25f8
[  154.082215][ T7545]  </TASK>
[  155.092590][ T7561] xt_TCPMSS: Only works on TCP SYN packets
[  155.256112][ T7567] __nla_validate_parse: 1 callbacks suppressed
[  155.256134][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'.
[  155.348167][ T7567] netlink: 72 bytes leftover after parsing attributes in process `syz.3.461'.
[  155.465465][ T7571] netlink: 76 bytes leftover after parsing attributes in process `syz.0.462'.
[  155.629056][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'.
[  155.654517][ T7577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.465'.
[  155.986725][ T7586] netlink: 224 bytes leftover after parsing attributes in process `syz.2.469'.
[  156.752000][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'.
[  156.785840][ T7603] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  156.871165][ T7605] FAULT_INJECTION: forcing a failure.
[  156.871165][ T7605] name failslab, interval 1, probability 0, space 0, times 0
[  156.944446][ T7605] CPU: 1 UID: 0 PID: 7605 Comm: syz.1.475 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  156.944477][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  156.944490][ T7605] Call Trace:
[  156.944498][ T7605]  <TASK>
[  156.944507][ T7605]  dump_stack_lvl+0x241/0x360
[  156.944545][ T7605]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.944575][ T7605]  ? __pfx__printk+0x10/0x10
[  156.944602][ T7605]  ? __lock_acquire+0xad5/0xd80
[  156.944642][ T7605]  should_fail_ex+0x424/0x570
[  156.944672][ T7605]  should_failslab+0xac/0x100
[  156.944695][ T7605]  kmem_cache_alloc_noprof+0x78/0x390
[  156.944716][ T7605]  ? skb_clone+0x20c/0x390
[  156.944746][ T7605]  skb_clone+0x20c/0x390
[  156.944776][ T7605]  __netlink_deliver_tap+0x3c4/0x7f0
[  156.944822][ T7605]  ? netlink_deliver_tap+0x2e/0x1b0
[  156.944852][ T7605]  netlink_deliver_tap+0x19d/0x1b0
[  156.944884][ T7605]  netlink_unicast+0x7c6/0x9a0
[  156.944924][ T7605]  ? __pfx_netlink_unicast+0x10/0x10
[  156.944955][ T7605]  ? skb_put+0x114/0x1f0
[  156.944986][ T7605]  netlink_sendmsg+0x8c3/0xcd0
[  156.945031][ T7605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.945072][ T7605]  ? aa_sock_msg_perm+0x91/0x160
[  156.945105][ T7605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.945134][ T7605]  __sock_sendmsg+0x221/0x270
[  156.945167][ T7605]  ____sys_sendmsg+0x523/0x860
[  156.945201][ T7605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.945240][ T7605]  __sys_sendmmsg+0x3a0/0x7b0
[  156.945276][ T7605]  ? __pfx___sys_sendmmsg+0x10/0x10
[  156.945337][ T7605]  ? rcu_read_lock_any_held+0xbb/0x160
[  156.945359][ T7605]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  156.945384][ T7605]  ? vfs_write+0xb29/0xd10
[  156.945423][ T7605]  ? ksys_write+0x24e/0x2d0
[  156.945455][ T7605]  ? __mutex_unlock_slowpath+0x229/0x800
[  156.945507][ T7605]  ? ksys_write+0x275/0x2d0
[  156.945548][ T7605]  __x64_sys_sendmmsg+0xa0/0xb0
[  156.945575][ T7605]  do_syscall_64+0xf3/0x210
[  156.945597][ T7605]  ? clear_bhb_loop+0x45/0xa0
[  156.945622][ T7605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.945642][ T7605] RIP: 0033:0x7f604d38e169
[  156.945661][ T7605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.945678][ T7605] RSP: 002b:00007f604e2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  156.945700][ T7605] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38e169
[  156.945715][ T7605] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  156.945729][ T7605] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000
[  156.945742][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  156.945754][ T7605] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8
[  156.945788][ T7605]  </TASK>
[  158.546927][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.489'.
[  158.603887][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.489'.
[  158.666001][ T7638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.489'.
[  160.472519][ T7671] FAULT_INJECTION: forcing a failure.
[  160.472519][ T7671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  160.568013][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.1.503 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  160.568046][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  160.568058][ T7671] Call Trace:
[  160.568066][ T7671]  <TASK>
[  160.568075][ T7671]  dump_stack_lvl+0x241/0x360
[  160.568114][ T7671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.568141][ T7671]  ? __pfx__printk+0x10/0x10
[  160.568194][ T7671]  should_fail_ex+0x424/0x570
[  160.568223][ T7671]  _copy_to_user+0x31/0xb0
[  160.568257][ T7671]  simple_read_from_buffer+0xc4/0x170
[  160.568291][ T7671]  proc_fail_nth_read+0x1ef/0x260
[  160.568327][ T7671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  160.568361][ T7671]  ? rw_verify_area+0x246/0x630
[  160.568386][ T7671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  160.568419][ T7671]  vfs_read+0x21f/0xb90
[  160.568450][ T7671]  ? __pfx___mutex_lock+0x10/0x10
[  160.568471][ T7671]  ? __pfx_vfs_read+0x10/0x10
[  160.568500][ T7671]  ? __fget_files+0x2a/0x420
[  160.568520][ T7671]  ? __fget_files+0x39d/0x420
[  160.568536][ T7671]  ? __fget_files+0x2a/0x420
[  160.568564][ T7671]  ksys_read+0x19d/0x2d0
[  160.568593][ T7671]  ? __pfx_ksys_read+0x10/0x10
[  160.568626][ T7671]  ? do_syscall_64+0xb6/0x210
[  160.568649][ T7671]  do_syscall_64+0xf3/0x210
[  160.568669][ T7671]  ? clear_bhb_loop+0x45/0xa0
[  160.568693][ T7671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.568720][ T7671] RIP: 0033:0x7f604d38cb7c
[  160.568738][ T7671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  160.568754][ T7671] RSP: 002b:00007f604e2bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  160.568776][ T7671] RAX: ffffffffffffffda RBX: 00007f604d5b5fa0 RCX: 00007f604d38cb7c
[  160.568791][ T7671] RDX: 000000000000000f RSI: 00007f604e2bf0a0 RDI: 0000000000000004
[  160.568804][ T7671] RBP: 00007f604e2bf090 R08: 0000000000000000 R09: 0000000000000000
[  160.568816][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  160.568827][ T7671] R13: 0000000000000000 R14: 00007f604d5b5fa0 R15: 00007ffe7dd123e8
[  160.568859][ T7671]  </TASK>
[  160.876069][ T7677] netlink: 830 bytes leftover after parsing attributes in process `syz.2.505'.
[  161.253845][ T7682] bond0: (slave netdevsim0): Releasing backup interface
[  161.826665][ T7706] xt_hashlimit: max too large, truncated to 1048576
[  161.889917][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'.
[  162.750563][ T7721] Bluetooth: MGMT ver 1.23
[  163.309373][ T7735] netdevsim netdevsim4: Direct firmware load for /
[  163.309373][ T7735]  failed with error -2
[  163.356319][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'.
[  163.378400][ T7735] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[  163.378400][ T7735] 
[  164.003116][ T7751] netlink: 76 bytes leftover after parsing attributes in process `syz.3.530'.
[  164.343580][ T7757] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.671582][ T7757] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.704738][ T7768] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  164.736592][ T7768] tipc: Enabled bearer <udp:s>, priority 10
[  164.839664][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  164.894584][ T7757] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.108272][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.110829][ T7757] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.533540][ T7757] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.637939][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.651550][ T7757] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.745418][ T7757] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.884772][ T7757] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.718002][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  167.758038][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  168.176199][ T7793] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  168.208477][ T7793] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  168.426071][ T7797] netlink: 44 bytes leftover after parsing attributes in process `syz.4.544'.
[  168.443392][ T7797] ip_vti0: entered promiscuous mode
[  168.797999][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  169.088977][ T7803] syzkaller0: entered promiscuous mode
[  169.105272][ T7803] syzkaller0: entered allmulticast mode
[  169.838015][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  170.878044][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  171.918848][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  172.171051][   T30] audit: type=1800 audit(1745388485.969:4): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.565" name="memory.events" dev="tmpfs" ino=581 res=0 errno=0
[  172.269773][   T30] audit: type=1804 audit(1745388486.019:5): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.565" name="/newroot/110/memory.events" dev="tmpfs" ino=581 res=1 errno=0
[  172.774873][ T7875] batman_adv: batadv0: Adding interface: ip6gretap1
[  172.810403][ T7875] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.897977][ T7875] batman_adv: batadv0: Interface activated: ip6gretap1
[  172.957958][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  173.002008][ T7883] xt_hashlimit: max too large, truncated to 1048576
[  173.207090][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'.
[  173.848860][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'.
[  173.984914][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'.
[  173.998095][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  174.022454][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'.
[  174.214686][ T7925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.584'.
[  174.424159][ T7932] xt_hashlimit: max too large, truncated to 1048576
[  174.514307][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'.
[  175.038024][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.096240][ T7945] netlink: 224 bytes leftover after parsing attributes in process `syz.2.590'.
[  175.158694][ T7945] syzkaller1: entered promiscuous mode
[  175.174114][ T7945] syzkaller1: entered allmulticast mode
[  175.426040][ T7951] FAULT_INJECTION: forcing a failure.
[  175.426040][ T7951] name failslab, interval 1, probability 0, space 0, times 0
[  175.489311][ T7951] CPU: 1 UID: 0 PID: 7951 Comm: syz.0.591 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  175.489343][ T7951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  175.489356][ T7951] Call Trace:
[  175.489364][ T7951]  <TASK>
[  175.489373][ T7951]  dump_stack_lvl+0x241/0x360
[  175.489418][ T7951]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.489448][ T7951]  ? __pfx__printk+0x10/0x10
[  175.489475][ T7951]  ? __lock_acquire+0xad5/0xd80
[  175.489514][ T7951]  should_fail_ex+0x424/0x570
[  175.489544][ T7951]  should_failslab+0xac/0x100
[  175.489566][ T7951]  kmem_cache_alloc_noprof+0x78/0x390
[  175.489587][ T7951]  ? skb_clone+0x20c/0x390
[  175.489617][ T7951]  skb_clone+0x20c/0x390
[  175.489648][ T7951]  __netlink_deliver_tap+0x3c4/0x7f0
[  175.489692][ T7951]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.489721][ T7951]  netlink_deliver_tap+0x19d/0x1b0
[  175.489754][ T7951]  netlink_unicast+0x7c6/0x9a0
[  175.489792][ T7951]  ? __pfx_netlink_unicast+0x10/0x10
[  175.489822][ T7951]  ? skb_put+0x114/0x1f0
[  175.489848][ T7951]  netlink_sendmsg+0x8c3/0xcd0
[  175.489894][ T7951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.489930][ T7951]  ? aa_sock_msg_perm+0x91/0x160
[  175.489962][ T7951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.489992][ T7951]  __sock_sendmsg+0x221/0x270
[  175.490025][ T7951]  ____sys_sendmsg+0x523/0x860
[  175.490059][ T7951]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.490081][ T7951]  ? __fget_files+0x2a/0x420
[  175.490103][ T7951]  ? __fget_files+0x2a/0x420
[  175.490133][ T7951]  __sys_sendmsg+0x271/0x360
[  175.490163][ T7951]  ? __pfx___sys_sendmsg+0x10/0x10
[  175.490248][ T7951]  ? do_syscall_64+0xb6/0x210
[  175.490272][ T7951]  do_syscall_64+0xf3/0x210
[  175.490293][ T7951]  ? clear_bhb_loop+0x45/0xa0
[  175.490318][ T7951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.490341][ T7951] RIP: 0033:0x7fb17878e169
[  175.490389][ T7951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.490406][ T7951] RSP: 002b:00007fb17955c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.490428][ T7951] RAX: ffffffffffffffda RBX: 00007fb1789b6080 RCX: 00007fb17878e169
[  175.490443][ T7951] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  175.490456][ T7951] RBP: 00007fb17955c090 R08: 0000000000000000 R09: 0000000000000000
[  175.490469][ T7951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.490480][ T7951] R13: 0000000000000000 R14: 00007fb1789b6080 R15: 00007ffce25cda98
[  175.490512][ T7951]  </TASK>
[  175.935018][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'.
[  175.971627][ T7957] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  176.009186][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'.
[  176.190340][ T7961] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.300150][ T7973] xt_hashlimit: max too large, truncated to 1048576
[  176.380599][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'.
[  176.410467][ T7979] tipc: New replicast peer: 255.255.255.255
[  176.452942][ T7979] tipc: Enabled bearer <udp:syz2>, priority 10
[  176.491690][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'.
[  176.532156][ T7981] tipc: Disabling bearer <udp:syz2>
[  176.603042][ T7961] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.898597][ T7981] vxcan3: entered allmulticast mode
[  177.006949][ T7961] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.080980][ T7961] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.453807][ T7961] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.537206][ T7961] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.605184][ T7961] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.732655][ T8006] netlink: 'syz.2.608': attribute type 1 has an invalid length.
[  177.758894][ T7961] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.859161][ T8006] bond1: entered promiscuous mode
[  177.864293][ T8006] bond1: entered allmulticast mode
[  177.941145][ T8007] ip6gretap1: entered promiscuous mode
[  177.947442][ T8007] ip6gretap1: entered allmulticast mode
[  177.964376][ T8007] bond1: (slave ip6gretap1): making interface the new active one
[  177.983627][ T8007] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  178.292778][ T8016] netlink: 'syz.2.611': attribute type 1 has an invalid length.
[  178.411314][ T8025] xt_hashlimit: max too large, truncated to 1048576
[  178.564815][ T8032] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  178.702973][ T8023] 8021q: adding VLAN 0 to HW filter on device bond3
[  178.717092][ T8023] bond2: (slave bond3): making interface the new active one
[  178.731150][ T8023] bond2: (slave bond3): Enslaving as an active interface with an up link
[  178.840483][ T8035] macsec1: entered promiscuous mode
[  178.846502][ T8035] bond2: entered promiscuous mode
[  178.852611][ T8035] bond3: entered promiscuous mode
[  178.859497][ T8035] macsec1: entered allmulticast mode
[  178.865428][ T8035] bond2: entered allmulticast mode
[  178.871921][ T8035] bond3: entered allmulticast mode
[  178.900000][ T8036] __nla_validate_parse: 3 callbacks suppressed
[  178.900023][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  178.995667][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  179.026199][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  179.097183][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  179.125447][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  179.146201][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  179.155843][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  179.177795][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  179.193064][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  179.207471][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'.
[  180.482968][ T8073] xt_hashlimit: max too large, truncated to 1048576
[  180.558755][ T5857] Bluetooth: hci4: command 0x0406 tx timeout
[  181.087694][ T8085] FAULT_INJECTION: forcing a failure.
[  181.087694][ T8085] name failslab, interval 1, probability 0, space 0, times 0
[  181.124502][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: syz.4.628 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  181.124535][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  181.124552][ T8085] Call Trace:
[  181.124561][ T8085]  <TASK>
[  181.124569][ T8085]  dump_stack_lvl+0x241/0x360
[  181.124615][ T8085]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.124644][ T8085]  ? __pfx__printk+0x10/0x10
[  181.124675][ T8085]  ? __pfx___might_resched+0x10/0x10
[  181.124710][ T8085]  should_fail_ex+0x424/0x570
[  181.124737][ T8085]  should_failslab+0xac/0x100
[  181.124759][ T8085]  __kvmalloc_node_noprof+0x170/0x5a0
[  181.124780][ T8085]  ? bpf_test_run_xdp_live+0x21f/0x2220
[  181.124818][ T8085]  bpf_test_run_xdp_live+0x21f/0x2220
[  181.124862][ T8085]  ? bpf_dispatcher_change_prog+0xd7b/0xf00
[  181.124895][ T8085]  ? __mutex_unlock_slowpath+0x229/0x800
[  181.124925][ T8085]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  181.124954][ T8085]  ? synchronize_rcu+0x11e/0x370
[  181.124974][ T8085]  ? __pfx_synchronize_rcu+0x10/0x10
[  181.125016][ T8085]  ? 0xffffffffa0003b40
[  181.125042][ T8085]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  181.125071][ T8085]  ? 0xffffffffa0002034
[  181.125108][ T8085]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  181.125158][ T8085]  ? _copy_from_user+0x95/0xb0
[  181.125192][ T8085]  ? bpf_test_init+0x130/0x170
[  181.125219][ T8085]  ? xdp_convert_md_to_buff+0x5b/0x330
[  181.125252][ T8085]  bpf_prog_test_run_xdp+0x809/0x1200
[  181.125311][ T8085]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  181.125343][ T8085]  ? __fget_files+0x2a/0x420
[  181.125366][ T8085]  ? __fget_files+0x2a/0x420
[  181.125389][ T8085]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  181.125421][ T8085]  bpf_prog_test_run+0x2e4/0x360
[  181.125452][ T8085]  __sys_bpf+0x4ee/0x8b0
[  181.125481][ T8085]  ? __pfx___sys_bpf+0x10/0x10
[  181.125539][ T8085]  __x64_sys_bpf+0x7c/0x90
[  181.125563][ T8085]  do_syscall_64+0xf3/0x210
[  181.125584][ T8085]  ? clear_bhb_loop+0x45/0xa0
[  181.125609][ T8085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.125628][ T8085] RIP: 0033:0x7f6e57f8e169
[  181.125645][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.125662][ T8085] RSP: 002b:00007f6e58e1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  181.125692][ T8085] RAX: ffffffffffffffda RBX: 00007f6e581b5fa0 RCX: 00007f6e57f8e169
[  181.125707][ T8085] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  181.125720][ T8085] RBP: 00007f6e58e1b090 R08: 0000000000000000 R09: 0000000000000000
[  181.125732][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.125744][ T8085] R13: 0000000000000000 R14: 00007f6e581b5fa0 R15: 00007ffc27049d08
[  181.125777][ T8085]  </TASK>
[  182.710926][ T8125] xt_hashlimit: max too large, truncated to 1048576
[  183.776020][ T8143] netlink: 'syz.0.649': attribute type 11 has an invalid length.
[  184.475458][ T8161] __nla_validate_parse: 45 callbacks suppressed
[  184.475480][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'.
[  184.839066][ T8174] netlink: 68 bytes leftover after parsing attributes in process `syz.1.657'.
[  184.921887][ T8177] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[  185.267287][ T8180] 8021q: adding VLAN 0 to HW filter on device bond2
[  185.292027][ T8180] bond1: (slave bond2): making interface the new active one
[  185.340937][ T8180] bond1: (slave bond2): Enslaving as an active interface with an up link
[  185.434770][ T8197] sctp: [Deprecated]: syz.2.662 (pid 8197) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.434770][ T8197] Use struct sctp_sack_info instead
[  185.515382][ T8185] netlink: 76 bytes leftover after parsing attributes in process `syz.4.661'.
[  186.117274][ T8216] syzkaller1: entered promiscuous mode
[  186.123562][ T8216] syzkaller1: entered allmulticast mode
[  186.220569][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'.
[  186.255082][ T8226] netlink: 68 bytes leftover after parsing attributes in process `syz.0.670'.
[  186.524804][ T8234] netlink: 212392 bytes leftover after parsing attributes in process `syz.3.672'.
[  186.557649][ T8234] openvswitch: netlink: Message has 4 unknown bytes.
[  186.581211][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[  187.045783][ T8245] netlink: 76 bytes leftover after parsing attributes in process `syz.3.676'.
[  188.150313][ T8264] netlink: 68 bytes leftover after parsing attributes in process `syz.3.681'.
[  188.495988][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'.
[  188.916380][ T8276] netlink: 'syz.2.686': attribute type 1 has an invalid length.
[  189.543266][ T8300] __nla_validate_parse: 1 callbacks suppressed
[  189.543288][ T8300] netlink: 68 bytes leftover after parsing attributes in process `syz.0.694'.
[  191.631856][ T8365] xt_TPROXY: Can be used only with -p tcp or -p udp
[  191.759589][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'.
[  191.784453][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'.
[  191.840496][ T8365] netlink: 'syz.1.712': attribute type 1 has an invalid length.
[  191.882492][ T8365] netlink: 10 bytes leftover after parsing attributes in process `syz.1.712'.
[  191.947565][ T8373] netlink: 'syz.3.716': attribute type 8 has an invalid length.
[  192.350153][ T8385] netlink: 'syz.1.721': attribute type 39 has an invalid length.
[  192.400171][ T8388] sctp: [Deprecated]: syz.4.720 (pid 8388) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.400171][ T8388] Use struct sctp_sack_info instead
[  192.463279][ T8382] pimreg: entered allmulticast mode
[  192.551046][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'.
[  192.578358][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'.
[  192.766560][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'.
[  193.383488][ T8411] xt_hashlimit: max too large, truncated to 1048576
[  193.485322][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'.
[  194.083031][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'.
[  194.398234][ T5857] Bluetooth: hci4: command 0x0406 tx timeout
[  195.500659][ T8471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.745'.
[  195.684233][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'.
[  195.739557][ T8475] FAULT_INJECTION: forcing a failure.
[  195.739557][ T8475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.807870][ T8475] CPU: 0 UID: 0 PID: 8475 Comm: syz.2.747 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  195.807901][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  195.807925][ T8475] Call Trace:
[  195.807933][ T8475]  <TASK>
[  195.807942][ T8475]  dump_stack_lvl+0x241/0x360
[  195.807978][ T8475]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.808006][ T8475]  ? __pfx__printk+0x10/0x10
[  195.808048][ T8475]  should_fail_ex+0x424/0x570
[  195.808077][ T8475]  _copy_from_user+0x2d/0xb0
[  195.808109][ T8475]  __sys_bpf+0x1c5/0x8b0
[  195.808138][ T8475]  ? __pfx___sys_bpf+0x10/0x10
[  195.808178][ T8475]  ? ksys_write+0x275/0x2d0
[  195.808221][ T8475]  __x64_sys_bpf+0x7c/0x90
[  195.808245][ T8475]  do_syscall_64+0xf3/0x210
[  195.808267][ T8475]  ? clear_bhb_loop+0x45/0xa0
[  195.808292][ T8475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.808313][ T8475] RIP: 0033:0x7f325198e169
[  195.808331][ T8475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.808347][ T8475] RSP: 002b:00007f325282c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  195.808370][ T8475] RAX: ffffffffffffffda RBX: 00007f3251bb5fa0 RCX: 00007f325198e169
[  195.808385][ T8475] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000003
[  195.808398][ T8475] RBP: 00007f325282c090 R08: 0000000000000000 R09: 0000000000000000
[  195.808411][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.808423][ T8475] R13: 0000000000000000 R14: 00007f3251bb5fa0 R15: 00007ffdd5de25f8
[  195.808455][ T8475]  </TASK>
[  196.232022][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'.
[  196.502980][ T8498] xt_hashlimit: max too large, truncated to 1048576
[  196.633407][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'.
[  196.691440][ T8507] netlink: 'syz.4.757': attribute type 1 has an invalid length.
[  196.858210][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'.
[  196.977309][ T8507] 8021q: adding VLAN 0 to HW filter on device bond2
[  196.992660][ T8507] bond1: (slave bond2): making interface the new active one
[  197.041713][ T8507] bond1: (slave bond2): Enslaving as an active interface with an up link
[  197.118418][ T8524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.761'.
[  197.825273][ T8539] batadv_slave_1: entered promiscuous mode
[  197.883624][ T8541] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  197.978118][ T8537] batadv_slave_1: left promiscuous mode
[  198.959021][ T8557] netlink: 'syz.1.770': attribute type 10 has an invalid length.
[  199.331680][ T8568] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.775'.
[  199.399522][ T8571] FAULT_INJECTION: forcing a failure.
[  199.399522][ T8571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.444520][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  199.468001][ T8571] CPU: 0 UID: 0 PID: 8571 Comm: syz.4.776 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  199.468009][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  199.468033][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  199.468046][ T8571] Call Trace:
[  199.468054][ T8571]  <TASK>
[  199.468062][ T8571]  dump_stack_lvl+0x241/0x360
[  199.468099][ T8571]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.468133][ T8571]  ? __pfx__printk+0x10/0x10
[  199.468178][ T8571]  should_fail_ex+0x424/0x570
[  199.468209][ T8571]  _copy_to_user+0x31/0xb0
[  199.468246][ T8571]  simple_read_from_buffer+0xc4/0x170
[  199.468285][ T8571]  proc_fail_nth_read+0x1ef/0x260
[  199.468324][ T8571]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  199.468363][ T8571]  ? rw_verify_area+0x246/0x630
[  199.468392][ T8571]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  199.468428][ T8571]  vfs_read+0x21f/0xb90
[  199.468463][ T8571]  ? __pfx___mutex_lock+0x10/0x10
[  199.468487][ T8571]  ? __pfx_vfs_read+0x10/0x10
[  199.468520][ T8571]  ? __fget_files+0x2a/0x420
[  199.468543][ T8571]  ? __fget_files+0x39d/0x420
[  199.468561][ T8571]  ? __fget_files+0x2a/0x420
[  199.468593][ T8571]  ksys_read+0x19d/0x2d0
[  199.468646][ T8571]  ? __pfx_ksys_read+0x10/0x10
[  199.468693][ T8571]  ? do_syscall_64+0xb6/0x210
[  199.468720][ T8571]  do_syscall_64+0xf3/0x210
[  199.468742][ T8571]  ? clear_bhb_loop+0x45/0xa0
[  199.468769][ T8571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.468791][ T8571] RIP: 0033:0x7f6e57f8cb7c
[  199.468811][ T8571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  199.468830][ T8571] RSP: 002b:00007f6e58e1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  199.468854][ T8571] RAX: ffffffffffffffda RBX: 00007f6e581b5fa0 RCX: 00007f6e57f8cb7c
[  199.468870][ T8571] RDX: 000000000000000f RSI: 00007f6e58e1b0a0 RDI: 0000000000000003
[  199.468884][ T8571] RBP: 00007f6e58e1b090 R08: 0000000000000000 R09: 0000000000000000
[  199.468898][ T8571] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001
[  199.468911][ T8571] R13: 0000000000000001 R14: 00007f6e581b5fa0 R15: 00007ffc27049d08
[  199.468947][ T8571]  </TASK>
[  199.772943][ T8577] netlink: 'syz.1.778': attribute type 29 has an invalid length.
[  199.988772][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'.
[  200.085362][ T8587] IPVS: length: 165 != 24
[  200.149545][ T8595] netlink: 'syz.3.783': attribute type 1 has an invalid length.
[  200.407016][ T8606] netlink: 'syz.1.785': attribute type 2 has an invalid length.
[  200.455987][ T8600] 8021q: adding VLAN 0 to HW filter on device bond3
[  200.466009][ T8600] bond2: (slave bond3): making interface the new active one
[  200.474262][ T8600] bond2: (slave bond3): Enslaving as an active interface with an up link
[  201.486996][ T8630] pimreg: left allmulticast mode
[  202.724329][ T8656] xt_CT: No such helper "snmp"
[  203.671024][ T8684] bridge_slave_0: entered promiscuous mode
[  203.711269][ T8684] bridge_slave_0: entered allmulticast mode
[  204.024324][ T8694] vlan0: entered allmulticast mode
[  204.048903][ T8694] veth0_to_batadv: entered allmulticast mode
[  204.083583][ T8694] bridge0: port 3(vlan0) entered blocking state
[  204.118933][ T8694] bridge0: port 3(vlan0) entered disabled state
[  204.186622][ T8694] vlan0: entered promiscuous mode
[  204.242426][ T8707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'.
[  204.242911][ T8694] veth0_to_batadv: entered promiscuous mode
[  204.284308][ T8694] bridge0: port 3(vlan0) entered blocking state
[  204.291583][ T8694] bridge0: port 3(vlan0) entered forwarding state
[  204.416071][ T8707] veth5: entered promiscuous mode
[  205.130105][ T8737] sit0: entered promiscuous mode
[  205.166639][ T8737] netlink: 'syz.3.840': attribute type 1 has an invalid length.
[  205.201398][ T8737] netlink: 1 bytes leftover after parsing attributes in process `syz.3.840'.
[  205.770693][ T8754] netlink: 104 bytes leftover after parsing attributes in process `syz.2.847'.
[  206.292924][ T8767] netlink: 'syz.4.852': attribute type 10 has an invalid length.
[  206.360801][ T8771] dummy0: entered promiscuous mode
[  206.366342][ T8771] vlan1: entered promiscuous mode
[  206.803094][ T8785] netlink: 'syz.3.861': attribute type 1 has an invalid length.
[  207.098008][ T8788] 8021q: adding VLAN 0 to HW filter on device bond5
[  207.167783][ T8788] bond4: (slave bond5): making interface the new active one
[  207.209454][ T8796] xt_bpf: check failed: parse error
[  207.216825][ T8796] netlink: 124 bytes leftover after parsing attributes in process `syz.0.863'.
[  207.228903][ T8788] bond4: (slave bond5): Enslaving as an active interface with an up link
[  207.243337][ T8793] syz_tun: entered allmulticast mode
[  207.265597][ T8789] syz_tun: left allmulticast mode
[  207.386090][ T8800] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  207.455375][ T8800] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  208.308929][ T8826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.874'.
[  208.559740][ T8833] Bluetooth: MGMT ver 1.23
[  208.745852][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.879'.
[  208.907540][ T8843] xt_CT: No such helper "snmp"
[  209.257719][ T8859] hsr0: entered promiscuous mode
[  209.269993][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'.
[  209.301266][ T8859] hsr_slave_0: left promiscuous mode
[  209.332984][ T8859] hsr_slave_1: left promiscuous mode
[  209.394154][ T8859] hsr0 (unregistering): left promiscuous mode
[  209.418738][ T8859] ------------[ cut here ]------------
[  209.424275][ T8859] WARNING: CPU: 1 PID: 8859 at net/core/dev.c:12067 unregister_netdevice_many_notify+0x20b7/0x2640
[  209.435331][ T8859] Modules linked in:
[  209.439463][ T8859] CPU: 1 UID: 0 PID: 8859 Comm: syz.0.887 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  209.451548][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  209.461832][ T8859] RIP: 0010:unregister_netdevice_many_notify+0x20b7/0x2640
[  209.469242][ T8859] Code: f0 3e f8 48 8b 4c 24 10 48 8b 09 4c 39 f9 0f 84 89 01 00 00 48 89 cb e8 67 b1 d4 f7 48 89 d9 e9 75 ed ff ff e8 5a b1 d4 f7 90 <0f> 0b 90 e9 49 ff ff ff e8 4c b1 d4 f7 90 0f 0b 90 eb 97 e8 41 b1
[  209.489173][ T8859] RSP: 0018:ffffc9000466ef80 EFLAGS: 00010287
[  209.495307][ T8859] RAX: ffffffff89ee0966 RBX: ffff88807ed321a8 RCX: 0000000000080000
[  209.503438][ T8859] RDX: ffffc9000bc02000 RSI: 00000000000126d1 RDI: 00000000000126d2
[  209.511654][ T8859] RBP: ffffc9000466f190 R08: ffffffff89ee086b R09: 1ffffffff201fd24
[  209.522927][ T8859] R10: dffffc0000000000 R11: fffffbfff201fd25 R12: ffff88807ed32000
[  209.532164][ T8859] R13: dffffc0000000000 R14: ffff8880570f6780 R15: ffffc9000466f200
[  209.540762][ T8859] FS:  00007fb17957d6c0(0000) GS:ffff8881250aa000(0000) knlGS:0000000000000000
[  209.550319][ T8859] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  209.557454][ T8859] CR2: 0000001b30f1bff8 CR3: 000000005adaa000 CR4: 00000000003526f0
[  209.565874][ T8859] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  209.573998][ T8859] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  209.582261][ T8859] Call Trace:
[  209.585579][ T8859]  <TASK>
[  209.588654][ T8859]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  209.591131][ T8877] netlink: 76 bytes leftover after parsing attributes in process `syz.2.891'.
[  209.595452][ T8859]  ? kasan_quarantine_put+0xdc/0x230
[  209.595523][ T8859]  ? lockdep_hardirqs_on+0x9d/0x150
[  209.595566][ T8859]  ? unregister_netdevice_queue+0x2c4/0x400
[  209.595608][ T8859]  ? hsr_del_nodes+0x78/0x90
[  209.595635][ T8859]  ? __pfx_hsr_dellink+0x10/0x10
[  209.595669][ T8859]  rtnl_dellink+0x53c/0x8c0
[  209.595703][ T8859]  ? do_syscall_64+0xf3/0x210
[  209.595732][ T8859]  ? __pfx_rtnl_dellink+0x10/0x10
[  209.595863][ T8859]  ? __pfx_rtnl_dellink+0x10/0x10
[  209.652168][ T8859]  rtnetlink_rcv_msg+0x80f/0xd70
[  209.657189][ T8859]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  209.662445][ T8859]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  209.668052][ T8859]  ? ref_tracker_free+0x63e/0x7e0
[  209.673138][ T8859]  netlink_rcv_skb+0x208/0x480
[  209.684080][ T8859]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  209.690259][ T8859]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  209.695633][ T8859]  ? netlink_deliver_tap+0x2e/0x1b0
[  209.700943][ T8859]  ? netlink_deliver_tap+0x2e/0x1b0
[  209.706200][ T8859]  netlink_unicast+0x7f8/0x9a0
[  209.711097][ T8859]  ? __pfx_netlink_unicast+0x10/0x10
[  209.716436][ T8859]  ? skb_put+0x114/0x1f0
[  209.721556][ T8859]  netlink_sendmsg+0x8c3/0xcd0
[  209.726403][ T8859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.732484][ T8859]  ? aa_sock_msg_perm+0x91/0x160
[  209.737491][ T8859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.742921][ T8859]  __sock_sendmsg+0x221/0x270
[  209.747657][ T8859]  ____sys_sendmsg+0x523/0x860
[  209.752621][ T8859]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.758350][ T8859]  ? __fget_files+0x2a/0x420
[  209.762994][ T8859]  ? __fget_files+0x2a/0x420
[  209.767635][ T8859]  __sys_sendmsg+0x271/0x360
[  209.772367][ T8859]  ? __pfx_futex_wake+0x10/0x10
[  209.777271][ T8859]  ? __pfx___sys_sendmsg+0x10/0x10
[  209.782597][ T8859]  ? do_syscall_64+0xb6/0x210
[  209.787322][ T8859]  do_syscall_64+0xf3/0x210
[  209.791947][ T8859]  ? clear_bhb_loop+0x45/0xa0
[  209.796679][ T8859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.802695][ T8859] RIP: 0033:0x7fb17878e169
[  209.807152][ T8859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.827746][ T8859] RSP: 002b:00007fb17957d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.836939][ T8859] RAX: ffffffffffffffda RBX: 00007fb1789b5fa0 RCX: 00007fb17878e169
[  209.845162][ T8859] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006
[  209.853262][ T8859] RBP: 00007fb178810a68 R08: 0000000000000000 R09: 0000000000000000
[  209.861364][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.869434][ T8859] R13: 0000000000000000 R14: 00007fb1789b5fa0 R15: 00007ffce25cda98
[  209.877469][ T8859]  </TASK>
[  209.880615][ T8859] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  209.887938][ T8859] CPU: 1 UID: 0 PID: 8859 Comm: syz.0.887 Not tainted 6.15.0-rc2-syzkaller-00657-g0e0a7e3719bc #0 PREEMPT(full) 
[  209.899875][ T8859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  209.910061][ T8859] Call Trace:
[  209.913375][ T8859]  <TASK>
[  209.916340][ T8859]  dump_stack_lvl+0x241/0x360
[  209.921070][ T8859]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.926320][ T8859]  ? __pfx__printk+0x10/0x10
[  209.930978][ T8859]  ? vscnprintf+0x5d/0x90
[  209.935356][ T8859]  panic+0x349/0x880
[  209.939295][ T8859]  ? __warn+0x174/0x4d0
[  209.943496][ T8859]  ? __pfx_panic+0x10/0x10
[  209.947982][ T8859]  __warn+0x344/0x4d0
[  209.952012][ T8859]  ? unregister_netdevice_many_notify+0x20b7/0x2640
[  209.958656][ T8859]  report_bug+0x2b3/0x500
[  209.963042][ T8859]  ? unregister_netdevice_many_notify+0x20b7/0x2640
[  209.969686][ T8859]  ? unregister_netdevice_many_notify+0x20b7/0x2640
[  209.976327][ T8859]  ? unregister_netdevice_many_notify+0x20b9/0x2640
[  209.982978][ T8859]  handle_bug+0x89/0x170
[  209.987267][ T8859]  exc_invalid_op+0x1a/0x50
[  209.991816][ T8859]  asm_exc_invalid_op+0x1a/0x20
[  209.996702][ T8859] RIP: 0010:unregister_netdevice_many_notify+0x20b7/0x2640
[  210.003934][ T8859] Code: f0 3e f8 48 8b 4c 24 10 48 8b 09 4c 39 f9 0f 84 89 01 00 00 48 89 cb e8 67 b1 d4 f7 48 89 d9 e9 75 ed ff ff e8 5a b1 d4 f7 90 <0f> 0b 90 e9 49 ff ff ff e8 4c b1 d4 f7 90 0f 0b 90 eb 97 e8 41 b1
[  210.023578][ T8859] RSP: 0018:ffffc9000466ef80 EFLAGS: 00010287
[  210.029678][ T8859] RAX: ffffffff89ee0966 RBX: ffff88807ed321a8 RCX: 0000000000080000
[  210.037669][ T8859] RDX: ffffc9000bc02000 RSI: 00000000000126d1 RDI: 00000000000126d2
[  210.045656][ T8859] RBP: ffffc9000466f190 R08: ffffffff89ee086b R09: 1ffffffff201fd24
[  210.053645][ T8859] R10: dffffc0000000000 R11: fffffbfff201fd25 R12: ffff88807ed32000
[  210.061633][ T8859] R13: dffffc0000000000 R14: ffff8880570f6780 R15: ffffc9000466f200
[  210.069624][ T8859]  ? unregister_netdevice_many_notify+0x1fbb/0x2640
[  210.076260][ T8859]  ? unregister_netdevice_many_notify+0x20b6/0x2640
[  210.082897][ T8859]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  210.089774][ T8859]  ? kasan_quarantine_put+0xdc/0x230
[  210.095080][ T8859]  ? lockdep_hardirqs_on+0x9d/0x150
[  210.100306][ T8859]  ? unregister_netdevice_queue+0x2c4/0x400
[  210.106252][ T8859]  ? hsr_del_nodes+0x78/0x90
[  210.110861][ T8859]  ? __pfx_hsr_dellink+0x10/0x10
[  210.115824][ T8859]  rtnl_dellink+0x53c/0x8c0
[  210.120396][ T8859]  ? do_syscall_64+0xf3/0x210
[  210.125116][ T8859]  ? __pfx_rtnl_dellink+0x10/0x10
[  210.130293][ T8859]  ? __pfx_rtnl_dellink+0x10/0x10
[  210.135356][ T8859]  rtnetlink_rcv_msg+0x80f/0xd70
[  210.140325][ T8859]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  210.145484][ T8859]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  210.150997][ T8859]  ? ref_tracker_free+0x63e/0x7e0
[  210.156082][ T8859]  netlink_rcv_skb+0x208/0x480
[  210.160892][ T8859]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  210.166516][ T8859]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.171855][ T8859]  ? netlink_deliver_tap+0x2e/0x1b0
[  210.177088][ T8859]  ? netlink_deliver_tap+0x2e/0x1b0
[  210.182404][ T8859]  netlink_unicast+0x7f8/0x9a0
[  210.187240][ T8859]  ? __pfx_netlink_unicast+0x10/0x10
[  210.192556][ T8859]  ? skb_put+0x114/0x1f0
[  210.196822][ T8859]  netlink_sendmsg+0x8c3/0xcd0
[  210.201633][ T8859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.206962][ T8859]  ? aa_sock_msg_perm+0x91/0x160
[  210.211928][ T8859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.217239][ T8859]  __sock_sendmsg+0x221/0x270
[  210.221944][ T8859]  ____sys_sendmsg+0x523/0x860
[  210.226733][ T8859]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.232055][ T8859]  ? __fget_files+0x2a/0x420
[  210.236674][ T8859]  ? __fget_files+0x2a/0x420
[  210.241291][ T8859]  __sys_sendmsg+0x271/0x360
[  210.245907][ T8859]  ? __pfx_futex_wake+0x10/0x10
[  210.250789][ T8859]  ? __pfx___sys_sendmsg+0x10/0x10
[  210.255966][ T8859]  ? do_syscall_64+0xb6/0x210
[  210.260661][ T8859]  do_syscall_64+0xf3/0x210
[  210.265178][ T8859]  ? clear_bhb_loop+0x45/0xa0
[  210.269871][ T8859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.275778][ T8859] RIP: 0033:0x7fb17878e169
[  210.280210][ T8859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.300005][ T8859] RSP: 002b:00007fb17957d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.308468][ T8859] RAX: ffffffffffffffda RBX: 00007fb1789b5fa0 RCX: 00007fb17878e169
[  210.316451][ T8859] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000006
[  210.324437][ T8859] RBP: 00007fb178810a68 R08: 0000000000000000 R09: 0000000000000000
[  210.332429][ T8859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.340424][ T8859] R13: 0000000000000000 R14: 00007fb1789b5fa0 R15: 00007ffce25cda98
[  210.348427][ T8859]  </TASK>
[  210.351754][ T8859] Kernel Offset: disabled
[  210.356092][ T8859] Rebooting in 86400 seconds..