last executing test programs: 4.306139239s ago: executing program 3 (id=1990): getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x24, 0x6}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={r0, 0x800}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='%\x00'}, 0x30) syz_emit_ethernet(0x262, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd69000000022c06fffe8000000000000000000000000000aaff01000000000000000000000000000138000971650000003b08010900000000fc"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) 3.861258623s ago: executing program 2 (id=1995): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x540, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6]}}}, @common=@addrtype={{}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298b2d52f8acf654) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r4, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50) (async) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4) (async) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) 3.846661946s ago: executing program 1 (id=1997): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="70800000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230bfb9d867000008000500070000000a00180003030303030300"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000002c0)=@random="8c", 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f00000001c0)={0x100, {{0x2, 0x4e20, @remote}}}, 0x88) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x14, 0x0, &(0x7f0000000300)=0xfd3d) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, 0x0, 0x800) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) 3.812110246s ago: executing program 3 (id=1998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x64000000, @void, @value}, 0x6d) 3.694509914s ago: executing program 1 (id=2000): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x4, 0xfffffffa, 0x2c, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x80, 0x8000, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x4, 0xfffffffa, 0x2c, @dev={0xfe, 0x80, '\x00', 0x34}, @remote, 0x80, 0x8000, 0x1}}) 3.596228282s ago: executing program 3 (id=2002): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x4b, 0x2b, "4372071e845c1497c855383000000002000000352a72ee4d3795968b26680000000055965737ebaaec032b"}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f00000018c0)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) socket$nl_route(0x10, 0x3, 0x0) 3.5905734s ago: executing program 1 (id=2003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x4, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x84) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="00000000a61976a4aec41b7c5100000000000000", @ANYRES32=r11], 0x50) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x880, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) 2.292233453s ago: executing program 2 (id=2007): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@empty}}, 0x28}}, 0x32) 2.203690966s ago: executing program 2 (id=2010): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="70800000", @ANYRES16, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230bfb9d867000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000002c0)=@random="8c", 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f00000001c0)={0x100, {{0x2, 0x4e20, @remote}}}, 0x88) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x14, 0x0, &(0x7f0000000300)=0xfd3d) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, 0x0, 0x800) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) 1.90115686s ago: executing program 2 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000030000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r5) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000da0000f8ff00000000bfa2009b1eae8e5aa4860100f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095396dd4fafe5d5b166a8a015dbc3e6cc507b5963121b709b3dd96311754058b89aca27cfb31b4aa490981b102e9388512afd3ce8c3a3eccf2d83b0a9a50ea076bc654476e6aedd6be"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x40, 0x9, 0xffffffff, 0x0, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x63}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)={r9, 0xe0}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 1.859759548s ago: executing program 1 (id=2015): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000ffffffc311140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.696167922s ago: executing program 3 (id=2016): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x805) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000340)={0x7f, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r4, 0xd8b8, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r4, 0x945a, 0x8}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x7, &(0x7f00000000c0)='\a\x00\x00\x00', 0x4) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x20004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xf4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000002640)=@bloom_filter={0x1e, 0xc, 0x3, 0x7, 0x9024, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x9, @value, @void, @void, @value}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc0) 1.695889514s ago: executing program 4 (id=2017): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 1.695632909s ago: executing program 1 (id=2018): socket$netlink(0x10, 0x3, 0x12) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000b000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10) 1.657720751s ago: executing program 4 (id=2019): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000a000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 1.41630007s ago: executing program 1 (id=2021): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x7, 0x0, 0x6}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r1, 0x267a4e37}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100000000000000040000000000", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) 1.415107552s ago: executing program 2 (id=2023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x4e24, 0x40, 0x0, 0x0, 0xa, 0x0, 0x20}, {0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xffffff00, 0xffffffff], [], 'veth1_vlan\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffff00, 0xff], 'wlan1\x00', 'geneve1\x00', {0xff}, {0xff}, 0x61, 0x2, 0x4, 0x4c}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff000000, 0x0, 0xff, 0xff], 0xf6e, 0x2, {0x56}}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x340) syz_extract_tcp_res(0x0, 0x7fff, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaa86dd60f10200001c06fffc010000000000000000000000000001fe8000000400000000000000000000aa4e2000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6010000090780000000000002d675343"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r6, 0x200, 0x70bd27, 0x25dfdbfb}, 0x12}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) unshare(0x42000000) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000500)={0x1, 0x1, 0x1000, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100033060000000008000080e0000002000000000000000000000000fe80000000000000000000000000002a00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r5], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000e80)={0x0, 0x2710}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1.178412559s ago: executing program 0 (id=2024): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="70800000", @ANYRES16, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230bfb9d867000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000002c0)=@random="8c", 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f00000001c0)={0x100, {{0x2, 0x4e20, @remote}}}, 0x88) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x14, 0x0, &(0x7f0000000300)=0xfd3d) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, 0x0, 0x800) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) 1.032972191s ago: executing program 4 (id=2025): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 960.600916ms ago: executing program 0 (id=2026): getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x24, 0x6}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={r0, 0x800}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='%\x00'}, 0x30) syz_emit_ethernet(0x262, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd69000000022c06fffe8000000000000000000000000000aaff01000000000000000000000000000138000971650000003b08010900000000fc"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000078ff028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00'], 0x44}}, 0x0) 936.94283ms ago: executing program 3 (id=2027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x4, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x84) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000480)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="00000000a61976a4aec41b7c5100000000000000", @ANYRES32=r11], 0x50) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x880, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) 772.143061ms ago: executing program 4 (id=2028): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x16, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304120000ffffca88faca"], 0xdd12}], 0x1}, 0x0) 702.624552ms ago: executing program 0 (id=2029): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x6, 0x9, 0x3ae3, 0x2, 0xe, 0xa31c}}, {0x4}}]}]}, 0x5c}}, 0x4000010) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 646.525709ms ago: executing program 4 (id=2030): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2\x1a\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000001500)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x1, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'veth0_to_hsr\x00', 'bridge0\x00', {0xff}, {0xff}, 0xc, 0x1, 0x16}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x3, 0x4, 0x4, 0x4], 0x0, 0x2}, {0x3, [0x6, 0x1, 0xa, 0x6, 0x2, 0x1], 0x3, 0x2}}}}, {{@ip={@remote, @remote, 0xffffffff, 0x0, 'pim6reg0\x00', 'vlan0\x00', {}, {0xff}, 0x21, 0x3, 0x61}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x0, 0x9, 'pptp\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="1d00"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000007311420000000000851000000200000085000000ac00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a00010025bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0000b400140003000800000000000000000000000000000414000100ff"], 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000400)="301249ff1e6d63f52aec245f3cd1b315883e766c684cbba38642de8e28159d69d07f51ad30f4d577f74e2e816ee911a8bfd507dda75b0ba991f24514ae4f2bd13212b5c0ca4f5eede6f90cbfdfcb5bae6763c703f7fa5eeb8799981e7ec10cb10d03d2cba2c3837c2be37c3a635d3358b15f8dca83479222448b3d7892d05b31b88f5f04da90fac57da577d1cf280d31861cae20bf75159d341d66cf3242a6de28751f8b1d240a740933b35e9f532ad8731ca2488212a416", 0xb8}, {&(0x7f0000000580)="77979cfab242fcfad0e2f166c7c9f43d2e2f17334355cb1d851c5fa759fe9ca9ab8d49a0d35cbf84e93ca2f7c98d82bfeeee4cd022d915f5d70015191f98c6b1cb422b85ce9eeae459dc3d3f77018f42f95f", 0x52}, {&(0x7f0000000980)="a3f40395066c36b2855b0d386d8e9279366711f046cefe616f36fa923030b7417e7b9174d79e60304f49eb67d1fde1b0e0bad31ee25edf8e70fc05fe8c15f7e76f39c280a1b6375d065f584da869a0d8e78b607fe1e2cdb7e9073386bbb6d88b1e4848604dc45fe044d24e0efdde31089eb7a7f0d0e5fd578f2a1cd5666cc7edf08c852217756c", 0x87}, {&(0x7f0000000a40)="5cb76e9549d3702cff7e49d163ed367973709c85d06b70ad692a8c7fcb8317c46dcc9f2f65ecefd6281476d6ab6457c000b717900066a74920cd6a7edff220d0fa17583a60aebd0a553aefd8f17b0addf3e143f2c6698bc0bdb4a4d2af2ff0fbd7b7c58475eaacadaf049d1c31aadf4c7da4789c3a", 0x75}, {&(0x7f0000000300)="7da00347c73d97eb8e1fa97f392c9bef4a353c4cf515c0b171657ee37937959563b70ebaec", 0x25}, {&(0x7f0000000ac0)="0222bbb405e957457b541d7b7b9abddbcb1450e380df6db14df59a4d40fd90e377ab24c2ce28fab938e0ee05ac62492abf951e5b7f28165df7c8cc9d8553f9c8965c9c591fa90b70f57854223c562f7354bcf80e87f1dda6954e4cdb8f8e49d43ecb24913df900a64c5071756252fefc343b83c944b0363830f678a8bcea87ce97f132a837dd6e43780ced0ffbf66694fed129d388174c7da1ab5b08f9efef9539928772c1b8f507", 0xa8}], 0x6}, 0x40805) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="300400003e00010000770bf05d00080000000000010000f0030000000c0001800800108004000b800c00020000000000000000003216423309f031c31440734e7dcbcbf65f91690e9132d51abe37dcc28ef7b8756695e4a6f3b16a5cfeae1eb6d5f71a7e9f59068479e38e96f06f8bd6dfff4c1d7b6a369a13606ea60e3fd6b11fc9520a2a32dac44173d3ddd60ec94a711dfd4f3e4d24b731be56632d24b0d5b590284e3e97cbfef489f45ac68d539a9e249ce4cd16b5538b9f1b"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x4c, r8, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x4, 0x9}}, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xc}, @void, @void}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000080)=0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="38dff1050003e4", @ANYRES32=0x0, @ANYBLOB="03440600c31006001000128008000100736974000400028008001f0022020000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 404.261356ms ago: executing program 4 (id=2031): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x14a4, @remote, 0xe}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000480)=']', 0x1}], 0x1}}], 0x1, 0x20000004) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x844, &(0x7f0000000200)={0x11, 0x16, r3, 0x1, 0x4b}, 0x14) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 394.997714ms ago: executing program 0 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000005010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d30000000000000080001"], 0xd4}}, 0x0) 304.765245ms ago: executing program 0 (id=2033): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (fail_nth: 4) 172.828327ms ago: executing program 3 (id=2034): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x2, 0xa, 0x9a807f839144420f, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x20}}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x44, 0x20, 0x3727d42e14836b5, 0x70bd27, 0x25dfdbff, {0xa, 0x10, 0x80, 0x10, 0x0, 0x0, 0x0, 0x7, 0x16}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="8000000000000000170100000200000069000000be2602b4f86bb41899deb31ed15dac8d02c7f601755aedd7f5a98776b959e4a235a8c1c1007ba9fcc1b31a5d68030e04008c2495d7bc91e83ae8eaeca56fedc84caa506e34bbf9884ffa577043c1e83607c5e62f67ac70c940e3c19b91dee61939a341820974c449b5000000180000000000000017010000030000000100000000000000180000000000000017010000040000003c7700000000000018000000000000001701000004000000020000000000000018000000000000001701000002000000000000000000000018000000000000001701000003000000010000000000000018"], 0x110, 0x8050}, 0x8801) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xffffffff}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000000)={r11, 0x1, 0x4, 0x10001, 0x0, 0x6}, &(0x7f0000000040)=0x14) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4e1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 52.31048ms ago: executing program 2 (id=2035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000001000000000000a28000000000a01080000000000000000030000000900010073797a31000000000800024000000006"], 0x50}}, 0x20044084) 0s ago: executing program 0 (id=2036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) kernel console output (not intermixed with test programs): ASK> [ 240.847401][ T9365] dump_stack_lvl+0x189/0x250 [ 240.847436][ T9365] ? __pfx____ratelimit+0x10/0x10 [ 240.847460][ T9365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.847486][ T9365] ? __pfx__printk+0x10/0x10 [ 240.847523][ T9365] ? __might_fault+0xb0/0x130 [ 240.847554][ T9365] should_fail_ex+0x414/0x560 [ 240.847583][ T9365] _copy_from_iter+0x1db/0x16f0 [ 240.847614][ T9365] ? rep_movs_alternative+0x4a/0x90 [ 240.847640][ T9365] ? __pfx__copy_from_iter+0x10/0x10 [ 240.847665][ T9365] ? sock_alloc_send_pskb+0x875/0x990 [ 240.847693][ T9365] ? __pfx__copy_from_iter+0x10/0x10 [ 240.847725][ T9365] ? page_copy_sane+0x16a/0x280 [ 240.847754][ T9365] copy_page_from_iter+0xdd/0x170 [ 240.847787][ T9365] skb_copy_datagram_from_iter+0x306/0x720 [ 240.847822][ T9365] unix_stream_sendmsg+0x5a1/0xc90 [ 240.847858][ T9365] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 240.847891][ T9365] ? aa_sock_msg_perm+0x94/0x160 [ 240.847916][ T9365] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.847941][ T9365] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 240.847961][ T9365] __sock_sendmsg+0x21c/0x270 [ 240.848006][ T9365] ____sys_sendmsg+0x505/0x830 [ 240.848033][ T9365] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.848065][ T9365] ? import_iovec+0x74/0xa0 [ 240.848100][ T9365] ___sys_sendmsg+0x21f/0x2a0 [ 240.848122][ T9365] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.848198][ T9365] ? __fget_files+0x2a/0x420 [ 240.848220][ T9365] ? __fget_files+0x3a0/0x420 [ 240.848254][ T9365] __x64_sys_sendmsg+0x19b/0x260 [ 240.848278][ T9365] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.848310][ T9365] ? __pfx_ksys_write+0x10/0x10 [ 240.848327][ T9365] ? rcu_is_watching+0x15/0xb0 [ 240.848351][ T9365] ? do_syscall_64+0xbe/0x3b0 [ 240.848381][ T9365] do_syscall_64+0xfa/0x3b0 [ 240.848406][ T9365] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.848431][ T9365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.848450][ T9365] ? clear_bhb_loop+0x60/0xb0 [ 240.848476][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.848495][ T9365] RIP: 0033:0x7fe1bd18e929 [ 240.848512][ T9365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.848529][ T9365] RSP: 002b:00007fe1bdf27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.848550][ T9365] RAX: ffffffffffffffda RBX: 00007fe1bd3b5fa0 RCX: 00007fe1bd18e929 [ 240.848564][ T9365] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 240.848577][ T9365] RBP: 00007fe1bdf27090 R08: 0000000000000000 R09: 0000000000000000 [ 240.848589][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.848600][ T9365] R13: 0000000000000000 R14: 00007fe1bd3b5fa0 R15: 00007ffcd6caaa48 [ 240.848631][ T9365] [ 241.231247][ T9367] nbd: must specify a size in bytes for the device [ 241.265283][ T9361] wlan0 speed is unknown, defaulting to 1000 [ 241.449672][ T9363] xt_CT: No such helper "snmp" [ 241.554719][ T9379] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 241.797890][ T9383] netlink: 'syz.3.1202': attribute type 4 has an invalid length. [ 241.810534][ T9383] netlink: 'syz.3.1202': attribute type 4 has an invalid length. [ 241.832689][ T9387] xt_hashlimit: size too large, truncated to 1048576 [ 241.981039][ T30] audit: type=1800 audit(1749760079.486:2): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1206" name="memory.events" dev="tmpfs" ino=1319 res=0 errno=0 [ 242.042171][ T9398] __nla_validate_parse: 9 callbacks suppressed [ 242.042190][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1208'. [ 242.068249][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 242.078351][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 242.092842][ T30] audit: type=1804 audit(1749760079.566:3): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1206" name="/newroot/255/memory.events" dev="tmpfs" ino=1319 res=1 errno=0 [ 242.118448][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 242.222791][ T9405] netlink: 'syz.0.1211': attribute type 2 has an invalid length. [ 242.232809][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 242.266784][ T9403] macsec0: entered promiscuous mode [ 242.287457][ T9403] macsec2: entered allmulticast mode [ 242.299537][ T9408] netlink: 'syz.4.1212': attribute type 11 has an invalid length. [ 242.301030][ T9403] macsec0: entered allmulticast mode [ 242.322149][ T9403] veth1_macvtap: entered allmulticast mode [ 242.534373][ T9431] netlink: 'syz.0.1216': attribute type 23 has an invalid length. [ 242.651328][ T9436] netlink: 'syz.4.1221': attribute type 32 has an invalid length. [ 242.736556][ T9440] xt_hashlimit: size too large, truncated to 1048576 [ 242.870188][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 242.960537][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'. [ 243.124454][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 243.428933][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 245.290886][ T9507] tipc: Started in network mode [ 245.295951][ T9507] tipc: Node identity 827074b84814, cluster identity 4711 [ 245.303499][ T9507] tipc: Enabled bearer , priority 0 [ 245.473920][ T9507] syzkaller0: entered promiscuous mode [ 245.503446][ T9507] syzkaller0: entered allmulticast mode [ 245.508318][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 245.538674][ T9507] tipc: Resetting bearer [ 246.395022][ T9] tipc: Node number set to 3395581112 [ 248.284506][ T9512] bond2: (slave geneve3): Releasing active interface [ 248.354542][ T9518] ip6gretap0: entered promiscuous mode [ 248.360377][ T9518] macsec1: entered allmulticast mode [ 248.365993][ T9518] ip6gretap0: entered allmulticast mode [ 248.374457][ T9518] ip6gretap0: left allmulticast mode [ 248.382367][ T9518] ip6gretap0: left promiscuous mode [ 248.408739][ T9506] tipc: Resetting bearer [ 248.424245][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 248.433592][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 248.532209][ T9546] FAULT_INJECTION: forcing a failure. [ 248.532209][ T9546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.539115][ T9544] IPVS: set_ctl: invalid protocol: 0 172.20.20.41:20001 [ 248.547766][ T9546] CPU: 1 UID: 0 PID: 9546 Comm: syz.3.1256 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 248.547795][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.547823][ T9546] Call Trace: [ 248.547832][ T9546] [ 248.547841][ T9546] dump_stack_lvl+0x189/0x250 [ 248.547879][ T9546] ? __pfx____ratelimit+0x10/0x10 [ 248.547908][ T9546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.547939][ T9546] ? __pfx__printk+0x10/0x10 [ 248.547963][ T9546] ? __might_fault+0xb0/0x130 [ 248.547996][ T9546] should_fail_ex+0x414/0x560 [ 248.548027][ T9546] _copy_from_user+0x2d/0xb0 [ 248.548050][ T9546] ___sys_sendmsg+0x158/0x2a0 [ 248.548076][ T9546] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.548164][ T9546] ? __might_fault+0xb0/0x130 [ 248.548189][ T9546] __sys_sendmmsg+0x227/0x430 [ 248.548219][ T9546] ? __pfx___sys_sendmmsg+0x10/0x10 [ 248.548241][ T9546] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 248.548309][ T9546] ? ksys_write+0x22a/0x250 [ 248.548334][ T9546] ? __pfx_ksys_write+0x10/0x10 [ 248.548353][ T9546] ? rcu_is_watching+0x15/0xb0 [ 248.548381][ T9546] __x64_sys_sendmmsg+0xa0/0xc0 [ 248.548408][ T9546] do_syscall_64+0xfa/0x3b0 [ 248.548437][ T9546] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.548466][ T9546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.548489][ T9546] ? clear_bhb_loop+0x60/0xb0 [ 248.548516][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.548538][ T9546] RIP: 0033:0x7fddfd78e929 [ 248.548559][ T9546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.548578][ T9546] RSP: 002b:00007fddfb5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 248.548601][ T9546] RAX: ffffffffffffffda RBX: 00007fddfd9b5fa0 RCX: 00007fddfd78e929 [ 248.548618][ T9546] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 248.548634][ T9546] RBP: 00007fddfb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 248.548648][ T9546] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 248.548662][ T9546] R13: 0000000000000000 R14: 00007fddfd9b5fa0 R15: 00007ffc765f3468 [ 248.548696][ T9546] [ 248.873761][ T9552] netlink: 'syz.3.1258': attribute type 8 has an invalid length. [ 249.955421][ T9506] tipc: Disabling bearer [ 249.994193][ T9535] wlan0 speed is unknown, defaulting to 1000 [ 250.525629][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1265'. [ 250.986448][ T9601] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1268'. [ 250.999402][ T9601] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1268'. [ 250.999560][ T9600] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1271'. [ 251.022989][ T9601] netlink: 'syz.2.1268': attribute type 6 has an invalid length. [ 251.040401][ T9600] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 251.048921][ T9601] netlink: 'syz.2.1268': attribute type 5 has an invalid length. [ 251.075044][ T9601] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1268'. [ 251.097647][ T9604] FAULT_INJECTION: forcing a failure. [ 251.097647][ T9604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.124043][ T9604] CPU: 1 UID: 0 PID: 9604 Comm: syz.3.1272 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 251.124070][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.124082][ T9604] Call Trace: [ 251.124089][ T9604] [ 251.124097][ T9604] dump_stack_lvl+0x189/0x250 [ 251.124132][ T9604] ? __pfx____ratelimit+0x10/0x10 [ 251.124158][ T9604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.124185][ T9604] ? __pfx__printk+0x10/0x10 [ 251.124206][ T9604] ? __might_fault+0xb0/0x130 [ 251.124236][ T9604] should_fail_ex+0x414/0x560 [ 251.124265][ T9604] _copy_from_iter+0x1db/0x16f0 [ 251.124297][ T9604] ? rep_movs_alternative+0x4a/0x90 [ 251.124324][ T9604] ? __pfx__copy_from_iter+0x10/0x10 [ 251.124349][ T9604] ? sock_alloc_send_pskb+0x875/0x990 [ 251.124378][ T9604] ? __pfx__copy_from_iter+0x10/0x10 [ 251.124409][ T9604] ? page_copy_sane+0x16a/0x280 [ 251.124439][ T9604] copy_page_from_iter+0xdd/0x170 [ 251.124492][ T9604] skb_copy_datagram_from_iter+0x306/0x720 [ 251.124531][ T9604] unix_stream_sendmsg+0x5a1/0xc90 [ 251.124570][ T9604] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 251.124598][ T9604] ? aa_sock_msg_perm+0x94/0x160 [ 251.124626][ T9604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.124652][ T9604] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 251.124675][ T9604] __sock_sendmsg+0x21c/0x270 [ 251.124705][ T9604] ____sys_sendmsg+0x505/0x830 [ 251.124733][ T9604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.124768][ T9604] ? import_iovec+0x74/0xa0 [ 251.124792][ T9604] ___sys_sendmsg+0x21f/0x2a0 [ 251.124818][ T9604] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.124877][ T9604] ? __fget_files+0x2a/0x420 [ 251.124899][ T9604] ? __fget_files+0x3a0/0x420 [ 251.124933][ T9604] __x64_sys_sendmsg+0x19b/0x260 [ 251.124959][ T9604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.124990][ T9604] ? __pfx_ksys_write+0x10/0x10 [ 251.125016][ T9604] ? rcu_is_watching+0x15/0xb0 [ 251.125041][ T9604] ? do_syscall_64+0xbe/0x3b0 [ 251.125071][ T9604] do_syscall_64+0xfa/0x3b0 [ 251.125097][ T9604] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.125122][ T9604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.125142][ T9604] ? clear_bhb_loop+0x60/0xb0 [ 251.125166][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.125185][ T9604] RIP: 0033:0x7fddfd78e929 [ 251.125203][ T9604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.125221][ T9604] RSP: 002b:00007fddfb5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.125242][ T9604] RAX: ffffffffffffffda RBX: 00007fddfd9b5fa0 RCX: 00007fddfd78e929 [ 251.125257][ T9604] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000005 [ 251.125269][ T9604] RBP: 00007fddfb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.125281][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.125293][ T9604] R13: 0000000000000000 R14: 00007fddfd9b5fa0 R15: 00007ffc765f3468 [ 251.125325][ T9604] [ 251.431988][ T9609] wlan0 speed is unknown, defaulting to 1000 [ 251.550598][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'. [ 251.568679][ T9613] ip6gretap0: entered promiscuous mode [ 251.574997][ T9613] macsec1: entered allmulticast mode [ 251.580385][ T9613] ip6gretap0: entered allmulticast mode [ 251.620913][ T9613] ip6gretap0: left allmulticast mode [ 251.626486][ T9613] ip6gretap0: left promiscuous mode [ 251.967318][ T9625] netlink: 'syz.0.1279': attribute type 6 has an invalid length. [ 252.412725][ T5946] hid-generic 0005:16BF:0006.0001: unknown main item tag 0x0 [ 252.440153][ T5946] hid-generic 0005:16BF:0006.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 252.467365][ T9655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1288'. [ 252.521971][ T9656] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1286'. [ 252.531877][ T9656] netlink: 'syz.2.1286': attribute type 6 has an invalid length. [ 252.563945][ T9656] netlink: 'syz.2.1286': attribute type 5 has an invalid length. [ 252.671543][ T9660] ip6gretap0: entered promiscuous mode [ 252.687474][ T9660] macsec1: entered allmulticast mode [ 252.713746][ T9660] ip6gretap0: entered allmulticast mode [ 252.750636][ T9664] xt_hashlimit: size too large, truncated to 1048576 [ 252.948587][ T9660] ip6gretap0: left allmulticast mode [ 252.959190][ T9660] ip6gretap0: left promiscuous mode [ 253.043119][ T9667] pim6reg: entered allmulticast mode [ 253.051855][ T9669] pim6reg: left allmulticast mode [ 253.379120][ T9677] xt_CT: No such helper "snmp" [ 253.461001][ T9685] wlan0 speed is unknown, defaulting to 1000 [ 253.539414][ T9693] xt_connbytes: Forcing CT accounting to be enabled [ 253.659337][ T9699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.950758][ T9713] xt_hashlimit: size too large, truncated to 1048576 [ 253.970019][ T9716] __nla_validate_parse: 5 callbacks suppressed [ 253.970037][ T9716] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1306'. [ 254.015168][ T9716] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1306'. [ 254.039154][ T9716] netlink: 'syz.3.1306': attribute type 6 has an invalid length. [ 254.064613][ T9716] netlink: 'syz.3.1306': attribute type 5 has an invalid length. [ 254.074993][ T9716] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1306'. [ 254.359787][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 254.387512][ T9726] netlink: 'syz.1.1312': attribute type 33 has an invalid length. [ 254.406159][ T9726] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1312'. [ 254.420988][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 254.555694][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1317'. [ 254.583424][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 254.667055][ T9740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1318'. [ 254.712270][ T9747] netlink: 'syz.1.1318': attribute type 3 has an invalid length. [ 254.860404][ T9755] netlink: 'syz.2.1321': attribute type 21 has an invalid length. [ 254.870893][ T9755] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1321'. [ 254.910589][ T9755] netlink: 'syz.2.1321': attribute type 4 has an invalid length. [ 254.918688][ T9755] netlink: 'syz.2.1321': attribute type 5 has an invalid length. [ 255.049992][ T9767] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 255.102993][ T9769] ip6gretap0: entered promiscuous mode [ 255.137189][ T9769] macsec3: entered allmulticast mode [ 255.142523][ T9769] ip6gretap0: entered allmulticast mode [ 255.170477][ T9769] ip6gretap0: left allmulticast mode [ 255.180227][ T9769] ip6gretap0: left promiscuous mode [ 255.230793][ T9776] net_ratelimit: 17 callbacks suppressed [ 255.230812][ T9776] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.244304][ T9779] macsec3: entered promiscuous mode [ 255.250588][ T9779] batadv0: entered promiscuous mode [ 255.261333][ T9779] batadv0: left promiscuous mode [ 255.586499][ T9797] hsr0: entered promiscuous mode [ 255.597636][ T9797] macvtap1: entered promiscuous mode [ 255.603141][ T9797] macvtap1: entered allmulticast mode [ 255.635306][ T9797] hsr0: entered allmulticast mode [ 255.658779][ T9797] hsr_slave_0: entered allmulticast mode [ 255.664565][ T9797] hsr_slave_1: entered allmulticast mode [ 255.675729][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.867855][ T9811] netlink: 'syz.3.1340': attribute type 39 has an invalid length. [ 255.868236][ T9805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.008000][ T9819] FAULT_INJECTION: forcing a failure. [ 256.008000][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 256.036662][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.4.1342 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 256.036694][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.036707][ T9819] Call Trace: [ 256.036716][ T9819] [ 256.036724][ T9819] dump_stack_lvl+0x189/0x250 [ 256.036762][ T9819] ? __pfx____ratelimit+0x10/0x10 [ 256.036790][ T9819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.036822][ T9819] ? __pfx__printk+0x10/0x10 [ 256.036847][ T9819] ? __pfx___might_resched+0x10/0x10 [ 256.036867][ T9819] ? fs_reclaim_acquire+0x7d/0x100 [ 256.036898][ T9819] should_fail_ex+0x414/0x560 [ 256.036932][ T9819] should_failslab+0xa8/0x100 [ 256.036957][ T9819] __kmalloc_noprof+0xcb/0x4f0 [ 256.036976][ T9819] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 256.037005][ T9819] ? sock_kmalloc+0xd6/0x160 [ 256.037044][ T9819] sock_kmalloc+0xd6/0x160 [ 256.037070][ T9819] hash_recvmsg+0x1d4/0x840 [ 256.037104][ T9819] ? __pfx_hash_recvmsg+0x10/0x10 [ 256.037132][ T9819] sock_recvmsg_nosec+0x183/0x1c0 [ 256.037164][ T9819] ____sys_recvmsg+0x3aa/0x460 [ 256.037197][ T9819] ? __pfx_____sys_recvmsg+0x10/0x10 [ 256.037237][ T9819] ? import_iovec+0x74/0xa0 [ 256.037271][ T9819] ___sys_recvmsg+0x1b5/0x510 [ 256.037300][ T9819] ? __pfx____sys_recvmsg+0x10/0x10 [ 256.037358][ T9819] ? __might_fault+0xb0/0x130 [ 256.037383][ T9819] do_recvmmsg+0x307/0x770 [ 256.037415][ T9819] ? __pfx_do_recvmmsg+0x10/0x10 [ 256.037452][ T9819] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.037510][ T9819] __x64_sys_recvmmsg+0x190/0x240 [ 256.037537][ T9819] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 256.037558][ T9819] ? rcu_is_watching+0x15/0xb0 [ 256.037582][ T9819] ? do_syscall_64+0xbe/0x3b0 [ 256.037614][ T9819] do_syscall_64+0xfa/0x3b0 [ 256.037639][ T9819] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.037663][ T9819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.037683][ T9819] ? clear_bhb_loop+0x60/0xb0 [ 256.037707][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.037726][ T9819] RIP: 0033:0x7f72fd38e929 [ 256.037743][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.037760][ T9819] RSP: 002b:00007f72fe192038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 256.037782][ T9819] RAX: ffffffffffffffda RBX: 00007f72fd5b5fa0 RCX: 00007f72fd38e929 [ 256.037796][ T9819] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 256.037809][ T9819] RBP: 00007f72fe192090 R08: 0000000000000000 R09: 0000000000000000 [ 256.037821][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.037833][ T9819] R13: 0000000000000000 R14: 00007f72fd5b5fa0 R15: 00007ffe05e085e8 [ 256.037865][ T9819] [ 256.485445][ T9825] ip6gretap0: entered promiscuous mode [ 256.491355][ T9825] macsec3: entered allmulticast mode [ 256.501278][ T9825] ip6gretap0: entered allmulticast mode [ 256.511869][ T9825] ip6gretap0: left allmulticast mode [ 256.518832][ T9825] ip6gretap0: left promiscuous mode [ 256.535148][ T9820] sctp: [Deprecated]: syz.2.1341 (pid 9820) Use of int in maxseg socket option. [ 256.535148][ T9820] Use struct sctp_assoc_value instead [ 256.568737][ T9828] sctp: [Deprecated]: syz.3.1345 (pid 9828) Use of int in maxseg socket option. [ 256.568737][ T9828] Use struct sctp_assoc_value instead [ 256.879205][ T9843] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 257.605567][ T9886] netlink: 'syz.3.1370': attribute type 10 has an invalid length. [ 257.624102][ T9886] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 257.803297][ T9897] bridge1: entered promiscuous mode [ 258.380458][ T9921] xt_hashlimit: size too large, truncated to 1048576 [ 259.809582][ T9942] __nla_validate_parse: 15 callbacks suppressed [ 259.809603][ T9942] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1387'. [ 260.190167][ T9966] netlink: 'syz.0.1394': attribute type 1 has an invalid length. [ 260.253611][ T9966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.302167][ T9977] FAULT_INJECTION: forcing a failure. [ 260.302167][ T9977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.315619][ T9977] CPU: 0 UID: 0 PID: 9977 Comm: syz.4.1398 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 260.315645][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.315657][ T9977] Call Trace: [ 260.315665][ T9977] [ 260.315672][ T9977] dump_stack_lvl+0x189/0x250 [ 260.315708][ T9977] ? __pfx____ratelimit+0x10/0x10 [ 260.315733][ T9977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.315762][ T9977] ? __pfx__printk+0x10/0x10 [ 260.315782][ T9977] ? __might_fault+0xb0/0x130 [ 260.315829][ T9977] should_fail_ex+0x414/0x560 [ 260.315887][ T9977] _copy_from_iter+0x1db/0x16f0 [ 260.315922][ T9977] ? rep_movs_alternative+0x4a/0x90 [ 260.315952][ T9977] ? __pfx__copy_from_iter+0x10/0x10 [ 260.315980][ T9977] ? sock_alloc_send_pskb+0x875/0x990 [ 260.316011][ T9977] ? __pfx__copy_from_iter+0x10/0x10 [ 260.316045][ T9977] ? page_copy_sane+0x16a/0x280 [ 260.316079][ T9977] copy_page_from_iter+0xdd/0x170 [ 260.316115][ T9977] skb_copy_datagram_from_iter+0x306/0x720 [ 260.316156][ T9977] unix_stream_sendmsg+0x5a1/0xc90 [ 260.316196][ T9977] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 260.316226][ T9977] ? aa_sock_msg_perm+0x94/0x160 [ 260.316255][ T9977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.316283][ T9977] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 260.316306][ T9977] __sock_sendmsg+0x21c/0x270 [ 260.316337][ T9977] ____sys_sendmsg+0x505/0x830 [ 260.316366][ T9977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.316399][ T9977] ? import_iovec+0x74/0xa0 [ 260.316425][ T9977] ___sys_sendmsg+0x21f/0x2a0 [ 260.316451][ T9977] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.316515][ T9977] ? __fget_files+0x2a/0x420 [ 260.316538][ T9977] ? __fget_files+0x3a0/0x420 [ 260.316573][ T9977] __x64_sys_sendmsg+0x19b/0x260 [ 260.316599][ T9977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.316633][ T9977] ? __pfx_ksys_write+0x10/0x10 [ 260.316650][ T9977] ? rcu_is_watching+0x15/0xb0 [ 260.316676][ T9977] ? do_syscall_64+0xbe/0x3b0 [ 260.316708][ T9977] do_syscall_64+0xfa/0x3b0 [ 260.316735][ T9977] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.316761][ T9977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.316782][ T9977] ? clear_bhb_loop+0x60/0xb0 [ 260.316807][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.316826][ T9977] RIP: 0033:0x7f72fd38e929 [ 260.316846][ T9977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.316871][ T9977] RSP: 002b:00007f72fe192038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.316893][ T9977] RAX: ffffffffffffffda RBX: 00007f72fd5b5fa0 RCX: 00007f72fd38e929 [ 260.316908][ T9977] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000005 [ 260.316920][ T9977] RBP: 00007f72fe192090 R08: 0000000000000000 R09: 0000000000000000 [ 260.316944][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.316956][ T9977] R13: 0000000000000000 R14: 00007f72fd5b5fa0 R15: 00007ffe05e085e8 [ 260.316987][ T9977] [ 260.691148][ T9982] xt_bpf: check failed: parse error [ 260.817857][ T9987] SET target dimension over the limit! [ 260.864229][ T9989] FAULT_INJECTION: forcing a failure. [ 260.864229][ T9989] name failslab, interval 1, probability 0, space 0, times 0 [ 260.876948][ T9989] CPU: 1 UID: 0 PID: 9989 Comm: syz.3.1403 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 260.876975][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.877006][ T9989] Call Trace: [ 260.877015][ T9989] [ 260.877023][ T9989] dump_stack_lvl+0x189/0x250 [ 260.877081][ T9989] ? __pfx____ratelimit+0x10/0x10 [ 260.877105][ T9989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.877134][ T9989] ? __pfx__printk+0x10/0x10 [ 260.877160][ T9989] ? __lock_acquire+0xab9/0xd20 [ 260.877191][ T9989] should_fail_ex+0x414/0x560 [ 260.877221][ T9989] should_failslab+0xa8/0x100 [ 260.877244][ T9989] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 260.877269][ T9989] ? pfn_valid+0x125/0x4d0 [ 260.877288][ T9989] ? pfn_valid+0x125/0x4d0 [ 260.877306][ T9989] ? pfn_valid+0x125/0x4d0 [ 260.877329][ T9989] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 260.877358][ T9989] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 260.877388][ T9989] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 260.877404][ T9989] ? 0xffffffffa02057c0 [ 260.877420][ T9989] ? 0xffffffffa02057c0 [ 260.877479][ T9989] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 260.877505][ T9989] ? _copy_from_user+0x94/0xb0 [ 260.877530][ T9989] ? bpf_test_init+0x133/0x170 [ 260.877556][ T9989] ? xdp_convert_md_to_buff+0x5b/0x330 [ 260.877577][ T9989] bpf_prog_test_run_xdp+0x713/0x1000 [ 260.877611][ T9989] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 260.877636][ T9989] ? __fget_files+0x2a/0x420 [ 260.877662][ T9989] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 260.877682][ T9989] bpf_prog_test_run+0x2c7/0x340 [ 260.877713][ T9989] __sys_bpf+0x4a4/0x860 [ 260.877739][ T9989] ? __pfx___sys_bpf+0x10/0x10 [ 260.877778][ T9989] ? ksys_write+0x22a/0x250 [ 260.877798][ T9989] ? __pfx_ksys_write+0x10/0x10 [ 260.877814][ T9989] ? rcu_is_watching+0x15/0xb0 [ 260.877840][ T9989] __x64_sys_bpf+0x7c/0x90 [ 260.877865][ T9989] do_syscall_64+0xfa/0x3b0 [ 260.877889][ T9989] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.877912][ T9989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.877931][ T9989] ? clear_bhb_loop+0x60/0xb0 [ 260.877954][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.877972][ T9989] RIP: 0033:0x7fddfd78e929 [ 260.877988][ T9989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.878004][ T9989] RSP: 002b:00007fddfb5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.878023][ T9989] RAX: ffffffffffffffda RBX: 00007fddfd9b5fa0 RCX: 00007fddfd78e929 [ 260.878045][ T9989] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 260.878057][ T9989] RBP: 00007fddfb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.878068][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.878079][ T9989] R13: 0000000000000000 R14: 00007fddfd9b5fa0 R15: 00007ffc765f3468 [ 260.878127][ T9989] [ 261.325030][T10005] netlink: 'syz.3.1407': attribute type 11 has an invalid length. [ 261.344897][T10005] netlink: 528 bytes leftover after parsing attributes in process `syz.3.1407'. [ 261.417880][T10003] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 261.468045][T10013] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 261.487921][T10013] netlink: 'syz.4.1408': attribute type 4 has an invalid length. [ 261.496537][T10013] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1408'. [ 261.508751][T10010] netlink: 'syz.3.1407': attribute type 11 has an invalid length. [ 261.535092][T10010] netlink: 528 bytes leftover after parsing attributes in process `syz.3.1407'. [ 261.588189][T10003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.634087][T10016] bond2: (slave gretap1): making interface the new active one [ 261.643154][T10016] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 261.846845][T10020] bond2 (unregistering): (slave gretap1): Releasing active interface [ 261.865834][T10020] bond2 (unregistering): Released all slaves [ 261.931889][T10023] wlan0 speed is unknown, defaulting to 1000 [ 262.053839][T10033] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1414'. [ 262.236281][T10039] netlink: 'syz.2.1416': attribute type 14 has an invalid length. [ 262.337658][T10023] xt_CT: No such helper "snmp" [ 262.751779][T10057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.762568][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 262.782547][T10057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.806662][T10057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.874880][T10057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.993374][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1426'. [ 263.001814][T10061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.063123][T10068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.070529][T10068] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 263.082365][T10068] bond3: (slave vcan1): Error -95 calling set_mac_address [ 263.114522][T10071] ip6gretap0: entered promiscuous mode [ 263.121593][T10071] macsec1: entered allmulticast mode [ 263.133901][T10071] ip6gretap0: entered allmulticast mode [ 263.154047][T10071] ip6gretap0: left allmulticast mode [ 263.167917][T10071] ip6gretap0: left promiscuous mode [ 263.267997][T10073] bond0: entered promiscuous mode [ 263.284640][T10073] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 263.319850][T10073] bond0: left promiscuous mode [ 263.546666][T10092] xt_hashlimit: size too large, truncated to 1048576 [ 263.892391][T10107] batadv_slave_1: entered promiscuous mode [ 263.923109][T10106] batadv_slave_1: left promiscuous mode [ 263.957858][T10111] wlan0 speed is unknown, defaulting to 1000 [ 264.217461][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 264.227367][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 264.236508][T10122] netlink: 'syz.4.1443': attribute type 7 has an invalid length. [ 264.279074][T10124] netlink: 'syz.0.1441': attribute type 6 has an invalid length. [ 264.546784][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1446'. [ 264.619769][T10131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.656613][T10134] FAULT_INJECTION: forcing a failure. [ 264.656613][T10134] name failslab, interval 1, probability 0, space 0, times 0 [ 264.670018][T10137] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 264.694875][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.3.1446 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 264.694901][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.694912][T10134] Call Trace: [ 264.694918][T10134] [ 264.694926][T10134] dump_stack_lvl+0x189/0x250 [ 264.694958][T10134] ? __pfx____ratelimit+0x10/0x10 [ 264.694981][T10134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.695006][T10134] ? __pfx__printk+0x10/0x10 [ 264.695029][T10134] ? __pfx___might_resched+0x10/0x10 [ 264.695042][T10134] ? fs_reclaim_acquire+0x7d/0x100 [ 264.695067][T10134] should_fail_ex+0x414/0x560 [ 264.695093][T10134] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 264.695112][T10134] should_failslab+0xa8/0x100 [ 264.695132][T10134] __kvmalloc_node_noprof+0x161/0x5f0 [ 264.695150][T10134] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 264.695176][T10134] alloc_netdev_mqs+0xa8b/0x11e0 [ 264.695203][T10134] rtnl_create_link+0x31f/0xd10 [ 264.695230][T10134] rtnl_newlink_create+0x25c/0xb00 [ 264.695252][T10134] ? __mutex_lock+0x51b/0xe80 [ 264.695278][T10134] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 264.695293][T10134] ? rtnl_newlink+0x8db/0x1c70 [ 264.695319][T10134] ? __pfx___mutex_lock+0x10/0x10 [ 264.695350][T10134] ? ns_capable+0x8a/0xf0 [ 264.695379][T10134] rtnl_newlink+0x16d6/0x1c70 [ 264.695416][T10134] ? netlink_sendmsg+0x805/0xb30 [ 264.695446][T10134] ? __pfx_rtnl_newlink+0x10/0x10 [ 264.695492][T10134] ? kasan_quarantine_put+0xdd/0x220 [ 264.695516][T10134] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.695543][T10134] ? nlmon_xmit+0xb0/0x100 [ 264.695556][T10134] ? kmem_cache_free+0x18f/0x400 [ 264.695580][T10134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 264.695606][T10134] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.695630][T10134] ? __local_bh_enable_ip+0x12d/0x1c0 [ 264.695661][T10134] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 264.695695][T10134] ? __dev_queue_xmit+0x27e/0x3a70 [ 264.695733][T10134] ? __lock_acquire+0xab9/0xd20 [ 264.695791][T10134] ? __pfx_rtnl_newlink+0x10/0x10 [ 264.695820][T10134] rtnetlink_rcv_msg+0x7cc/0xb70 [ 264.695854][T10134] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 264.695883][T10134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.695915][T10134] ? ref_tracker_free+0x63a/0x7d0 [ 264.695943][T10134] ? __copy_skb_header+0xa7/0x550 [ 264.695968][T10134] ? __pfx_ref_tracker_free+0x10/0x10 [ 264.695996][T10134] ? __skb_clone+0x63/0x7a0 [ 264.696028][T10134] netlink_rcv_skb+0x208/0x470 [ 264.696049][T10134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.696082][T10134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.696117][T10134] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.696136][T10134] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.696163][T10134] netlink_unicast+0x75b/0x8d0 [ 264.696207][T10134] netlink_sendmsg+0x805/0xb30 [ 264.696238][T10134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.696263][T10134] ? aa_sock_msg_perm+0x94/0x160 [ 264.696292][T10134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.696319][T10134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.696340][T10134] __sock_sendmsg+0x21c/0x270 [ 264.696372][T10134] ____sys_sendmsg+0x505/0x830 [ 264.696455][T10134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.696489][T10134] ? import_iovec+0x74/0xa0 [ 264.696515][T10134] ___sys_sendmsg+0x21f/0x2a0 [ 264.696541][T10134] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.696606][T10134] ? __fget_files+0x2a/0x420 [ 264.696627][T10134] ? __fget_files+0x3a0/0x420 [ 264.696662][T10134] __x64_sys_sendmsg+0x19b/0x260 [ 264.696686][T10134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.696719][T10134] ? __pfx_ksys_write+0x10/0x10 [ 264.696744][T10134] ? do_syscall_64+0xbe/0x3b0 [ 264.696777][T10134] do_syscall_64+0xfa/0x3b0 [ 264.696804][T10134] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.696829][T10134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.696850][T10134] ? clear_bhb_loop+0x60/0xb0 [ 264.696876][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.696896][T10134] RIP: 0033:0x7fddfd78e929 [ 264.696915][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.696933][T10134] RSP: 002b:00007fddfb5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.696955][T10134] RAX: ffffffffffffffda RBX: 00007fddfd9b6080 RCX: 00007fddfd78e929 [ 264.696970][T10134] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 264.696983][T10134] RBP: 00007fddfb5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 264.696995][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.697006][T10134] R13: 0000000000000001 R14: 00007fddfd9b6080 R15: 00007ffc765f3468 [ 264.697040][T10134] [ 265.182905][T10141] __nla_validate_parse: 1 callbacks suppressed [ 265.182927][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1448'. [ 265.219562][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1448'. [ 265.452237][T10144] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1449'. [ 265.481819][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 265.698416][T10156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.792654][T10155] wlan0 speed is unknown, defaulting to 1000 [ 265.817491][T10156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.952185][T10156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.073964][T10156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.218641][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 266.250677][T10156] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.368241][T10156] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.429015][T10156] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.488114][T10156] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.597702][T10190] netlink: 'syz.3.1464': attribute type 10 has an invalid length. [ 266.621913][T10190] dummy0: left promiscuous mode [ 266.908700][T10202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1470'. [ 266.934033][T10204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1469'. [ 266.945255][T10204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1469'. [ 266.954397][T10204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1469'. [ 266.969891][T10204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1469'. [ 267.265907][T10211] xt_hashlimit: invalid interval [ 267.455312][T10216] IPv6: syztnl0: Disabled Multicast RS [ 267.482259][T10216] netlink: 'syz.0.1475': attribute type 21 has an invalid length. [ 267.812921][T10224] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 267.823156][T10224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 267.854357][T10226] pim6reg: entered allmulticast mode [ 267.861561][T10226] macvlan0: entered allmulticast mode [ 267.930527][T10226] macvlan0 (unregistering): left allmulticast mode [ 268.313222][T10250] FAULT_INJECTION: forcing a failure. [ 268.313222][T10250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.331082][T10250] CPU: 0 UID: 0 PID: 10250 Comm: syz.1.1489 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 268.331108][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.331120][T10250] Call Trace: [ 268.331127][T10250] [ 268.331135][T10250] dump_stack_lvl+0x189/0x250 [ 268.331169][T10250] ? __pfx____ratelimit+0x10/0x10 [ 268.331194][T10250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.331223][T10250] ? __pfx__printk+0x10/0x10 [ 268.331243][T10250] ? __might_fault+0xb0/0x130 [ 268.331274][T10250] should_fail_ex+0x414/0x560 [ 268.331311][T10250] _copy_from_iter+0x1db/0x16f0 [ 268.331360][T10250] ? rep_movs_alternative+0x4a/0x90 [ 268.331401][T10250] ? __pfx__copy_from_iter+0x10/0x10 [ 268.331427][T10250] ? sock_alloc_send_pskb+0x875/0x990 [ 268.331456][T10250] ? __pfx__copy_from_iter+0x10/0x10 [ 268.331487][T10250] ? page_copy_sane+0x16a/0x280 [ 268.331517][T10250] copy_page_from_iter+0xdd/0x170 [ 268.331550][T10250] skb_copy_datagram_from_iter+0x306/0x720 [ 268.331585][T10250] unix_stream_sendmsg+0x5a1/0xc90 [ 268.331622][T10250] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 268.331648][T10250] ? aa_sock_msg_perm+0x94/0x160 [ 268.331675][T10250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.331700][T10250] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 268.331721][T10250] __sock_sendmsg+0x21c/0x270 [ 268.331748][T10250] ____sys_sendmsg+0x505/0x830 [ 268.331774][T10250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.331804][T10250] ? import_iovec+0x74/0xa0 [ 268.331827][T10250] ___sys_sendmsg+0x21f/0x2a0 [ 268.331850][T10250] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.331906][T10250] ? __fget_files+0x2a/0x420 [ 268.331927][T10250] ? __fget_files+0x3a0/0x420 [ 268.331976][T10250] __x64_sys_sendmsg+0x19b/0x260 [ 268.332001][T10250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.332033][T10250] ? __pfx_ksys_write+0x10/0x10 [ 268.332050][T10250] ? rcu_is_watching+0x15/0xb0 [ 268.332075][T10250] ? do_syscall_64+0xbe/0x3b0 [ 268.332105][T10250] do_syscall_64+0xfa/0x3b0 [ 268.332131][T10250] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.332155][T10250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.332174][T10250] ? clear_bhb_loop+0x60/0xb0 [ 268.332199][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.332218][T10250] RIP: 0033:0x7f027b38e929 [ 268.332235][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.332252][T10250] RSP: 002b:00007f027c2aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.332274][T10250] RAX: ffffffffffffffda RBX: 00007f027b5b5fa0 RCX: 00007f027b38e929 [ 268.332294][T10250] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000005 [ 268.332307][T10250] RBP: 00007f027c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 268.332319][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.332330][T10250] R13: 0000000000000000 R14: 00007f027b5b5fa0 R15: 00007ffe3b545fa8 [ 268.332361][T10250] [ 268.730642][T10252] ip6gretap0: entered promiscuous mode [ 268.736688][T10252] macsec3: entered allmulticast mode [ 268.742023][T10252] ip6gretap0: entered allmulticast mode [ 268.753909][T10258] xt_hashlimit: size too large, truncated to 1048576 [ 268.755576][T10252] ip6gretap0: left allmulticast mode [ 268.766661][T10252] ip6gretap0: left promiscuous mode [ 269.027929][T10268] netlink: 'syz.4.1495': attribute type 12 has an invalid length. [ 269.315685][T10280] netlink: 'syz.0.1500': attribute type 2 has an invalid length. [ 269.456588][ T5885] hid-generic 0005:16BF:0006.0002: unknown main item tag 0x0 [ 269.465791][ T5885] hid-generic 0005:16BF:0006.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 269.796767][T10305] xt_hashlimit: size too large, truncated to 1048576 [ 270.231473][T10322] netlink: 'syz.2.1517': attribute type 2 has an invalid length. [ 270.248193][T10321] xt_TPROXY: Can be used only with -p tcp or -p udp [ 270.486330][T10337] __nla_validate_parse: 4 callbacks suppressed [ 270.486350][T10337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1519'. [ 270.506639][T10337] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1519'. [ 270.516058][T10337] netlink: 'syz.2.1519': attribute type 6 has an invalid length. [ 270.523896][T10337] netlink: 'syz.2.1519': attribute type 5 has an invalid length. [ 270.531752][T10337] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1519'. [ 270.567569][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 270.736909][T10346] xt_hashlimit: size too large, truncated to 1048576 [ 271.559827][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 271.591616][T10368] ip6gretap0: entered promiscuous mode [ 271.622235][T10368] macsec1: entered allmulticast mode [ 271.629212][T10368] ip6gretap0: entered allmulticast mode [ 271.637775][T10368] ip6gretap0: left allmulticast mode [ 271.643464][T10368] ip6gretap0: left promiscuous mode [ 271.714506][T10374] geneve3: entered promiscuous mode [ 271.727708][T10374] geneve3: entered allmulticast mode [ 271.903864][T10383] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 271.924390][T10383] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1541'. [ 271.934875][T10383] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 271.954966][T10383] netlink: 'syz.1.1541': attribute type 2 has an invalid length. [ 271.962822][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'. [ 272.033092][T10390] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1543'. [ 272.118310][T10392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1544'. [ 272.177211][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 272.178810][T10392] netlink: 'syz.3.1544': attribute type 6 has an invalid length. [ 272.222194][T10392] netlink: 'syz.3.1544': attribute type 5 has an invalid length. [ 272.240874][T10399] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 272.291088][T10399] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 272.591262][T10413] ip6gretap0: entered promiscuous mode [ 272.611875][T10413] macsec3: entered allmulticast mode [ 272.632374][T10413] ip6gretap0: entered allmulticast mode [ 272.674389][T10413] ip6gretap0: left allmulticast mode [ 272.688552][T10413] ip6gretap0: left promiscuous mode [ 272.800748][T10425] netlink: 'syz.2.1558': attribute type 3 has an invalid length. [ 272.804234][T10426] FAULT_INJECTION: forcing a failure. [ 272.804234][T10426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.822274][T10426] CPU: 1 UID: 0 PID: 10426 Comm: syz.1.1559 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 272.822304][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.822317][T10426] Call Trace: [ 272.822326][T10426] [ 272.822334][T10426] dump_stack_lvl+0x189/0x250 [ 272.822370][T10426] ? __pfx____ratelimit+0x10/0x10 [ 272.822396][T10426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.822427][T10426] ? __pfx__printk+0x10/0x10 [ 272.822449][T10426] ? __might_fault+0xb0/0x130 [ 272.822481][T10426] should_fail_ex+0x414/0x560 [ 272.822514][T10426] _copy_from_user+0x2d/0xb0 [ 272.822537][T10426] ___sys_recvmsg+0x12e/0x510 [ 272.822577][T10426] ? __pfx____sys_recvmsg+0x10/0x10 [ 272.822634][T10426] ? __might_fault+0xb0/0x130 [ 272.822657][T10426] do_recvmmsg+0x307/0x770 [ 272.822690][T10426] ? __pfx_do_recvmmsg+0x10/0x10 [ 272.822726][T10426] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.822773][T10426] __x64_sys_recvmmsg+0x190/0x240 [ 272.822799][T10426] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 272.822820][T10426] ? rcu_is_watching+0x15/0xb0 [ 272.822844][T10426] ? do_syscall_64+0xbe/0x3b0 [ 272.822875][T10426] do_syscall_64+0xfa/0x3b0 [ 272.822901][T10426] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.822926][T10426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.822945][T10426] ? clear_bhb_loop+0x60/0xb0 [ 272.822970][T10426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.822989][T10426] RIP: 0033:0x7f027b38e929 [ 272.823007][T10426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.823024][T10426] RSP: 002b:00007f027c2aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 272.823045][T10426] RAX: ffffffffffffffda RBX: 00007f027b5b5fa0 RCX: 00007f027b38e929 [ 272.823060][T10426] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 272.823073][T10426] RBP: 00007f027c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 272.823086][T10426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.823098][T10426] R13: 0000000000000000 R14: 00007f027b5b5fa0 R15: 00007ffe3b545fa8 [ 272.823129][T10426] [ 273.334326][T10439] wlan0 speed is unknown, defaulting to 1000 [ 273.456887][T10437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.502903][T10445] netlink: 'syz.3.1565': attribute type 39 has an invalid length. [ 273.557657][T10437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.032182][T10462] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 274.148483][T10464] ip6gretap0: entered promiscuous mode [ 274.161854][T10464] macsec3: entered allmulticast mode [ 274.198978][T10464] ip6gretap0: entered allmulticast mode [ 274.223282][T10464] ip6gretap0: left allmulticast mode [ 274.239769][T10464] ip6gretap0: left promiscuous mode [ 274.314498][T10480] netlink: 'syz.2.1574': attribute type 6 has an invalid length. [ 274.322998][T10480] netlink: 'syz.2.1574': attribute type 5 has an invalid length. [ 274.849468][T10509] FAULT_INJECTION: forcing a failure. [ 274.849468][T10509] name failslab, interval 1, probability 0, space 0, times 0 [ 274.884571][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.1.1588 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 274.884601][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.884614][T10509] Call Trace: [ 274.884624][T10509] [ 274.884632][T10509] dump_stack_lvl+0x189/0x250 [ 274.884670][T10509] ? __pfx____ratelimit+0x10/0x10 [ 274.884697][T10509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.884734][T10509] ? __pfx__printk+0x10/0x10 [ 274.884771][T10509] ? __pfx___might_resched+0x10/0x10 [ 274.884789][T10509] ? fs_reclaim_acquire+0x7d/0x100 [ 274.884820][T10509] should_fail_ex+0x414/0x560 [ 274.884853][T10509] should_failslab+0xa8/0x100 [ 274.884888][T10509] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 274.884908][T10509] ? __alloc_skb+0x112/0x2d0 [ 274.884930][T10509] __alloc_skb+0x112/0x2d0 [ 274.884951][T10509] alloc_skb_with_frags+0xca/0x890 [ 274.884981][T10509] sock_alloc_send_pskb+0x857/0x990 [ 274.885022][T10509] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 274.885053][T10509] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 274.885082][T10509] unix_dgram_sendmsg+0x4f6/0x1870 [ 274.885120][T10509] ? aa_sk_perm+0x81e/0x950 [ 274.885148][T10509] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 274.885176][T10509] ? aa_sock_msg_perm+0x94/0x160 [ 274.885201][T10509] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 274.885222][T10509] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 274.885245][T10509] __sock_sendmsg+0x21c/0x270 [ 274.885273][T10509] ____sys_sendmsg+0x52d/0x830 [ 274.885298][T10509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.885328][T10509] ? import_iovec+0x74/0xa0 [ 274.885352][T10509] ___sys_sendmsg+0x21f/0x2a0 [ 274.885382][T10509] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.885445][T10509] ? __might_fault+0xb0/0x130 [ 274.885467][T10509] __sys_sendmmsg+0x227/0x430 [ 274.885493][T10509] ? __pfx___sys_sendmmsg+0x10/0x10 [ 274.885511][T10509] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 274.885563][T10509] ? ksys_write+0x22a/0x250 [ 274.885583][T10509] ? __pfx_ksys_write+0x10/0x10 [ 274.885599][T10509] ? rcu_is_watching+0x15/0xb0 [ 274.885623][T10509] __x64_sys_sendmmsg+0xa0/0xc0 [ 274.885645][T10509] do_syscall_64+0xfa/0x3b0 [ 274.885669][T10509] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.885691][T10509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.885710][T10509] ? clear_bhb_loop+0x60/0xb0 [ 274.885732][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.885749][T10509] RIP: 0033:0x7f027b38e929 [ 274.885766][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.885782][T10509] RSP: 002b:00007f027c2aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 274.885802][T10509] RAX: ffffffffffffffda RBX: 00007f027b5b5fa0 RCX: 00007f027b38e929 [ 274.885816][T10509] RDX: 000000000400002c RSI: 00002000000077c0 RDI: 0000000000000003 [ 274.885846][T10509] RBP: 00007f027c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 274.885860][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.885871][T10509] R13: 0000000000000000 R14: 00007f027b5b5fa0 R15: 00007ffe3b545fa8 [ 274.885903][T10509] [ 274.887361][T10508] bridge0: entered promiscuous mode [ 275.249538][T10508] macvtap1: entered allmulticast mode [ 275.267854][T10508] bridge0: entered allmulticast mode [ 275.278390][T10508] bridge0: port 1(macvtap1) entered blocking state [ 275.287257][T10508] bridge0: port 1(macvtap1) entered disabled state [ 275.299099][T10508] bridge0: left allmulticast mode [ 275.304196][T10508] bridge0: left promiscuous mode [ 275.497974][T10523] __nla_validate_parse: 16 callbacks suppressed [ 275.497996][T10523] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1594'. [ 275.554860][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1594'. [ 275.574500][T10523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1594'. [ 275.585303][T10523] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1594'. [ 275.805284][T10540] FAULT_INJECTION: forcing a failure. [ 275.805284][T10540] name failslab, interval 1, probability 0, space 0, times 0 [ 275.834575][T10540] CPU: 1 UID: 0 PID: 10540 Comm: syz.0.1598 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 275.834606][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.834619][T10540] Call Trace: [ 275.834627][T10540] [ 275.834635][T10540] dump_stack_lvl+0x189/0x250 [ 275.834671][T10540] ? __pfx____ratelimit+0x10/0x10 [ 275.834698][T10540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.834732][T10540] ? __pfx__printk+0x10/0x10 [ 275.834769][T10540] should_fail_ex+0x414/0x560 [ 275.834801][T10540] should_failslab+0xa8/0x100 [ 275.834826][T10540] __kmalloc_cache_noprof+0x70/0x3d0 [ 275.834846][T10540] ? sctp_add_bind_addr+0x8c/0x370 [ 275.834880][T10540] sctp_add_bind_addr+0x8c/0x370 [ 275.834914][T10540] sctp_copy_local_addr_list+0x30b/0x4e0 [ 275.834947][T10540] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 275.834976][T10540] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 275.835007][T10540] ? sctp_v6_is_any+0x64/0x80 [ 275.835027][T10540] ? sctp_copy_one_addr+0x93/0x360 [ 275.835059][T10540] sctp_bind_addr_copy+0xb3/0x3c0 [ 275.835089][T10540] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 275.835119][T10540] sctp_connect_new_asoc+0x2e0/0x690 [ 275.835144][T10540] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 275.835164][T10540] ? __local_bh_enable_ip+0x12d/0x1c0 [ 275.835202][T10540] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 275.835230][T10540] ? security_sctp_bind_connect+0x7e/0x2e0 [ 275.835256][T10540] sctp_sendmsg+0x155c/0x2810 [ 275.835291][T10540] ? __pfx_sctp_sendmsg+0x10/0x10 [ 275.835317][T10540] ? aa_sk_perm+0x81e/0x950 [ 275.835347][T10540] ? __pfx_aa_sk_perm+0x10/0x10 [ 275.835375][T10540] ? sock_rps_record_flow+0x19/0x410 [ 275.835406][T10540] ? inet_sendmsg+0x2f4/0x370 [ 275.835437][T10540] __sock_sendmsg+0x19c/0x270 [ 275.835468][T10540] __sys_sendto+0x3bd/0x520 [ 275.835490][T10540] ? __pfx___sys_sendto+0x10/0x10 [ 275.835506][T10540] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 275.835556][T10540] ? __fget_files+0x3a0/0x420 [ 275.835592][T10540] ? ksys_write+0x22a/0x250 [ 275.835614][T10540] ? __pfx_ksys_write+0x10/0x10 [ 275.835630][T10540] ? rcu_is_watching+0x15/0xb0 [ 275.835655][T10540] __x64_sys_sendto+0xde/0x100 [ 275.835679][T10540] do_syscall_64+0xfa/0x3b0 [ 275.835704][T10540] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.835729][T10540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.835749][T10540] ? clear_bhb_loop+0x60/0xb0 [ 275.835773][T10540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.835796][T10540] RIP: 0033:0x7ff47ab8e929 [ 275.835813][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.835830][T10540] RSP: 002b:00007ff47ba31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 275.835868][T10540] RAX: ffffffffffffffda RBX: 00007ff47adb5fa0 RCX: 00007ff47ab8e929 [ 275.835883][T10540] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 275.835896][T10540] RBP: 00007ff47ba31090 R08: 0000200000000080 R09: 000000000000001c [ 275.835910][T10540] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 275.835923][T10540] R13: 0000000000000000 R14: 00007ff47adb5fa0 R15: 00007ffd244586d8 [ 275.835956][T10540] [ 276.205600][T10544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.243317][T10545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1600'. [ 276.255830][T10545] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1600'. [ 276.265041][T10545] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1600'. [ 276.671423][T10558] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1608'. [ 276.868323][T10573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1612'. [ 276.913306][T10575] netlink: 'syz.3.1613': attribute type 11 has an invalid length. [ 276.915250][T10576] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 277.239655][T10591] validate_nla: 5 callbacks suppressed [ 277.239675][T10591] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 277.328048][T10591] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 277.365727][T10601] bridge2: entered promiscuous mode [ 277.406863][T10605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1620'. [ 277.416779][T10605] netlink: 'syz.3.1620': attribute type 6 has an invalid length. [ 277.424533][T10605] netlink: 'syz.3.1620': attribute type 5 has an invalid length. [ 277.460187][T10605] netlink: 'syz.3.1620': attribute type 16 has an invalid length. [ 278.179488][T10636] ip6gretap0: entered promiscuous mode [ 278.193363][T10636] macsec1: entered allmulticast mode [ 278.226318][T10640] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 278.229261][T10636] ip6gretap0: entered allmulticast mode [ 278.248334][T10636] ip6gretap0: left allmulticast mode [ 278.253695][T10636] ip6gretap0: left promiscuous mode [ 278.376796][T10640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.428534][T10643] ip6erspan0: entered promiscuous mode [ 278.470874][T10643] bond2: (slave ip6erspan0): making interface the new active one [ 278.496274][T10643] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 278.531348][T10663] x_tables: duplicate underflow at hook 1 [ 278.567803][T10648] tipc: Enabling of bearer rejected, failed to enable media [ 278.624200][T10663] bridge_slave_0: entered allmulticast mode [ 278.674180][T10663] netlink: 'syz.0.1643': attribute type 9 has an invalid length. [ 278.750660][T10673] FAULT_INJECTION: forcing a failure. [ 278.750660][T10673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.794072][T10673] CPU: 1 UID: 0 PID: 10673 Comm: syz.4.1645 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 278.794118][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.794129][T10673] Call Trace: [ 278.794146][T10673] [ 278.794154][T10673] dump_stack_lvl+0x189/0x250 [ 278.794189][T10673] ? __pfx____ratelimit+0x10/0x10 [ 278.794215][T10673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.794246][T10673] ? __pfx__printk+0x10/0x10 [ 278.794268][T10673] ? __might_fault+0xb0/0x130 [ 278.794299][T10673] should_fail_ex+0x414/0x560 [ 278.794329][T10673] _copy_from_iter+0x1db/0x16f0 [ 278.794360][T10673] ? rep_movs_alternative+0x4a/0x90 [ 278.794388][T10673] ? __pfx__copy_from_iter+0x10/0x10 [ 278.794414][T10673] ? sock_alloc_send_pskb+0x875/0x990 [ 278.794445][T10673] ? __pfx__copy_from_iter+0x10/0x10 [ 278.794478][T10673] ? page_copy_sane+0x16a/0x280 [ 278.794511][T10673] copy_page_from_iter+0xdd/0x170 [ 278.794546][T10673] skb_copy_datagram_from_iter+0x306/0x720 [ 278.794601][T10673] unix_stream_sendmsg+0x5a1/0xc90 [ 278.794636][T10673] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 278.794661][T10673] ? aa_sock_msg_perm+0x94/0x160 [ 278.794686][T10673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.794710][T10673] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 278.794730][T10673] __sock_sendmsg+0x21c/0x270 [ 278.794758][T10673] ____sys_sendmsg+0x505/0x830 [ 278.794783][T10673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.794813][T10673] ? import_iovec+0x74/0xa0 [ 278.794836][T10673] ___sys_sendmsg+0x21f/0x2a0 [ 278.794858][T10673] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.794912][T10673] ? __fget_files+0x2a/0x420 [ 278.794950][T10673] ? __fget_files+0x3a0/0x420 [ 278.794991][T10673] __x64_sys_sendmsg+0x19b/0x260 [ 278.795016][T10673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.795049][T10673] ? __pfx_ksys_write+0x10/0x10 [ 278.795066][T10673] ? rcu_is_watching+0x15/0xb0 [ 278.795088][T10673] ? do_syscall_64+0xbe/0x3b0 [ 278.795117][T10673] do_syscall_64+0xfa/0x3b0 [ 278.795142][T10673] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.795166][T10673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.795185][T10673] ? clear_bhb_loop+0x60/0xb0 [ 278.795209][T10673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.795227][T10673] RIP: 0033:0x7f72fd38e929 [ 278.795244][T10673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.795261][T10673] RSP: 002b:00007f72fe192038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.795282][T10673] RAX: ffffffffffffffda RBX: 00007f72fd5b5fa0 RCX: 00007f72fd38e929 [ 278.795296][T10673] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000005 [ 278.795309][T10673] RBP: 00007f72fe192090 R08: 0000000000000000 R09: 0000000000000000 [ 278.795321][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.795332][T10673] R13: 0000000000000000 R14: 00007f72fd5b5fa0 R15: 00007ffe05e085e8 [ 278.795363][T10673] [ 279.223632][T10681] netlink: 'syz.2.1646': attribute type 6 has an invalid length. [ 279.236138][T10681] netlink: 'syz.2.1646': attribute type 5 has an invalid length. [ 279.252702][T10681] netlink: 'syz.2.1646': attribute type 16 has an invalid length. [ 279.349881][T10686] SET target dimension over the limit! [ 279.524030][T10696] ip6gretap0: entered promiscuous mode [ 279.530119][T10696] macsec3: entered allmulticast mode [ 279.536500][T10696] ip6gretap0: entered allmulticast mode [ 279.556205][T10696] ip6gretap0: left allmulticast mode [ 279.566006][T10696] ip6gretap0: left promiscuous mode [ 280.036412][T10720] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 280.047271][T10722] FAULT_INJECTION: forcing a failure. [ 280.047271][T10722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.069857][T10722] CPU: 0 UID: 0 PID: 10722 Comm: syz.3.1665 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 280.069886][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.069898][T10722] Call Trace: [ 280.069905][T10722] [ 280.069914][T10722] dump_stack_lvl+0x189/0x250 [ 280.069947][T10722] ? __pfx____ratelimit+0x10/0x10 [ 280.069979][T10722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.070008][T10722] ? __pfx__printk+0x10/0x10 [ 280.070029][T10722] ? __might_fault+0xb0/0x130 [ 280.070059][T10722] should_fail_ex+0x414/0x560 [ 280.070089][T10722] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 280.070113][T10722] ? __kasan_slab_free+0x62/0x70 [ 280.070134][T10722] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 280.070164][T10722] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 280.070213][T10722] ? fpu__alloc_mathframe+0xad/0x130 [ 280.070239][T10722] get_sigframe+0x58d/0x7d0 [ 280.070268][T10722] ? __pfx_get_sigframe+0x10/0x10 [ 280.070290][T10722] ? kmem_cache_free+0x18f/0x400 [ 280.070320][T10722] x64_setup_rt_frame+0x15b/0xd40 [ 280.070350][T10722] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.070375][T10722] ? _raw_spin_unlock_irq+0x2e/0x50 [ 280.070396][T10722] ? get_signal+0x1151/0x1340 [ 280.070430][T10722] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 280.070464][T10722] arch_do_signal_or_restart+0x3d7/0x750 [ 280.070495][T10722] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 280.070535][T10722] ? exit_to_user_mode_loop+0x40/0x110 [ 280.070564][T10722] exit_to_user_mode_loop+0x75/0x110 [ 280.070591][T10722] do_syscall_64+0x2bd/0x3b0 [ 280.070614][T10722] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.070637][T10722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.070673][T10722] ? clear_bhb_loop+0x60/0xb0 [ 280.070697][T10722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.070716][T10722] RIP: 0033:0x7fddfd78e929 [ 280.070735][T10722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.070751][T10722] RSP: 002b:00007fddfb5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.070772][T10722] RAX: 0000000000000001 RBX: 00007fddfd9b5fa0 RCX: 00007fddfd78e929 [ 280.070786][T10722] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000006 [ 280.070799][T10722] RBP: 00007fddfb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 280.070811][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.070823][T10722] R13: 0000000000000000 R14: 00007fddfd9b5fa0 R15: 00007ffc765f3468 [ 280.070854][T10722] [ 280.375763][T10727] netlink: 'syz.1.1667': attribute type 3 has an invalid length. [ 280.618039][T10744] __nla_validate_parse: 15 callbacks suppressed [ 280.618067][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 280.651685][T10742] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1673'. [ 280.689336][T10742] batadv1: entered promiscuous mode [ 280.694690][T10742] batadv1: entered allmulticast mode [ 280.841043][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1674'. [ 280.853004][T10754] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1674'. [ 280.867251][T10754] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1674'. [ 280.927489][T10753] wlan0 speed is unknown, defaulting to 1000 [ 281.402980][T10771] wlan0 speed is unknown, defaulting to 1000 [ 281.778501][T10789] FAULT_INJECTION: forcing a failure. [ 281.778501][T10789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.802245][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.2.1686 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 281.802276][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.802288][T10789] Call Trace: [ 281.802295][T10789] [ 281.802305][T10789] dump_stack_lvl+0x189/0x250 [ 281.802338][T10789] ? __pfx____ratelimit+0x10/0x10 [ 281.802363][T10789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.802390][T10789] ? __pfx__printk+0x10/0x10 [ 281.802409][T10789] ? __might_fault+0xb0/0x130 [ 281.802437][T10789] should_fail_ex+0x414/0x560 [ 281.802466][T10789] _copy_from_iter+0x1db/0x16f0 [ 281.802495][T10789] ? rep_movs_alternative+0x4a/0x90 [ 281.802521][T10789] ? __pfx__copy_from_iter+0x10/0x10 [ 281.802545][T10789] ? sock_alloc_send_pskb+0x875/0x990 [ 281.802572][T10789] ? __pfx__copy_from_iter+0x10/0x10 [ 281.802602][T10789] ? page_copy_sane+0x16a/0x280 [ 281.802631][T10789] copy_page_from_iter+0xdd/0x170 [ 281.802662][T10789] skb_copy_datagram_from_iter+0x306/0x720 [ 281.802700][T10789] unix_stream_sendmsg+0x5a1/0xc90 [ 281.802736][T10789] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 281.802763][T10789] ? aa_sock_msg_perm+0x94/0x160 [ 281.802791][T10789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.802816][T10789] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 281.802837][T10789] __sock_sendmsg+0x21c/0x270 [ 281.802869][T10789] ____sys_sendmsg+0x505/0x830 [ 281.802896][T10789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.802938][T10789] ? import_iovec+0x74/0xa0 [ 281.802963][T10789] ___sys_sendmsg+0x21f/0x2a0 [ 281.802988][T10789] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.803049][T10789] ? __fget_files+0x2a/0x420 [ 281.803071][T10789] ? __fget_files+0x3a0/0x420 [ 281.803104][T10789] __x64_sys_sendmsg+0x19b/0x260 [ 281.803128][T10789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.803161][T10789] ? __pfx_ksys_write+0x10/0x10 [ 281.803177][T10789] ? rcu_is_watching+0x15/0xb0 [ 281.803202][T10789] ? do_syscall_64+0xbe/0x3b0 [ 281.803232][T10789] do_syscall_64+0xfa/0x3b0 [ 281.803257][T10789] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.803281][T10789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.803301][T10789] ? clear_bhb_loop+0x60/0xb0 [ 281.803325][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.803343][T10789] RIP: 0033:0x7fe1bd18e929 [ 281.803362][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.803379][T10789] RSP: 002b:00007fe1bdf27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.803401][T10789] RAX: ffffffffffffffda RBX: 00007fe1bd3b5fa0 RCX: 00007fe1bd18e929 [ 281.803416][T10789] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 281.803428][T10789] RBP: 00007fe1bdf27090 R08: 0000000000000000 R09: 0000000000000000 [ 281.803441][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.803453][T10789] R13: 0000000000000000 R14: 00007fe1bd3b5fa0 R15: 00007ffcd6caaa48 [ 281.803484][T10789] [ 282.139059][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1685'. [ 282.187893][T10756] xt_CT: No such helper "snmp" [ 282.193295][T10795] tipc: Enabled bearer , priority 0 [ 282.201915][T10795] syzkaller0: entered promiscuous mode [ 282.207639][T10795] syzkaller0: entered allmulticast mode [ 282.231074][T10795] tipc: Resetting bearer [ 282.326615][T10794] tipc: Resetting bearer [ 282.420666][T10794] tipc: Disabling bearer [ 282.726889][T10808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1691'. [ 282.776200][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 282.974160][T10810] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 282.994952][T10810] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 282.995274][T10822] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1694'. [ 283.004576][T10810] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 283.054601][T10822] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1694'. [ 283.093705][T10825] validate_nla: 5 callbacks suppressed [ 283.093726][T10825] netlink: 'syz.0.1694': attribute type 16 has an invalid length. [ 283.105326][T10822] netlink: 'syz.0.1694': attribute type 6 has an invalid length. [ 283.157458][T10825] netlink: 'syz.0.1694': attribute type 17 has an invalid length. [ 283.163242][T10822] netlink: 'syz.0.1694': attribute type 5 has an invalid length. [ 283.205255][T10825] netlink: 'syz.0.1694': attribute type 27 has an invalid length. [ 284.083561][T10865] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 284.310395][T10874] netlink: 'syz.0.1709': attribute type 10 has an invalid length. [ 284.322220][T10874] team0: Device dummy0 is up. Set it down before adding it as a team port [ 284.505219][T10882] syz_tun: entered promiscuous mode [ 284.510659][T10882] macsec2: entered allmulticast mode [ 284.517123][T10882] syz_tun: entered allmulticast mode [ 284.532099][T10882] syz_tun: left allmulticast mode [ 284.539972][T10882] syz_tun: left promiscuous mode [ 284.582959][T10884] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 284.599032][T10887] netlink: 'syz.1.1712': attribute type 6 has an invalid length. [ 284.607845][T10887] netlink: 'syz.1.1712': attribute type 5 has an invalid length. [ 284.622027][T10887] netlink: 'syz.1.1712': attribute type 16 has an invalid length. [ 284.722076][T10892] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 284.860831][T10899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.492361][T10915] syz_tun: entered promiscuous mode [ 285.518773][T10915] macsec2: entered allmulticast mode [ 285.533059][T10915] syz_tun: entered allmulticast mode [ 285.542824][T10915] syz_tun: left allmulticast mode [ 285.551948][T10915] syz_tun: left promiscuous mode [ 285.610488][T10926] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 285.750789][T10929] __nla_validate_parse: 12 callbacks suppressed [ 285.750823][T10929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1730'. [ 285.773214][T10929] bridge0: entered promiscuous mode [ 285.780947][T10929] bridge0: left promiscuous mode [ 285.837997][T10936] FAULT_INJECTION: forcing a failure. [ 285.837997][T10936] name failslab, interval 1, probability 0, space 0, times 0 [ 285.867778][T10936] CPU: 0 UID: 0 PID: 10936 Comm: syz.2.1732 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 285.867808][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.867820][T10936] Call Trace: [ 285.867828][T10936] [ 285.867837][T10936] dump_stack_lvl+0x189/0x250 [ 285.867873][T10936] ? __pfx____ratelimit+0x10/0x10 [ 285.867898][T10936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.867927][T10936] ? __pfx__printk+0x10/0x10 [ 285.867952][T10936] ? __pfx___might_resched+0x10/0x10 [ 285.867971][T10936] ? fs_reclaim_acquire+0x7d/0x100 [ 285.868001][T10936] should_fail_ex+0x414/0x560 [ 285.868032][T10936] should_failslab+0xa8/0x100 [ 285.868054][T10936] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 285.868075][T10936] ? __alloc_skb+0x112/0x2d0 [ 285.868098][T10936] __alloc_skb+0x112/0x2d0 [ 285.868121][T10936] alloc_skb_with_frags+0xca/0x890 [ 285.868158][T10936] sock_alloc_send_pskb+0x857/0x990 [ 285.868202][T10936] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 285.868239][T10936] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 285.868282][T10936] unix_dgram_sendmsg+0x4f6/0x1870 [ 285.868325][T10936] ? aa_sk_perm+0x81e/0x950 [ 285.868354][T10936] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 285.868381][T10936] ? aa_sock_msg_perm+0x94/0x160 [ 285.868409][T10936] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 285.868433][T10936] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 285.868458][T10936] __sock_sendmsg+0x21c/0x270 [ 285.868490][T10936] ____sys_sendmsg+0x52d/0x830 [ 285.868535][T10936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.868569][T10936] ? import_iovec+0x74/0xa0 [ 285.868595][T10936] ___sys_sendmsg+0x21f/0x2a0 [ 285.868620][T10936] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.868689][T10936] ? __might_fault+0xb0/0x130 [ 285.868727][T10936] __sys_sendmmsg+0x227/0x430 [ 285.868754][T10936] ? __pfx___sys_sendmmsg+0x10/0x10 [ 285.868792][T10936] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 285.868850][T10936] ? ksys_write+0x22a/0x250 [ 285.868872][T10936] ? __pfx_ksys_write+0x10/0x10 [ 285.868888][T10936] ? rcu_is_watching+0x15/0xb0 [ 285.868913][T10936] __x64_sys_sendmmsg+0xa0/0xc0 [ 285.868938][T10936] do_syscall_64+0xfa/0x3b0 [ 285.868965][T10936] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.868990][T10936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.869011][T10936] ? clear_bhb_loop+0x60/0xb0 [ 285.869035][T10936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.869054][T10936] RIP: 0033:0x7fe1bd18e929 [ 285.869073][T10936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.869090][T10936] RSP: 002b:00007fe1bdf27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.869111][T10936] RAX: ffffffffffffffda RBX: 00007fe1bd3b5fa0 RCX: 00007fe1bd18e929 [ 285.869126][T10936] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 285.869139][T10936] RBP: 00007fe1bdf27090 R08: 0000000000000000 R09: 0000000000000000 [ 285.869151][T10936] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 285.869163][T10936] R13: 0000000000000000 R14: 00007fe1bd3b5fa0 R15: 00007ffcd6caaa48 [ 285.869193][T10936] [ 286.423673][T10946] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1735'. [ 286.434823][T10946] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1735'. [ 286.444053][T10946] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1735'. [ 286.458075][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1735'. [ 286.583518][T10963] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1741'. [ 286.730826][T10968] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1745'. [ 286.744927][T10968] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 286.823014][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 286.859380][T10969] syz_tun: entered promiscuous mode [ 286.871376][T10969] macsec2: entered allmulticast mode [ 286.894944][T10969] syz_tun: entered allmulticast mode [ 286.905133][T10969] syz_tun: left allmulticast mode [ 286.910273][T10969] syz_tun: left promiscuous mode [ 286.972739][ T6833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.008482][ T6833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.131677][T10979] bridge_slave_0: left allmulticast mode [ 287.158476][T10979] bridge_slave_0: left promiscuous mode [ 287.164461][T10979] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.195273][T10986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1749'. [ 287.249696][T10979] bridge_slave_1: left allmulticast mode [ 287.279261][T10979] bridge_slave_1: left promiscuous mode [ 287.300450][T10979] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.330618][T10979] bond0: (slave bond_slave_1): Releasing backup interface [ 287.355959][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1752'. [ 287.388264][T10979] team0: Port device team_slave_0 removed [ 287.408550][T10979] team0: Port device team_slave_1 removed [ 287.467911][T10979] bond2: (slave ip6erspan0): Releasing active interface [ 287.736330][T11009] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 288.189099][T11031] FAULT_INJECTION: forcing a failure. [ 288.189099][T11031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.202551][T11031] CPU: 0 UID: 0 PID: 11031 Comm: syz.0.1763 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 288.202581][T11031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.202594][T11031] Call Trace: [ 288.202603][T11031] [ 288.202612][T11031] dump_stack_lvl+0x189/0x250 [ 288.202650][T11031] ? __pfx____ratelimit+0x10/0x10 [ 288.202678][T11031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.202710][T11031] ? __pfx__printk+0x10/0x10 [ 288.202734][T11031] ? __might_fault+0xb0/0x130 [ 288.202767][T11031] should_fail_ex+0x414/0x560 [ 288.202801][T11031] _copy_from_iter+0x1db/0x16f0 [ 288.202835][T11031] ? rep_movs_alternative+0x4a/0x90 [ 288.202866][T11031] ? __pfx__copy_from_iter+0x10/0x10 [ 288.202894][T11031] ? sock_alloc_send_pskb+0x875/0x990 [ 288.202926][T11031] ? __pfx__copy_from_iter+0x10/0x10 [ 288.202961][T11031] ? page_copy_sane+0x16a/0x280 [ 288.202995][T11031] copy_page_from_iter+0xdd/0x170 [ 288.203032][T11031] skb_copy_datagram_from_iter+0x306/0x720 [ 288.203067][T11031] unix_stream_sendmsg+0x5a1/0xc90 [ 288.203107][T11031] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 288.203137][T11031] ? aa_sock_msg_perm+0x94/0x160 [ 288.203166][T11031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.203194][T11031] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 288.203216][T11031] __sock_sendmsg+0x21c/0x270 [ 288.203249][T11031] ____sys_sendmsg+0x505/0x830 [ 288.203278][T11031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.203324][T11031] ? import_iovec+0x74/0xa0 [ 288.203350][T11031] ___sys_sendmsg+0x21f/0x2a0 [ 288.203376][T11031] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.203439][T11031] ? __fget_files+0x2a/0x420 [ 288.203463][T11031] ? __fget_files+0x3a0/0x420 [ 288.203498][T11031] __x64_sys_sendmsg+0x19b/0x260 [ 288.203525][T11031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.203574][T11031] ? rcu_is_watching+0x15/0xb0 [ 288.203593][T11031] ? trace_sys_enter+0x25/0x120 [ 288.203645][T11031] do_syscall_64+0xfa/0x3b0 [ 288.203672][T11031] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.203699][T11031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.203719][T11031] ? clear_bhb_loop+0x60/0xb0 [ 288.203744][T11031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.203765][T11031] RIP: 0033:0x7ff47ab8e929 [ 288.203785][T11031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.203802][T11031] RSP: 002b:00007ff47ba31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.203824][T11031] RAX: ffffffffffffffda RBX: 00007ff47adb5fa0 RCX: 00007ff47ab8e929 [ 288.203840][T11031] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000005 [ 288.203853][T11031] RBP: 00007ff47ba31090 R08: 0000000000000000 R09: 0000000000000000 [ 288.203866][T11031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.203878][T11031] R13: 0000000000000000 R14: 00007ff47adb5fa0 R15: 00007ffd244586d8 [ 288.203910][T11031] [ 288.959417][T11043] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 289.280637][T11047] wlan0 speed is unknown, defaulting to 1000 [ 289.678842][T11076] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 289.804863][T11064] FAULT_INJECTION: forcing a failure. [ 289.804863][T11064] name failslab, interval 1, probability 0, space 0, times 0 [ 289.817598][T11064] CPU: 0 UID: 0 PID: 11064 Comm: syz.4.1778 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 289.817628][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.817641][T11064] Call Trace: [ 289.817649][T11064] [ 289.817657][T11064] dump_stack_lvl+0x189/0x250 [ 289.817693][T11064] ? __pfx____ratelimit+0x10/0x10 [ 289.817719][T11064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.817750][T11064] ? __pfx__printk+0x10/0x10 [ 289.817769][T11064] ? pfn_valid+0x125/0x4d0 [ 289.817796][T11064] ? __lock_acquire+0xab9/0xd20 [ 289.817828][T11064] should_fail_ex+0x414/0x560 [ 289.817858][T11064] should_failslab+0xa8/0x100 [ 289.817879][T11064] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 289.817902][T11064] ? pfn_valid+0x125/0x4d0 [ 289.817922][T11064] ? pfn_valid+0x125/0x4d0 [ 289.817942][T11064] ? pfn_valid+0x125/0x4d0 [ 289.817977][T11064] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 289.818011][T11064] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 289.818043][T11064] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 289.818062][T11064] ? bpf_dispatcher_xdp+0x800/0x1000 [ 289.818082][T11064] ? bpf_dispatcher_xdp+0x800/0x1000 [ 289.818149][T11064] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 289.818177][T11064] ? _copy_from_user+0x94/0xb0 [ 289.818198][T11064] ? bpf_test_init+0x133/0x170 [ 289.818225][T11064] ? xdp_convert_md_to_buff+0x5b/0x330 [ 289.818248][T11064] bpf_prog_test_run_xdp+0x713/0x1000 [ 289.818286][T11064] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 289.818311][T11064] ? __fget_files+0x2a/0x420 [ 289.818341][T11064] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 289.818363][T11064] bpf_prog_test_run+0x2c7/0x340 [ 289.818398][T11064] __sys_bpf+0x4a4/0x860 [ 289.818428][T11064] ? __pfx___sys_bpf+0x10/0x10 [ 289.818472][T11064] ? ksys_write+0x22a/0x250 [ 289.818495][T11064] ? __pfx_ksys_write+0x10/0x10 [ 289.818512][T11064] ? rcu_is_watching+0x15/0xb0 [ 289.818540][T11064] __x64_sys_bpf+0x7c/0x90 [ 289.818567][T11064] do_syscall_64+0xfa/0x3b0 [ 289.818594][T11064] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.818620][T11064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.818640][T11064] ? clear_bhb_loop+0x60/0xb0 [ 289.818665][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.818685][T11064] RIP: 0033:0x7f72fd38e929 [ 289.818703][T11064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.818723][T11064] RSP: 002b:00007f72fe192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.818745][T11064] RAX: ffffffffffffffda RBX: 00007f72fd5b5fa0 RCX: 00007f72fd38e929 [ 289.818760][T11064] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 289.818773][T11064] RBP: 00007f72fe192090 R08: 0000000000000000 R09: 0000000000000000 [ 289.818786][T11064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.818798][T11064] R13: 0000000000000000 R14: 00007f72fd5b5fa0 R15: 00007ffe05e085e8 [ 289.818831][T11064] [ 290.365001][T11089] validate_nla: 6 callbacks suppressed [ 290.365022][T11089] netlink: 'syz.2.1784': attribute type 6 has an invalid length. [ 290.386836][T11089] netlink: 'syz.2.1784': attribute type 5 has an invalid length. [ 290.463624][T11089] netlink: 'syz.2.1784': attribute type 16 has an invalid length. [ 290.762058][T11106] __nla_validate_parse: 14 callbacks suppressed [ 290.762079][T11106] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1795'. [ 290.799860][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1796'. [ 290.816062][T11106] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 291.002383][T11120] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1800'. [ 291.003136][T11117] wlan0 speed is unknown, defaulting to 1000 [ 291.129388][T11127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1803'. [ 291.136367][T11122] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 291.318781][T11137] IPv4: Oversized IP packet from 127.202.26.0 [ 291.648255][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1812'. [ 291.803566][T11164] FAULT_INJECTION: forcing a failure. [ 291.803566][T11164] name failslab, interval 1, probability 0, space 0, times 0 [ 291.816523][T11164] CPU: 1 UID: 0 PID: 11164 Comm: syz.0.1814 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 291.816584][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.816598][T11164] Call Trace: [ 291.816606][T11164] [ 291.816615][T11164] dump_stack_lvl+0x189/0x250 [ 291.816653][T11164] ? __pfx____ratelimit+0x10/0x10 [ 291.816681][T11164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.816712][T11164] ? __pfx__printk+0x10/0x10 [ 291.816756][T11164] should_fail_ex+0x414/0x560 [ 291.816790][T11164] should_failslab+0xa8/0x100 [ 291.816816][T11164] kmem_cache_alloc_noprof+0x73/0x3c0 [ 291.816837][T11164] ? __nf_conntrack_alloc+0x99/0x380 [ 291.816867][T11164] __nf_conntrack_alloc+0x99/0x380 [ 291.816897][T11164] init_conntrack+0x155/0xef0 [ 291.816929][T11164] ? __pfx_init_conntrack+0x10/0x10 [ 291.816959][T11164] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 291.816980][T11164] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.817013][T11164] ? __siphash_unaligned+0x232/0x3b0 [ 291.817050][T11164] nf_conntrack_in+0xbf2/0x1600 [ 291.817072][T11164] ? arch_stack_walk+0xfc/0x150 [ 291.817118][T11164] ? __pfx_nf_conntrack_in+0x10/0x10 [ 291.817155][T11164] ? ipt_do_table+0x2a3/0x1640 [ 291.817188][T11164] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 291.817215][T11164] ? ip_sabotage_in+0x57/0x270 [ 291.817233][T11164] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 291.817257][T11164] nf_hook_slow+0xc2/0x220 [ 291.817284][T11164] nf_hook_slow_list+0x1c7/0x390 [ 291.817303][T11164] ? ip_sublist_rcv+0x74c/0x9b0 [ 291.817330][T11164] ? __pfx_nf_hook_slow_list+0x10/0x10 [ 291.817361][T11164] ? ip_sublist_rcv+0x74c/0x9b0 [ 291.817380][T11164] ip_sublist_rcv+0x8ac/0x9b0 [ 291.817416][T11164] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 291.817437][T11164] ? skb_orphan+0xaf/0xd0 [ 291.817460][T11164] ? __pfx_ip_rcv_finish+0x10/0x10 [ 291.817494][T11164] ip_list_rcv+0x3e2/0x430 [ 291.817527][T11164] ? __pfx_ip_list_rcv+0x10/0x10 [ 291.817546][T11164] ? kasan_save_track+0x3e/0x80 [ 291.817563][T11164] ? __kasan_slab_alloc+0x6c/0x80 [ 291.817583][T11164] ? bpf_test_run_xdp_live+0x15f1/0x1b10 [ 291.817605][T11164] ? __pfx_ip_list_rcv+0x10/0x10 [ 291.817627][T11164] __netif_receive_skb_list_core+0x7d2/0x800 [ 291.817673][T11164] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 291.817716][T11164] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 291.817752][T11164] netif_receive_skb_list_internal+0x975/0xcc0 [ 291.817785][T11164] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 291.817817][T11164] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 291.817847][T11164] ? __phys_addr+0xd3/0x180 [ 291.817868][T11164] ? build_skb_around+0x133/0x280 [ 291.817891][T11164] ? __xdp_build_skb_from_frame+0x34b/0x740 [ 291.817922][T11164] netif_receive_skb_list+0x54/0x450 [ 291.817953][T11164] bpf_test_run_xdp_live+0x1786/0x1b10 [ 291.817988][T11164] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 291.818023][T11164] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 291.818041][T11164] ? 0xffffffffa02057c0 [ 291.818061][T11164] ? 0xffffffffa02057c0 [ 291.818133][T11164] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 291.818164][T11164] ? _copy_from_user+0x94/0xb0 [ 291.818186][T11164] ? bpf_test_init+0x133/0x170 [ 291.818215][T11164] ? xdp_convert_md_to_buff+0x5b/0x330 [ 291.818239][T11164] bpf_prog_test_run_xdp+0x713/0x1000 [ 291.818280][T11164] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.818307][T11164] ? __fget_files+0x2a/0x420 [ 291.818337][T11164] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.818359][T11164] bpf_prog_test_run+0x2c7/0x340 [ 291.818395][T11164] __sys_bpf+0x4a4/0x860 [ 291.818426][T11164] ? __pfx___sys_bpf+0x10/0x10 [ 291.818470][T11164] ? ksys_write+0x22a/0x250 [ 291.818493][T11164] ? __pfx_ksys_write+0x10/0x10 [ 291.818510][T11164] ? rcu_is_watching+0x15/0xb0 [ 291.818539][T11164] __x64_sys_bpf+0x7c/0x90 [ 291.818567][T11164] do_syscall_64+0xfa/0x3b0 [ 291.818594][T11164] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.818620][T11164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.818641][T11164] ? clear_bhb_loop+0x60/0xb0 [ 291.818666][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.818686][T11164] RIP: 0033:0x7ff47ab8e929 [ 291.818705][T11164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.818731][T11164] RSP: 002b:00007ff47ba31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.818753][T11164] RAX: ffffffffffffffda RBX: 00007ff47adb5fa0 RCX: 00007ff47ab8e929 [ 291.818768][T11164] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 291.818781][T11164] RBP: 00007ff47ba31090 R08: 0000000000000000 R09: 0000000000000000 [ 291.818794][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.818805][T11164] R13: 0000000000000000 R14: 00007ff47adb5fa0 R15: 00007ffd244586d8 [ 291.818839][T11164] [ 292.353379][T11170] netlink: 'syz.1.1815': attribute type 3 has an invalid length. [ 292.369595][T11170] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1815'. [ 293.291656][T11169] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.376854][T11180] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1819'. [ 293.591886][T11193] netlink: 'syz.0.1821': attribute type 39 has an invalid length. [ 293.609171][T11169] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.748483][T11169] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.809719][T11202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1825'. [ 293.837353][T11202] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1825'. [ 293.850144][T11169] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.009631][T11169] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.028056][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1826'. [ 294.089538][T11169] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.139263][T11205] sctp: [Deprecated]: syz.1.1826 (pid 11205) Use of int in maxseg socket option. [ 294.139263][T11205] Use struct sctp_assoc_value instead [ 294.191401][T11219] netlink: 'syz.2.1830': attribute type 39 has an invalid length. [ 294.206432][T11169] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.231042][T11219] veth0_macvtap: left promiscuous mode [ 294.282628][T11169] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.293128][T11221] netlink: 'syz.3.1832': attribute type 32 has an invalid length. [ 294.331664][T11221] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 294.581141][T11243] FAULT_INJECTION: forcing a failure. [ 294.581141][T11243] name failslab, interval 1, probability 0, space 0, times 0 [ 294.601066][T11243] CPU: 0 UID: 0 PID: 11243 Comm: syz.0.1839 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 294.601099][T11243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.601113][T11243] Call Trace: [ 294.601121][T11243] [ 294.601130][T11243] dump_stack_lvl+0x189/0x250 [ 294.601167][T11243] ? __pfx____ratelimit+0x10/0x10 [ 294.601193][T11243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.601224][T11243] ? __pfx__printk+0x10/0x10 [ 294.601263][T11243] should_fail_ex+0x414/0x560 [ 294.601296][T11243] should_failslab+0xa8/0x100 [ 294.601322][T11243] __kmalloc_cache_noprof+0x70/0x3d0 [ 294.601342][T11243] ? sctp_add_bind_addr+0x8c/0x370 [ 294.601377][T11243] sctp_add_bind_addr+0x8c/0x370 [ 294.601410][T11243] sctp_copy_local_addr_list+0x30b/0x4e0 [ 294.601443][T11243] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 294.601474][T11243] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 294.601505][T11243] ? sctp_v6_is_any+0x64/0x80 [ 294.601526][T11243] ? sctp_copy_one_addr+0x93/0x360 [ 294.601559][T11243] sctp_bind_addr_copy+0xb3/0x3c0 [ 294.601591][T11243] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 294.601622][T11243] sctp_connect_new_asoc+0x2e0/0x690 [ 294.601657][T11243] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 294.601678][T11243] ? __local_bh_enable_ip+0x12d/0x1c0 [ 294.601718][T11243] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 294.601747][T11243] ? security_sctp_bind_connect+0x7e/0x2e0 [ 294.601774][T11243] sctp_sendmsg+0x155c/0x2810 [ 294.601809][T11243] ? __pfx_sctp_sendmsg+0x10/0x10 [ 294.601835][T11243] ? aa_sk_perm+0x81e/0x950 [ 294.601867][T11243] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.601895][T11243] ? sock_rps_record_flow+0x19/0x410 [ 294.601928][T11243] ? inet_sendmsg+0x2f4/0x370 [ 294.601962][T11243] __sock_sendmsg+0x19c/0x270 [ 294.601995][T11243] __sys_sendto+0x3bd/0x520 [ 294.602017][T11243] ? __pfx___sys_sendto+0x10/0x10 [ 294.602034][T11243] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 294.602078][T11243] ? __fget_files+0x3a0/0x420 [ 294.602120][T11243] ? ksys_write+0x22a/0x250 [ 294.602143][T11243] ? __pfx_ksys_write+0x10/0x10 [ 294.602159][T11243] ? rcu_is_watching+0x15/0xb0 [ 294.602185][T11243] __x64_sys_sendto+0xde/0x100 [ 294.602209][T11243] do_syscall_64+0xfa/0x3b0 [ 294.602235][T11243] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.602261][T11243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.602281][T11243] ? clear_bhb_loop+0x60/0xb0 [ 294.602307][T11243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.602326][T11243] RIP: 0033:0x7ff47ab8e929 [ 294.602344][T11243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.602363][T11243] RSP: 002b:00007ff47ba31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 294.602385][T11243] RAX: ffffffffffffffda RBX: 00007ff47adb5fa0 RCX: 00007ff47ab8e929 [ 294.602400][T11243] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 294.602414][T11243] RBP: 00007ff47ba31090 R08: 0000200000000140 R09: 000000000000001c [ 294.602428][T11243] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 294.602441][T11243] R13: 0000000000000000 R14: 00007ff47adb5fa0 R15: 00007ffd244586d8 [ 294.602475][T11243] [ 294.986989][T11255] siw: device registration error -23 [ 294.995984][T11252] netlink: 'syz.1.1843': attribute type 14 has an invalid length. [ 295.716464][T11301] netlink: 'syz.2.1859': attribute type 11 has an invalid length. [ 295.770430][T11304] __nla_validate_parse: 5 callbacks suppressed [ 295.770453][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 295.803925][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1861'. [ 295.867436][T11304] netlink: 'syz.0.1861': attribute type 11 has an invalid length. [ 296.120461][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 296.325280][T11338] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1873'. [ 296.331900][T11336] netlink: 'syz.4.1876': attribute type 5 has an invalid length. [ 296.438045][T11339] wlan0 speed is unknown, defaulting to 1000 [ 296.480720][T11345] netlink: 'syz.2.1877': attribute type 9 has an invalid length. [ 296.499748][T11343] bridge3: entered promiscuous mode [ 296.726137][T11358] netlink: 'syz.4.1882': attribute type 1 has an invalid length. [ 296.800801][T11358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 296.874005][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 296.978529][T11365] bond0: (slave bridge0): Releasing backup interface [ 297.040233][T11365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.185570][T11373] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1888'. [ 297.202648][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 297.278753][T11376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.289837][T11376] bridge0: port 1(bond4) entered blocking state [ 297.297234][T11376] bridge0: port 1(bond4) entered disabled state [ 297.303712][T11376] bond4: entered allmulticast mode [ 297.313272][T11376] bond4: entered promiscuous mode [ 297.463250][T11392] SET target dimension over the limit! [ 297.464608][T11388] ipvlan2: entered promiscuous mode [ 297.495191][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1895'. [ 297.567726][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 297.584033][T11396] syz_tun: entered promiscuous mode [ 297.591644][T11396] macsec2: entered allmulticast mode [ 297.597118][T11396] syz_tun: entered allmulticast mode [ 297.605753][T11396] syz_tun: left allmulticast mode [ 297.610903][T11396] syz_tun: left promiscuous mode [ 297.874091][T11406] FAULT_INJECTION: forcing a failure. [ 297.874091][T11406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.903880][T11406] CPU: 0 UID: 0 PID: 11406 Comm: syz.4.1901 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 297.903911][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.903925][T11406] Call Trace: [ 297.903933][T11406] [ 297.903942][T11406] dump_stack_lvl+0x189/0x250 [ 297.903980][T11406] ? __pfx____ratelimit+0x10/0x10 [ 297.904008][T11406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.904040][T11406] ? __pfx__printk+0x10/0x10 [ 297.904063][T11406] ? __might_fault+0xb0/0x130 [ 297.904103][T11406] should_fail_ex+0x414/0x560 [ 297.904136][T11406] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 297.904160][T11406] ? __kasan_slab_free+0x62/0x70 [ 297.904183][T11406] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 297.904215][T11406] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 297.904267][T11406] ? fpu__alloc_mathframe+0xad/0x130 [ 297.904298][T11406] get_sigframe+0x58d/0x7d0 [ 297.904329][T11406] ? __pfx_get_sigframe+0x10/0x10 [ 297.904354][T11406] ? kmem_cache_free+0x18f/0x400 [ 297.904388][T11406] x64_setup_rt_frame+0x15b/0xd40 [ 297.904420][T11406] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.904448][T11406] ? _raw_spin_unlock_irq+0x2e/0x50 [ 297.904470][T11406] ? get_signal+0x1151/0x1340 [ 297.904506][T11406] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 297.904542][T11406] arch_do_signal_or_restart+0x3d7/0x750 [ 297.904575][T11406] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 297.904619][T11406] ? exit_to_user_mode_loop+0x40/0x110 [ 297.904652][T11406] exit_to_user_mode_loop+0x75/0x110 [ 297.904682][T11406] do_syscall_64+0x2bd/0x3b0 [ 297.904712][T11406] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.904736][T11406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.904756][T11406] ? clear_bhb_loop+0x60/0xb0 [ 297.904780][T11406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.904800][T11406] RIP: 0033:0x7f72fd38e929 [ 297.904819][T11406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.904837][T11406] RSP: 002b:00007f72fe192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 297.904859][T11406] RAX: 0000000000000001 RBX: 00007f72fd5b5fa0 RCX: 00007f72fd38e929 [ 297.904873][T11406] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000006 [ 297.904885][T11406] RBP: 00007f72fe192090 R08: 0000000000000000 R09: 0000000000000000 [ 297.904897][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.904909][T11406] R13: 0000000000000000 R14: 00007f72fd5b5fa0 R15: 00007ffe05e085e8 [ 297.904940][T11406] [ 298.202081][T11412] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1904'. [ 298.234233][T11412] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 298.516835][T11425] syz_tun: entered promiscuous mode [ 298.522272][T11425] macsec3: entered allmulticast mode [ 298.528205][T11425] syz_tun: entered allmulticast mode [ 298.547342][T11425] syz_tun: left allmulticast mode [ 298.552491][T11425] syz_tun: left promiscuous mode [ 298.971640][T11449] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 299.050148][T11455] FAULT_INJECTION: forcing a failure. [ 299.050148][T11455] name failslab, interval 1, probability 0, space 0, times 0 [ 299.072988][T11455] CPU: 0 UID: 0 PID: 11455 Comm: syz.2.1923 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 299.073021][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.073035][T11455] Call Trace: [ 299.073044][T11455] [ 299.073052][T11455] dump_stack_lvl+0x189/0x250 [ 299.073091][T11455] ? __pfx____ratelimit+0x10/0x10 [ 299.073118][T11455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.073151][T11455] ? __pfx__printk+0x10/0x10 [ 299.073176][T11455] ? __pfx___might_resched+0x10/0x10 [ 299.073196][T11455] ? fs_reclaim_acquire+0x7d/0x100 [ 299.073226][T11455] should_fail_ex+0x414/0x560 [ 299.073269][T11455] should_failslab+0xa8/0x100 [ 299.073294][T11455] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 299.073317][T11455] ? __alloc_skb+0x112/0x2d0 [ 299.073341][T11455] __alloc_skb+0x112/0x2d0 [ 299.073365][T11455] alloc_skb_with_frags+0xca/0x890 [ 299.073404][T11455] sock_alloc_send_pskb+0x857/0x990 [ 299.073450][T11455] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 299.073480][T11455] ? sk_psock_verdict_data_ready+0xcb/0x390 [ 299.073504][T11455] ? sk_psock_verdict_data_ready+0xcb/0x390 [ 299.073526][T11455] ? __pfx_sock_def_readable+0x10/0x10 [ 299.073552][T11455] ? sk_psock_verdict_data_ready+0x33d/0x390 [ 299.073577][T11455] unix_stream_sendmsg+0x4c2/0xc90 [ 299.073618][T11455] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 299.073648][T11455] ? aa_sock_msg_perm+0x94/0x160 [ 299.073677][T11455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.073705][T11455] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 299.073728][T11455] __sock_sendmsg+0x21c/0x270 [ 299.073760][T11455] ____sys_sendmsg+0x505/0x830 [ 299.073789][T11455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.073822][T11455] ? import_iovec+0x74/0xa0 [ 299.073848][T11455] ___sys_sendmsg+0x21f/0x2a0 [ 299.073873][T11455] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.073936][T11455] ? __fget_files+0x2a/0x420 [ 299.073959][T11455] ? __fget_files+0x3a0/0x420 [ 299.073994][T11455] __x64_sys_sendmsg+0x19b/0x260 [ 299.074020][T11455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.074054][T11455] ? __pfx_ksys_write+0x10/0x10 [ 299.074080][T11455] ? do_syscall_64+0xbe/0x3b0 [ 299.074113][T11455] do_syscall_64+0xfa/0x3b0 [ 299.074141][T11455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.074160][T11455] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.074180][T11455] ? clear_bhb_loop+0x60/0xb0 [ 299.074205][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.074225][T11455] RIP: 0033:0x7fe1bd18e929 [ 299.074249][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.074267][T11455] RSP: 002b:00007fe1bdf27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.074290][T11455] RAX: ffffffffffffffda RBX: 00007fe1bd3b5fa0 RCX: 00007fe1bd18e929 [ 299.074305][T11455] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 299.074318][T11455] RBP: 00007fe1bdf27090 R08: 0000000000000000 R09: 0000000000000000 [ 299.074331][T11455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.074342][T11455] R13: 0000000000000000 R14: 00007fe1bd3b5fa0 R15: 00007ffcd6caaa48 [ 299.074375][T11455] [ 299.677700][T11477] wlan0 speed is unknown, defaulting to 1000 [ 299.763400][T11475] wlan0 speed is unknown, defaulting to 1000 [ 299.788371][T11482] bond0: entered promiscuous mode [ 299.794180][T11482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 299.849344][T11482] bond0: left promiscuous mode [ 300.285381][T11508] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 300.531070][T11475] xt_CT: No such helper "snmp" [ 300.570560][T11514] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 300.613418][T11520] netlink: 'syz.1.1939': attribute type 2 has an invalid length. [ 300.837893][T11529] netlink: 'syz.1.1943': attribute type 11 has an invalid length. [ 300.998069][T11537] __nla_validate_parse: 11 callbacks suppressed [ 300.998088][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 301.323488][T11551] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 301.354367][T11554] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1952'. [ 301.373576][T11554] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 301.756248][T11567] dvmrp1: entered allmulticast mode [ 301.767855][T11571] sctp: [Deprecated]: syz.2.1958 (pid 11571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.767855][T11571] Use struct sctp_sack_info instead [ 301.799898][T11571] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 301.843334][T11571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.943123][T11571] bond2: (slave gretap2): making interface the new active one [ 301.995180][T11571] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 302.025341][T11580] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1962'. [ 302.240092][T11587] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 302.261952][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 302.308704][T11589] wlan0 speed is unknown, defaulting to 1000 [ 302.528505][T11570] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 303.021954][T11617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.034502][T11617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.063235][T11617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.185848][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 303.269445][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1979'. [ 303.447564][T11628] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.456417][T11630] FAULT_INJECTION: forcing a failure. [ 303.456417][T11630] name failslab, interval 1, probability 0, space 0, times 0 [ 303.482446][T11630] CPU: 1 UID: 0 PID: 11630 Comm: syz.0.1979 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 303.482486][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.482499][T11630] Call Trace: [ 303.482508][T11630] [ 303.482516][T11630] dump_stack_lvl+0x189/0x250 [ 303.482553][T11630] ? __pfx____ratelimit+0x10/0x10 [ 303.482580][T11630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.482611][T11630] ? __pfx__printk+0x10/0x10 [ 303.482636][T11630] ? __pfx___might_resched+0x10/0x10 [ 303.482655][T11630] ? fs_reclaim_acquire+0x7d/0x100 [ 303.482685][T11630] should_fail_ex+0x414/0x560 [ 303.482717][T11630] should_failslab+0xa8/0x100 [ 303.482742][T11630] __kmalloc_cache_noprof+0x70/0x3d0 [ 303.482769][T11630] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 303.482793][T11630] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 303.482818][T11630] alloc_netdev_mqs+0xbd5/0x11e0 [ 303.482851][T11630] rtnl_create_link+0x31f/0xd10 [ 303.482885][T11630] rtnl_newlink_create+0x25c/0xb00 [ 303.482911][T11630] ? __mutex_lock+0x51b/0xe80 [ 303.482944][T11630] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 303.482962][T11630] ? rtnl_newlink+0x8db/0x1c70 [ 303.482994][T11630] ? __pfx___mutex_lock+0x10/0x10 [ 303.483032][T11630] ? ns_capable+0x8a/0xf0 [ 303.483066][T11630] rtnl_newlink+0x16d6/0x1c70 [ 303.483098][T11630] ? netlink_sendmsg+0x805/0xb30 [ 303.483137][T11630] ? __pfx_rtnl_newlink+0x10/0x10 [ 303.483192][T11630] ? kasan_quarantine_put+0xdd/0x220 [ 303.483222][T11630] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.483255][T11630] ? nlmon_xmit+0xb0/0x100 [ 303.483276][T11630] ? kmem_cache_free+0x18f/0x400 [ 303.483306][T11630] ? __local_bh_enable_ip+0x12d/0x1c0 [ 303.483336][T11630] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.483362][T11630] ? __local_bh_enable_ip+0x12d/0x1c0 [ 303.483391][T11630] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 303.483425][T11630] ? __dev_queue_xmit+0x27e/0x3a70 [ 303.483469][T11630] ? __lock_acquire+0xab9/0xd20 [ 303.483524][T11630] ? __pfx_rtnl_newlink+0x10/0x10 [ 303.483554][T11630] rtnetlink_rcv_msg+0x7cc/0xb70 [ 303.483587][T11630] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 303.483615][T11630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.483642][T11630] ? ref_tracker_free+0x63a/0x7d0 [ 303.483669][T11630] ? __copy_skb_header+0xa7/0x550 [ 303.483694][T11630] ? __pfx_ref_tracker_free+0x10/0x10 [ 303.483728][T11630] ? __skb_clone+0x63/0x7a0 [ 303.483765][T11630] netlink_rcv_skb+0x208/0x470 [ 303.483786][T11630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 303.483818][T11630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.483852][T11630] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.483871][T11630] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.483897][T11630] netlink_unicast+0x75b/0x8d0 [ 303.483939][T11630] netlink_sendmsg+0x805/0xb30 [ 303.483971][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.483996][T11630] ? aa_sock_msg_perm+0x94/0x160 [ 303.484031][T11630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.484057][T11630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.484078][T11630] __sock_sendmsg+0x21c/0x270 [ 303.484110][T11630] ____sys_sendmsg+0x505/0x830 [ 303.484138][T11630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.484170][T11630] ? import_iovec+0x74/0xa0 [ 303.484196][T11630] ___sys_sendmsg+0x21f/0x2a0 [ 303.484221][T11630] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.484284][T11630] ? __fget_files+0x2a/0x420 [ 303.484306][T11630] ? __fget_files+0x3a0/0x420 [ 303.484340][T11630] __x64_sys_sendmsg+0x19b/0x260 [ 303.484365][T11630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.484398][T11630] ? __pfx_ksys_write+0x10/0x10 [ 303.484424][T11630] ? do_syscall_64+0xbe/0x3b0 [ 303.484455][T11630] do_syscall_64+0xfa/0x3b0 [ 303.484480][T11630] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.484504][T11630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.484524][T11630] ? clear_bhb_loop+0x60/0xb0 [ 303.484548][T11630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.484567][T11630] RIP: 0033:0x7ff47ab8e929 [ 303.484584][T11630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.484601][T11630] RSP: 002b:00007ff47ba10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.484622][T11630] RAX: ffffffffffffffda RBX: 00007ff47adb6080 RCX: 00007ff47ab8e929 [ 303.484637][T11630] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 303.484649][T11630] RBP: 00007ff47ba10090 R08: 0000000000000000 R09: 0000000000000000 [ 303.484661][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 303.484673][T11630] R13: 0000000000000001 R14: 00007ff47adb6080 R15: 00007ffd244586d8 [ 303.484705][T11630] [ 303.932640][ T5155] Bluetooth: hci0: command 0x0406 tx timeout [ 303.951040][T11629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1978'. [ 303.961627][T11629] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 304.178565][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1983'. [ 304.310739][T11651] wlan0 speed is unknown, defaulting to 1000 [ 304.349803][T11658] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 304.387794][T11658] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 304.470071][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 304.499910][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 304.521008][T11664] syz_tun: entered promiscuous mode [ 304.527062][T11664] macsec3: entered allmulticast mode [ 304.532446][T11664] syz_tun: entered allmulticast mode [ 304.542914][T11664] syz_tun: left allmulticast mode [ 304.548824][T11664] syz_tun: left promiscuous mode [ 304.586106][T11661] ip6gretap0: entered promiscuous mode [ 304.592271][T11667] IPVS: stopping backup sync thread 10576 ... [ 304.593568][T11661] macsec3: entered allmulticast mode [ 304.609143][T11661] ip6gretap0: entered allmulticast mode [ 304.620159][T11661] ip6gretap0: left allmulticast mode [ 304.625765][T11661] ip6gretap0: left promiscuous mode [ 305.079020][T11676] syz.2.1995: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 305.116500][T11676] CPU: 1 UID: 0 PID: 11676 Comm: syz.2.1995 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 305.116532][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.116544][T11676] Call Trace: [ 305.116553][T11676] [ 305.116563][T11676] dump_stack_lvl+0x189/0x250 [ 305.116603][T11676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.116636][T11676] ? __pfx__printk+0x10/0x10 [ 305.116660][T11676] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 305.116684][T11676] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 305.116710][T11676] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 305.116738][T11676] warn_alloc+0x214/0x310 [ 305.116771][T11676] ? __pfx_warn_alloc+0x10/0x10 [ 305.116807][T11676] ? __get_vm_area_node+0x28f/0x300 [ 305.116830][T11676] ? xskq_create+0xbf/0x170 [ 305.116860][T11676] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 305.116919][T11676] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.116956][T11676] ? xskq_create+0x56/0x170 [ 305.116982][T11676] ? __kasan_kmalloc+0x93/0xb0 [ 305.117006][T11676] vmalloc_user_noprof+0xad/0xf0 [ 305.117029][T11676] ? xskq_create+0xbf/0x170 [ 305.117054][T11676] xskq_create+0xbf/0x170 [ 305.117082][T11676] xsk_init_queue+0xb0/0x110 [ 305.117110][T11676] xsk_setsockopt+0x4de/0x710 [ 305.117136][T11676] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.117166][T11676] ? aa_sock_opt_perm+0x74/0x110 [ 305.117195][T11676] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 305.117221][T11676] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.117245][T11676] do_sock_setsockopt+0x25a/0x3e0 [ 305.117270][T11676] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 305.117295][T11676] ? __fget_files+0x2a/0x420 [ 305.117327][T11676] __x64_sys_setsockopt+0x18b/0x220 [ 305.117355][T11676] do_syscall_64+0xfa/0x3b0 [ 305.117381][T11676] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.117406][T11676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.117432][T11676] ? clear_bhb_loop+0x60/0xb0 [ 305.117456][T11676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.117476][T11676] RIP: 0033:0x7fe1bd18e929 [ 305.117494][T11676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.117511][T11676] RSP: 002b:00007fe1bdf27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 305.117533][T11676] RAX: ffffffffffffffda RBX: 00007fe1bd3b5fa0 RCX: 00007fe1bd18e929 [ 305.117548][T11676] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 305.117560][T11676] RBP: 00007fe1bd210b39 R08: 0000000000000004 R09: 0000000000000000 [ 305.117572][T11676] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 305.117585][T11676] R13: 0000000000000000 R14: 00007fe1bd3b5fa0 R15: 00007ffcd6caaa48 [ 305.117617][T11676] [ 305.117634][T11676] Mem-Info: [ 305.413626][T11676] active_anon:5098 inactive_anon:0 isolated_anon:0 [ 305.413626][T11676] active_file:1965 inactive_file:39912 isolated_file:0 [ 305.413626][T11676] unevictable:768 dirty:426 writeback:0 [ 305.413626][T11676] slab_reclaimable:11365 slab_unreclaimable:101524 [ 305.413626][T11676] mapped:32118 shmem:1934 pagetables:1107 [ 305.413626][T11676] sec_pagetables:0 bounce:0 [ 305.413626][T11676] kernel_misc_reclaimable:0 [ 305.413626][T11676] free:1331786 free_pcp:13718 free_cma:0 [ 305.467444][T11698] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.506808][T11695] wlan0 speed is unknown, defaulting to 1000 [ 305.551245][T11676] Node 0 active_anon:22092kB inactive_anon:0kB active_file:7860kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134272kB dirty:1700kB writeback:0kB shmem:7800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12948kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 305.632439][T11676] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 305.714403][T11698] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.743253][T11676] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.794350][T11676] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 305.808582][T11676] Node 0 DMA32 free:1395428kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24240kB inactive_anon:0kB active_file:7860kB inactive_file:157604kB unevictable:1536kB writepending:1700kB present:3129332kB managed:2561076kB mlocked:0kB bounce:0kB free_pcp:43004kB local_pcp:27480kB free_cma:0kB [ 305.863130][T11676] lowmem_reserve[]: 0 0 1 1 1 [ 305.891333][T11676] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 305.942007][T11698] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.955937][T11676] lowmem_reserve[]: 0 0 0 0 0 [ 305.960741][T11676] Node 1 Normal free:3902592kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19456kB local_pcp:13184kB free_cma:0kB [ 305.998709][T11676] lowmem_reserve[]: 0 0 0 0 0 [ 306.003530][T11676] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 306.024518][T11676] Node 0 DMA32: 2*4kB (ME) 4*8kB (UME) 4*16kB (UME) 906*32kB (UME) 384*64kB (UME) 117*128kB (UME) 66*256kB (UME) 48*512kB (UME) 29*1024kB (UM) 5*2048kB (UME) 303*4096kB (M) = 1391144kB [ 306.046717][T11676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 306.060766][T11676] Node 1 Normal: 210*4kB (UME) 45*8kB (UME) 35*16kB (UME) 93*32kB (UME) 34*64kB (UME) 15*128kB (UME) 2*256kB (M) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3902592kB [ 306.083171][T11676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.107661][T11676] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.123417][T11676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.147996][T11698] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 306.167895][T11676] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.180304][T11676] 45920 total pagecache pages [ 306.194489][T11676] 0 pages in swap cache [ 306.202465][T11676] Free swap = 124996kB [ 306.206829][T11676] Total swap = 124996kB [ 306.211099][T11676] 2097051 pages RAM [ 306.238217][T11676] 0 pages HighMem/MovableOnly [ 306.243108][T11676] 424676 pages reserved [ 306.247587][T11676] 0 pages cma reserved [ 306.359959][T11697] __nla_validate_parse: 1 callbacks suppressed [ 306.359979][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 306.367592][T11698] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.471235][T11698] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.486003][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 306.511526][T11698] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.533635][T11722] syz_tun: entered promiscuous mode [ 306.541949][T11722] macsec3: entered allmulticast mode [ 306.553408][T11722] syz_tun: entered allmulticast mode [ 306.562492][T11722] syz_tun: left allmulticast mode [ 306.570705][T11722] syz_tun: left promiscuous mode [ 306.629312][T11698] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.059843][T11749] sctp: [Deprecated]: syz.4.2019 (pid 11749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.059843][T11749] Use struct sctp_sack_info instead [ 307.141281][T11745] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 307.270562][T11745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.350277][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 307.393555][T11749] bond1: (slave gretap1): making interface the new active one [ 307.403842][T11749] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 307.436375][T11759] pim6reg: entered allmulticast mode [ 307.451347][T11764] macvlan0: entered allmulticast mode [ 307.460951][T11764] veth1_vlan: entered allmulticast mode [ 307.512386][T11767] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 307.559453][T11766] veth1_vlan: left allmulticast mode [ 307.600515][T11766] macvlan0 (unregistering): left allmulticast mode [ 307.713715][T11773] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2023'. [ 307.775793][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 307.787105][T11767] wlan0 speed is unknown, defaulting to 1000 [ 308.035653][T11780] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.052406][T11789] netlink: 'syz.4.2030': attribute type 3 has an invalid length. [ 308.094596][T11780] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.129047][T11792] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 308.224016][T11780] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.296089][T11780] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.607278][ C0] ------------[ cut here ]------------ [ 308.613047][ C0] WARNING: CPU: 0 PID: 15 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 308.622499][ C0] Modules linked in: [ 308.626607][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 308.638229][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.648352][ C0] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 308.654203][ C0] Code: 0f 0b 90 e9 62 fe ff ff e8 2a 35 d2 f7 90 0f 0b 90 e9 95 fe ff ff e8 1c 35 d2 f7 90 0f 0b 90 e9 bb fe ff ff e8 0e 35 d2 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 308.673904][ C0] RSP: 0018:ffffc90000147868 EFLAGS: 00010246 [ 308.680069][ C0] RAX: ffffffff89ee26c2 RBX: dffffc0000000000 RCX: ffff88801d2b3c00 [ 308.688123][ C0] RDX: 0000000000000100 RSI: 0000000000000ffd RDI: 0000000000000000 [ 308.696175][ C0] RBP: 0000000000000ffd R08: ffff88805394101f R09: 1ffff1100a728203 [ 308.704182][ C0] R10: dffffc0000000000 R11: ffffed100a728204 R12: ffff888053940d80 [ 308.712229][ C0] R13: dffffc0000000000 R14: ffff888053941004 R15: 1ffff1100a7281b2 [ 308.720267][ C0] FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 308.729257][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.735908][ C0] CR2: 00007fddfb5d4f98 CR3: 000000000df38000 CR4: 00000000003526f0 [ 308.743925][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 308.751963][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 308.760015][ C0] Call Trace: [ 308.763318][ C0] [ 308.766314][ C0] ? inet6_cleanup_sock+0x197/0x230 [ 308.771567][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 308.777277][ C0] __sk_destruct+0x89/0x660 [ 308.781837][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 308.787031][ C0] ? rcu_core+0xc34/0x1710 [ 308.791493][ C0] rcu_core+0xca5/0x1710 [ 308.795828][ C0] ? __lock_acquire+0xab9/0xd20 [ 308.800751][ C0] ? __pfx_rcu_core+0x10/0x10 [ 308.805520][ C0] ? rcu_qs+0xc4/0x170 [ 308.809643][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 308.814198][ C0] ? sched_clock_cpu+0x74/0x430 [ 308.819151][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 308.824404][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 308.829705][ C0] handle_softirqs+0x286/0x870 [ 308.834519][ C0] ? schedule+0x165/0x360 [ 308.838933][ C0] ? run_ksoftirqd+0x9b/0x100 [ 308.843664][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 308.849037][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 308.854112][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 308.859225][ C0] run_ksoftirqd+0x9b/0x100 [ 308.863764][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 308.868962][ C0] smpboot_thread_fn+0x53f/0xa60 [ 308.873954][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 308.879078][ C0] kthread+0x70e/0x8a0 [ 308.883194][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 308.888730][ C0] ? __pfx_kthread+0x10/0x10 [ 308.893357][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.898633][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.903882][ C0] ? __pfx_kthread+0x10/0x10 [ 308.908584][ C0] ret_from_fork+0x3f9/0x770 [ 308.913287][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 308.918557][ C0] ? __switch_to_asm+0x39/0x70 [ 308.923378][ C0] ? __switch_to_asm+0x33/0x70 [ 308.928261][ C0] ? __pfx_kthread+0x10/0x10 [ 308.932895][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.937793][ C0] [ 308.940849][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 308.948164][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.15.0-syzkaller-12489-g5d6d67c4cb10 #0 PREEMPT(full) [ 308.959765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.969862][ C0] Call Trace: [ 308.973191][ C0] [ 308.976163][ C0] dump_stack_lvl+0x99/0x250 [ 308.980812][ C0] ? __asan_memcpy+0x40/0x70 [ 308.985455][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.990703][ C0] ? __pfx__printk+0x10/0x10 [ 308.995351][ C0] panic+0x2db/0x790 [ 308.999390][ C0] ? __pfx_panic+0x10/0x10 [ 309.004202][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 309.009439][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 309.014394][ C0] __warn+0x31b/0x4b0 [ 309.018400][ C0] ? inet_sock_destruct+0x623/0x730 [ 309.023634][ C0] ? inet_sock_destruct+0x623/0x730 [ 309.028850][ C0] report_bug+0x2be/0x4f0 [ 309.033192][ C0] ? inet_sock_destruct+0x623/0x730 [ 309.038433][ C0] ? inet_sock_destruct+0x623/0x730 [ 309.043643][ C0] ? inet_sock_destruct+0x625/0x730 [ 309.048901][ C0] handle_bug+0x84/0x160 [ 309.053171][ C0] exc_invalid_op+0x1a/0x50 [ 309.057700][ C0] asm_exc_invalid_op+0x1a/0x20 [ 309.062563][ C0] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 309.068381][ C0] Code: 0f 0b 90 e9 62 fe ff ff e8 2a 35 d2 f7 90 0f 0b 90 e9 95 fe ff ff e8 1c 35 d2 f7 90 0f 0b 90 e9 bb fe ff ff e8 0e 35 d2 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 309.087995][ C0] RSP: 0018:ffffc90000147868 EFLAGS: 00010246 [ 309.094086][ C0] RAX: ffffffff89ee26c2 RBX: dffffc0000000000 RCX: ffff88801d2b3c00 [ 309.102086][ C0] RDX: 0000000000000100 RSI: 0000000000000ffd RDI: 0000000000000000 [ 309.110113][ C0] RBP: 0000000000000ffd R08: ffff88805394101f R09: 1ffff1100a728203 [ 309.118098][ C0] R10: dffffc0000000000 R11: ffffed100a728204 R12: ffff888053940d80 [ 309.126087][ C0] R13: dffffc0000000000 R14: ffff888053941004 R15: 1ffff1100a7281b2 [ 309.134085][ C0] ? inet_sock_destruct+0x622/0x730 [ 309.139326][ C0] ? inet_sock_destruct+0x622/0x730 [ 309.144560][ C0] ? inet6_cleanup_sock+0x197/0x230 [ 309.149794][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 309.155459][ C0] __sk_destruct+0x89/0x660 [ 309.159994][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 309.165219][ C0] ? rcu_core+0xc34/0x1710 [ 309.169674][ C0] rcu_core+0xca5/0x1710 [ 309.173939][ C0] ? __lock_acquire+0xab9/0xd20 [ 309.178834][ C0] ? __pfx_rcu_core+0x10/0x10 [ 309.183531][ C0] ? rcu_qs+0xc4/0x170 [ 309.187614][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 309.192216][ C0] ? sched_clock_cpu+0x74/0x430 [ 309.197097][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 309.201883][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 309.207112][ C0] handle_softirqs+0x286/0x870 [ 309.211899][ C0] ? schedule+0x165/0x360 [ 309.216342][ C0] ? run_ksoftirqd+0x9b/0x100 [ 309.221050][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 309.226365][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 309.231438][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 309.236504][ C0] run_ksoftirqd+0x9b/0x100 [ 309.241031][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 309.246169][ C0] smpboot_thread_fn+0x53f/0xa60 [ 309.251142][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 309.256207][ C0] kthread+0x70e/0x8a0 [ 309.260319][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 309.265790][ C0] ? __pfx_kthread+0x10/0x10 [ 309.270401][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.275629][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.280849][ C0] ? __pfx_kthread+0x10/0x10 [ 309.285458][ C0] ret_from_fork+0x3f9/0x770 [ 309.290084][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 309.295223][ C0] ? __switch_to_asm+0x39/0x70 [ 309.300004][ C0] ? __switch_to_asm+0x33/0x70 [ 309.304776][ C0] ? __pfx_kthread+0x10/0x10 [ 309.309384][ C0] ret_from_fork_asm+0x1a/0x30 [ 309.314166][ C0] [ 309.317516][ C0] Kernel Offset: disabled [ 309.321844][ C0] Rebooting in 86400 seconds..