last executing test programs: 1m36.982593664s ago: executing program 4 (id=2002): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 1m23.354526539s ago: executing program 3 (id=3474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x6, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f00000000c0)=""/38, 0x26, 0x0, &(0x7f0000000580)=""/209, 0xd1}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x8000, 0x1, 0x2, 0x6, {{0x34, 0x4, 0x2, 0x3, 0xd0, 0x67, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @lsrr={0x83, 0x7, 0x5c, [@empty]}, @timestamp_prespec={0x44, 0x54, 0x3f, 0x3, 0x3, [{@multicast1, 0x548}, {@broadcast, 0x30000}, {@multicast2, 0x5}, {@multicast1, 0x7}, {@rand_addr=0x64010102, 0x4}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0xbb7b}]}, @cipso={0x86, 0x1f, 0x2, [{0x7, 0xe, "f7fba1cd76e5442e7b2c4c8d"}, {0x6, 0x8, "508348c6aec8"}, {0x1, 0x3, "cd"}]}, @rr={0x7, 0x13, 0xbb, [@loopback, @remote, @multicast2, @loopback]}, @ssrr={0x89, 0x23, 0xd, [@local, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, @local, @rand_addr=0x64010100, @multicast2, @broadcast]}, @rr={0x7, 0x7, 0x53, [@empty]}, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="b6fe82247af38bbe3544f7853d21482c9f239ae4c74aff5ad002518e251b98c04ad7ca6504758c4f696f1e919bd8323f27e926b43fc94d66f3a1a2df104d3b57ebfdb833a1006ccad94e7d52ef2c4d9bc358f9d5dab6fe51ca89594b8ac60e0771b8a242fd92d69d02c30ca6f1641fff90b2f0311251594438856e895522acb10d5ddde545ad97e1dda23fb8133d", @ANYRES16=r4], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', r4, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)="6203", 0x2}], 0x1}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800010003001000fdffff7f00000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) 1m23.259413842s ago: executing program 3 (id=3476): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newtclass={0x38, 0x28, 0x1, 0x70bd2d, 0x80000000, {0x0, 0x0, 0x0, r1, {0xfff1, 0xe}, {0xd, 0xa}, {0xa, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xd}}, @tclass_kind_options=@c_cake={0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x824}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1m22.8984728s ago: executing program 3 (id=3479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x3000000}}) 1m22.846417389s ago: executing program 4 (id=2002): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 1m21.427355264s ago: executing program 3 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="190300fffffff00000004a0000000e0002"], 0x34}}, 0x0) 1m21.232907925s ago: executing program 3 (id=3484): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x9000000}, 0x0) 1m20.83856994s ago: executing program 3 (id=3489): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xf, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80000001}, @IFA_RT_PRIORITY={0x8, 0x9, 0x738a}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10820, 0x400}}, 0x20}}, 0x4084) 1m13.70085531s ago: executing program 4 (id=2002): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 1m5.768171953s ago: executing program 32 (id=3489): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xf, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x80000001}, @IFA_RT_PRIORITY={0x8, 0x9, 0x738a}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10820, 0x400}}, 0x20}}, 0x4084) 1m2.600829846s ago: executing program 4 (id=2002): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 51.341210293s ago: executing program 4 (id=2002): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) 709.821911ms ago: executing program 1 (id=4528): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01eaffffff9a26000000216000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 708.750648ms ago: executing program 5 (id=4532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000080d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) 708.36561ms ago: executing program 0 (id=4533): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) 708.240082ms ago: executing program 2 (id=4534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19030000000000000a004a0000000e0002"], 0x34}}, 0x0) 707.895084ms ago: executing program 0 (id=4535): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x2) r2 = accept(r1, &(0x7f0000000280)=@ax25={{0x3, @netrom}, [@default, @bcast, @netrom, @rose, @bcast, @null, @netrom, @null]}, &(0x7f00000003c0)=0xffffffffffffff77) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x88, 0x1403, 0x400, 0x70bd29, 0x25dfdbfc, "", [{{0xfffffffffffffe70, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000040)="608b26cdef899efe54d4d22fd9ac6c7800", &(0x7f0000000340)=@udp6=r2, 0x1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xf, 0x10, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000006c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000800)=0xe8) r7 = getgid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000840)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r10}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r11 = getgid() r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r13 = socket$inet(0x2, 0x3, 0xfffffffe) r14 = gettid() r15 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r16}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000900)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000940)=0x0) r20 = getgid() getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000e40)={0x0, 0xfffffff7}, &(0x7f0000000e80)=0x8) r21 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) sendmsg$unix(r2, &(0x7f0000000b40)={&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000480)="73ab5ced8c3f1584cdc2a17f5d701df056d8894276df2aa900b07bc5bd8a1882dddb1a07b76cf0e78b639cfa05411da966b9323af2d7ac83d5a22613df12b788f73a0e1e35331a30f7a214556fad758c0143591928dd8b6bef1733270ea6b35199ff3c83c5d779984daeff598f0be754612baa2e3f688e1bd1303ea354418536a6436e7c87256bb7cd4caa18f8a63cd2c198ab00aec534a792d5afd4", 0x9c}, {&(0x7f0000000540)="1733ab8de9d5a81d76df4edba51ceb3a94ca383b8dcd928c8f20eefa02dd764ffc5ff72bc101cccb133b27a5f372e189b3cce4ad042a9049f9c9aac91efd8c9b0b89e479da339faf788d4845c195e825b323db3c3b7c0e8d65c9c65436510b2c3be2af7ae72a76f1f65519d1a23f26b2cd4c91ab3b1d5ee44db9c0060e30744a39a9d0f86e9617c2af15b5fb5bc58299cbf70e24cfd4b436e780554eefa28515aa8b2af336164b452cbb3d3877cd50", 0xaf}, {&(0x7f0000000600)="66c619a6cb1c29506192a31e974b027647302f91d67c57f764eaef2f44d0a398d46e57e9b6b1537ab1899aa26acb254a5fb879989d74ee67fc22a55fa5502c6fad73db2d489fcab7335ea953966b4c8237dafd3e23dd1e556146678d1e544fbc33ba3f538e697e0203c26502daf2b153ad97de0acc49b23ecb12d8633c18c5b97547fdb12db56be1410367a5b4e9ced75e3966f1d1a2a70f7f79a7256e3e6520beb3765e70d45d773c63562221", 0xad}], 0x3, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r12, r2, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r3, r2, r2, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0xee01, r22}}}], 0x108, 0x5}, 0x4004850) 706.105123ms ago: executing program 1 (id=4536): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800410000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 705.704663ms ago: executing program 2 (id=4537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair(0x28, 0x5, 0x401, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x80, 0x809a]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xbbcd}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xaad2]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 705.061213ms ago: executing program 5 (id=4538): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1100000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000b4308c0800000000000009", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x26, 0xffff}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='F'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) 614.500568ms ago: executing program 1 (id=4539): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 577.504393ms ago: executing program 2 (id=4540): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000083f000/0x2000)=nil, 0x2000, 0x1000005, 0x8012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0006000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0x8, 0xffffffffffffffff, 0x0, 0x8001, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r1, 0xe93f6000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 577.244754ms ago: executing program 0 (id=4541): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 576.895187ms ago: executing program 5 (id=4542): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000080)="ce019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1, @local, 0x1}, 0x1a) recvmmsg(r2, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40010042, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 443.5818ms ago: executing program 0 (id=4543): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5c00, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) 388.888013ms ago: executing program 2 (id=4544): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0xfffffffffffffdec) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c11fd"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 388.733866ms ago: executing program 5 (id=4545): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 357.823278ms ago: executing program 1 (id=4546): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r7) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000600000008000100000000000c000d"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0500180130000000080027000000000008002600b40900000800a1"], 0x44}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="14", 0x1}], 0x1}, 0x0) 284.470685ms ago: executing program 0 (id=4547): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000580)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r3, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x30, {0x200, 0x0, @l2={'ib', 0x3a, 'gretap0\x00'}}}}}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x11, 0x400, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x80, 0x4a00}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x800) 228.988065ms ago: executing program 2 (id=4548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x400300}}, 0x80}}, 0x0) 228.739307ms ago: executing program 5 (id=4549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x5c, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r6, 0x900, 0x62010}, [@IFLA_LINKINFO={0x3c, 0x1a, 0x0, 0x1, @macsec={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0xb}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0xb}, @IFLA_MACSEC_ES={0x5, 0xa, 0x2}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x10}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x59}]}}}]}, 0x5c}}, 0x4050) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfffffbff}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x52}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x40}, @ETHTOOL_A_COALESCE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xe}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4044001) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004d00)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0xc060, 0x2d68}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) 191.298734ms ago: executing program 1 (id=4550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9fffffff}, 0x0) 82.855909ms ago: executing program 0 (id=4551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newqdisc={0x1bc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x14, r2, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_STAB={0x4}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0x8000, 0x4, 0x1, 0xbd, 0x0, 0x6}}, {0x10, 0x2, [0x6, 0x4, 0x10, 0x100, 0x6, 0x4]}}, {{0x1c, 0x1, {0xee, 0x3, 0x1, 0x0, 0x1, 0x3, 0x7, 0x2}}, {0x8, 0x2, [0xfffd, 0x8be]}}, {{0x1c, 0x1, {0x2, 0x80, 0x0, 0x4, 0x0, 0x101, 0xfffffffb, 0x9}}, {0x16, 0x2, [0x60, 0xb4, 0x1, 0x7ff, 0x6, 0x9, 0x0, 0xfffd, 0x1]}}]}, @TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x3, "14a1b8ebf0ed4eeb89549b751b460738"}}}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x0, 0x6, 0x3, 0x1, 0x3ff, 0x80000001, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x7, 0x4, 0x0, 0xfffffffa, 0x2, 0x1, 0xc144, 0x5}}, {0xe, 0x2, [0x7, 0x6, 0x8, 0x9, 0x200]}}, {{0x1c, 0x1, {0x3, 0x4, 0x8, 0x5, 0x0, 0x3, 0x9, 0x2}}, {0x8, 0x2, [0x800, 0x6]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x5, 0x800, 0x0, 0x2, 0x2, 0x3}}, {0xa, 0x2, [0xb79c, 0x0, 0xf000]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x1bc}}, 0x0) 4.758913ms ago: executing program 2 (id=4552): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, 0x2, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x800}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xdce, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x200}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x15}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 4.576755ms ago: executing program 1 (id=4553): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 4.415669ms ago: executing program 5 (id=4554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getaddr={0x20, 0x16, 0x400, 0x70bd2d, 0x25dfdbfe, {0x2, 0x8, 0x80, 0xc8}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x40804) socket$netlink(0x10, 0x3, 0xa) 0s ago: executing program 4 (id=2002): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][T16429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.361839][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.382768][T16429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.405545][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.414079][T16429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.431370][T16429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.441947][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.446180][T16429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.462328][T16429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.472662][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.475527][T16429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.492072][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.501308][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.511129][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.519779][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.528507][T16662] x_tables: ip_tables: TTL target: only valid in mangle table, not GPL [ 396.534229][T16670] veth0: entered promiscuous mode [ 396.562167][T16666] veth0: left promiscuous mode [ 396.588917][T16429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.615791][T16429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.625685][T16429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.655192][T16429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.683321][T16429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.721818][T16429] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.750692][T16429] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.784327][T16429] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.805953][T16429] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.858199][T16689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3759'. [ 396.876864][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3762'. [ 396.995561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.019068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.073997][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.092189][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.177608][ T5832] Bluetooth: hci3: command tx timeout [ 397.604441][T16719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3774'. [ 397.798288][T16730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3777'. [ 397.990535][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.020599][T16740] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3783'. [ 398.043212][T16744] FAULT_INJECTION: forcing a failure. [ 398.043212][T16744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.069297][T16744] CPU: 1 UID: 0 PID: 16744 Comm: syz.0.3784 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 398.069331][T16744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 398.069344][T16744] Call Trace: [ 398.069354][T16744] [ 398.069363][T16744] dump_stack_lvl+0x189/0x250 [ 398.069401][T16744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.069431][T16744] ? __pfx__printk+0x10/0x10 [ 398.069454][T16744] ? fs_reclaim_acquire+0x7d/0x100 [ 398.069494][T16744] should_fail_ex+0x414/0x560 [ 398.069531][T16744] prepare_alloc_pages+0x213/0x610 [ 398.069571][T16744] __alloc_frozen_pages_noprof+0x123/0x370 [ 398.069608][T16744] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.069647][T16744] ? __lock_acquire+0xaac/0xd20 [ 398.069676][T16744] ? policy_nodemask+0x27c/0x720 [ 398.069710][T16744] alloc_pages_mpol+0x232/0x4a0 [ 398.069743][T16744] alloc_pages_noprof+0xa9/0x190 [ 398.069773][T16744] __pmd_alloc+0x3a/0x350 [ 398.069802][T16744] __handle_mm_fault+0x926/0x5380 [ 398.069849][T16744] ? __pfx___handle_mm_fault+0x10/0x10 [ 398.069897][T16744] ? find_vma+0xe7/0x160 [ 398.069922][T16744] ? __pfx_find_vma+0x10/0x10 [ 398.069950][T16744] handle_mm_fault+0x3f6/0x8c0 [ 398.069987][T16744] do_user_addr_fault+0x764/0x1390 [ 398.070027][T16744] exc_page_fault+0x68/0x110 [ 398.070063][T16744] asm_exc_page_fault+0x26/0x30 [ 398.070083][T16744] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 398.070118][T16744] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 398.070136][T16744] RSP: 0018:ffffc90003abfa98 EFLAGS: 00050246 [ 398.070155][T16744] RAX: 00007ffffffff001 RBX: 0000000000000040 RCX: 0000000000000040 [ 398.070170][T16744] RDX: 0000000000000001 RSI: 000000110c230300 RDI: ffff888058649c00 [ 398.070184][T16744] RBP: ffffc90003abfc28 R08: ffff888058649c3f R09: 1ffff1100b0c9387 [ 398.070200][T16744] R10: dffffc0000000000 R11: ffffed100b0c9388 R12: ffffc90003abfd20 [ 398.070216][T16744] R13: ffff888058649c00 R14: ffff888058649c00 R15: 000000110c230300 [ 398.070256][T16744] _copy_from_user+0x7a/0xb0 [ 398.070285][T16744] ioctl_standard_iw_point+0x59d/0xd40 [ 398.070329][T16744] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 398.070354][T16744] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 398.070382][T16744] ? __pfx___mutex_lock+0x10/0x10 [ 398.070410][T16744] ? full_name_hash+0x92/0xe0 [ 398.070441][T16744] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 398.070466][T16744] ioctl_standard_call+0xaf/0x1b0 [ 398.070495][T16744] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 398.070517][T16744] wext_ioctl_dispatch+0xeb/0x410 [ 398.070541][T16744] ? __pfx_ioctl_standard_call+0x10/0x10 [ 398.070570][T16744] wext_handle_ioctl+0x100/0x1c0 [ 398.070599][T16744] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 398.070645][T16744] sock_ioctl+0x15f/0x790 [ 398.070675][T16744] ? __pfx_sock_ioctl+0x10/0x10 [ 398.070705][T16744] ? __fget_files+0x3a0/0x420 [ 398.070730][T16744] ? __fget_files+0x2a/0x420 [ 398.070760][T16744] ? bpf_lsm_file_ioctl+0x9/0x20 [ 398.070787][T16744] ? __pfx_sock_ioctl+0x10/0x10 [ 398.070812][T16744] __se_sys_ioctl+0xf9/0x170 [ 398.070837][T16744] do_syscall_64+0xf6/0x210 [ 398.070859][T16744] ? clear_bhb_loop+0x45/0xa0 [ 398.070885][T16744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.070905][T16744] RIP: 0033:0x7fb6bcf8e969 [ 398.070923][T16744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.070941][T16744] RSP: 002b:00007fb6bdd2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.070960][T16744] RAX: ffffffffffffffda RBX: 00007fb6bd1b5fa0 RCX: 00007fb6bcf8e969 [ 398.070975][T16744] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 398.070988][T16744] RBP: 00007fb6bdd2d090 R08: 0000000000000000 R09: 0000000000000000 [ 398.071001][T16744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.071013][T16744] R13: 0000000000000000 R14: 00007fb6bd1b5fa0 R15: 00007fffc7886648 [ 398.071047][T16744] [ 398.071582][T16739] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3783'. [ 398.645224][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.074340][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.171225][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.289967][ T62] bridge_slave_1: left allmulticast mode [ 399.295666][ T62] bridge_slave_1: left promiscuous mode [ 399.301591][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.311527][ T62] bridge_slave_0: left allmulticast mode [ 399.317594][ T62] bridge_slave_0: left promiscuous mode [ 399.323323][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.659442][ T5139] Bluetooth: hci5: command 0x0405 tx timeout [ 399.710605][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.723678][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.737413][ T62] bond0 (unregistering): Released all slaves [ 400.022524][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3788'. [ 400.207063][T16761] netlink: 'syz.0.3792': attribute type 29 has an invalid length. [ 400.242738][T16761] netlink: 'syz.0.3792': attribute type 29 has an invalid length. [ 400.304160][T16761] netlink: 'syz.0.3792': attribute type 29 has an invalid length. [ 400.509572][T16769] netlink: 'syz.5.3794': attribute type 11 has an invalid length. [ 400.525387][ T62] hsr_slave_0: left promiscuous mode [ 400.544254][ T62] hsr_slave_1: left promiscuous mode [ 400.553264][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.574065][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.592573][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.605942][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.658464][ T62] veth1_macvtap: left promiscuous mode [ 400.674597][ T62] veth0_macvtap: left promiscuous mode [ 400.684535][ T62] veth1_vlan: left promiscuous mode [ 400.700938][ T62] veth0_vlan: left promiscuous mode [ 400.769783][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.789409][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.800865][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.810267][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.820166][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.309244][ T62] team0 (unregistering): Port device team_slave_1 removed [ 401.351854][ T62] team0 (unregistering): Port device team_slave_0 removed [ 402.054524][T16793] netlink: 'syz.2.3802': attribute type 4 has an invalid length. [ 402.132218][T16792] netlink: 'syz.0.3803': attribute type 4 has an invalid length. [ 402.297781][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.334235][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.375226][T16805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3806'. [ 402.402262][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.414337][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.433674][T16803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.486084][T16803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.566206][T16779] lo speed is unknown, defaulting to 1000 [ 402.849724][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3814'. [ 402.866484][ T5832] Bluetooth: hci3: command tx timeout [ 402.872832][T16827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3814'. [ 402.920400][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3814'. [ 402.947180][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3816'. [ 402.963859][T16827] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 402.993761][T16779] chnl_net:caif_netlink_parms(): no params data found [ 403.012532][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3814'. [ 403.115051][T16833] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 403.199870][T16826] mac80211_hwsim hwsim51 wlan1: left allmulticast mode [ 403.306718][T16779] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.314064][T16779] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.344505][T16779] bridge_slave_0: entered allmulticast mode [ 403.361212][T16854] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3823'. [ 403.368019][T16779] bridge_slave_0: entered promiscuous mode [ 403.393221][T16779] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.404587][T16779] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.413055][T16779] bridge_slave_1: entered allmulticast mode [ 403.427582][T16779] bridge_slave_1: entered promiscuous mode [ 403.509586][T16779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.525404][T16779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.621969][T16779] team0: Port device team_slave_0 added [ 403.642176][T16779] team0: Port device team_slave_1 added [ 403.690940][T16865] IPVS: length: 10 != 8 [ 403.695184][T16865] IPVS: length: 10 != 8 [ 403.760089][T16779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.778770][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.838525][T16779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.852805][T16874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3828'. [ 403.876597][T16779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.883609][T16779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.930859][T16779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.942896][T16875] FAULT_INJECTION: forcing a failure. [ 403.942896][T16875] name failslab, interval 1, probability 0, space 0, times 0 [ 403.956718][T16875] CPU: 0 UID: 0 PID: 16875 Comm: syz.2.3830 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 403.956749][T16875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 403.956763][T16875] Call Trace: [ 403.956771][T16875] [ 403.956781][T16875] dump_stack_lvl+0x189/0x250 [ 403.956819][T16875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.956849][T16875] ? __pfx__printk+0x10/0x10 [ 403.956877][T16875] ? __pfx___might_resched+0x10/0x10 [ 403.956908][T16875] ? fs_reclaim_acquire+0x7d/0x100 [ 403.956943][T16875] should_fail_ex+0x414/0x560 [ 403.956980][T16875] should_failslab+0xa8/0x100 [ 403.957010][T16875] __kmalloc_cache_noprof+0x70/0x3d0 [ 403.957035][T16875] ? cfg80211_set_encryption+0x143/0x15c0 [ 403.957065][T16875] cfg80211_set_encryption+0x143/0x15c0 [ 403.957108][T16875] cfg80211_wext_siwencodeext+0x62f/0x860 [ 403.957141][T16875] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 403.957177][T16875] ? rep_movs_alternative+0x4a/0x90 [ 403.957211][T16875] ioctl_standard_iw_point+0x686/0xd40 [ 403.957253][T16875] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 403.957287][T16875] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 403.957315][T16875] ? __pfx___mutex_lock+0x10/0x10 [ 403.957343][T16875] ? full_name_hash+0x92/0xe0 [ 403.957374][T16875] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 403.957398][T16875] ioctl_standard_call+0xaf/0x1b0 [ 403.957428][T16875] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 403.957449][T16875] wext_ioctl_dispatch+0xeb/0x410 [ 403.957472][T16875] ? __pfx_ioctl_standard_call+0x10/0x10 [ 403.957502][T16875] wext_handle_ioctl+0x100/0x1c0 [ 403.957531][T16875] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 403.957577][T16875] sock_ioctl+0x15f/0x790 [ 403.957607][T16875] ? __pfx_sock_ioctl+0x10/0x10 [ 403.957637][T16875] ? __fget_files+0x3a0/0x420 [ 403.957662][T16875] ? __fget_files+0x2a/0x420 [ 403.957692][T16875] ? bpf_lsm_file_ioctl+0x9/0x20 [ 403.957719][T16875] ? __pfx_sock_ioctl+0x10/0x10 [ 403.957744][T16875] __se_sys_ioctl+0xf9/0x170 [ 403.957769][T16875] do_syscall_64+0xf6/0x210 [ 403.957791][T16875] ? clear_bhb_loop+0x45/0xa0 [ 403.957818][T16875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.957838][T16875] RIP: 0033:0x7f89e018e969 [ 403.957858][T16875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.957876][T16875] RSP: 002b:00007f89e0f53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.957899][T16875] RAX: ffffffffffffffda RBX: 00007f89e03b5fa0 RCX: 00007f89e018e969 [ 403.957915][T16875] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 403.957929][T16875] RBP: 00007f89e0f53090 R08: 0000000000000000 R09: 0000000000000000 [ 403.957942][T16875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.957955][T16875] R13: 0000000000000000 R14: 00007f89e03b5fa0 R15: 00007ffe26dce848 [ 403.957990][T16875] [ 404.387298][T16883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3833'. [ 404.417075][T16779] hsr_slave_0: entered promiscuous mode [ 404.423872][T16779] hsr_slave_1: entered promiscuous mode [ 404.430853][T16779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.438726][T16779] Cannot create hsr debugfs directory [ 404.525705][T16889] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 404.562556][T16889] netlink: 'syz.5.3835': attribute type 10 has an invalid length. [ 404.596255][T16890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3832'. [ 404.662870][T16889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.693824][T16889] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 404.946953][ T5832] Bluetooth: hci3: command tx timeout [ 404.958563][T16901] tipc: Failed to obtain node identity [ 404.964164][T16901] tipc: Enabling of bearer rejected, failed to enable media [ 405.194211][T16915] FAULT_INJECTION: forcing a failure. [ 405.194211][T16915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.216216][T16915] CPU: 1 UID: 0 PID: 16915 Comm: syz.5.3843 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 405.216266][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.216289][T16915] Call Trace: [ 405.216298][T16915] [ 405.216307][T16915] dump_stack_lvl+0x189/0x250 [ 405.216341][T16915] ? __lock_acquire+0xaac/0xd20 [ 405.216373][T16915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.216403][T16915] ? __pfx__printk+0x10/0x10 [ 405.216424][T16915] ? __might_fault+0xb0/0x130 [ 405.216464][T16915] should_fail_ex+0x414/0x560 [ 405.216501][T16915] _copy_from_user+0x2d/0xb0 [ 405.216529][T16915] kstrtouint_from_user+0xc4/0x170 [ 405.216554][T16915] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 405.216596][T16915] proc_fail_nth_write+0x88/0x240 [ 405.216625][T16915] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.216661][T16915] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.216691][T16915] vfs_write+0x27b/0xa90 [ 405.216724][T16915] ? __pfx_vfs_write+0x10/0x10 [ 405.216749][T16915] ? __fget_files+0x2a/0x420 [ 405.216779][T16915] ? __fget_files+0x3a0/0x420 [ 405.216804][T16915] ? __fget_files+0x2a/0x420 [ 405.216839][T16915] ksys_write+0x145/0x250 [ 405.216861][T16915] ? rcu_is_watching+0x15/0xb0 [ 405.216893][T16915] ? __pfx_ksys_write+0x10/0x10 [ 405.216919][T16915] ? do_syscall_64+0xba/0x210 [ 405.216945][T16915] do_syscall_64+0xf6/0x210 [ 405.216966][T16915] ? clear_bhb_loop+0x45/0xa0 [ 405.216991][T16915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.217011][T16915] RIP: 0033:0x7f345bd8d41f [ 405.217030][T16915] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 405.217047][T16915] RSP: 002b:00007f345cbde030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 405.217069][T16915] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f345bd8d41f [ 405.217084][T16915] RDX: 0000000000000001 RSI: 00007f345cbde0a0 RDI: 0000000000000005 [ 405.217097][T16915] RBP: 00007f345cbde090 R08: 0000000000000000 R09: 0000000000000000 [ 405.217109][T16915] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 405.217122][T16915] R13: 0000000000000000 R14: 00007f345bfb5fa0 R15: 00007ffd5cc18ae8 [ 405.217174][T16915] [ 405.783562][T16779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 405.831621][T16939] FAULT_INJECTION: forcing a failure. [ 405.831621][T16939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.853540][T16779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 405.861036][T16939] CPU: 0 UID: 0 PID: 16939 Comm: syz.2.3850 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 405.861078][T16939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.861091][T16939] Call Trace: [ 405.861100][T16939] [ 405.861109][T16939] dump_stack_lvl+0x189/0x250 [ 405.861142][T16939] ? __lock_acquire+0xaac/0xd20 [ 405.861174][T16939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.861203][T16939] ? __pfx__printk+0x10/0x10 [ 405.861225][T16939] ? __might_fault+0xb0/0x130 [ 405.861264][T16939] should_fail_ex+0x414/0x560 [ 405.861301][T16939] _copy_from_user+0x2d/0xb0 [ 405.861330][T16939] ___sys_sendmsg+0x158/0x2a0 [ 405.861357][T16939] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.861419][T16939] ? __fget_files+0x2a/0x420 [ 405.861445][T16939] ? __fget_files+0x3a0/0x420 [ 405.861483][T16939] __sys_sendmmsg+0x227/0x430 [ 405.861512][T16939] ? __pfx___sys_sendmmsg+0x10/0x10 [ 405.861545][T16939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.861587][T16939] ? ksys_write+0x1f0/0x250 [ 405.861609][T16939] ? rcu_is_watching+0x15/0xb0 [ 405.861650][T16939] __x64_sys_sendmmsg+0xa0/0xc0 [ 405.861676][T16939] do_syscall_64+0xf6/0x210 [ 405.861699][T16939] ? clear_bhb_loop+0x45/0xa0 [ 405.861725][T16939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.861745][T16939] RIP: 0033:0x7f89e018e969 [ 405.861765][T16939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.861783][T16939] RSP: 002b:00007f89e0f53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 405.861806][T16939] RAX: ffffffffffffffda RBX: 00007f89e03b5fa0 RCX: 00007f89e018e969 [ 405.861822][T16939] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 405.861837][T16939] RBP: 00007f89e0f53090 R08: 0000000000000000 R09: 0000000000000000 [ 405.861851][T16939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.861863][T16939] R13: 0000000000000000 R14: 00007f89e03b5fa0 R15: 00007ffe26dce848 [ 405.861896][T16939] [ 406.114962][T16779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.144745][T16947] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 406.155461][T16779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.577714][T16967] tipc: Invalid UDP bearer configuration [ 406.577776][T16967] tipc: Enabling of bearer rejected, failed to enable media [ 406.685585][T16779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.719628][T16779] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.748651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.755940][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.791924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.799185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.028783][ T5832] Bluetooth: hci3: command tx timeout [ 407.098715][T16779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.353090][T16996] netlink: 'syz.1.3870': attribute type 1 has an invalid length. [ 407.373372][T16999] netlink: 'syz.2.3871': attribute type 33 has an invalid length. [ 407.396157][T16999] __nla_validate_parse: 4 callbacks suppressed [ 407.396176][T16999] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3871'. [ 407.400274][T16997] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3870'. [ 407.453155][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3871'. [ 407.507231][T17007] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 407.831085][T16779] veth0_vlan: entered promiscuous mode [ 407.870043][T16779] veth1_vlan: entered promiscuous mode [ 407.939126][T17030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3879'. [ 407.961895][T16779] veth0_macvtap: entered promiscuous mode [ 408.011912][T16779] veth1_macvtap: entered promiscuous mode [ 408.052109][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.098542][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.115306][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.149207][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.169886][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.196155][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.224845][T16779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.263411][T17040] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3884'. [ 408.308576][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.343602][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.369727][T16779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.401656][T16779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.424577][T16779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.448224][T16779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.457614][T16779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.467274][T16779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.468557][T17054] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3887'. [ 408.479032][T16779] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.692898][T17062] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 408.726226][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.748081][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.822300][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.845185][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.914199][T17072] netlink: 'syz.0.3894': attribute type 5 has an invalid length. [ 408.926076][T17072] netlink: 'syz.0.3894': attribute type 11 has an invalid length. [ 409.116477][ T5139] Bluetooth: hci3: command tx timeout [ 409.161265][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3896'. [ 409.483954][T17097] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3902'. [ 409.970655][T17122] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20001 [ 410.012605][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3912'. [ 410.104358][T17130] netlink: 'syz.5.3916': attribute type 1 has an invalid length. [ 410.122421][T17130] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3916'. [ 410.239803][T17138] FAULT_INJECTION: forcing a failure. [ 410.239803][T17138] name failslab, interval 1, probability 0, space 0, times 0 [ 410.253446][T17138] CPU: 1 UID: 0 PID: 17138 Comm: syz.5.3920 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 410.253476][T17138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 410.253490][T17138] Call Trace: [ 410.253499][T17138] [ 410.253508][T17138] dump_stack_lvl+0x189/0x250 [ 410.253549][T17138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.253579][T17138] ? __pfx__printk+0x10/0x10 [ 410.253608][T17138] ? ref_tracker_alloc+0x318/0x460 [ 410.253632][T17138] should_fail_ex+0x414/0x560 [ 410.253677][T17138] should_failslab+0xa8/0x100 [ 410.253706][T17138] kmem_cache_alloc_noprof+0x73/0x3c0 [ 410.253730][T17138] ? skb_clone+0x212/0x3a0 [ 410.253759][T17138] skb_clone+0x212/0x3a0 [ 410.253786][T17138] __netlink_deliver_tap+0x404/0x850 [ 410.253831][T17138] ? netlink_deliver_tap+0x2e/0x1b0 [ 410.253863][T17138] netlink_deliver_tap+0x19c/0x1b0 [ 410.253895][T17138] netlink_unicast+0x72f/0x8d0 [ 410.253935][T17138] netlink_sendmsg+0x805/0xb30 [ 410.253977][T17138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.254011][T17138] ? aa_sock_msg_perm+0x94/0x160 [ 410.254039][T17138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.254063][T17138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.254095][T17138] __sock_sendmsg+0x219/0x270 [ 410.254127][T17138] ____sys_sendmsg+0x52d/0x830 [ 410.254156][T17138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.254188][T17138] ? import_iovec+0x74/0xa0 [ 410.254217][T17138] ___sys_sendmsg+0x21f/0x2a0 [ 410.254243][T17138] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.254311][T17138] ? __fget_files+0x2a/0x420 [ 410.254338][T17138] ? __fget_files+0x3a0/0x420 [ 410.254376][T17138] __sys_sendmmsg+0x227/0x430 [ 410.254405][T17138] ? __pfx___sys_sendmmsg+0x10/0x10 [ 410.254439][T17138] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 410.254481][T17138] ? ksys_write+0x1f0/0x250 [ 410.254502][T17138] ? rcu_is_watching+0x15/0xb0 [ 410.254544][T17138] __x64_sys_sendmmsg+0xa0/0xc0 [ 410.254569][T17138] do_syscall_64+0xf6/0x210 [ 410.254592][T17138] ? clear_bhb_loop+0x45/0xa0 [ 410.254617][T17138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.254637][T17138] RIP: 0033:0x7f345bd8e969 [ 410.254652][T17138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.254673][T17138] RSP: 002b:00007f345cbde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 410.254692][T17138] RAX: ffffffffffffffda RBX: 00007f345bfb5fa0 RCX: 00007f345bd8e969 [ 410.254704][T17138] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 410.254716][T17138] RBP: 00007f345cbde090 R08: 0000000000000000 R09: 0000000000000000 [ 410.254726][T17138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.254736][T17138] R13: 0000000000000000 R14: 00007f345bfb5fa0 R15: 00007ffd5cc18ae8 [ 410.254762][T17138] [ 410.543578][T17138] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.553018][T17138] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.561821][T17138] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.570613][T17138] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.580429][T17138] vxlan0: entered promiscuous mode [ 410.585601][T17138] vxlan0: entered allmulticast mode [ 411.006289][T17166] ieee802154 phy0 wpan0: encryption failed: -22 [ 411.343635][T17184] nbd: illegal input index 61504 [ 411.466368][T17195] netlink: 'syz.1.3943': attribute type 1 has an invalid length. [ 411.491266][T17195] netlink: 'syz.1.3943': attribute type 2 has an invalid length. [ 411.602207][T17203] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 411.713600][T17207] tipc: Enabling of bearer rejected, failed to enable media [ 412.185101][T17237] netlink: 'syz.2.3961': attribute type 1 has an invalid length. [ 412.578042][T17258] __nla_validate_parse: 12 callbacks suppressed [ 412.578063][T17258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3969'. [ 413.188371][T17291] vlan2: entered allmulticast mode [ 413.203026][T17291] batadv0: entered allmulticast mode [ 413.380434][T17307] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3985'. [ 413.408185][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3982'. [ 414.072447][T17339] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3999'. [ 414.091353][T17336] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3999'. [ 414.224689][T17348] FAULT_INJECTION: forcing a failure. [ 414.224689][T17348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.241027][T17348] CPU: 0 UID: 0 PID: 17348 Comm: syz.0.4001 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 414.241059][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 414.241073][T17348] Call Trace: [ 414.241082][T17348] [ 414.241091][T17348] dump_stack_lvl+0x189/0x250 [ 414.241125][T17348] ? __lock_acquire+0xaac/0xd20 [ 414.241156][T17348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.241186][T17348] ? __pfx__printk+0x10/0x10 [ 414.241207][T17348] ? __might_fault+0xb0/0x130 [ 414.241246][T17348] should_fail_ex+0x414/0x560 [ 414.241282][T17348] _copy_from_iter+0x1db/0x15a0 [ 414.241314][T17348] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 414.241337][T17348] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 414.241365][T17348] ? __pfx__copy_from_iter+0x10/0x10 [ 414.241390][T17348] ? __build_skb_around+0x257/0x3e0 [ 414.241416][T17348] ? netlink_sendmsg+0x642/0xb30 [ 414.241444][T17348] ? skb_put+0x11b/0x210 [ 414.241468][T17348] netlink_sendmsg+0x6b2/0xb30 [ 414.241509][T17348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.241552][T17348] ? aa_sock_msg_perm+0x94/0x160 [ 414.241575][T17348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.241599][T17348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.241630][T17348] __sock_sendmsg+0x219/0x270 [ 414.241662][T17348] ____sys_sendmsg+0x505/0x830 [ 414.241691][T17348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.241724][T17348] ? import_iovec+0x74/0xa0 [ 414.241754][T17348] ___sys_sendmsg+0x21f/0x2a0 [ 414.241779][T17348] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.241842][T17348] ? __fget_files+0x2a/0x420 [ 414.241867][T17348] ? __fget_files+0x3a0/0x420 [ 414.241905][T17348] __x64_sys_sendmsg+0x19b/0x260 [ 414.241931][T17348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.241973][T17348] ? do_syscall_64+0xba/0x210 [ 414.241998][T17348] do_syscall_64+0xf6/0x210 [ 414.242021][T17348] ? clear_bhb_loop+0x45/0xa0 [ 414.242047][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.242067][T17348] RIP: 0033:0x7fb6bcf8e969 [ 414.242085][T17348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.242103][T17348] RSP: 002b:00007fb6bdd2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.242125][T17348] RAX: ffffffffffffffda RBX: 00007fb6bd1b5fa0 RCX: 00007fb6bcf8e969 [ 414.242142][T17348] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 414.242155][T17348] RBP: 00007fb6bdd2d090 R08: 0000000000000000 R09: 0000000000000000 [ 414.242168][T17348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.242181][T17348] R13: 0000000000000000 R14: 00007fb6bd1b5fa0 R15: 00007fffc7886648 [ 414.242214][T17348] [ 414.710856][T17358] FAULT_INJECTION: forcing a failure. [ 414.710856][T17358] name failslab, interval 1, probability 0, space 0, times 0 [ 414.731985][T17358] CPU: 1 UID: 0 PID: 17358 Comm: syz.1.4007 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 414.732017][T17358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 414.732031][T17358] Call Trace: [ 414.732040][T17358] [ 414.732050][T17358] dump_stack_lvl+0x189/0x250 [ 414.732089][T17358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.732119][T17358] ? __pfx__printk+0x10/0x10 [ 414.732144][T17358] ? __pfx___might_resched+0x10/0x10 [ 414.732176][T17358] ? fs_reclaim_acquire+0x7d/0x100 [ 414.732212][T17358] should_fail_ex+0x414/0x560 [ 414.732250][T17358] should_failslab+0xa8/0x100 [ 414.732287][T17358] __kmalloc_noprof+0xcb/0x4f0 [ 414.732311][T17358] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.732342][T17358] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 414.732374][T17358] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 414.732408][T17358] genl_family_rcv_msg_doit+0xb8/0x300 [ 414.732441][T17358] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 414.732469][T17358] ? rcu_is_watching+0x15/0xb0 [ 414.732503][T17358] ? apparmor_capable+0x137/0x1b0 [ 414.732533][T17358] ? bpf_lsm_capable+0x9/0x20 [ 414.732561][T17358] ? security_capable+0x7e/0x2e0 [ 414.732589][T17358] genl_rcv_msg+0x60e/0x790 [ 414.732620][T17358] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.732643][T17358] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 414.732671][T17358] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 414.732695][T17358] ? __pfx_nl80211_post_doit+0x10/0x10 [ 414.732727][T17358] ? ref_tracker_free+0x63a/0x7d0 [ 414.732745][T17358] ? __copy_skb_header+0xa7/0x550 [ 414.732780][T17358] netlink_rcv_skb+0x219/0x490 [ 414.732811][T17358] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.732837][T17358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.732894][T17358] ? down_read+0x1ad/0x2e0 [ 414.732924][T17358] genl_rcv+0x28/0x40 [ 414.732945][T17358] netlink_unicast+0x758/0x8d0 [ 414.732985][T17358] netlink_sendmsg+0x805/0xb30 [ 414.733027][T17358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.733062][T17358] ? aa_sock_msg_perm+0x94/0x160 [ 414.733085][T17358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.733108][T17358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.733140][T17358] __sock_sendmsg+0x219/0x270 [ 414.733172][T17358] ____sys_sendmsg+0x505/0x830 [ 414.733201][T17358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.733235][T17358] ? import_iovec+0x74/0xa0 [ 414.733275][T17358] ___sys_sendmsg+0x21f/0x2a0 [ 414.733301][T17358] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.733365][T17358] ? __fget_files+0x2a/0x420 [ 414.733391][T17358] ? __fget_files+0x3a0/0x420 [ 414.733430][T17358] __x64_sys_sendmsg+0x19b/0x260 [ 414.733456][T17358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.733498][T17358] ? do_syscall_64+0xba/0x210 [ 414.733524][T17358] do_syscall_64+0xf6/0x210 [ 414.733546][T17358] ? clear_bhb_loop+0x45/0xa0 [ 414.733572][T17358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.733593][T17358] RIP: 0033:0x7fa82758e969 [ 414.733613][T17358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.733631][T17358] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.733653][T17358] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 414.733669][T17358] RDX: 0000000000000808 RSI: 0000200000000080 RDI: 0000000000000003 [ 414.733683][T17358] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.733696][T17358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.733708][T17358] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 414.733742][T17358] [ 415.623162][T17390] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 415.741193][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4022'. [ 415.760002][T17397] FAULT_INJECTION: forcing a failure. [ 415.760002][T17397] name failslab, interval 1, probability 0, space 0, times 0 [ 415.774888][T17397] CPU: 1 UID: 0 PID: 17397 Comm: syz.1.4022 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 415.774919][T17397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 415.774933][T17397] Call Trace: [ 415.774942][T17397] [ 415.774952][T17397] dump_stack_lvl+0x189/0x250 [ 415.774992][T17397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.775023][T17397] ? __pfx__printk+0x10/0x10 [ 415.775052][T17397] ? __pfx___might_resched+0x10/0x10 [ 415.775084][T17397] ? fs_reclaim_acquire+0x7d/0x100 [ 415.775121][T17397] should_fail_ex+0x414/0x560 [ 415.775163][T17397] should_failslab+0xa8/0x100 [ 415.775193][T17397] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 415.775220][T17397] ? __alloc_skb+0x112/0x2d0 [ 415.775260][T17397] __alloc_skb+0x112/0x2d0 [ 415.775285][T17397] netlink_ack+0x146/0xa50 [ 415.775312][T17397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.775335][T17397] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 415.775365][T17397] ? __pfx_nl80211_post_doit+0x10/0x10 [ 415.775397][T17397] ? ref_tracker_free+0x63a/0x7d0 [ 415.775415][T17397] ? __copy_skb_header+0xa7/0x550 [ 415.775449][T17397] netlink_rcv_skb+0x2a0/0x490 [ 415.775481][T17397] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.775507][T17397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.775565][T17397] ? down_read+0x1ad/0x2e0 [ 415.775590][T17397] genl_rcv+0x28/0x40 [ 415.775611][T17397] netlink_unicast+0x758/0x8d0 [ 415.775652][T17397] netlink_sendmsg+0x805/0xb30 [ 415.775693][T17397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.775726][T17397] ? aa_sock_msg_perm+0x94/0x160 [ 415.775749][T17397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.775771][T17397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.775802][T17397] __sock_sendmsg+0x219/0x270 [ 415.775834][T17397] ____sys_sendmsg+0x505/0x830 [ 415.775862][T17397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.775895][T17397] ? import_iovec+0x74/0xa0 [ 415.775924][T17397] ___sys_sendmsg+0x21f/0x2a0 [ 415.775948][T17397] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.776010][T17397] ? __fget_files+0x2a/0x420 [ 415.776035][T17397] ? __fget_files+0x3a0/0x420 [ 415.776074][T17397] __x64_sys_sendmsg+0x19b/0x260 [ 415.776100][T17397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.776142][T17397] ? do_syscall_64+0xba/0x210 [ 415.776168][T17397] do_syscall_64+0xf6/0x210 [ 415.776190][T17397] ? clear_bhb_loop+0x45/0xa0 [ 415.776217][T17397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.776244][T17397] RIP: 0033:0x7fa82758e969 [ 415.776263][T17397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.776281][T17397] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.776304][T17397] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 415.776319][T17397] RDX: 0000000000000808 RSI: 0000200000000080 RDI: 0000000000000003 [ 415.776333][T17397] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 415.776346][T17397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.776359][T17397] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 415.776394][T17397] [ 416.477926][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 416.495677][T17418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.508674][T17418] netlink: 'syz.0.4030': attribute type 1 has an invalid length. [ 416.516898][T17418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4030'. [ 416.618353][T17424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4033'. [ 417.117308][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'. [ 417.713093][T17485] netlink: 'syz.0.4057': attribute type 3 has an invalid length. [ 417.726372][T17490] __nla_validate_parse: 2 callbacks suppressed [ 417.726396][T17490] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4059'. [ 417.746299][T17485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4057'. [ 417.778091][T17492] netlink: 'syz.0.4057': attribute type 3 has an invalid length. [ 417.788359][T17492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4057'. [ 417.935306][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4064'. [ 417.958960][T17504] FAULT_INJECTION: forcing a failure. [ 417.958960][T17504] name failslab, interval 1, probability 0, space 0, times 0 [ 417.994351][T17504] CPU: 1 UID: 0 PID: 17504 Comm: syz.1.4064 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 417.994385][T17504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 417.994399][T17504] Call Trace: [ 417.994409][T17504] [ 417.994419][T17504] dump_stack_lvl+0x189/0x250 [ 417.994458][T17504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.994488][T17504] ? __pfx__printk+0x10/0x10 [ 417.994506][T17504] ? __lock_acquire+0xaac/0xd20 [ 417.994553][T17504] should_fail_ex+0x414/0x560 [ 417.994591][T17504] should_failslab+0xa8/0x100 [ 417.994621][T17504] kmem_cache_alloc_noprof+0x73/0x3c0 [ 417.994647][T17504] ? skb_clone+0x212/0x3a0 [ 417.994676][T17504] skb_clone+0x212/0x3a0 [ 417.994704][T17504] __netlink_deliver_tap+0x404/0x850 [ 417.994751][T17504] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.994783][T17504] netlink_deliver_tap+0x19c/0x1b0 [ 417.994815][T17504] netlink_sendskb+0x68/0x140 [ 417.994846][T17504] netlink_rcv_skb+0x2a0/0x490 [ 417.994878][T17504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.994904][T17504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.994963][T17504] ? down_read+0x1ad/0x2e0 [ 417.994988][T17504] genl_rcv+0x28/0x40 [ 417.995008][T17504] netlink_unicast+0x758/0x8d0 [ 417.995045][T17504] netlink_sendmsg+0x805/0xb30 [ 417.995084][T17504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.995119][T17504] ? aa_sock_msg_perm+0x94/0x160 [ 417.995140][T17504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.995162][T17504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.995191][T17504] __sock_sendmsg+0x219/0x270 [ 417.995228][T17504] ____sys_sendmsg+0x505/0x830 [ 417.995256][T17504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.995287][T17504] ? import_iovec+0x74/0xa0 [ 417.995322][T17504] ___sys_sendmsg+0x21f/0x2a0 [ 417.995347][T17504] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.995407][T17504] ? __fget_files+0x2a/0x420 [ 417.995433][T17504] ? __fget_files+0x3a0/0x420 [ 417.995470][T17504] __x64_sys_sendmsg+0x19b/0x260 [ 417.995497][T17504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.995540][T17504] ? do_syscall_64+0xba/0x210 [ 417.995565][T17504] do_syscall_64+0xf6/0x210 [ 417.995586][T17504] ? clear_bhb_loop+0x45/0xa0 [ 417.995612][T17504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.995631][T17504] RIP: 0033:0x7fa82758e969 [ 417.995649][T17504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.995667][T17504] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.995699][T17504] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 417.995714][T17504] RDX: 0000000000000808 RSI: 0000200000000080 RDI: 0000000000000003 [ 417.995727][T17504] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 417.995740][T17504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.995752][T17504] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 417.995785][T17504] [ 418.010732][T17506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4065'. [ 418.279152][T17512] FAULT_INJECTION: forcing a failure. [ 418.279152][T17512] name failslab, interval 1, probability 0, space 0, times 0 [ 418.330442][T17512] CPU: 0 UID: 0 PID: 17512 Comm: syz.1.4068 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 418.330476][T17512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 418.330489][T17512] Call Trace: [ 418.330499][T17512] [ 418.330509][T17512] dump_stack_lvl+0x189/0x250 [ 418.330548][T17512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.330578][T17512] ? __pfx__printk+0x10/0x10 [ 418.330603][T17512] ? __pfx___might_resched+0x10/0x10 [ 418.330635][T17512] ? fs_reclaim_acquire+0x7d/0x100 [ 418.330671][T17512] should_fail_ex+0x414/0x560 [ 418.330709][T17512] should_failslab+0xa8/0x100 [ 418.330738][T17512] __kmalloc_cache_noprof+0x70/0x3d0 [ 418.330763][T17512] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 418.330787][T17512] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 418.330812][T17512] alloc_netdev_mqs+0xbd5/0x11e0 [ 418.330844][T17512] rtnl_create_link+0x31f/0xd10 [ 418.330877][T17512] rtnl_newlink_create+0x258/0xaf0 [ 418.330906][T17512] ? __pfx_aa_get_newest_label+0x10/0x10 [ 418.330931][T17512] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 418.330949][T17512] ? rtnl_newlink+0x8db/0x1c70 [ 418.330982][T17512] ? __pfx___mutex_lock+0x10/0x10 [ 418.331015][T17512] ? ns_capable+0x8a/0xf0 [ 418.331039][T17512] rtnl_newlink+0x16d6/0x1c70 [ 418.331071][T17512] ? kasan_save_track+0x3e/0x80 [ 418.331108][T17512] ? __pfx_rtnl_newlink+0x10/0x10 [ 418.331173][T17512] ? kasan_quarantine_put+0xdd/0x220 [ 418.331205][T17512] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.331244][T17512] ? nlmon_xmit+0xb0/0x100 [ 418.331268][T17512] ? kmem_cache_free+0x192/0x3f0 [ 418.331301][T17512] ? __local_bh_enable_ip+0x12d/0x1c0 [ 418.331333][T17512] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.331366][T17512] ? __local_bh_enable_ip+0x12d/0x1c0 [ 418.331397][T17512] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 418.331438][T17512] ? aa_get_newest_label+0xf7/0x5d0 [ 418.331462][T17512] ? __lock_acquire+0xaac/0xd20 [ 418.331518][T17512] ? __pfx_rtnl_newlink+0x10/0x10 [ 418.331547][T17512] rtnetlink_rcv_msg+0x7cc/0xb70 [ 418.331582][T17512] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 418.331611][T17512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.331646][T17512] ? ref_tracker_free+0x63a/0x7d0 [ 418.331664][T17512] ? __copy_skb_header+0xa7/0x550 [ 418.331698][T17512] netlink_rcv_skb+0x219/0x490 [ 418.331730][T17512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.331762][T17512] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.331814][T17512] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.331845][T17512] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.331882][T17512] netlink_unicast+0x758/0x8d0 [ 418.331923][T17512] netlink_sendmsg+0x805/0xb30 [ 418.331965][T17512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.332001][T17512] ? aa_sock_msg_perm+0x94/0x160 [ 418.332023][T17512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.332046][T17512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.332079][T17512] __sock_sendmsg+0x219/0x270 [ 418.332110][T17512] ____sys_sendmsg+0x52d/0x830 [ 418.332141][T17512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.332174][T17512] ? import_iovec+0x74/0xa0 [ 418.332210][T17512] ___sys_sendmsg+0x21f/0x2a0 [ 418.332236][T17512] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.332302][T17512] ? __fget_files+0x2a/0x420 [ 418.332329][T17512] ? __fget_files+0x3a0/0x420 [ 418.332367][T17512] __sys_sendmmsg+0x227/0x430 [ 418.332396][T17512] ? __pfx___sys_sendmmsg+0x10/0x10 [ 418.332428][T17512] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 418.332470][T17512] ? ksys_write+0x1f0/0x250 [ 418.332492][T17512] ? rcu_is_watching+0x15/0xb0 [ 418.332535][T17512] __x64_sys_sendmmsg+0xa0/0xc0 [ 418.332560][T17512] do_syscall_64+0xf6/0x210 [ 418.332583][T17512] ? clear_bhb_loop+0x45/0xa0 [ 418.332609][T17512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.332629][T17512] RIP: 0033:0x7fa82758e969 [ 418.332649][T17512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.332667][T17512] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 418.332690][T17512] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 418.332705][T17512] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 418.332719][T17512] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.332733][T17512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.332746][T17512] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 418.332780][T17512] [ 418.847867][T17520] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4070'. [ 418.868345][T17523] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4071'. [ 418.879935][T17518] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4071'. [ 418.924821][T17526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4073'. [ 419.074379][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 419.091575][T17530] nbd: nbd0 already in use [ 419.127835][T17536] FAULT_INJECTION: forcing a failure. [ 419.127835][T17536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.141184][T17536] CPU: 0 UID: 0 PID: 17536 Comm: syz.5.4078 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 419.141211][T17536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 419.141224][T17536] Call Trace: [ 419.141232][T17536] [ 419.141242][T17536] dump_stack_lvl+0x189/0x250 [ 419.141281][T17536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.141311][T17536] ? __pfx__printk+0x10/0x10 [ 419.141344][T17536] should_fail_ex+0x414/0x560 [ 419.141380][T17536] _copy_to_user+0x31/0xb0 [ 419.141409][T17536] simple_read_from_buffer+0xe1/0x170 [ 419.141439][T17536] proc_fail_nth_read+0x1df/0x250 [ 419.141471][T17536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.141503][T17536] ? rw_verify_area+0x258/0x650 [ 419.141525][T17536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.141556][T17536] vfs_read+0x1fd/0x980 [ 419.141584][T17536] ? __pfx___mutex_lock+0x10/0x10 [ 419.141606][T17536] ? __pfx_vfs_read+0x10/0x10 [ 419.141631][T17536] ? __fget_files+0x2a/0x420 [ 419.141663][T17536] ? __fget_files+0x3a0/0x420 [ 419.141687][T17536] ? __fget_files+0x2a/0x420 [ 419.141724][T17536] ksys_read+0x145/0x250 [ 419.141749][T17536] ? __pfx_ksys_read+0x10/0x10 [ 419.141777][T17536] ? do_syscall_64+0xba/0x210 [ 419.141802][T17536] do_syscall_64+0xf6/0x210 [ 419.141824][T17536] ? clear_bhb_loop+0x45/0xa0 [ 419.141850][T17536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.141871][T17536] RIP: 0033:0x7f345bd8d37c [ 419.141889][T17536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 419.141908][T17536] RSP: 002b:00007f345cbde030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.141929][T17536] RAX: ffffffffffffffda RBX: 00007f345bfb5fa0 RCX: 00007f345bd8d37c [ 419.141944][T17536] RDX: 000000000000000f RSI: 00007f345cbde0a0 RDI: 0000000000000004 [ 419.141957][T17536] RBP: 00007f345cbde090 R08: 0000000000000000 R09: 0000000000000000 [ 419.141971][T17536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.141983][T17536] R13: 0000000000000000 R14: 00007f345bfb5fa0 R15: 00007ffd5cc18ae8 [ 419.142016][T17536] [ 419.572529][T17548] FAULT_INJECTION: forcing a failure. [ 419.572529][T17548] name failslab, interval 1, probability 0, space 0, times 0 [ 419.589630][T17548] CPU: 1 UID: 0 PID: 17548 Comm: syz.1.4083 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 419.589662][T17548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 419.589676][T17548] Call Trace: [ 419.589684][T17548] [ 419.589694][T17548] dump_stack_lvl+0x189/0x250 [ 419.589734][T17548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.589762][T17548] ? __pfx__printk+0x10/0x10 [ 419.589786][T17548] ? __pfx___might_resched+0x10/0x10 [ 419.589819][T17548] ? fs_reclaim_acquire+0x7d/0x100 [ 419.589855][T17548] should_fail_ex+0x414/0x560 [ 419.589900][T17548] should_failslab+0xa8/0x100 [ 419.589929][T17548] __kmalloc_cache_noprof+0x70/0x3d0 [ 419.589954][T17548] ? alloc_netdev_mqs+0xc36/0x11e0 [ 419.589986][T17548] alloc_netdev_mqs+0xc36/0x11e0 [ 419.590020][T17548] rtnl_create_link+0x31f/0xd10 [ 419.590053][T17548] rtnl_newlink_create+0x258/0xaf0 [ 419.590081][T17548] ? __pfx_aa_get_newest_label+0x10/0x10 [ 419.590107][T17548] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 419.590126][T17548] ? rtnl_newlink+0x8db/0x1c70 [ 419.590159][T17548] ? __pfx___mutex_lock+0x10/0x10 [ 419.590193][T17548] ? ns_capable+0x8a/0xf0 [ 419.590217][T17548] rtnl_newlink+0x16d6/0x1c70 [ 419.590249][T17548] ? kasan_save_track+0x3e/0x80 [ 419.590285][T17548] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.590351][T17548] ? kasan_quarantine_put+0xdd/0x220 [ 419.590373][T17548] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.590413][T17548] ? nlmon_xmit+0xb0/0x100 [ 419.590437][T17548] ? kmem_cache_free+0x192/0x3f0 [ 419.590471][T17548] ? __local_bh_enable_ip+0x12d/0x1c0 [ 419.590503][T17548] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.590536][T17548] ? __local_bh_enable_ip+0x12d/0x1c0 [ 419.590568][T17548] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 419.590609][T17548] ? aa_get_newest_label+0xf7/0x5d0 [ 419.590634][T17548] ? __lock_acquire+0xaac/0xd20 [ 419.590690][T17548] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.590719][T17548] rtnetlink_rcv_msg+0x7cc/0xb70 [ 419.590754][T17548] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 419.590783][T17548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.590817][T17548] ? ref_tracker_free+0x63a/0x7d0 [ 419.590835][T17548] ? __copy_skb_header+0xa7/0x550 [ 419.590869][T17548] netlink_rcv_skb+0x219/0x490 [ 419.590907][T17548] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.590939][T17548] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.590992][T17548] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.591022][T17548] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.591059][T17548] netlink_unicast+0x758/0x8d0 [ 419.591100][T17548] netlink_sendmsg+0x805/0xb30 [ 419.591143][T17548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.591178][T17548] ? aa_sock_msg_perm+0x94/0x160 [ 419.591201][T17548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.591224][T17548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.591256][T17548] __sock_sendmsg+0x219/0x270 [ 419.591288][T17548] ____sys_sendmsg+0x52d/0x830 [ 419.591317][T17548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.591351][T17548] ? import_iovec+0x74/0xa0 [ 419.591382][T17548] ___sys_sendmsg+0x21f/0x2a0 [ 419.591407][T17548] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.591473][T17548] ? __fget_files+0x2a/0x420 [ 419.591498][T17548] ? __fget_files+0x3a0/0x420 [ 419.591537][T17548] __sys_sendmmsg+0x227/0x430 [ 419.591566][T17548] ? __pfx___sys_sendmmsg+0x10/0x10 [ 419.591599][T17548] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 419.591641][T17548] ? ksys_write+0x1f0/0x250 [ 419.591663][T17548] ? rcu_is_watching+0x15/0xb0 [ 419.591706][T17548] __x64_sys_sendmmsg+0xa0/0xc0 [ 419.591731][T17548] do_syscall_64+0xf6/0x210 [ 419.591754][T17548] ? clear_bhb_loop+0x45/0xa0 [ 419.591780][T17548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.591800][T17548] RIP: 0033:0x7fa82758e969 [ 419.591820][T17548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.591837][T17548] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.591861][T17548] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 419.591877][T17548] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 419.591898][T17548] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.591911][T17548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.591924][T17548] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 419.591959][T17548] [ 420.208095][T17554] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 420.417851][T17567] FAULT_INJECTION: forcing a failure. [ 420.417851][T17567] name failslab, interval 1, probability 0, space 0, times 0 [ 420.496736][T17567] CPU: 0 UID: 0 PID: 17567 Comm: syz.2.4092 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 420.496770][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 420.496785][T17567] Call Trace: [ 420.496800][T17567] [ 420.496811][T17567] dump_stack_lvl+0x189/0x250 [ 420.496851][T17567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.496881][T17567] ? __pfx__printk+0x10/0x10 [ 420.496909][T17567] ? __pfx___might_resched+0x10/0x10 [ 420.496941][T17567] ? fs_reclaim_acquire+0x7d/0x100 [ 420.496977][T17567] should_fail_ex+0x414/0x560 [ 420.497014][T17567] should_failslab+0xa8/0x100 [ 420.497044][T17567] __kmalloc_cache_noprof+0x70/0x3d0 [ 420.497070][T17567] ? rtnl_newlink+0xed/0x1c70 [ 420.497106][T17567] rtnl_newlink+0xed/0x1c70 [ 420.497146][T17567] ? __lock_acquire+0xaac/0xd20 [ 420.497175][T17567] ? __pfx_rtnl_newlink+0x10/0x10 [ 420.497215][T17567] ? __lock_acquire+0xaac/0xd20 [ 420.497247][T17567] ? __lock_acquire+0xaac/0xd20 [ 420.497289][T17567] ? __lock_acquire+0xaac/0xd20 [ 420.497336][T17567] ? is_bpf_text_address+0x26/0x2b0 [ 420.497371][T17567] ? is_bpf_text_address+0x292/0x2b0 [ 420.497398][T17567] ? is_bpf_text_address+0x26/0x2b0 [ 420.497433][T17567] ? aa_get_newest_label+0xf7/0x5d0 [ 420.497458][T17567] ? __lock_acquire+0xaac/0xd20 [ 420.497511][T17567] ? __pfx_rtnl_newlink+0x10/0x10 [ 420.497539][T17567] rtnetlink_rcv_msg+0x7cc/0xb70 [ 420.497568][T17567] ? kasan_save_track+0x4f/0x80 [ 420.497593][T17567] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 420.497622][T17567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.497653][T17567] ? __lock_acquire+0xaac/0xd20 [ 420.497695][T17567] netlink_rcv_skb+0x219/0x490 [ 420.497726][T17567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 420.497763][T17567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.497821][T17567] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.497851][T17567] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.497887][T17567] netlink_unicast+0x758/0x8d0 [ 420.497927][T17567] netlink_sendmsg+0x805/0xb30 [ 420.497969][T17567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.498003][T17567] ? aa_sock_msg_perm+0x94/0x160 [ 420.498026][T17567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.498049][T17567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.498082][T17567] __sock_sendmsg+0x219/0x270 [ 420.498113][T17567] ____sys_sendmsg+0x52d/0x830 [ 420.498142][T17567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.498174][T17567] ? import_iovec+0x74/0xa0 [ 420.498204][T17567] ___sys_sendmsg+0x21f/0x2a0 [ 420.498229][T17567] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.498291][T17567] ? __fget_files+0x2a/0x420 [ 420.498316][T17567] ? __fget_files+0x3a0/0x420 [ 420.498353][T17567] __sys_sendmmsg+0x227/0x430 [ 420.498381][T17567] ? __pfx___sys_sendmmsg+0x10/0x10 [ 420.498414][T17567] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 420.498455][T17567] ? ksys_write+0x1f0/0x250 [ 420.498476][T17567] ? rcu_is_watching+0x15/0xb0 [ 420.498517][T17567] __x64_sys_sendmmsg+0xa0/0xc0 [ 420.498541][T17567] do_syscall_64+0xf6/0x210 [ 420.498564][T17567] ? clear_bhb_loop+0x45/0xa0 [ 420.498589][T17567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.498610][T17567] RIP: 0033:0x7f89e018e969 [ 420.498628][T17567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.498647][T17567] RSP: 002b:00007f89e0f53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.498670][T17567] RAX: ffffffffffffffda RBX: 00007f89e03b5fa0 RCX: 00007f89e018e969 [ 420.498686][T17567] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 420.498701][T17567] RBP: 00007f89e0f53090 R08: 0000000000000000 R09: 0000000000000000 [ 420.498714][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.498727][T17567] R13: 0000000000000000 R14: 00007f89e03b5fa0 R15: 00007ffe26dce848 [ 420.498760][T17567] [ 421.407109][T17603] FAULT_INJECTION: forcing a failure. [ 421.407109][T17603] name failslab, interval 1, probability 0, space 0, times 0 [ 421.431614][T17603] CPU: 0 UID: 0 PID: 17603 Comm: syz.2.4108 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 421.431647][T17603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 421.431662][T17603] Call Trace: [ 421.431671][T17603] [ 421.431682][T17603] dump_stack_lvl+0x189/0x250 [ 421.431721][T17603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.431751][T17603] ? __pfx__printk+0x10/0x10 [ 421.431779][T17603] ? __pfx___might_resched+0x10/0x10 [ 421.431810][T17603] ? fs_reclaim_acquire+0x7d/0x100 [ 421.431845][T17603] should_fail_ex+0x414/0x560 [ 421.431883][T17603] should_failslab+0xa8/0x100 [ 421.431912][T17603] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 421.431947][T17603] ? __alloc_skb+0x112/0x2d0 [ 421.431971][T17603] __alloc_skb+0x112/0x2d0 [ 421.431995][T17603] netlink_ack+0x146/0xa50 [ 421.432023][T17603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.432054][T17603] ? __lock_acquire+0xaac/0xd20 [ 421.432096][T17603] netlink_rcv_skb+0x2a0/0x490 [ 421.432127][T17603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.432158][T17603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.432209][T17603] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.432238][T17603] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.432274][T17603] netlink_unicast+0x758/0x8d0 [ 421.432314][T17603] netlink_sendmsg+0x805/0xb30 [ 421.432354][T17603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.432389][T17603] ? aa_sock_msg_perm+0x94/0x160 [ 421.432411][T17603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.432434][T17603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.432466][T17603] __sock_sendmsg+0x219/0x270 [ 421.432497][T17603] ____sys_sendmsg+0x52d/0x830 [ 421.432526][T17603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.432560][T17603] ? import_iovec+0x74/0xa0 [ 421.432590][T17603] ___sys_sendmsg+0x21f/0x2a0 [ 421.432615][T17603] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.432678][T17603] ? __fget_files+0x2a/0x420 [ 421.432703][T17603] ? __fget_files+0x3a0/0x420 [ 421.432741][T17603] __sys_sendmmsg+0x227/0x430 [ 421.432770][T17603] ? __pfx___sys_sendmmsg+0x10/0x10 [ 421.432810][T17603] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 421.432851][T17603] ? ksys_write+0x1f0/0x250 [ 421.432873][T17603] ? rcu_is_watching+0x15/0xb0 [ 421.432914][T17603] __x64_sys_sendmmsg+0xa0/0xc0 [ 421.432945][T17603] do_syscall_64+0xf6/0x210 [ 421.432968][T17603] ? clear_bhb_loop+0x45/0xa0 [ 421.432994][T17603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.433014][T17603] RIP: 0033:0x7f89e018e969 [ 421.433033][T17603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.433052][T17603] RSP: 002b:00007f89e0f53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.433074][T17603] RAX: ffffffffffffffda RBX: 00007f89e03b5fa0 RCX: 00007f89e018e969 [ 421.433090][T17603] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 421.433104][T17603] RBP: 00007f89e0f53090 R08: 0000000000000000 R09: 0000000000000000 [ 421.433118][T17603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.433131][T17603] R13: 0000000000000000 R14: 00007f89e03b5fa0 R15: 00007ffe26dce848 [ 421.433163][T17603] [ 421.855431][T17612] lo: entered promiscuous mode [ 421.875690][T17612] tunl0: entered promiscuous mode [ 421.904163][T17612] gre0: entered promiscuous mode [ 421.917965][T17612] tipc: Resetting bearer [ 421.923469][T17612] gretap0: entered promiscuous mode [ 421.932649][T17612] erspan0: entered promiscuous mode [ 421.939394][T17612] ip_vti0: entered promiscuous mode [ 422.367035][T17642] FAULT_INJECTION: forcing a failure. [ 422.367035][T17642] name failslab, interval 1, probability 0, space 0, times 0 [ 422.403910][T17642] CPU: 0 UID: 0 PID: 17642 Comm: syz.5.4126 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 422.403944][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 422.403957][T17642] Call Trace: [ 422.403966][T17642] [ 422.403976][T17642] dump_stack_lvl+0x189/0x250 [ 422.404014][T17642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.404045][T17642] ? __pfx__printk+0x10/0x10 [ 422.404073][T17642] ? __pfx___might_resched+0x10/0x10 [ 422.404104][T17642] ? fs_reclaim_acquire+0x7d/0x100 [ 422.404139][T17642] should_fail_ex+0x414/0x560 [ 422.404175][T17642] should_failslab+0xa8/0x100 [ 422.404204][T17642] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 422.404231][T17642] ? __alloc_skb+0x112/0x2d0 [ 422.404255][T17642] __alloc_skb+0x112/0x2d0 [ 422.404280][T17642] netlink_ack+0x146/0xa50 [ 422.404307][T17642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 422.404342][T17642] ? ref_tracker_free+0x63a/0x7d0 [ 422.404360][T17642] ? __copy_skb_header+0xa7/0x550 [ 422.404394][T17642] netlink_rcv_skb+0x2a0/0x490 [ 422.404425][T17642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 422.404456][T17642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.404508][T17642] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.404537][T17642] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.404572][T17642] netlink_unicast+0x758/0x8d0 [ 422.404610][T17642] netlink_sendmsg+0x805/0xb30 [ 422.404652][T17642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.404687][T17642] ? aa_sock_msg_perm+0x94/0x160 [ 422.404710][T17642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.404733][T17642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.404765][T17642] __sock_sendmsg+0x219/0x270 [ 422.404797][T17642] ____sys_sendmsg+0x52d/0x830 [ 422.404825][T17642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.404867][T17642] ? import_iovec+0x74/0xa0 [ 422.404897][T17642] ___sys_sendmsg+0x21f/0x2a0 [ 422.404923][T17642] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.404984][T17642] ? __fget_files+0x2a/0x420 [ 422.405009][T17642] ? __fget_files+0x3a0/0x420 [ 422.405046][T17642] __sys_sendmmsg+0x227/0x430 [ 422.405075][T17642] ? __pfx___sys_sendmmsg+0x10/0x10 [ 422.405108][T17642] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 422.405149][T17642] ? ksys_write+0x1f0/0x250 [ 422.405170][T17642] ? rcu_is_watching+0x15/0xb0 [ 422.405211][T17642] __x64_sys_sendmmsg+0xa0/0xc0 [ 422.405236][T17642] do_syscall_64+0xf6/0x210 [ 422.405259][T17642] ? clear_bhb_loop+0x45/0xa0 [ 422.405284][T17642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.405305][T17642] RIP: 0033:0x7f345bd8e969 [ 422.405324][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.405340][T17642] RSP: 002b:00007f345cbde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 422.405363][T17642] RAX: ffffffffffffffda RBX: 00007f345bfb5fa0 RCX: 00007f345bd8e969 [ 422.405379][T17642] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 422.405393][T17642] RBP: 00007f345cbde090 R08: 0000000000000000 R09: 0000000000000000 [ 422.405406][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.405419][T17642] R13: 0000000000000000 R14: 00007f345bfb5fa0 R15: 00007ffd5cc18ae8 [ 422.405452][T17642] [ 422.882254][T17659] __nla_validate_parse: 18 callbacks suppressed [ 422.882278][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4133'. [ 422.912393][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4135'. [ 422.927396][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4133'. [ 422.959953][T17659] netlink: 'syz.2.4133': attribute type 5 has an invalid length. [ 423.404263][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4148'. [ 423.493782][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4152'. [ 423.528434][T17699] vlan3: entered allmulticast mode [ 423.641369][T17710] FAULT_INJECTION: forcing a failure. [ 423.641369][T17710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.647521][T17711] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4155'. [ 423.658142][T17710] CPU: 1 UID: 0 PID: 17710 Comm: syz.0.4153 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 423.658176][T17710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 423.658191][T17710] Call Trace: [ 423.658200][T17710] [ 423.658210][T17710] dump_stack_lvl+0x189/0x250 [ 423.658252][T17710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.658284][T17710] ? __pfx__printk+0x10/0x10 [ 423.658322][T17710] should_fail_ex+0x414/0x560 [ 423.658362][T17710] _copy_from_user+0x2d/0xb0 [ 423.658390][T17710] __copy_msghdr+0x3c5/0x5b0 [ 423.658420][T17710] ___sys_sendmsg+0x1a5/0x2a0 [ 423.658446][T17710] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.658528][T17710] ? __might_fault+0xb0/0x130 [ 423.658560][T17710] __sys_sendmmsg+0x227/0x430 [ 423.658591][T17710] ? __pfx___sys_sendmmsg+0x10/0x10 [ 423.658625][T17710] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.658669][T17710] ? ksys_write+0x1f0/0x250 [ 423.658692][T17710] ? rcu_is_watching+0x15/0xb0 [ 423.658737][T17710] __x64_sys_sendmmsg+0xa0/0xc0 [ 423.658762][T17710] do_syscall_64+0xf6/0x210 [ 423.658787][T17710] ? clear_bhb_loop+0x45/0xa0 [ 423.658814][T17710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.658835][T17710] RIP: 0033:0x7fb6bcf8e969 [ 423.658855][T17710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.658875][T17710] RSP: 002b:00007fb6bdd2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.658898][T17710] RAX: ffffffffffffffda RBX: 00007fb6bd1b5fa0 RCX: 00007fb6bcf8e969 [ 423.658915][T17710] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 423.658931][T17710] RBP: 00007fb6bdd2d090 R08: 0000000000000000 R09: 0000000000000000 [ 423.658945][T17710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.658957][T17710] R13: 0000000000000000 R14: 00007fb6bd1b5fa0 R15: 00007fffc7886648 [ 423.658992][T17710] [ 424.033153][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4160'. [ 424.051660][T17724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4160'. [ 424.143651][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4162'. [ 424.383523][T17742] FAULT_INJECTION: forcing a failure. [ 424.383523][T17742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.432609][T17742] CPU: 1 UID: 0 PID: 17742 Comm: syz.5.4167 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 424.432646][T17742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 424.432660][T17742] Call Trace: [ 424.432669][T17742] [ 424.432678][T17742] dump_stack_lvl+0x189/0x250 [ 424.432712][T17742] ? __lock_acquire+0xaac/0xd20 [ 424.432743][T17742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.432773][T17742] ? __pfx__printk+0x10/0x10 [ 424.432794][T17742] ? __might_fault+0xb0/0x130 [ 424.432833][T17742] should_fail_ex+0x414/0x560 [ 424.432870][T17742] _copy_from_user+0x2d/0xb0 [ 424.432898][T17742] ___sys_sendmsg+0x158/0x2a0 [ 424.432924][T17742] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.432996][T17742] ? __might_fault+0xb0/0x130 [ 424.433026][T17742] __sys_sendmmsg+0x227/0x430 [ 424.433054][T17742] ? __pfx___sys_sendmmsg+0x10/0x10 [ 424.433087][T17742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 424.433129][T17742] ? ksys_write+0x1f0/0x250 [ 424.433151][T17742] ? rcu_is_watching+0x15/0xb0 [ 424.433193][T17742] __x64_sys_sendmmsg+0xa0/0xc0 [ 424.433219][T17742] do_syscall_64+0xf6/0x210 [ 424.433241][T17742] ? clear_bhb_loop+0x45/0xa0 [ 424.433267][T17742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.433287][T17742] RIP: 0033:0x7f345bd8e969 [ 424.433306][T17742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.433324][T17742] RSP: 002b:00007f345cbde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 424.433346][T17742] RAX: ffffffffffffffda RBX: 00007f345bfb5fa0 RCX: 00007f345bd8e969 [ 424.433361][T17742] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 424.433376][T17742] RBP: 00007f345cbde090 R08: 0000000000000000 R09: 0000000000000000 [ 424.433389][T17742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 424.433402][T17742] R13: 0000000000000000 R14: 00007f345bfb5fa0 R15: 00007ffd5cc18ae8 [ 424.433441][T17742] [ 424.688603][T17753] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4171'. [ 425.014249][T17773] FAULT_INJECTION: forcing a failure. [ 425.014249][T17773] name failslab, interval 1, probability 0, space 0, times 0 [ 425.041918][T17773] CPU: 1 UID: 0 PID: 17773 Comm: syz.5.4180 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 425.041949][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 425.041963][T17773] Call Trace: [ 425.041972][T17773] [ 425.041981][T17773] dump_stack_lvl+0x189/0x250 [ 425.042020][T17773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.042050][T17773] ? __pfx__printk+0x10/0x10 [ 425.042077][T17773] ? __pfx___might_resched+0x10/0x10 [ 425.042120][T17773] should_fail_ex+0x414/0x560 [ 425.042157][T17773] should_failslab+0xa8/0x100 [ 425.042186][T17773] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 425.042213][T17773] ? __alloc_skb+0x112/0x2d0 [ 425.042238][T17773] __alloc_skb+0x112/0x2d0 [ 425.042262][T17773] netlink_sendmsg+0x5c6/0xb30 [ 425.042303][T17773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.042338][T17773] ? aa_sock_msg_perm+0x94/0x160 [ 425.042361][T17773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.042383][T17773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.042414][T17773] __sock_sendmsg+0x219/0x270 [ 425.042445][T17773] ____sys_sendmsg+0x505/0x830 [ 425.042474][T17773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.042507][T17773] ? import_iovec+0x74/0xa0 [ 425.042543][T17773] ___sys_sendmsg+0x21f/0x2a0 [ 425.042568][T17773] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.042631][T17773] ? __fget_files+0x2a/0x420 [ 425.042656][T17773] ? __fget_files+0x3a0/0x420 [ 425.042694][T17773] __x64_sys_sendmsg+0x19b/0x260 [ 425.042719][T17773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.042760][T17773] ? do_syscall_64+0xba/0x210 [ 425.042785][T17773] do_syscall_64+0xf6/0x210 [ 425.042807][T17773] ? clear_bhb_loop+0x45/0xa0 [ 425.042833][T17773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.042853][T17773] RIP: 0033:0x7f345bd8e969 [ 425.042872][T17773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.042890][T17773] RSP: 002b:00007f345cbde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.042919][T17773] RAX: ffffffffffffffda RBX: 00007f345bfb5fa0 RCX: 00007f345bd8e969 [ 425.042935][T17773] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 425.042948][T17773] RBP: 00007f345cbde090 R08: 0000000000000000 R09: 0000000000000000 [ 425.042962][T17773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.042974][T17773] R13: 0000000000000000 R14: 00007f345bfb5fa0 R15: 00007ffd5cc18ae8 [ 425.043006][T17773] [ 425.419478][T17776] 8021q: VLANs not supported on lo [ 425.430332][T17782] sctp: [Deprecated]: syz.0.4182 (pid 17782) Use of int in max_burst socket option. [ 425.430332][T17782] Use struct sctp_assoc_value instead [ 426.056580][T17820] netlink: 'syz.2.4197': attribute type 1 has an invalid length. [ 426.642967][T17856] xt_check_table_hooks: 56 callbacks suppressed [ 426.643004][T17856] x_tables: duplicate underflow at hook 1 [ 426.810754][T17865] macvlan1: entered allmulticast mode [ 427.113114][T17879] veth1_to_bond: left allmulticast mode [ 427.473264][T17901] unsupported nla_type 52263 [ 427.546654][T17903] sctp: [Deprecated]: syz.1.4232 (pid 17903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.546654][T17903] Use struct sctp_sack_info instead [ 427.578621][T17903] sctp: [Deprecated]: syz.1.4232 (pid 17903) Use of int in maxseg socket option. [ 427.578621][T17903] Use struct sctp_assoc_value instead [ 427.985512][T17922] FAULT_INJECTION: forcing a failure. [ 427.985512][T17922] name failslab, interval 1, probability 0, space 0, times 0 [ 428.019312][T17922] CPU: 1 UID: 0 PID: 17922 Comm: syz.2.4240 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 428.019345][T17922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 428.019360][T17922] Call Trace: [ 428.019368][T17922] [ 428.019378][T17922] dump_stack_lvl+0x189/0x250 [ 428.019417][T17922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.019447][T17922] ? __pfx__printk+0x10/0x10 [ 428.019475][T17922] ? __pfx___might_resched+0x10/0x10 [ 428.019513][T17922] should_fail_ex+0x414/0x560 [ 428.019551][T17922] should_failslab+0xa8/0x100 [ 428.019581][T17922] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 428.019608][T17922] ? __alloc_skb+0x112/0x2d0 [ 428.019632][T17922] __alloc_skb+0x112/0x2d0 [ 428.019656][T17922] netlink_sendmsg+0x5c6/0xb30 [ 428.019698][T17922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.019734][T17922] ? aa_sock_msg_perm+0x94/0x160 [ 428.019756][T17922] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.019779][T17922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.019811][T17922] __sock_sendmsg+0x219/0x270 [ 428.019843][T17922] ____sys_sendmsg+0x505/0x830 [ 428.019872][T17922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.019905][T17922] ? import_iovec+0x74/0xa0 [ 428.019935][T17922] ___sys_sendmsg+0x21f/0x2a0 [ 428.019961][T17922] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.020034][T17922] ? __fget_files+0x2a/0x420 [ 428.020060][T17922] ? __fget_files+0x3a0/0x420 [ 428.020099][T17922] __x64_sys_sendmsg+0x19b/0x260 [ 428.020124][T17922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.020165][T17922] ? do_syscall_64+0xba/0x210 [ 428.020192][T17922] do_syscall_64+0xf6/0x210 [ 428.020214][T17922] ? clear_bhb_loop+0x45/0xa0 [ 428.020240][T17922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.020261][T17922] RIP: 0033:0x7f89e018e969 [ 428.020281][T17922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.020299][T17922] RSP: 002b:00007f89e0f53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.020322][T17922] RAX: ffffffffffffffda RBX: 00007f89e03b5fa0 RCX: 00007f89e018e969 [ 428.020339][T17922] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 428.020352][T17922] RBP: 00007f89e0f53090 R08: 0000000000000000 R09: 0000000000000000 [ 428.020366][T17922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.020379][T17922] R13: 0000000000000000 R14: 00007f89e03b5fa0 R15: 00007ffe26dce848 [ 428.020412][T17922] [ 428.333328][T17928] __nla_validate_parse: 6 callbacks suppressed [ 428.333350][T17928] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4243'. [ 428.747013][T17951] FAULT_INJECTION: forcing a failure. [ 428.747013][T17951] name failslab, interval 1, probability 0, space 0, times 0 [ 428.795792][T17951] CPU: 1 UID: 0 PID: 17951 Comm: syz.1.4253 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 428.795825][T17951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 428.795839][T17951] Call Trace: [ 428.795848][T17951] [ 428.795857][T17951] dump_stack_lvl+0x189/0x250 [ 428.795896][T17951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.795925][T17951] ? __pfx__printk+0x10/0x10 [ 428.795972][T17951] ? __pfx___might_resched+0x10/0x10 [ 428.796007][T17951] should_fail_ex+0x414/0x560 [ 428.796053][T17951] should_failslab+0xa8/0x100 [ 428.796082][T17951] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 428.796109][T17951] ? __alloc_skb+0x112/0x2d0 [ 428.796134][T17951] __alloc_skb+0x112/0x2d0 [ 428.796158][T17951] netlink_sendmsg+0x5c6/0xb30 [ 428.796200][T17951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.796234][T17951] ? aa_sock_msg_perm+0x94/0x160 [ 428.796257][T17951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.796279][T17951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.796311][T17951] __sock_sendmsg+0x219/0x270 [ 428.796343][T17951] ____sys_sendmsg+0x505/0x830 [ 428.796371][T17951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.796404][T17951] ? import_iovec+0x74/0xa0 [ 428.796434][T17951] ___sys_sendmsg+0x21f/0x2a0 [ 428.796459][T17951] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.796524][T17951] ? __fget_files+0x2a/0x420 [ 428.796549][T17951] ? __fget_files+0x3a0/0x420 [ 428.796587][T17951] __x64_sys_sendmsg+0x19b/0x260 [ 428.796613][T17951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.796654][T17951] ? do_syscall_64+0xba/0x210 [ 428.796680][T17951] do_syscall_64+0xf6/0x210 [ 428.796702][T17951] ? clear_bhb_loop+0x45/0xa0 [ 428.796728][T17951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.796748][T17951] RIP: 0033:0x7fa82758e969 [ 428.796767][T17951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.796785][T17951] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.796807][T17951] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 428.796822][T17951] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 428.796836][T17951] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.796848][T17951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.796860][T17951] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 428.796893][T17951] [ 429.439454][T17976] can: request_module (can-proto-0) failed. [ 429.838347][T17992] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4268'. [ 430.138471][T18006] netlink: 'syz.1.4275': attribute type 4 has an invalid length. [ 430.211801][T18010] FAULT_INJECTION: forcing a failure. [ 430.211801][T18010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.256464][T18010] CPU: 1 UID: 0 PID: 18010 Comm: syz.0.4278 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 430.256496][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 430.256509][T18010] Call Trace: [ 430.256518][T18010] [ 430.256527][T18010] dump_stack_lvl+0x189/0x250 [ 430.256560][T18010] ? __lock_acquire+0xaac/0xd20 [ 430.256591][T18010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.256621][T18010] ? __pfx__printk+0x10/0x10 [ 430.256641][T18010] ? __might_fault+0xb0/0x130 [ 430.256679][T18010] should_fail_ex+0x414/0x560 [ 430.256716][T18010] _copy_from_iter+0x1db/0x15a0 [ 430.256747][T18010] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 430.256769][T18010] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 430.256797][T18010] ? __pfx__copy_from_iter+0x10/0x10 [ 430.256823][T18010] ? __build_skb_around+0x257/0x3e0 [ 430.256848][T18010] ? netlink_sendmsg+0x642/0xb30 [ 430.256877][T18010] ? skb_put+0x11b/0x210 [ 430.256902][T18010] netlink_sendmsg+0x6b2/0xb30 [ 430.256943][T18010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.256978][T18010] ? aa_sock_msg_perm+0x94/0x160 [ 430.257001][T18010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.257024][T18010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.257056][T18010] __sock_sendmsg+0x219/0x270 [ 430.257088][T18010] ____sys_sendmsg+0x505/0x830 [ 430.257124][T18010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.257157][T18010] ? import_iovec+0x74/0xa0 [ 430.257187][T18010] ___sys_sendmsg+0x21f/0x2a0 [ 430.257212][T18010] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.257274][T18010] ? __fget_files+0x2a/0x420 [ 430.257299][T18010] ? __fget_files+0x3a0/0x420 [ 430.257337][T18010] __x64_sys_sendmsg+0x19b/0x260 [ 430.257363][T18010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.257404][T18010] ? do_syscall_64+0xba/0x210 [ 430.257430][T18010] do_syscall_64+0xf6/0x210 [ 430.257451][T18010] ? clear_bhb_loop+0x45/0xa0 [ 430.257477][T18010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.257496][T18010] RIP: 0033:0x7fb6bcf8e969 [ 430.257515][T18010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.257533][T18010] RSP: 002b:00007fb6bdd2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.257555][T18010] RAX: ffffffffffffffda RBX: 00007fb6bd1b5fa0 RCX: 00007fb6bcf8e969 [ 430.257570][T18010] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 430.257583][T18010] RBP: 00007fb6bdd2d090 R08: 0000000000000000 R09: 0000000000000000 [ 430.257597][T18010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.257609][T18010] R13: 0000000000000000 R14: 00007fb6bd1b5fa0 R15: 00007fffc7886648 [ 430.257642][T18010] [ 430.626731][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4281'. [ 430.712506][T18018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4281'. [ 430.839462][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4286'. [ 430.895066][T18032] netlink: 'syz.5.4285': attribute type 8 has an invalid length. [ 431.161178][T18054] tipc: Enabling of bearer rejected, failed to enable media [ 431.267818][T18060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4295'. [ 431.288175][T18061] FAULT_INJECTION: forcing a failure. [ 431.288175][T18061] name failslab, interval 1, probability 0, space 0, times 0 [ 431.346499][T18061] CPU: 1 UID: 0 PID: 18061 Comm: syz.2.4297 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 431.346532][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 431.346546][T18061] Call Trace: [ 431.346555][T18061] [ 431.346564][T18061] dump_stack_lvl+0x189/0x250 [ 431.346603][T18061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.346634][T18061] ? __pfx__printk+0x10/0x10 [ 431.346658][T18061] ? __pfx___might_resched+0x10/0x10 [ 431.346690][T18061] ? fs_reclaim_acquire+0x7d/0x100 [ 431.346725][T18061] should_fail_ex+0x414/0x560 [ 431.346772][T18061] should_failslab+0xa8/0x100 [ 431.346801][T18061] __kmalloc_cache_noprof+0x70/0x3d0 [ 431.346828][T18061] ? tcf_chain_create+0xb0/0x310 [ 431.346854][T18061] tcf_chain_create+0xb0/0x310 [ 431.346885][T18061] __tcf_chain_get+0x111/0x3c0 [ 431.346920][T18061] tc_new_tfilter+0x753/0x15b0 [ 431.346970][T18061] ? __pfx_tc_new_tfilter+0x10/0x10 [ 431.347030][T18061] ? __pfx_tc_new_tfilter+0x10/0x10 [ 431.347051][T18061] rtnetlink_rcv_msg+0x7cc/0xb70 [ 431.347081][T18061] ? kasan_save_track+0x4f/0x80 [ 431.347106][T18061] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 431.347135][T18061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.347166][T18061] ? __lock_acquire+0xaac/0xd20 [ 431.347210][T18061] netlink_rcv_skb+0x219/0x490 [ 431.347242][T18061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 431.347274][T18061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.347327][T18061] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.347357][T18061] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.347394][T18061] netlink_unicast+0x758/0x8d0 [ 431.347434][T18061] netlink_sendmsg+0x805/0xb30 [ 431.347480][T18061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.347515][T18061] ? aa_sock_msg_perm+0x94/0x160 [ 431.347538][T18061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.347561][T18061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.347593][T18061] __sock_sendmsg+0x219/0x270 [ 431.347625][T18061] ____sys_sendmsg+0x505/0x830 [ 431.347655][T18061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.347689][T18061] ? import_iovec+0x74/0xa0 [ 431.347719][T18061] ___sys_sendmsg+0x21f/0x2a0 [ 431.347751][T18061] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.347815][T18061] ? __fget_files+0x2a/0x420 [ 431.347840][T18061] ? __fget_files+0x3a0/0x420 [ 431.347878][T18061] __x64_sys_sendmsg+0x19b/0x260 [ 431.347904][T18061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.347945][T18061] ? do_syscall_64+0xba/0x210 [ 431.347972][T18061] do_syscall_64+0xf6/0x210 [ 431.347994][T18061] ? clear_bhb_loop+0x45/0xa0 [ 431.348020][T18061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.348040][T18061] RIP: 0033:0x7f89e018e969 [ 431.348060][T18061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.348079][T18061] RSP: 002b:00007f89e0f53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.348101][T18061] RAX: ffffffffffffffda RBX: 00007f89e03b5fa0 RCX: 00007f89e018e969 [ 431.348117][T18061] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 431.348131][T18061] RBP: 00007f89e0f53090 R08: 0000000000000000 R09: 0000000000000000 [ 431.348143][T18061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.348155][T18061] R13: 0000000000000000 R14: 00007f89e03b5fa0 R15: 00007ffe26dce848 [ 431.348189][T18061] [ 431.562386][T18075] syz.1.4302 uses old SIOCAX25GETINFO [ 431.798752][T18081] netlink: 'syz.1.4304': attribute type 15 has an invalid length. [ 431.818764][T18080] : entered promiscuous mode [ 431.901332][T18085] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 432.013714][T18090] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 432.113270][T18098] netlink: 'syz.1.4310': attribute type 4 has an invalid length. [ 432.544633][T18117] FAULT_INJECTION: forcing a failure. [ 432.544633][T18117] name failslab, interval 1, probability 0, space 0, times 0 [ 432.558874][T18117] CPU: 0 UID: 0 PID: 18117 Comm: syz.0.4318 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 432.558903][T18117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 432.558916][T18117] Call Trace: [ 432.558925][T18117] [ 432.558934][T18117] dump_stack_lvl+0x189/0x250 [ 432.558970][T18117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.558999][T18117] ? __pfx__printk+0x10/0x10 [ 432.559025][T18117] ? __pfx___might_resched+0x10/0x10 [ 432.559062][T18117] should_fail_ex+0x414/0x560 [ 432.559099][T18117] should_failslab+0xa8/0x100 [ 432.559128][T18117] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 432.559155][T18117] ? __alloc_skb+0x112/0x2d0 [ 432.559179][T18117] __alloc_skb+0x112/0x2d0 [ 432.559203][T18117] nl80211_tx_mgmt+0x968/0xd50 [ 432.559236][T18117] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 432.559259][T18117] ? __pfx_netdev_run_todo+0x10/0x10 [ 432.559285][T18117] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 432.559324][T18117] ? nl80211_pre_doit+0x4f1/0x930 [ 432.559357][T18117] genl_family_rcv_msg_doit+0x212/0x300 [ 432.559387][T18117] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.559425][T18117] ? bpf_lsm_capable+0x9/0x20 [ 432.559451][T18117] ? security_capable+0x7e/0x2e0 [ 432.559479][T18117] genl_rcv_msg+0x60e/0x790 [ 432.559510][T18117] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.559531][T18117] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 432.559559][T18117] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 432.559581][T18117] ? __pfx_nl80211_post_doit+0x10/0x10 [ 432.559632][T18117] netlink_rcv_skb+0x219/0x490 [ 432.559655][T18117] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.559673][T18117] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.559714][T18117] ? down_read+0x1ad/0x2e0 [ 432.559732][T18117] genl_rcv+0x28/0x40 [ 432.559752][T18117] netlink_unicast+0x758/0x8d0 [ 432.559793][T18117] netlink_sendmsg+0x805/0xb30 [ 432.559835][T18117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.559869][T18117] ? aa_sock_msg_perm+0x94/0x160 [ 432.559887][T18117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.559903][T18117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.559927][T18117] __sock_sendmsg+0x219/0x270 [ 432.559949][T18117] ____sys_sendmsg+0x505/0x830 [ 432.559970][T18117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.559994][T18117] ? import_iovec+0x74/0xa0 [ 432.560016][T18117] ___sys_sendmsg+0x21f/0x2a0 [ 432.560034][T18117] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.560079][T18117] ? __fget_files+0x2a/0x420 [ 432.560098][T18117] ? __fget_files+0x3a0/0x420 [ 432.560124][T18117] __x64_sys_sendmsg+0x19b/0x260 [ 432.560143][T18117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.560172][T18117] ? do_syscall_64+0xba/0x210 [ 432.560190][T18117] do_syscall_64+0xf6/0x210 [ 432.560206][T18117] ? clear_bhb_loop+0x45/0xa0 [ 432.560225][T18117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.560239][T18117] RIP: 0033:0x7fb6bcf8e969 [ 432.560254][T18117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.560267][T18117] RSP: 002b:00007fb6bdd2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.560283][T18117] RAX: ffffffffffffffda RBX: 00007fb6bd1b5fa0 RCX: 00007fb6bcf8e969 [ 432.560294][T18117] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 432.560303][T18117] RBP: 00007fb6bdd2d090 R08: 0000000000000000 R09: 0000000000000000 [ 432.560313][T18117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.560322][T18117] R13: 0000000000000000 R14: 00007fb6bd1b5fa0 R15: 00007fffc7886648 [ 432.560345][T18117] [ 432.561452][T18118] FAULT_INJECTION: forcing a failure. [ 432.561452][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 432.951031][T18118] CPU: 1 UID: 0 PID: 18118 Comm: syz.1.4317 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 432.951064][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 432.951077][T18118] Call Trace: [ 432.951086][T18118] [ 432.951096][T18118] dump_stack_lvl+0x189/0x250 [ 432.951134][T18118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.951164][T18118] ? __pfx__printk+0x10/0x10 [ 432.951191][T18118] ? __pfx___might_resched+0x10/0x10 [ 432.951222][T18118] ? fs_reclaim_acquire+0x7d/0x100 [ 432.951256][T18118] should_fail_ex+0x414/0x560 [ 432.951292][T18118] should_failslab+0xa8/0x100 [ 432.951321][T18118] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 432.951347][T18118] ? __alloc_skb+0x112/0x2d0 [ 432.951371][T18118] __alloc_skb+0x112/0x2d0 [ 432.951395][T18118] netlink_ack+0x146/0xa50 [ 432.951423][T18118] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.951458][T18118] ? ref_tracker_free+0x63a/0x7d0 [ 432.951475][T18118] ? __copy_skb_header+0xa7/0x550 [ 432.951507][T18118] netlink_rcv_skb+0x2a0/0x490 [ 432.951539][T18118] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.951570][T18118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.951621][T18118] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.951650][T18118] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.951686][T18118] netlink_unicast+0x758/0x8d0 [ 432.951725][T18118] netlink_sendmsg+0x805/0xb30 [ 432.951765][T18118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.951799][T18118] ? aa_sock_msg_perm+0x94/0x160 [ 432.951822][T18118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.951852][T18118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.951883][T18118] __sock_sendmsg+0x219/0x270 [ 432.951914][T18118] ____sys_sendmsg+0x505/0x830 [ 432.951943][T18118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.951975][T18118] ? import_iovec+0x74/0xa0 [ 432.952005][T18118] ___sys_sendmsg+0x21f/0x2a0 [ 432.952029][T18118] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.952089][T18118] ? __fget_files+0x2a/0x420 [ 432.952115][T18118] ? __fget_files+0x3a0/0x420 [ 432.952153][T18118] __x64_sys_sendmsg+0x19b/0x260 [ 432.952178][T18118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.952219][T18118] ? do_syscall_64+0xba/0x210 [ 432.952244][T18118] do_syscall_64+0xf6/0x210 [ 432.952266][T18118] ? clear_bhb_loop+0x45/0xa0 [ 432.952291][T18118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.952311][T18118] RIP: 0033:0x7fa82758e969 [ 432.952330][T18118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.952348][T18118] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.952370][T18118] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 432.952385][T18118] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 432.952399][T18118] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 432.952412][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.952424][T18118] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 432.952456][T18118] [ 433.343878][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4321'. [ 433.451555][T18130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4323'. [ 433.844174][T18173] netlink: 'syz.5.4330': attribute type 1 has an invalid length. [ 434.463686][T18202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4342'. [ 434.476247][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 434.653623][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4343'. [ 434.793825][T18186] lo speed is unknown, defaulting to 1000 [ 434.822800][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4346'. [ 434.914846][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4336'. [ 435.421741][T18234] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4352'. [ 435.435432][T18236] FAULT_INJECTION: forcing a failure. [ 435.435432][T18236] name failslab, interval 1, probability 0, space 0, times 0 [ 435.452771][T18236] CPU: 0 UID: 0 PID: 18236 Comm: syz.1.4354 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 435.452804][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 435.452817][T18236] Call Trace: [ 435.452825][T18236] [ 435.452835][T18236] dump_stack_lvl+0x189/0x250 [ 435.452874][T18236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.452904][T18236] ? __pfx__printk+0x10/0x10 [ 435.452931][T18236] ? __pfx___might_resched+0x10/0x10 [ 435.452961][T18236] ? fs_reclaim_acquire+0x7d/0x100 [ 435.452995][T18236] should_fail_ex+0x414/0x560 [ 435.453031][T18236] should_failslab+0xa8/0x100 [ 435.453060][T18236] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 435.453086][T18236] ? __alloc_skb+0x112/0x2d0 [ 435.453110][T18236] __alloc_skb+0x112/0x2d0 [ 435.453134][T18236] netlink_ack+0x146/0xa50 [ 435.453160][T18236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 435.453196][T18236] ? ref_tracker_free+0x63a/0x7d0 [ 435.453214][T18236] ? __copy_skb_header+0xa7/0x550 [ 435.453245][T18236] netlink_rcv_skb+0x2a0/0x490 [ 435.453276][T18236] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 435.453306][T18236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.453357][T18236] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.453386][T18236] ? netlink_deliver_tap+0x2e/0x1b0 [ 435.453431][T18236] netlink_unicast+0x758/0x8d0 [ 435.453470][T18236] netlink_sendmsg+0x805/0xb30 [ 435.453511][T18236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.453545][T18236] ? aa_sock_msg_perm+0x94/0x160 [ 435.453568][T18236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.453591][T18236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.453623][T18236] __sock_sendmsg+0x219/0x270 [ 435.453653][T18236] ____sys_sendmsg+0x505/0x830 [ 435.453682][T18236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.453715][T18236] ? import_iovec+0x74/0xa0 [ 435.453745][T18236] ___sys_sendmsg+0x21f/0x2a0 [ 435.453770][T18236] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.453832][T18236] ? __fget_files+0x2a/0x420 [ 435.453857][T18236] ? __fget_files+0x3a0/0x420 [ 435.453893][T18236] __x64_sys_sendmsg+0x19b/0x260 [ 435.453919][T18236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.453960][T18236] ? do_syscall_64+0xba/0x210 [ 435.453986][T18236] do_syscall_64+0xf6/0x210 [ 435.454007][T18236] ? clear_bhb_loop+0x45/0xa0 [ 435.454039][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.454059][T18236] RIP: 0033:0x7fa82758e969 [ 435.454078][T18236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.454097][T18236] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.454120][T18236] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 435.454135][T18236] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 435.454149][T18236] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.454161][T18236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.454174][T18236] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 435.454206][T18236] [ 435.803908][T18214] lo speed is unknown, defaulting to 1000 [ 436.131938][T18254] netlink: 'syz.1.4360': attribute type 2 has an invalid length. [ 436.149865][T18254] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4360'. [ 436.727295][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4365'. [ 436.898158][T18273] netlink: 'syz.2.4366': attribute type 1 has an invalid length. [ 437.114586][T18283] FAULT_INJECTION: forcing a failure. [ 437.114586][T18283] name failslab, interval 1, probability 0, space 0, times 0 [ 437.156354][T18283] CPU: 1 UID: 0 PID: 18283 Comm: syz.0.4371 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 437.156388][T18283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 437.156401][T18283] Call Trace: [ 437.156410][T18283] [ 437.156420][T18283] dump_stack_lvl+0x189/0x250 [ 437.156467][T18283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.156498][T18283] ? __pfx__printk+0x10/0x10 [ 437.156522][T18283] ? __pfx___might_resched+0x10/0x10 [ 437.156555][T18283] ? fs_reclaim_acquire+0x7d/0x100 [ 437.156590][T18283] should_fail_ex+0x414/0x560 [ 437.156627][T18283] should_failslab+0xa8/0x100 [ 437.156655][T18283] __kmalloc_cache_noprof+0x70/0x3d0 [ 437.156681][T18283] ? tcf_exts_init_ex+0x110/0x750 [ 437.156716][T18283] tcf_exts_init_ex+0x110/0x750 [ 437.156755][T18283] flow_change+0x4a1/0x1a50 [ 437.156785][T18283] ? __pfx___mutex_lock+0x10/0x10 [ 437.156807][T18283] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 437.156835][T18283] ? __pfx_flow_change+0x10/0x10 [ 437.156889][T18283] tc_new_tfilter+0xdc7/0x15b0 [ 437.156941][T18283] ? __pfx_tc_new_tfilter+0x10/0x10 [ 437.157001][T18283] ? __pfx_tc_new_tfilter+0x10/0x10 [ 437.157021][T18283] rtnetlink_rcv_msg+0x7cc/0xb70 [ 437.157051][T18283] ? kasan_save_track+0x4f/0x80 [ 437.157075][T18283] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 437.157104][T18283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.157134][T18283] ? __lock_acquire+0xaac/0xd20 [ 437.157177][T18283] netlink_rcv_skb+0x219/0x490 [ 437.157210][T18283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.157242][T18283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.157293][T18283] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.157323][T18283] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.157359][T18283] netlink_unicast+0x758/0x8d0 [ 437.157399][T18283] netlink_sendmsg+0x805/0xb30 [ 437.157441][T18283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.157482][T18283] ? aa_sock_msg_perm+0x94/0x160 [ 437.157505][T18283] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.157528][T18283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.157560][T18283] __sock_sendmsg+0x219/0x270 [ 437.157592][T18283] ____sys_sendmsg+0x505/0x830 [ 437.157621][T18283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.157654][T18283] ? import_iovec+0x74/0xa0 [ 437.157684][T18283] ___sys_sendmsg+0x21f/0x2a0 [ 437.157709][T18283] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.157772][T18283] ? __fget_files+0x2a/0x420 [ 437.157796][T18283] ? __fget_files+0x3a0/0x420 [ 437.157834][T18283] __x64_sys_sendmsg+0x19b/0x260 [ 437.157860][T18283] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.157901][T18283] ? do_syscall_64+0xba/0x210 [ 437.157926][T18283] do_syscall_64+0xf6/0x210 [ 437.157948][T18283] ? clear_bhb_loop+0x45/0xa0 [ 437.157974][T18283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.157994][T18283] RIP: 0033:0x7fb6bcf8e969 [ 437.158013][T18283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.158031][T18283] RSP: 002b:00007fb6bdd2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.158054][T18283] RAX: ffffffffffffffda RBX: 00007fb6bd1b5fa0 RCX: 00007fb6bcf8e969 [ 437.158069][T18283] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 437.158082][T18283] RBP: 00007fb6bdd2d090 R08: 0000000000000000 R09: 0000000000000000 [ 437.158095][T18283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.158108][T18283] R13: 0000000000000000 R14: 00007fb6bd1b5fa0 R15: 00007fffc7886648 [ 437.158140][T18283] [ 437.964719][T18312] netlink: 'syz.2.4381': attribute type 4 has an invalid length. [ 437.975173][T18312] lo: entered allmulticast mode [ 437.993606][T18312] ip6gre0: entered allmulticast mode [ 438.024291][T18312] veth1_to_bond: entered allmulticast mode [ 438.051496][T18312] macsec0: entered allmulticast mode [ 438.074735][T18312] bond3: left promiscuous mode [ 438.084297][T18312] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.092972][T18312] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.101997][T18312] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.110792][T18312] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.123738][T18312] geneve2: entered allmulticast mode [ 438.145074][T18312] sit1: entered allmulticast mode [ 438.167675][T18312] syztnl2: entered allmulticast mode [ 438.173178][T18312] ip6tnl1: entered allmulticast mode [ 438.179889][T18312] veth2: entered allmulticast mode [ 438.186082][T18312] veth3: entered allmulticast mode [ 438.191372][T18312] bond4: entered allmulticast mode [ 438.198052][T18312] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 438.205514][T18312] mac80211_hwsim hwsim29 wlan2: entered allmulticast mode [ 438.213536][T18312] bond0: entered allmulticast mode [ 438.219878][T18312] bridge1: entered allmulticast mode [ 438.240880][T18312] netdevsim netdevsim2 eth0: entered allmulticast mode [ 438.248611][T18312] netdevsim netdevsim2 eth1: entered allmulticast mode [ 438.255650][T18312] netdevsim netdevsim2 eth2: entered allmulticast mode [ 438.262809][T18312] netdevsim netdevsim2 eth3: entered allmulticast mode [ 438.270863][T18312] syztnl1: entered allmulticast mode [ 438.276494][T18312] bridge2: entered allmulticast mode [ 438.282728][T18312] bridge3: left promiscuous mode [ 438.297065][T18312] ipvlan2: entered allmulticast mode [ 438.302569][T18312] vlan2: entered allmulticast mode [ 438.314568][T18312] bridge4: entered allmulticast mode [ 438.320329][T18312] vxlan0: entered allmulticast mode [ 438.333947][T18312] macvlan2: entered allmulticast mode [ 438.402735][T18320] FAULT_INJECTION: forcing a failure. [ 438.402735][T18320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.418970][T18320] CPU: 1 UID: 0 PID: 18320 Comm: syz.1.4384 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 438.419002][T18320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 438.419015][T18320] Call Trace: [ 438.419024][T18320] [ 438.419033][T18320] dump_stack_lvl+0x189/0x250 [ 438.419064][T18320] ? __lock_acquire+0xaac/0xd20 [ 438.419104][T18320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.419132][T18320] ? __pfx__printk+0x10/0x10 [ 438.419152][T18320] ? __might_fault+0xb0/0x130 [ 438.419191][T18320] should_fail_ex+0x414/0x560 [ 438.419228][T18320] _copy_from_user+0x2d/0xb0 [ 438.419256][T18320] kstrtouint_from_user+0xc4/0x170 [ 438.419280][T18320] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 438.419323][T18320] proc_fail_nth_write+0x88/0x240 [ 438.419352][T18320] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 438.419388][T18320] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 438.419418][T18320] vfs_write+0x27b/0xa90 [ 438.419451][T18320] ? __pfx_vfs_write+0x10/0x10 [ 438.419477][T18320] ? __fget_files+0x2a/0x420 [ 438.419508][T18320] ? __fget_files+0x3a0/0x420 [ 438.419532][T18320] ? __fget_files+0x2a/0x420 [ 438.419569][T18320] ksys_write+0x145/0x250 [ 438.419596][T18320] ? __pfx_ksys_write+0x10/0x10 [ 438.419623][T18320] ? do_syscall_64+0xba/0x210 [ 438.419649][T18320] do_syscall_64+0xf6/0x210 [ 438.419670][T18320] ? clear_bhb_loop+0x45/0xa0 [ 438.419695][T18320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.419715][T18320] RIP: 0033:0x7fa82758d41f [ 438.419733][T18320] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 438.419751][T18320] RSP: 002b:00007fa8253f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 438.419773][T18320] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa82758d41f [ 438.419787][T18320] RDX: 0000000000000001 RSI: 00007fa8253f60a0 RDI: 0000000000000005 [ 438.419800][T18320] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 438.419812][T18320] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 438.419825][T18320] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 438.419858][T18320] [ 438.984333][T18336] syzkaller0: entered promiscuous mode [ 439.002365][T18336] syzkaller0: entered allmulticast mode [ 439.194893][T18350] __nla_validate_parse: 2 callbacks suppressed [ 439.194916][T18350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4397'. [ 440.060787][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.069845][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.267514][T18368] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 441.301163][T18368] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 441.325981][T18374] netlink: 'syz.5.4404': attribute type 11 has an invalid length. [ 441.340279][T18375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4402'. [ 441.774386][T18396] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4413'. [ 441.941816][T18404] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 442.022021][T18412] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4416'. [ 442.128168][T18416] tipc: Failed to obtain node identity [ 442.133862][T18416] tipc: Enabling of bearer rejected, failed to enable media [ 442.144307][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 442.233181][T18423] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.241802][T18423] netlink: 'syz.1.4421': attribute type 4 has an invalid length. [ 442.327483][T18427] netlink: 'syz.1.4423': attribute type 11 has an invalid length. [ 442.677177][T18445] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 442.685372][T18445] netlink: 'syz.1.4433': attribute type 4 has an invalid length. [ 442.853781][T18453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4435'. [ 442.990072][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4434'. [ 443.218443][T18474] netlink: 'syz.0.4441': attribute type 11 has an invalid length. [ 443.448739][T18483] netlink: 'syz.0.4446': attribute type 4 has an invalid length. [ 443.472292][T18483] netlink: 'syz.0.4446': attribute type 4 has an invalid length. [ 443.569246][T18488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4448'. [ 443.723432][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4452'. [ 443.853912][T18504] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4455'. [ 443.891561][T18509] FAULT_INJECTION: forcing a failure. [ 443.891561][T18509] name failslab, interval 1, probability 0, space 0, times 0 [ 443.973385][T18509] CPU: 0 UID: 0 PID: 18509 Comm: syz.1.4456 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 443.973418][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 443.973431][T18509] Call Trace: [ 443.973440][T18509] [ 443.973450][T18509] dump_stack_lvl+0x189/0x250 [ 443.973489][T18509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.973520][T18509] ? __pfx__printk+0x10/0x10 [ 443.973544][T18509] ? __pfx___might_resched+0x10/0x10 [ 443.973576][T18509] ? fs_reclaim_acquire+0x7d/0x100 [ 443.973611][T18509] should_fail_ex+0x414/0x560 [ 443.973648][T18509] should_failslab+0xa8/0x100 [ 443.973679][T18509] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 443.973706][T18509] ? __alloc_skb+0x112/0x2d0 [ 443.973730][T18509] __alloc_skb+0x112/0x2d0 [ 443.973755][T18509] alloc_skb_with_frags+0xca/0x890 [ 443.973776][T18509] ? aa_label_sk_perm+0x413/0x560 [ 443.973813][T18509] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 443.973849][T18509] sock_alloc_send_pskb+0x857/0x990 [ 443.973903][T18509] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 443.973941][T18509] ? aa_sk_perm+0x81e/0x950 [ 443.973974][T18509] hci_sock_sendmsg+0x207/0xee0 [ 443.974013][T18509] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 443.974043][T18509] ? aa_sock_msg_perm+0x94/0x160 [ 443.974065][T18509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 443.974088][T18509] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 443.974119][T18509] __sock_sendmsg+0x219/0x270 [ 443.974151][T18509] sock_write_iter+0x258/0x330 [ 443.974180][T18509] ? __pfx_sock_write_iter+0x10/0x10 [ 443.974218][T18509] ? bpf_lsm_file_permission+0x9/0x20 [ 443.974243][T18509] ? security_file_permission+0x75/0x290 [ 443.974281][T18509] vfs_write+0x548/0xa90 [ 443.974310][T18509] ? __pfx_sock_write_iter+0x10/0x10 [ 443.974336][T18509] ? __pfx_vfs_write+0x10/0x10 [ 443.974369][T18509] ? __fget_files+0x2a/0x420 [ 443.974405][T18509] ksys_write+0x145/0x250 [ 443.974426][T18509] ? rcu_is_watching+0x15/0xb0 [ 443.974458][T18509] ? __pfx_ksys_write+0x10/0x10 [ 443.974485][T18509] ? do_syscall_64+0xba/0x210 [ 443.974511][T18509] do_syscall_64+0xf6/0x210 [ 443.974532][T18509] ? clear_bhb_loop+0x45/0xa0 [ 443.974578][T18509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.974598][T18509] RIP: 0033:0x7fa82758e969 [ 443.974616][T18509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.974634][T18509] RSP: 002b:00007fa8253f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 443.974655][T18509] RAX: ffffffffffffffda RBX: 00007fa8277b5fa0 RCX: 00007fa82758e969 [ 443.974671][T18509] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000004 [ 443.974684][T18509] RBP: 00007fa8253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.974696][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.974708][T18509] R13: 0000000000000000 R14: 00007fa8277b5fa0 R15: 00007ffcc94f01d8 [ 443.974740][T18509] [ 443.996827][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4457'. [ 444.353277][T18522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4461'. [ 444.373603][T18523] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 445.312482][T18545] Cannot find add_set index 0 as target [ 445.340480][T18544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4468'. [ 445.605215][T18553] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4470'. [ 445.631340][T18553] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4470'. [ 445.645342][T18555] netlink: 872 bytes leftover after parsing attributes in process `syz.5.4473'. [ 445.664963][T18555] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4473'. [ 445.692049][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4473'. [ 445.877737][T18563] netlink: 'syz.5.4475': attribute type 11 has an invalid length. [ 446.074094][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4479'. [ 446.090106][T18574] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4479'. [ 446.099375][T18574] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4479'. [ 446.747781][T18615] dvmrp0: entered allmulticast mode [ 446.990169][T18630] x_tables: unsorted entry at hook 3 [ 447.281768][T18646] FAULT_INJECTION: forcing a failure. [ 447.281768][T18646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.318582][T18646] CPU: 1 UID: 0 PID: 18646 Comm: syz.0.4510 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 447.318614][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 447.318627][T18646] Call Trace: [ 447.318635][T18646] [ 447.318644][T18646] dump_stack_lvl+0x189/0x250 [ 447.318682][T18646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.318711][T18646] ? __pfx__printk+0x10/0x10 [ 447.318746][T18646] should_fail_ex+0x414/0x560 [ 447.318784][T18646] _copy_to_user+0x31/0xb0 [ 447.318813][T18646] simple_read_from_buffer+0xe1/0x170 [ 447.318844][T18646] proc_fail_nth_read+0x1df/0x250 [ 447.318876][T18646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.318907][T18646] ? rw_verify_area+0x258/0x650 [ 447.318928][T18646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.318957][T18646] vfs_read+0x1fd/0x980 [ 447.318984][T18646] ? __pfx___mutex_lock+0x10/0x10 [ 447.319006][T18646] ? __pfx_vfs_read+0x10/0x10 [ 447.319029][T18646] ? __fget_files+0x2a/0x420 [ 447.319059][T18646] ? __fget_files+0x3a0/0x420 [ 447.319083][T18646] ? __fget_files+0x2a/0x420 [ 447.319117][T18646] ksys_read+0x145/0x250 [ 447.319138][T18646] ? rcu_is_watching+0x15/0xb0 [ 447.319170][T18646] ? __pfx_ksys_read+0x10/0x10 [ 447.319196][T18646] ? do_syscall_64+0xba/0x210 [ 447.319222][T18646] do_syscall_64+0xf6/0x210 [ 447.319244][T18646] ? clear_bhb_loop+0x45/0xa0 [ 447.319270][T18646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.319290][T18646] RIP: 0033:0x7fb6bcf8d37c [ 447.319310][T18646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 447.319328][T18646] RSP: 002b:00007fb6bdd2d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.319349][T18646] RAX: ffffffffffffffda RBX: 00007fb6bd1b5fa0 RCX: 00007fb6bcf8d37c [ 447.319364][T18646] RDX: 000000000000000f RSI: 00007fb6bdd2d0a0 RDI: 0000000000000003 [ 447.319376][T18646] RBP: 00007fb6bdd2d090 R08: 0000000000000000 R09: 0000000000000000 [ 447.319389][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.319402][T18646] R13: 0000000000000000 R14: 00007fb6bd1b5fa0 R15: 00007fffc7886648 [ 447.319432][T18646] [ 447.643345][T18652] xt_l2tp: v2 doesn't support IP mode [ 447.866895][T18667] netlink: 'syz.2.4519': attribute type 11 has an invalid length. [ 447.885511][T18673] tipc: Started in network mode [ 447.890936][T18673] tipc: Node identity 080211000001, cluster identity 4711 [ 447.899935][T18673] tipc: Enabled bearer , priority 0 [ 447.913943][T18673] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 447.921907][T18673] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 447.933489][T18673] tipc: Resetting bearer [ 448.684085][T18712] netlink: 'syz.2.4540': attribute type 11 has an invalid length. [ 448.926068][ T119] tipc: Node number set to 134418688 [ 448.976900][T18731] netlink: 'syz.1.4546': attribute type 13 has an invalid length. [ 449.369362][T18162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.493808][T18162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.583461][T18162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.652966][T18162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.767864][T18162] bridge_slave_1: left allmulticast mode [ 449.773561][T18162] bridge_slave_1: left promiscuous mode [ 449.779429][T18162] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.788927][T18162] bridge_slave_0: left allmulticast mode [ 449.794682][T18162] bridge_slave_0: left promiscuous mode [ 449.801587][T18162] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.195438][T18162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.208227][T18162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.219258][T18162] bond0 (unregistering): Released all slaves [ 450.604590][T18162] hsr_slave_0: left promiscuous mode [ 450.623232][T18162] hsr_slave_1: left promiscuous mode [ 450.630598][T18162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.638425][T18162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.646732][T18162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.654288][T18162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.679016][T18162] veth1_macvtap: left promiscuous mode [ 450.684874][T18162] veth0_macvtap: left promiscuous mode [ 450.690967][T18162] veth1_vlan: left promiscuous mode [ 450.697108][T18162] veth0_vlan: left promiscuous mode [ 450.857276][T18165] wlan1: Trigger new scan to find an IBSS to join [ 450.864608][T18165] ------------[ cut here ]------------ [ 450.870232][T18165] WARNING: CPU: 0 PID: 18165 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x82e/0x8b0 [ 450.880929][T18165] Modules linked in: [ 450.885177][T18165] CPU: 0 UID: 0 PID: 18165 Comm: kworker/u8:19 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) [ 450.898175][T18165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 450.908551][T18165] Workqueue: events_unbound cfg80211_wiphy_work [ 450.915105][T18165] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 450.921829][T18165] Code: e8 d7 c5 f7 f6 eb 05 e8 d0 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 c1 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 b3 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ee 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 450.942583][T18165] RSP: 0018:ffffc9000f81f8a0 EFLAGS: 00010293 [ 450.949029][T18165] RAX: ffffffff8ac7f7cd RBX: 0000000000000000 RCX: ffff88805531bc00 [ 450.957296][T18165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.965298][T18165] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000004 [ 450.973783][T18165] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff888025e73268 [ 450.981820][T18165] R13: ffff888025e70e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 450.990037][T18165] FS: 0000000000000000(0000) GS:ffff8881260cf000(0000) knlGS:0000000000000000 [ 450.999361][T18165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.006040][T18165] CR2: 00007f345cbbcf98 CR3: 0000000066944000 CR4: 00000000003526f0 [ 451.014056][T18165] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 451.022116][T18165] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 451.030490][T18165] Call Trace: [ 451.033794][T18165] [ 451.036820][T18165] ieee80211_ibss_work+0xde7/0x1060 [ 451.042077][T18165] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 451.047814][T18165] ? ieee80211_iface_work+0xf39/0xfe0 [ 451.053199][T18165] ? rcu_is_watching+0x15/0xb0 [ 451.058339][T18165] cfg80211_wiphy_work+0x2dc/0x460 [ 451.063471][T18165] ? process_scheduled_works+0x9ec/0x17a0 [ 451.069498][T18165] process_scheduled_works+0xadb/0x17a0 [ 451.075113][T18165] ? __pfx_process_scheduled_works+0x10/0x10 [ 451.081172][T18165] worker_thread+0x8a0/0xda0 [ 451.086233][T18165] kthread+0x70e/0x8a0 [ 451.090439][T18165] ? __pfx_worker_thread+0x10/0x10 [ 451.095570][T18165] ? __pfx_kthread+0x10/0x10 [ 451.100299][T18165] ? __pfx_kthread+0x10/0x10 [ 451.104918][T18165] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.110181][T18165] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.115480][T18165] ? __pfx_kthread+0x10/0x10 [ 451.120467][T18165] ret_from_fork+0x4b/0x80 [ 451.124929][T18165] ? __pfx_kthread+0x10/0x10 [ 451.129627][T18165] ret_from_fork_asm+0x1a/0x30 [ 451.135214][T18165] [ 451.138352][T18165] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 451.145751][T18165] CPU: 0 UID: 0 PID: 18165 Comm: kworker/u8:19 Not tainted 6.15.0-rc3-syzkaller-00099-g49ba1ca2e0cc #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 451.158110][T18165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 451.168204][T18165] Workqueue: events_unbound cfg80211_wiphy_work [ 451.174513][T18165] Call Trace: [ 451.177830][T18165] [ 451.180793][T18165] dump_stack_lvl+0x99/0x250 [ 451.185426][T18165] ? __asan_memcpy+0x40/0x70 [ 451.190051][T18165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.195291][T18165] ? __pfx__printk+0x10/0x10 [ 451.199943][T18165] panic+0x2db/0x790 [ 451.203897][T18165] ? __pfx_panic+0x10/0x10 [ 451.208358][T18165] ? show_trace_log_lvl+0x4fb/0x550 [ 451.213624][T18165] ? ret_from_fork_asm+0x1a/0x30 [ 451.218595][T18165] __warn+0x31b/0x4b0 [ 451.222596][T18165] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 451.228606][T18165] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 451.234613][T18165] report_bug+0x2be/0x4f0 [ 451.238964][T18165] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 451.244966][T18165] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 451.250970][T18165] ? ieee80211_request_ibss_scan+0x830/0x8b0 [ 451.257005][T18165] handle_bug+0x84/0x160 [ 451.261280][T18165] exc_invalid_op+0x1a/0x50 [ 451.265816][T18165] asm_exc_invalid_op+0x1a/0x20 [ 451.270686][T18165] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 451.277295][T18165] Code: e8 d7 c5 f7 f6 eb 05 e8 d0 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 c1 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 b3 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ee 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 451.296933][T18165] RSP: 0018:ffffc9000f81f8a0 EFLAGS: 00010293 [ 451.303031][T18165] RAX: ffffffff8ac7f7cd RBX: 0000000000000000 RCX: ffff88805531bc00 [ 451.311020][T18165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.319003][T18165] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000004 [ 451.327517][T18165] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff888025e73268 [ 451.335495][T18165] R13: ffff888025e70e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 451.343482][T18165] ? ieee80211_request_ibss_scan+0x82d/0x8b0 [ 451.349945][T18165] ieee80211_ibss_work+0xde7/0x1060 [ 451.355178][T18165] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 451.360843][T18165] ? ieee80211_iface_work+0xf39/0xfe0 [ 451.366229][T18165] ? rcu_is_watching+0x15/0xb0 [ 451.371013][T18165] cfg80211_wiphy_work+0x2dc/0x460 [ 451.376155][T18165] ? process_scheduled_works+0x9ec/0x17a0 [ 451.381898][T18165] process_scheduled_works+0xadb/0x17a0 [ 451.387490][T18165] ? __pfx_process_scheduled_works+0x10/0x10 [ 451.393512][T18165] worker_thread+0x8a0/0xda0 [ 451.398313][T18165] kthread+0x70e/0x8a0 [ 451.402486][T18165] ? __pfx_worker_thread+0x10/0x10 [ 451.407632][T18165] ? __pfx_kthread+0x10/0x10 [ 451.412239][T18165] ? __pfx_kthread+0x10/0x10 [ 451.416843][T18165] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.422064][T18165] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.427283][T18165] ? __pfx_kthread+0x10/0x10 [ 451.431977][T18165] ret_from_fork+0x4b/0x80 [ 451.436415][T18165] ? __pfx_kthread+0x10/0x10 [ 451.441015][T18165] ret_from_fork_asm+0x1a/0x30 [ 451.445811][T18165] [ 451.449110][T18165] Kernel Offset: disabled [ 451.453447][T18165] Rebooting in 86400 seconds..