last executing test programs: 8.333635115s ago: executing program 3 (id=2625): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x10, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x20010010}}], 0x1, 0x20004855) 8.220637393s ago: executing program 3 (id=2627): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00810005"], 0x34}}, 0x0) (fail_nth: 1) 7.924683962s ago: executing program 3 (id=2630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000fffffff50008000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 7.480508359s ago: executing program 3 (id=2633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 7.479204506s ago: executing program 3 (id=2635): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff}, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x13, 0x0, 0x14}}}]}, 0x78}}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xc}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40420d0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) close(0x3) 7.008549847s ago: executing program 3 (id=2641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cf9000000cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f00000003c0)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc25806000000000000a66cfa072ae72c29a88d65bb21f44382eb6f1f5d944e", 0x75}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="93bffce623851797a8dc79018d7716840ffc6946a067f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc6", 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000180)="17fe0242b1650c6a454e48f0a00fb903b164249fb1ddf79be7d1139aa3e3458a7e015322b03e50451624c2a48f28ca3c1e5fd2ede4fc14e3ef1f360e1a614bb29bb89e6f02385a2e779cac3b3b479b33897ceccee77757e464d2b03590041dda7863eab82895bac5b5fc8d4583141d5d1c51e8415168c63104e022a6ede577fe", 0x80}, {&(0x7f00000002c0)="708d4d151e6783b64e2c54d1c5137adc5779238886e53b7467d78b82bead0d299a8f6359bc8811759079957f240ed6211b20211d1c493ce8898b2a7f05525d7e4f", 0x41}, {&(0x7f0000000640)="206f66d4b0215a2064e638d5a348515b147c71f85c69b7b0e1475300b68d30f2e7bd6ec2d6d04eda4dd430871effc06a24d6ab9eef1452c472ab80e5ad1b3a8e7f0de2cd6a3d01d4cf8464047d44012276553daf4015fe75164923abe65f5543148138dadb8fe80f5890ebce0117413647afe8a46d656fad3e608de452ec8fbadd5f399183959a", 0x87}, {&(0x7f0000000500)="970b4b48b701c6a08ae2a64f9da107fe5da322c5da0e9e3c4bd126020416e52c967b7f635cd0e47c7bf87fc2d4e5c9db054dfee64d39cc2098027966cac4b986d68dd33558b707770fc60d6461f15169c8542510ca10f7698c248bce5f7bdcfd5e15517f37ff0f1dfc9e8e30", 0x6c}, {&(0x7f0000000d80)="06ca38bd174529af8431e260516b5f41167d3b14a0027a96cfe5df800c96aeebf5ad8c7a0336aba1a1d7cb6dee2f15d953", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="454861131f67f369a7038d6cedc8942090b86a274f37c59d0b0b93ca7ae83f2be947351299147f3a7f", 0x29}], 0x1}}], 0x4, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6.685098638s ago: executing program 0 (id=2648): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cf9000000cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f00000003c0)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc25806000000000000a66cfa072ae72c29a88d65bb21f44382eb6f1f5d944e3dcd40627aae2ef6cebf7438c3b1a26e7afa19", 0x88}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000180)="17fe0242b1650c6a454e48f0a00fb903b164249fb1ddf79be7d1139aa3e3458a7e015322b03e50451624c2a48f28ca3c1e5fd2ede4fc14e3ef1f360e1a614bb29bb89e6f02385a2e779cac3b3b479b33897cecce", 0x54}, {&(0x7f00000002c0)="708d4d151e6783b64e2c54d1c5137adc5779238886e53b7467d78b82bead0d299a8f6359bc8811759079957f240ed6211b20211d1c", 0x35}, {0x0}, {&(0x7f0000000500)}, {&(0x7f0000000a80)="732d3c14242740012e47f723ba689d09fbd21982f0e959b50a1f0a2fc83f1d2e038ae7549987bc737980e1cbfb981d5ce494877cc791c5594b3443e97fc9f047a245d386bd116775a32520966c0e29203bda4c3b145e5ccaa3daaee657be09f6bb4427f41a7a1145f009331fc208ff839db5996547b8507b0b23abcad17c7a02cc9a0db84cb0adeb7100269ce12bf7f1b334d7a9844212dedb3482fc22fade2cd19307eadbd7858f52139dd15ac409eb42d4d99931b11264b3774506746223949b6ca0b74498d41fed2c8be0cc9411d8f8288e183af89cdf2ba792315b992625ceb3", 0xe2}, {&(0x7f0000000d80)="06ca38bd174529af8431e260516b5f41167d3b14a0027a96cfe5df800c96aeebf5ad8c7a0336aba1a1d7cb6dee2f15d9530478aee49b6c7fa7cc5bb11cf4bc6f97", 0x41}], 0x6}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6.353725755s ago: executing program 2 (id=2650): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="48c7934b7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x9}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000180)={0x7, 'veth0_to_batadv\x00', {}, 0xcb50}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r8, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r9}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xffffffffffffff37}}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt(0xffffffffffffffff, 0x4, 0x7, &(0x7f0000000380)="4fb5072b0fb7b0a1b55f919148c8c78a87ba926119e0a101c58b26724b98b7eedb5b38ddfef3acc34f082146be265e383abbae02ef54985b79050bc3bbe388b61f3e3d02c859a446742537c1b0df84f2151f71b15d91dfd6af74b5dfd2d9ccc599e8add4fc", 0x65) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r12, 0x84, 0x6d, &(0x7f0000000000)={r14}, &(0x7f0000000080)=0x8) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r15, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000b0}, 0x8000) 5.664676193s ago: executing program 0 (id=2656): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010110104fe9e48f7"], 0x48}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9, 0x7, 0x8, 0x9, 0x5, 0x8, 0x2, 0x1ff}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="32003300209c0600080211000001080211000000ffffffffffffd9c40400800110000900080211000000000602020202020200000400cd005716887b524165569a143d3e4758b804f3c334cafcfce29ac6fd61a49ea647af145f86ebb55c7a0f0166d440c1cf70947a457812b6ac68ffda2ab619f4a1d79bbae2c1da4f2575d364a5230cb2274b16b57ccd4c24a9edd321a769fb0e3185f87fd560f97845f82809f20403604f6f550e445830b7ec7b4816d09e42e71c13489d8a0cf021e68e75325b3424"], 0x54}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae00000000000000001c"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES8=r5, @ANYRES8=r7, @ANYRESDEC=r0], 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f00000900000000050100", @ANYRES32, @ANYBLOB="190700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b0000000ffffffff000000000000000002000000", @ANYRES32=r0, @ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) 5.41353869s ago: executing program 4 (id=2658): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc25806000000000000a66cfa072ae72c29a88d65bb21f44382eb6f1f5d944e3dcd40627aae2ef6cebf7438c3b1a26e7afa19", 0x88}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000180)="17fe0242b1650c6a454e48f0a00fb903b164249fb1ddf79be7d1139aa3e3458a7e015322b03e50451624c2a48f28ca3c1e5fd2ede4fc14e3ef1f360e1a614bb29bb89e6f02385a2e779cac3b3b479b33897ceccee77757e464d2b03590041dda7863eab82895bac5b5fc8d4583141d5d1c51e8415168c63104e022a6ede577fe64a6", 0x82}, {&(0x7f00000002c0)="708d4d151e6783b64e2c54d1c5137adc5779238886e53b7467d78b82bead0d299a8f6359bc8811759079957f240ed6211b20211d1c493ce8898b2a7f05525d7e4fcf6da0a76340fa41795283d4b93109d65b1666d4aaed928c542fb4ad07d7", 0x5f}, {&(0x7f0000000640)="206f66d4b0215a2064e638d5a348515b147c71f85c69b7b0e1475300b68d30f2e7bd6ec2d6d04eda4dd430871effc06a24d6ab9eef1452c472ab80e5ad1b3a8e7f0de2cd6a3d01d4cf8464047d44012276553daf4015fe75164923abe65f5543148138dadb8fe80f5890ebce0117413647afe8a46d656fad3e608de452ec8fbadd5f399183959a582d3a13", 0x8b}, {&(0x7f0000000500)="970b4b48b701c6a08ae2a64f9da107fe5da322c5da0e9e3c4bd126020416e52c967b7f635cd0e47c7bf87fc2d4e5c9db054dfee64d39cc2098027966cac4b986d68dd33558b707770fc60d6461f15169c8542510ca10f7698c248bce5f7bdcfd5e15517f37ff0f1dfc9e8e30cd6b670d5398269c04dd", 0x76}, {&(0x7f0000000a80)="732d3c14242740012e47f723ba689d09fbd21982f0e959b50a1f0a2fc83f1d2e038ae7549987bc737980e1cbfb981d5ce494877cc791c5594b3443e97fc9f047a245d386bd116775a32520966c0e29203bda4c3b145e5ccaa3daaee657be09f6bb4427f41a7a1145f009331fc208ff839db5996547b8507b0b23abcad17c7a02cc9a0db84cb0adeb7100269ce12bf7f1b334d7a9844212dedb3482fc22fade2cd19307eadbd7858f52139dd15ac409eb42d4d99931b11264b3774506746223949b6ca0b74498d41fed2c8be0cc9411d8f8288e183af89cdf2ba792315b992625ceb3", 0xe2}, {&(0x7f0000000d80)="06ca38bd174529af8431e260516b5f41167d3b14a0027a96cfe5df800c96aeebf5ad8c7a0336aba1a1d7cb6dee2f15", 0x2f}], 0x6}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="454861131f67f369a7038d6cedc8942090b86a274f37c59d0b0b93ca7ae83f2be947351299147f3a7f207f3935fede3d5bde5081cb485985cb3b33318fc78783d699a8b66461cd50d285108c29778cdac140d1664de627baf1da922bc1bd9c5514506031d65669eb55d18a0e5e1c5828cb2300295dc0a5c31084e9bd086c8b581bfee5eed9f3ddff95f7de382cb415a990aa18b469feecb999154291c81269ccb4e77d61", 0xa4}], 0x1}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.269258876s ago: executing program 4 (id=2660): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) (fail_nth: 6) 4.868920353s ago: executing program 4 (id=2662): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88942, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x0, 0x0, 0x0, @binary="990d59906040c6226d83b3dd9fa584140a972beb7bb2e6afdd6ee1b52f5b7186508ea84b4900077fd8998d20c90e01f5bae80da358cd54297825c2d1c678d77df25140553e"}]}]}, 0x64}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001200)=""/124, 0x7c}], 0x3}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, 0x0}}], 0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, 0x0, &(0x7f00000008c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000001cc0)={&(0x7f0000001c40)=""/110, 0x20000, 0x1800, 0x1, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001d40), r3) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001e80)={0x30, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 3.254419712s ago: executing program 2 (id=2664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000009c0)={'vlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0xa, 0x3, 0x8000000) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000180)=0xe0b) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000b00)={0x74, 0x0, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8000}, @CTA_EXPECT_FLAGS={0xffffffffffffff72}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001003f00", 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000140)={'virt_wifi0\x00', @local}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x29, 0xb0, 0x3008, 0x1, 0x4, '\x00', 0x0, r3, 0x5, 0x2, 0x3, 0xc, @void, @value, @void, @value}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x9}}], {0x14}}, 0x98}}, 0x0) 3.192973897s ago: executing program 0 (id=2665): unshare(0x42000000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x44}}, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x4, 0x4, 0x4, 0x1, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffa, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) (async) socket$inet6(0xa, 0x5, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000200)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0x0) (rerun: 64) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 32) r8 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x0, 0x81, 0x6, @vifc_lcl_ifindex=r9, @multicast2}, 0x10) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) (async) r10 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r10, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) 3.081398287s ago: executing program 2 (id=2667): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x7, 0x0, [{0x3, 0xa, "a78c000005dc8080a21f0003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 3.020331969s ago: executing program 4 (id=2668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000f5ff000a00000ab40000001a0a01010000000000000000020000058a000600f61d287272f0f7af3f9bebd7e30ee0759c16a992021e588ca5e9963db9af70a7e7876a0df68ed743c91e29ece6c4882d7d1da0e36882336c30295a0abfeb4b62c048f5aef8284fcc5238328a8e3ba07b2d8522d5d8bbb985b7a8b37ec013ff46a49bcdf3807d1b5d67e892044cbd0d9edaf1e2f8ff2a4d542566caf80162c855df86d6bd71bf00000c0004"], 0x3c48}, 0x1, 0x0, 0x0, 0x40000}, 0x800c080) 2.945511646s ago: executing program 2 (id=2670): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0xfffffffd, 0x7}, 0xff14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801c}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2.845167435s ago: executing program 4 (id=2671): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x132, 0x5, 0xffffffffffffffff}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @multicast1}, &(0x7f0000000300)=0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x77, 0x0, 0x0, 0x3, 0x4}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x252, 0x0, 0xfffffffffffffffa, 0x7fffffff}, 0x0, 0x0) 2.782085615s ago: executing program 2 (id=2672): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d"], 0xb8}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x45e740, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x20000000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x4000084) 1.816968326s ago: executing program 4 (id=2674): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @remote, 'veth1_to_bridge\x00'}}, 0x1e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x30040091}, 0x4040010) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r4 = socket$kcm(0x10, 0x4, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r5 = socket$inet6(0xa, 0x805, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)="020000000a55fbc3d774090c4665299c3c1dc8b87fbfe6aa8162fd897f263828a2", 0x21}], 0x1}], 0x1, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) unshare(0x6a000600) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r2, 0x0, 0x0}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001380)=ANY=[@ANYBLOB="dbdcd5c643947eec4092bd359998e2ac73042c561c1f55cedc2e6e5d1ad7b7358509becaa2afd018790266cf8eb3ba609c37dc0f66751910e6e9fe1be64bac936d077a935992ece5bc629e9541064c28680bb1c843dd8b4c1c7746dbbd891a8ec1779b0392587d5c1efe9f873be16868d3a4c1c01dbf53c711c35245a14e113700efde1b8f802a22c87210da09fca6554258e01509fc70b7fc255283920189ccbbeaf3263662462545068c1d837d082adf6158b855ac5fc0ad0b14adaaf93251b9f0508f9bf85ff3aa7692b11c62ccf824da4a89ec3edb77e3a43918819102c936f5258ab6a58881a1d6cfd17fde7ee4eeb4e14fa5daa2f48f24fd61eb69af74bceecb5aa097b6a3258c82df2b21b3"], 0x238}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendto$inet6(r0, &(0x7f0000001140)="218fe9876e5def771057af1dbb65914cd93bf25113c0c78a97bb37600e4f7bee3b91bff89ecc3c34d6f8a1aa1f84715123b2959845f47d9e39016a70f126b98aaaa1a3930ff0d6c7eea80c4e7f0353e26cec323e431511a27592a7595ceed232cd1c9e8b564361418de9d3d855fb82a6e4c854f69389d183e7bf80d40878cb74fb58f4a3577ac4820825d1191a2b03be944ac376a74e975f06f7a1dd148eb9fc03", 0xa1, 0x20000000, &(0x7f0000001200)={0xa, 0x4e20, 0x8001, @remote, 0x9}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xc, 0x5, &(0x7f0000000a00)=ANY=[@ANYRES16=r6], &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r7, 0x0, 0x17, 0x0, &(0x7f0000000000)="0bd07992919c2d88ad82ee3a6351b52acb4a71ebfdac36", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x50) sendmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 820.485435ms ago: executing program 1 (id=2677): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000002000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 736.30985ms ago: executing program 1 (id=2678): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002900f9ffffff070021e522461353b415e65cbf68d36bed0002fc0000"], 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf252100080009001f00706879300000000005002000010000000a0001007770616e3400000005002000010000000500200000000000050020000100000009001f007068793100000000"], 0x58}}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x8000) sendmsg$NL802154_CMD_SET_CHANNEL(r0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r5, 0x0, 0x20040044) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, 0x0, 0x8804) 621.299863ms ago: executing program 1 (id=2679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc3, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 503.201373ms ago: executing program 0 (id=2680): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a00100000000280000012", 0x2d}], 0x1}, 0x0) 426.499923ms ago: executing program 0 (id=2681): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x0, 0xfffffffd, 0x7}, 0xff14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801c}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 323.167569ms ago: executing program 1 (id=2682): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c0081"], 0x34}}, 0x0) 177.173372ms ago: executing program 2 (id=2683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb88a80000810000000800452f010b00680000072190"], 0x121) 148.806564ms ago: executing program 1 (id=2684): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180020002d00010000000000bb0e00e304000080040019"], 0x18}], 0x1}, 0x0) 44.296541ms ago: executing program 0 (id=2685): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cf9000000cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f00000003c0)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc25806000000000000a66cfa072ae72c29a88d65bb21f44382eb6f1f5d944e3dcd40627aae2ef6cebf7438c3b1a26e7afa19", 0x88}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000180)="17fe0242b1650c6a454e48f0a00fb903b164249fb1ddf79be7d1139aa3e3458a7e015322b03e50451624c2a48f28ca3c1e5fd2ede4fc14e3ef1f360e1a614bb29bb89e6f02385a2e779cac3b3b479b33897ceccee77757e464d2b03590041dda7863eab82895bac5b5fc8d4583141d5d1c51e8415168c63104e022a6ede577fe64a6", 0x82}, {&(0x7f00000002c0)="708d4d151e6783b64e2c54d1c5137adc5779238886e53b7467d78b82bead0d299a8f6359bc8811759079957f240ed6211b20211d1c493ce8898b2a7f05525d7e4fcf6da0a76340fa41795283d4b93109d65b1666d4aaed928c542fb4ad07d7af6cf4", 0x62}, {&(0x7f0000000640)="206f66d4b0215a2064e638d5a348515b147c71f85c69b7b0e1475300b68d30f2e7bd6ec2d6d04eda4dd430871effc06a24d6ab9eef1452c472ab80e5ad1b3a8e7f0de2cd6a3d01d4cf8464047d44012276553daf4015fe75164923abe65f5543148138dadb8fe80f5890ebce0117413647afe8a46d656fad3e608de452ec8fbadd5f399183959a582d3a1304da", 0x8d}, {&(0x7f0000000500)="970b4b48b701c6a08ae2a64f9da107fe5da322c5da0e9e3c4bd126020416e52c967b7f635cd0e47c7bf87fc2d4e5c9db054dfee64d39cc2098027966cac4b986d68dd33558b707770fc60d6461f15169c8542510ca10f7698c248bce5f7bdcfd5e15517f37ff0f1dfc9e8e30cd6b670d5398269c04dd", 0x76}, {&(0x7f0000000d80)="06ca38bd174529af8431e260516b5f41167d3b14a0027a96cfe5df800c96aeebf5", 0x21}], 0x5}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 0s ago: executing program 1 (id=2686): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r0, &(0x7f0000000380)=@xdp, 0x0, 0x1800) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$can_j1939(r5, &(0x7f0000000300)={&(0x7f00000004c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'bond0\x00'}) r8 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000280)=0x10, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r9) bind$llc(r8, &(0x7f0000000140)={0x1a, 0x201, 0x10, 0x57, 0x47, 0x7, @multicast}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x1}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000040)={r11, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r13, 0x84, 0x23, &(0x7f0000000080), 0x8) ioctl$F2FS_IOC_DEFRAGMENT(r13, 0xc010f508, &(0x7f0000000080)={0x5469, 0x5}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) kernel console output (not intermixed with test programs): 8 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.777748][T10058] RSP: 002b:00007f3ffbb74030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.777770][T10058] RAX: ffffffffffffffda RBX: 00007f3ffafa5fa0 RCX: 00007f3ffad8bb7c [ 239.777786][T10058] RDX: 000000000000000f RSI: 00007f3ffbb740a0 RDI: 0000000000000005 [ 239.777799][T10058] RBP: 00007f3ffbb74090 R08: 0000000000000000 R09: 0000000000000000 [ 239.777812][T10058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.777824][T10058] R13: 0000000000000000 R14: 00007f3ffafa5fa0 R15: 00007ffc9fdffce8 [ 239.777857][T10058] [ 240.274801][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 240.602067][T10090] siw: device registration error -23 [ 240.734342][T10098] lo speed is unknown, defaulting to 1000 [ 240.742380][T10098] lo speed is unknown, defaulting to 1000 [ 241.950712][T10143] FAULT_INJECTION: forcing a failure. [ 241.950712][T10143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.978860][T10143] CPU: 0 UID: 0 PID: 10143 Comm: syz.0.1452 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 241.978891][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.978905][T10143] Call Trace: [ 241.978913][T10143] [ 241.978922][T10143] dump_stack_lvl+0x241/0x360 [ 241.978963][T10143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.978993][T10143] ? __pfx__printk+0x10/0x10 [ 241.979037][T10143] should_fail_ex+0x424/0x570 [ 241.979066][T10143] _copy_from_iter+0x211/0x1c70 [ 241.979112][T10143] ? __build_skb_around+0x247/0x3d0 [ 241.979150][T10143] ? __alloc_skb+0x298/0x480 [ 241.979168][T10143] ? __pfx__copy_from_iter+0x10/0x10 [ 241.979199][T10143] ? __pfx___alloc_skb+0x10/0x10 [ 241.979222][T10143] ? skb_put+0x114/0x1f0 [ 241.979246][T10143] netlink_sendmsg+0x73c/0xcd0 [ 241.979292][T10143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.979328][T10143] ? aa_sock_msg_perm+0x91/0x160 [ 241.979365][T10143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.979393][T10143] __sock_sendmsg+0x221/0x270 [ 241.979425][T10143] ____sys_sendmsg+0x523/0x860 [ 241.979467][T10143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.979486][T10143] ? __fget_files+0x2a/0x420 [ 241.979509][T10143] ? __fget_files+0x2a/0x420 [ 241.979539][T10143] __sys_sendmsg+0x271/0x360 [ 241.979568][T10143] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.979651][T10143] ? do_syscall_64+0xb6/0x230 [ 241.979683][T10143] do_syscall_64+0xf3/0x230 [ 241.979706][T10143] ? clear_bhb_loop+0x45/0xa0 [ 241.979729][T10143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.979749][T10143] RIP: 0033:0x7fb77fd8d169 [ 241.979767][T10143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.979785][T10143] RSP: 002b:00007fb780b69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.979807][T10143] RAX: ffffffffffffffda RBX: 00007fb77ffa5fa0 RCX: 00007fb77fd8d169 [ 241.979822][T10143] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000004 [ 241.979834][T10143] RBP: 00007fb780b69090 R08: 0000000000000000 R09: 0000000000000000 [ 241.979846][T10143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.979858][T10143] R13: 0000000000000000 R14: 00007fb77ffa5fa0 R15: 00007fff541c0908 [ 241.979890][T10143] [ 242.431071][T10153] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1454'. [ 242.826240][T10172] netlink: 'syz.0.1460': attribute type 10 has an invalid length. [ 242.848168][T10172] : (slave bridge0): Enslaving as an active interface with an up link [ 242.997029][T10180] xt_hashlimit: size too large, truncated to 1048576 [ 243.067191][T10189] xt_hashlimit: size too large, truncated to 1048576 [ 243.880069][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 243.901717][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 244.202718][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 244.317074][T10249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1483'. [ 244.543180][T10260] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1490'. [ 244.844536][T10267] syzkaller0: entered promiscuous mode [ 244.850220][T10267] syzkaller0: entered allmulticast mode [ 245.022895][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 245.173592][T10286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1499'. [ 245.187373][T10286] openvswitch: netlink: Flow key attr not present in new flow. [ 246.589558][T10306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1507'. [ 246.619197][T10303] xt_hashlimit: size too large, truncated to 1048576 [ 246.674816][T10312] xt_hashlimit: size too large, truncated to 1048576 [ 246.794892][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1511'. [ 246.848322][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1509'. [ 247.199878][T10331] FAULT_INJECTION: forcing a failure. [ 247.199878][T10331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.216692][T10331] CPU: 1 UID: 0 PID: 10331 Comm: syz.3.1514 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 247.216723][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.216746][T10331] Call Trace: [ 247.216754][T10331] [ 247.216763][T10331] dump_stack_lvl+0x241/0x360 [ 247.216801][T10331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.216830][T10331] ? __pfx__printk+0x10/0x10 [ 247.216873][T10331] should_fail_ex+0x424/0x570 [ 247.216900][T10331] _copy_from_user+0x2d/0xb0 [ 247.216930][T10331] do_ipv6_setsockopt+0x2f9/0x3680 [ 247.216971][T10331] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 247.217002][T10331] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 247.217049][T10331] ? __pfx___might_resched+0x10/0x10 [ 247.217080][T10331] ? rcu_read_lock_any_held+0xbb/0x160 [ 247.217106][T10331] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 247.217142][T10331] ? aa_sk_perm+0x96f/0xac0 [ 247.217173][T10331] ? ksys_write+0x24e/0x2d0 [ 247.217196][T10331] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.217229][T10331] ipv6_setsockopt+0x5d/0x170 [ 247.217250][T10331] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 247.217278][T10331] do_sock_setsockopt+0x3b1/0x710 [ 247.217306][T10331] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 247.217324][T10331] ? __fget_files+0x2a/0x420 [ 247.217346][T10331] ? __fget_files+0x39d/0x420 [ 247.217362][T10331] ? __fget_files+0x2a/0x420 [ 247.217390][T10331] __x64_sys_setsockopt+0x1ee/0x280 [ 247.217417][T10331] do_syscall_64+0xf3/0x230 [ 247.217444][T10331] ? clear_bhb_loop+0x45/0xa0 [ 247.217468][T10331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.217494][T10331] RIP: 0033:0x7f3ffad8d169 [ 247.217512][T10331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.217530][T10331] RSP: 002b:00007f3ffbb74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.217551][T10331] RAX: ffffffffffffffda RBX: 00007f3ffafa5fa0 RCX: 00007f3ffad8d169 [ 247.217565][T10331] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 247.217577][T10331] RBP: 00007f3ffbb74090 R08: 00000000000d0060 R09: 0000000000000000 [ 247.217590][T10331] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 247.217609][T10331] R13: 0000000000000000 R14: 00007f3ffafa5fa0 R15: 00007ffc9fdffce8 [ 247.217640][T10331] [ 248.009579][T10355] netlink: 'syz.2.1524': attribute type 10 has an invalid length. [ 248.964078][T10388] lo speed is unknown, defaulting to 1000 [ 248.972091][T10388] lo speed is unknown, defaulting to 1000 [ 249.462355][T10401] set match dimension is over the limit! [ 249.493942][T10403] __nla_validate_parse: 6 callbacks suppressed [ 249.493964][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1542'. [ 249.773098][T10414] netlink: 'syz.3.1546': attribute type 10 has an invalid length. [ 250.029300][T10418] lo speed is unknown, defaulting to 1000 [ 250.074918][T10418] lo speed is unknown, defaulting to 1000 [ 250.101305][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'. [ 250.331790][T10436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1554'. [ 250.357438][T10436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1554'. [ 250.911674][T10450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.109221][T10460] netlink: 'syz.0.1562': attribute type 10 has an invalid length. [ 251.248257][T10472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.270544][ T7176] udevd[7176]: setting owner of /dev/rfcomm68 to uid=0, gid=18 failed: No such file or directory [ 251.280658][T10472] FAULT_INJECTION: forcing a failure. [ 251.280658][T10472] name failslab, interval 1, probability 0, space 0, times 0 [ 251.309085][T10465] lo speed is unknown, defaulting to 1000 [ 251.336789][T10465] lo speed is unknown, defaulting to 1000 [ 251.347518][T10472] CPU: 0 UID: 0 PID: 10472 Comm: syz.0.1568 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 251.347549][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.347563][T10472] Call Trace: [ 251.347571][T10472] [ 251.347580][T10472] dump_stack_lvl+0x241/0x360 [ 251.347621][T10472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.347651][T10472] ? __pfx__printk+0x10/0x10 [ 251.347686][T10472] ? __pfx___might_resched+0x10/0x10 [ 251.347717][T10472] should_fail_ex+0x424/0x570 [ 251.347746][T10472] should_failslab+0xac/0x100 [ 251.347777][T10472] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 251.347807][T10472] ? __alloc_skb+0x1c2/0x480 [ 251.347825][T10472] ? stack_trace_save+0x11a/0x1d0 [ 251.347859][T10472] __alloc_skb+0x1c2/0x480 [ 251.347885][T10472] ? __pfx___alloc_skb+0x10/0x10 [ 251.347912][T10472] ? netlink_ack_tlv_len+0x6e/0x200 [ 251.347945][T10472] netlink_ack+0x147/0xa70 [ 251.347973][T10472] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 251.348014][T10472] netlink_rcv_skb+0x296/0x480 [ 251.348044][T10472] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.348068][T10472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.348122][T10472] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.348159][T10472] genl_rcv+0x28/0x40 [ 251.348179][T10472] netlink_unicast+0x7f8/0x9a0 [ 251.348216][T10472] ? __pfx_netlink_unicast+0x10/0x10 [ 251.348245][T10472] ? skb_put+0x114/0x1f0 [ 251.348278][T10472] netlink_sendmsg+0x8c3/0xcd0 [ 251.348322][T10472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.348358][T10472] ? aa_sock_msg_perm+0x91/0x160 [ 251.348394][T10472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.348421][T10472] __sock_sendmsg+0x221/0x270 [ 251.348452][T10472] ____sys_sendmsg+0x523/0x860 [ 251.348483][T10472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.348502][T10472] ? __fget_files+0x2a/0x420 [ 251.348526][T10472] ? __fget_files+0x2a/0x420 [ 251.348559][T10472] __sys_sendmsg+0x271/0x360 [ 251.348587][T10472] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.348670][T10472] ? do_syscall_64+0xb6/0x230 [ 251.348702][T10472] do_syscall_64+0xf3/0x230 [ 251.348728][T10472] ? clear_bhb_loop+0x45/0xa0 [ 251.348753][T10472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.348773][T10472] RIP: 0033:0x7fb77fd8d169 [ 251.348792][T10472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.348810][T10472] RSP: 002b:00007fb780b69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.348832][T10472] RAX: ffffffffffffffda RBX: 00007fb77ffa5fa0 RCX: 00007fb77fd8d169 [ 251.348848][T10472] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 251.348861][T10472] RBP: 00007fb780b69090 R08: 0000000000000000 R09: 0000000000000000 [ 251.348873][T10472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.348885][T10472] R13: 0000000000000000 R14: 00007fb77ffa5fa0 R15: 00007fff541c0908 [ 251.348918][T10472] [ 251.781730][T10485] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1571'. [ 251.802568][T10485] gretap0: entered allmulticast mode [ 252.102545][T10497] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 252.115873][T10497] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1575'. [ 252.186336][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'. [ 252.285496][T10506] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1575'. [ 252.324658][T10506] unsupported nlmsg_type 40 [ 252.356157][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1578'. [ 252.658903][T10514] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 253.292590][T10528] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1584'. [ 253.440236][T10534] xt_TCPMSS: Only works on TCP SYN packets [ 253.674823][T10545] FAULT_INJECTION: forcing a failure. [ 253.674823][T10545] name failslab, interval 1, probability 0, space 0, times 0 [ 253.715411][T10547] xt_hashlimit: size too large, truncated to 1048576 [ 253.716987][T10545] CPU: 0 UID: 0 PID: 10545 Comm: syz.1.1591 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 253.717028][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.717043][T10545] Call Trace: [ 253.717052][T10545] [ 253.717061][T10545] dump_stack_lvl+0x241/0x360 [ 253.717103][T10545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.717135][T10545] ? __pfx__printk+0x10/0x10 [ 253.717170][T10545] ? __pfx___might_resched+0x10/0x10 [ 253.717203][T10545] should_fail_ex+0x424/0x570 [ 253.717232][T10545] should_failslab+0xac/0x100 [ 253.717265][T10545] kmem_cache_alloc_noprof+0x78/0x390 [ 253.717295][T10545] ? security_file_alloc+0x32/0x310 [ 253.717345][T10545] security_file_alloc+0x32/0x310 [ 253.717374][T10545] init_file+0x90/0x300 [ 253.717397][T10545] alloc_empty_file+0x70/0x1d0 [ 253.717450][T10545] alloc_file_pseudo+0x206/0x320 [ 253.717478][T10545] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 253.717515][T10545] anon_inode_getfd+0xce/0x1e0 [ 253.717554][T10545] map_create+0xdf6/0x11a0 [ 253.717582][T10545] ? bpf_lsm_bpf+0x9/0x10 [ 253.717610][T10545] __sys_bpf+0x744/0x8b0 [ 253.717635][T10545] ? __pfx___sys_bpf+0x10/0x10 [ 253.717672][T10545] ? ksys_write+0x275/0x2d0 [ 253.717712][T10545] __x64_sys_bpf+0x7c/0x90 [ 253.717746][T10545] do_syscall_64+0xf3/0x230 [ 253.717775][T10545] ? clear_bhb_loop+0x45/0xa0 [ 253.717801][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.717822][T10545] RIP: 0033:0x7f53fe58d169 [ 253.717840][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.717859][T10545] RSP: 002b:00007f53ff33d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.717883][T10545] RAX: ffffffffffffffda RBX: 00007f53fe7a5fa0 RCX: 00007f53fe58d169 [ 253.717900][T10545] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 253.717913][T10545] RBP: 00007f53ff33d090 R08: 0000000000000000 R09: 0000000000000000 [ 253.717926][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.717939][T10545] R13: 0000000000000001 R14: 00007f53fe7a5fa0 R15: 00007ffc4735f088 [ 253.717974][T10545] [ 253.913514][T10559] xt_hashlimit: size too large, truncated to 1048576 [ 254.190306][T10569] netlink: 'syz.1.1597': attribute type 10 has an invalid length. [ 254.858509][T10594] __nla_validate_parse: 2 callbacks suppressed [ 254.858532][T10594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1604'. [ 254.864026][T10589] lo speed is unknown, defaulting to 1000 [ 254.864744][T10594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1604'. [ 254.864787][T10594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1604'. [ 254.936940][T10594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1604'. [ 255.018705][T10589] lo speed is unknown, defaulting to 1000 [ 255.031325][T10604] FAULT_INJECTION: forcing a failure. [ 255.031325][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 255.050811][T10605] siw: device registration error -23 [ 255.053212][T10604] CPU: 0 UID: 0 PID: 10604 Comm: syz.1.1610 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 255.053247][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.053262][T10604] Call Trace: [ 255.053271][T10604] [ 255.053280][T10604] dump_stack_lvl+0x241/0x360 [ 255.053324][T10604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.053357][T10604] ? __pfx__printk+0x10/0x10 [ 255.053404][T10604] should_fail_ex+0x424/0x570 [ 255.053437][T10604] should_failslab+0xac/0x100 [ 255.053470][T10604] __kmalloc_cache_noprof+0x73/0x370 [ 255.053501][T10604] ? sctp_add_bind_addr+0x89/0x3a0 [ 255.053539][T10604] sctp_add_bind_addr+0x89/0x3a0 [ 255.053576][T10604] sctp_copy_local_addr_list+0x313/0x500 [ 255.053612][T10604] ? sctp_copy_local_addr_list+0xad/0x500 [ 255.053644][T10604] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 255.053681][T10604] ? sctp_v4_is_any+0x35/0x60 [ 255.053712][T10604] ? sctp_copy_one_addr+0x94/0x360 [ 255.053748][T10604] sctp_bind_addr_copy+0xad/0x3b0 [ 255.053779][T10604] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 255.053812][T10604] sctp_connect_new_asoc+0x337/0x700 [ 255.053841][T10604] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 255.053863][T10604] ? sctp_sendmsg+0xf30/0x3620 [ 255.053893][T10604] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 255.053914][T10604] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 255.053944][T10604] sctp_sendmsg+0x2009/0x3620 [ 255.053993][T10604] ? __pfx_sctp_sendmsg+0x10/0x10 [ 255.054020][T10604] ? aa_sk_perm+0x96f/0xac0 [ 255.054070][T10604] ? inet_sendmsg+0x330/0x390 [ 255.054109][T10604] __sock_sendmsg+0x1a6/0x270 [ 255.054145][T10604] __sys_sendto+0x365/0x4c0 [ 255.054174][T10604] ? __pfx___sys_sendto+0x10/0x10 [ 255.054212][T10604] ? __fget_files+0x2a/0x420 [ 255.054244][T10604] ? ksys_write+0x275/0x2d0 [ 255.054284][T10604] __x64_sys_sendto+0xde/0x100 [ 255.054310][T10604] do_syscall_64+0xf3/0x230 [ 255.054341][T10604] ? clear_bhb_loop+0x45/0xa0 [ 255.054370][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.054392][T10604] RIP: 0033:0x7f53fe58d169 [ 255.054412][T10604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.054431][T10604] RSP: 002b:00007f53ff33d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 255.054457][T10604] RAX: ffffffffffffffda RBX: 00007f53fe7a5fa0 RCX: 00007f53fe58d169 [ 255.054474][T10604] RDX: 0000000000034000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 255.054488][T10604] RBP: 00007f53ff33d090 R08: 0000200000000100 R09: 0000000000000010 [ 255.054502][T10604] R10: 0000000026000854 R11: 0000000000000246 R12: 0000000000000002 [ 255.054516][T10604] R13: 0000000000000000 R14: 00007f53fe7a5fa0 R15: 00007ffc4735f088 [ 255.054553][T10604] [ 255.594296][T10621] FAULT_INJECTION: forcing a failure. [ 255.594296][T10621] name failslab, interval 1, probability 0, space 0, times 0 [ 255.611036][T10621] CPU: 1 UID: 0 PID: 10621 Comm: syz.0.1617 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 255.611073][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.611086][T10621] Call Trace: [ 255.611095][T10621] [ 255.611103][T10621] dump_stack_lvl+0x241/0x360 [ 255.611154][T10621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.611185][T10621] ? __pfx__printk+0x10/0x10 [ 255.611241][T10621] ? __pfx___might_resched+0x10/0x10 [ 255.611274][T10621] should_fail_ex+0x424/0x570 [ 255.611302][T10621] should_failslab+0xac/0x100 [ 255.611333][T10621] __kmalloc_noprof+0xdf/0x4d0 [ 255.611378][T10621] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 255.611399][T10621] ? sock_kmalloc+0xd7/0x160 [ 255.611428][T10621] sock_kmalloc+0xd7/0x160 [ 255.611456][T10621] hash_sendmsg+0x831/0x11c0 [ 255.611506][T10621] ? __pfx_hash_sendmsg+0x10/0x10 [ 255.611531][T10621] __sock_sendmsg+0x221/0x270 [ 255.611563][T10621] ____sys_sendmsg+0x523/0x860 [ 255.611597][T10621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.611616][T10621] ? __fget_files+0x2a/0x420 [ 255.611639][T10621] ? __fget_files+0x2a/0x420 [ 255.611666][T10621] __sys_sendmmsg+0x3a0/0x7b0 [ 255.611703][T10621] ? __pfx___sys_sendmmsg+0x10/0x10 [ 255.611778][T10621] ? rcu_read_lock_any_held+0xbb/0x160 [ 255.611806][T10621] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 255.611857][T10621] ? vfs_write+0xb29/0xd10 [ 255.611893][T10621] ? ksys_write+0x24e/0x2d0 [ 255.611921][T10621] ? __mutex_unlock_slowpath+0x229/0x800 [ 255.611984][T10621] ? ksys_write+0x275/0x2d0 [ 255.612023][T10621] __x64_sys_sendmmsg+0xa0/0xb0 [ 255.612053][T10621] do_syscall_64+0xf3/0x230 [ 255.612081][T10621] ? clear_bhb_loop+0x45/0xa0 [ 255.612107][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.612127][T10621] RIP: 0033:0x7fb77fd8d169 [ 255.612154][T10621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.612172][T10621] RSP: 002b:00007fb780b69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 255.612196][T10621] RAX: ffffffffffffffda RBX: 00007fb77ffa5fa0 RCX: 00007fb77fd8d169 [ 255.612211][T10621] RDX: 0000000000000001 RSI: 0000200000004140 RDI: 0000000000000004 [ 255.612225][T10621] RBP: 00007fb780b69090 R08: 0000000000000000 R09: 0000000000000000 [ 255.612237][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.612250][T10621] R13: 0000000000000000 R14: 00007fb77ffa5fa0 R15: 00007fff541c0908 [ 255.612284][T10621] [ 255.865499][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.010110][T10620] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 256.325001][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 256.430535][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1622'. [ 256.460278][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1622'. [ 256.613802][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 256.674116][T10656] xt_hashlimit: size too large, truncated to 1048576 [ 256.732886][T10662] xt_hashlimit: size too large, truncated to 1048576 [ 257.366528][T10676] lo speed is unknown, defaulting to 1000 [ 257.380316][T10676] lo speed is unknown, defaulting to 1000 [ 258.168594][T10710] xt_hashlimit: size too large, truncated to 1048576 [ 258.188251][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 258.234700][T10718] xt_hashlimit: size too large, truncated to 1048576 [ 259.541066][T10765] smc: adding net device pim6reg1 with user defined pnetid SYZ2 [ 259.557738][T10765] xt_NFQUEUE: number of total queues is 0 [ 259.574346][ T979] IPVS: starting estimator thread 0... [ 259.617005][T10764] smc: removing net device pim6reg1 with user defined pnetid SYZ2 [ 259.671783][T10766] IPVS: using max 29 ests per chain, 69600 per kthread [ 259.691179][T10768] xt_hashlimit: size too large, truncated to 1048576 [ 259.748851][T10773] xt_hashlimit: size too large, truncated to 1048576 [ 259.860148][T10775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1667'. [ 260.090374][T10787] netlink: 'syz.2.1669': attribute type 27 has an invalid length. [ 260.141184][T10787] macvtap1: left allmulticast mode [ 260.158726][T10787] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 260.177328][T10787] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 260.186804][T10787] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 260.211778][T10787] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 260.240798][T10787] gretap0: left promiscuous mode [ 260.262756][T10793] netlink: 'syz.4.1672': attribute type 10 has an invalid length. [ 260.288537][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 260.613685][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'. [ 260.661103][T10813] lo speed is unknown, defaulting to 1000 [ 260.669386][T10813] lo speed is unknown, defaulting to 1000 [ 260.953128][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 260.962848][T10827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 260.985042][T10827] : entered promiscuous mode [ 260.996373][T10827] bond_slave_0: entered promiscuous mode [ 261.021537][T10827] bond_slave_1: entered promiscuous mode [ 261.028467][T10827] bridge0: entered promiscuous mode [ 261.063225][T10827] ip6gretap0: entered promiscuous mode [ 261.070720][T10827] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 261.085668][T10827] Cannot create hsr debugfs directory [ 261.094453][T10827] hsr1: Slave A () is not up; please bring it up to get a fully working HSR network [ 261.109324][T10827] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 261.842635][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1698'. [ 261.865579][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1698'. [ 261.910692][T10862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1699'. [ 262.069703][T10873] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1702'. [ 262.087734][T10873] tipc: Enabling of bearer rejected, failed to enable media [ 262.322985][T10884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'. [ 262.427390][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1709'. [ 262.622396][T10893] tun0: tun_chr_ioctl cmd 2148553947 [ 262.963693][T10908] 8021q: VLANs not supported on gre0 [ 263.029374][T10912] xt_hashlimit: max too large, truncated to 1048576 [ 264.022828][T10955] lo speed is unknown, defaulting to 1000 [ 264.033817][T10955] lo speed is unknown, defaulting to 1000 [ 264.237832][T10966] netlink: 'syz.3.1732': attribute type 1 has an invalid length. [ 265.384695][T10999] Bluetooth: MGMT ver 1.23 [ 265.594730][T11009] __nla_validate_parse: 10 callbacks suppressed [ 265.594754][T11009] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1748'. [ 265.894237][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'. [ 266.083337][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 266.210601][T11037] openvswitch: netlink: Flow actions attr not present in new flow. [ 266.394203][T11040] netlink: 'syz.0.1758': attribute type 10 has an invalid length. [ 266.711697][T11057] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1764'. [ 267.011136][T11069] netlink: 'syz.3.1770': attribute type 10 has an invalid length. [ 267.423158][T11078] lo speed is unknown, defaulting to 1000 [ 267.469258][T11078] lo speed is unknown, defaulting to 1000 [ 267.703269][T11085] lo speed is unknown, defaulting to 1000 [ 267.726933][T11085] lo speed is unknown, defaulting to 1000 [ 268.058100][T11101] xt_hashlimit: size too large, truncated to 1048576 [ 268.125390][T11104] xt_hashlimit: size too large, truncated to 1048576 [ 268.243672][T11085] FAULT_INJECTION: forcing a failure. [ 268.243672][T11085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.303412][T11085] CPU: 0 UID: 0 PID: 11085 Comm: syz.0.1776 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 268.303444][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 268.303458][T11085] Call Trace: [ 268.303467][T11085] [ 268.303475][T11085] dump_stack_lvl+0x241/0x360 [ 268.303528][T11085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.303559][T11085] ? __pfx__printk+0x10/0x10 [ 268.303602][T11085] should_fail_ex+0x424/0x570 [ 268.303629][T11085] _copy_from_user+0x2d/0xb0 [ 268.303667][T11085] do_sock_getsockopt+0x1d5/0x740 [ 268.303694][T11085] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 268.303713][T11085] ? __fget_files+0x2a/0x420 [ 268.303733][T11085] ? __fget_files+0x39d/0x420 [ 268.303751][T11085] ? __fget_files+0x2a/0x420 [ 268.303777][T11085] __x64_sys_getsockopt+0x2a3/0x370 [ 268.303807][T11085] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 268.303835][T11085] ? do_syscall_64+0xb6/0x230 [ 268.303865][T11085] do_syscall_64+0xf3/0x230 [ 268.303892][T11085] ? clear_bhb_loop+0x45/0xa0 [ 268.303916][T11085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.303936][T11085] RIP: 0033:0x7fb77fd8d169 [ 268.303954][T11085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.303972][T11085] RSP: 002b:00007fb780b69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 268.303995][T11085] RAX: ffffffffffffffda RBX: 00007fb77ffa5fa0 RCX: 00007fb77fd8d169 [ 268.304010][T11085] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 268.304022][T11085] RBP: 00007fb780b69090 R08: 0000200000000100 R09: 0000000000000000 [ 268.304036][T11085] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 268.304050][T11085] R13: 0000000000000000 R14: 00007fb77ffa5fa0 R15: 00007fff541c0908 [ 268.304083][T11085] [ 269.301345][T11133] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 269.333304][T11135] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 269.613179][T11141] netlink: 'syz.2.1794': attribute type 4 has an invalid length. [ 270.192375][T11165] tipc: Enabling of bearer rejected, failed to enable media [ 270.495084][T11141] syz.2.1794 (11141) used greatest stack depth: 19400 bytes left [ 270.754067][T11194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.026958][T11204] netlink: 'syz.3.1816': attribute type 10 has an invalid length. [ 271.368904][T11219] pim6reg1: entered promiscuous mode [ 271.374270][T11219] pim6reg1: entered allmulticast mode [ 271.485773][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 271.496166][T11226] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1824'. [ 271.738902][T11237] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1826'. [ 271.931449][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'. [ 271.944129][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'. [ 271.975689][T11242] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 272.004189][T11242] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1830'. [ 272.029373][T11249] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1828'. [ 272.064627][ T5857] block nbd1: Receive control failed (result -107) [ 272.140242][T11248] netlink: 'syz.0.1831': attribute type 10 has an invalid length. [ 272.354233][T11255] syzkaller0: entered promiscuous mode [ 272.367867][T11255] syzkaller0: entered allmulticast mode [ 272.375019][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1832'. [ 272.942590][T11270] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1835'. [ 272.972050][T11270] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1835'. [ 274.354864][T11283] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.418320][T11262] lo speed is unknown, defaulting to 1000 [ 274.439073][T11262] lo speed is unknown, defaulting to 1000 [ 274.490242][T11283] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.525158][T11287] bridge0: port 1(vlan2) entered blocking state [ 274.532436][T11287] bridge0: port 1(vlan2) entered disabled state [ 274.541964][T11287] vlan2: entered allmulticast mode [ 274.553331][T11287] bridge0: entered allmulticast mode [ 274.565204][T11287] vlan2: left allmulticast mode [ 274.574012][T11287] bridge0: left allmulticast mode [ 274.630775][T11283] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.735686][T11294] netlink: 'syz.3.1844': attribute type 10 has an invalid length. [ 274.757616][T11283] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.950040][T11283] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.988330][T11283] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.017795][T11283] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.072055][T11283] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.574871][T11328] netlink: 'syz.0.1858': attribute type 10 has an invalid length. [ 276.062029][T11344] lo speed is unknown, defaulting to 1000 [ 276.084505][T11344] lo speed is unknown, defaulting to 1000 [ 276.558312][T11362] FAULT_INJECTION: forcing a failure. [ 276.558312][T11362] name failslab, interval 1, probability 0, space 0, times 0 [ 276.616761][T11362] CPU: 0 UID: 0 PID: 11362 Comm: syz.0.1872 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 276.616793][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.616806][T11362] Call Trace: [ 276.616815][T11362] [ 276.616824][T11362] dump_stack_lvl+0x241/0x360 [ 276.616862][T11362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.616892][T11362] ? __pfx__printk+0x10/0x10 [ 276.616934][T11362] ? __pfx___might_resched+0x10/0x10 [ 276.616966][T11362] should_fail_ex+0x424/0x570 [ 276.616994][T11362] should_failslab+0xac/0x100 [ 276.617025][T11362] kmem_cache_alloc_noprof+0x78/0x390 [ 276.617053][T11362] ? ep_insert+0x27d/0x1ac0 [ 276.617096][T11362] ep_insert+0x27d/0x1ac0 [ 276.617141][T11362] ? __pfx_ep_insert+0x10/0x10 [ 276.617167][T11362] ? __pfx___mutex_lock+0x10/0x10 [ 276.617206][T11362] ? bpf_lsm_capable+0x9/0x10 [ 276.617239][T11362] do_epoll_ctl+0x8bc/0xf70 [ 276.617275][T11362] __x64_sys_epoll_ctl+0x163/0x1a0 [ 276.617301][T11362] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 276.617330][T11362] ? do_syscall_64+0xb6/0x230 [ 276.617354][T11362] do_syscall_64+0xf3/0x230 [ 276.617376][T11362] ? clear_bhb_loop+0x45/0xa0 [ 276.617395][T11362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.617411][T11362] RIP: 0033:0x7fb77fd8d169 [ 276.617426][T11362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.617440][T11362] RSP: 002b:00007fb780b69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 276.617459][T11362] RAX: ffffffffffffffda RBX: 00007fb77ffa5fa0 RCX: 00007fb77fd8d169 [ 276.617472][T11362] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 276.617483][T11362] RBP: 00007fb780b69090 R08: 0000000000000000 R09: 0000000000000000 [ 276.617493][T11362] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 276.617504][T11362] R13: 0000000000000000 R14: 00007fb77ffa5fa0 R15: 00007fff541c0908 [ 276.617531][T11362] [ 276.849162][T11372] __nla_validate_parse: 2 callbacks suppressed [ 276.849182][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 276.974564][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 276.983935][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1875'. [ 277.116180][T11381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1877'. [ 278.052957][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 278.082427][T11411] lo speed is unknown, defaulting to 1000 [ 278.096076][T11411] lo speed is unknown, defaulting to 1000 [ 278.295264][T11408] : (slave bond_slave_0): Releasing backup interface [ 278.307524][T11408] bond_slave_0 (unregistering): left promiscuous mode [ 278.366136][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1889'. [ 279.484862][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 279.574972][T11439] syzkaller1: entered promiscuous mode [ 279.584603][T11439] syzkaller1: entered allmulticast mode [ 279.725770][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 280.035202][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 280.047548][T11458] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.074378][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1900'. [ 280.227675][T11464] netlink: 'syz.3.1901': attribute type 10 has an invalid length. [ 280.285879][T11471] tipc: Enabling of bearer rejected, failed to enable media [ 281.524073][T11511] netlink: 'syz.2.1918': attribute type 10 has an invalid length. [ 281.724054][T11520] xt_SECMARK: invalid mode: 0 [ 281.776316][T11523] xt_hashlimit: size too large, truncated to 1048576 [ 281.828661][T11527] xt_hashlimit: size too large, truncated to 1048576 [ 281.999532][T11536] __nla_validate_parse: 7 callbacks suppressed [ 281.999556][T11536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1925'. [ 282.048815][T11534] bond3: entered allmulticast mode [ 282.245601][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 282.520838][T11560] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1934'. [ 282.660960][T11565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1936'. [ 283.338229][T11596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'. [ 283.371389][T11596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1946'. [ 283.389238][T11598] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1947'. [ 283.398708][T11598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1947'. [ 283.416582][T11598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1947'. [ 283.424592][T11603] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.454898][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1950'. [ 284.304468][T11636] x_tables: duplicate underflow at hook 3 [ 285.035863][T11673] lo speed is unknown, defaulting to 1000 [ 285.061302][T11673] lo speed is unknown, defaulting to 1000 [ 285.104883][T11682] veth1_to_bond: entered allmulticast mode [ 285.141622][T11682] veth1_to_bond: entered promiscuous mode [ 285.272123][T11681] lo speed is unknown, defaulting to 1000 [ 285.295823][T11681] lo speed is unknown, defaulting to 1000 [ 285.337941][T11672] veth1_to_bond: left promiscuous mode [ 285.359165][T11672] veth1_to_bond: left allmulticast mode [ 285.673463][T11690] lo speed is unknown, defaulting to 1000 [ 285.692162][T11690] lo speed is unknown, defaulting to 1000 [ 285.883358][T11707] netlink: 'syz.3.1987': attribute type 10 has an invalid length. [ 285.939723][T11707] team0: Port device dummy0 added [ 286.009553][T11707] team0: Port device dummy0 removed [ 286.055587][T11707] : (slave bond_slave_0): Releasing backup interface [ 286.094841][T11707] bond_slave_0: left promiscuous mode [ 286.120637][T11707] : (slave bond_slave_1): Releasing backup interface [ 286.144581][T11714] netlink: 'syz.0.1989': attribute type 10 has an invalid length. [ 286.158142][T11707] bond_slave_1: left promiscuous mode [ 286.202982][T11707] team0: Port device team_slave_0 removed [ 286.250479][T11707] team0: Port device team_slave_1 removed [ 286.270427][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.289104][T11707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.312367][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.334787][T11707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.832896][T11734] lo speed is unknown, defaulting to 1000 [ 286.912192][T11741] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 286.964331][T11734] lo speed is unknown, defaulting to 1000 [ 287.056317][T11740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.118773][T11740] bond3: (slave bond4): making interface the new active one [ 287.140645][T11740] bond3: (slave bond4): Enslaving as an active interface with an up link [ 287.191500][T11730] lo speed is unknown, defaulting to 1000 [ 287.300398][T11756] __nla_validate_parse: 3 callbacks suppressed [ 287.300420][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 287.333364][T11730] lo speed is unknown, defaulting to 1000 [ 287.357014][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 287.521291][T11758] lo speed is unknown, defaulting to 1000 [ 287.552236][T11758] lo speed is unknown, defaulting to 1000 [ 288.336393][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 288.476185][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2014'. [ 288.576385][T11797] netlink: 'syz.0.2016': attribute type 10 has an invalid length. [ 288.677981][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2018'. [ 288.705511][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2018'. [ 288.740186][T11799] lo speed is unknown, defaulting to 1000 [ 288.746966][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2018'. [ 288.757902][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2018'. [ 288.776078][T11799] lo speed is unknown, defaulting to 1000 [ 289.123360][T11815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.136125][T11815] FAULT_INJECTION: forcing a failure. [ 289.136125][T11815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.153855][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.2.2024 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 289.153888][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.153901][T11815] Call Trace: [ 289.153909][T11815] [ 289.153918][T11815] dump_stack_lvl+0x241/0x360 [ 289.153956][T11815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.153987][T11815] ? __pfx__printk+0x10/0x10 [ 289.154036][T11815] should_fail_ex+0x424/0x570 [ 289.154065][T11815] _copy_to_user+0x31/0xb0 [ 289.154098][T11815] simple_read_from_buffer+0xc4/0x170 [ 289.154135][T11815] proc_fail_nth_read+0x1ef/0x260 [ 289.154160][T11815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.154186][T11815] ? rw_verify_area+0x246/0x630 [ 289.154209][T11815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.154233][T11815] vfs_read+0x21f/0xb90 [ 289.154270][T11815] ? __pfx___mutex_lock+0x10/0x10 [ 289.154299][T11815] ? __pfx_vfs_read+0x10/0x10 [ 289.154327][T11815] ? __fget_files+0x2a/0x420 [ 289.154348][T11815] ? __fget_files+0x39d/0x420 [ 289.154366][T11815] ? __fget_files+0x2a/0x420 [ 289.154395][T11815] ksys_read+0x19d/0x2d0 [ 289.154422][T11815] ? __pfx_ksys_read+0x10/0x10 [ 289.154454][T11815] ? do_syscall_64+0xb6/0x230 [ 289.154485][T11815] do_syscall_64+0xf3/0x230 [ 289.154512][T11815] ? clear_bhb_loop+0x45/0xa0 [ 289.154538][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.154559][T11815] RIP: 0033:0x7f927bb8bb7c [ 289.154578][T11815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 289.154608][T11815] RSP: 002b:00007f927c931030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.154629][T11815] RAX: ffffffffffffffda RBX: 00007f927bda5fa0 RCX: 00007f927bb8bb7c [ 289.154645][T11815] RDX: 000000000000000f RSI: 00007f927c9310a0 RDI: 0000000000000004 [ 289.154657][T11815] RBP: 00007f927c931090 R08: 0000000000000000 R09: 0000000000000000 [ 289.154670][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.154681][T11815] R13: 0000000000000000 R14: 00007f927bda5fa0 R15: 00007fffa088e718 [ 289.154710][T11815] [ 289.388350][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2023'. [ 289.504638][T11823] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2026'. [ 290.424709][T11850] lo speed is unknown, defaulting to 1000 [ 290.470762][T11850] lo speed is unknown, defaulting to 1000 [ 291.407431][T11879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 291.433907][T11879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 291.446767][T11879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 291.465956][T11879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 291.988393][T11896] xt_hashlimit: size too large, truncated to 1048576 [ 292.059198][T11904] xt_hashlimit: size too large, truncated to 1048576 [ 292.363119][T11900] syzkaller0: entered promiscuous mode [ 292.393016][T11900] syzkaller0: entered allmulticast mode [ 292.482150][T11910] lo speed is unknown, defaulting to 1000 [ 292.495738][T11910] lo speed is unknown, defaulting to 1000 [ 292.590358][T11900] __nla_validate_parse: 6 callbacks suppressed [ 292.590380][T11900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2052'. [ 294.644244][T11940] FAULT_INJECTION: forcing a failure. [ 294.644244][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 294.661031][T11940] CPU: 1 UID: 0 PID: 11940 Comm: syz.3.2065 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 294.661054][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.661063][T11940] Call Trace: [ 294.661070][T11940] [ 294.661077][T11940] dump_stack_lvl+0x241/0x360 [ 294.661121][T11940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.661160][T11940] ? __pfx__printk+0x10/0x10 [ 294.661191][T11940] should_fail_ex+0x424/0x570 [ 294.661212][T11940] should_failslab+0xac/0x100 [ 294.661236][T11940] __kmalloc_cache_noprof+0x73/0x370 [ 294.661257][T11940] ? sctp_add_bind_addr+0x89/0x3a0 [ 294.661283][T11940] sctp_add_bind_addr+0x89/0x3a0 [ 294.661307][T11940] sctp_copy_local_addr_list+0x313/0x500 [ 294.661331][T11940] ? sctp_copy_local_addr_list+0xad/0x500 [ 294.661352][T11940] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 294.661376][T11940] ? sctp_v4_is_any+0x35/0x60 [ 294.661396][T11940] ? sctp_copy_one_addr+0x94/0x360 [ 294.661420][T11940] sctp_bind_addr_copy+0xad/0x3b0 [ 294.661441][T11940] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 294.661462][T11940] sctp_connect_new_asoc+0x337/0x700 [ 294.661485][T11940] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 294.661499][T11940] ? sctp_sendmsg+0xf30/0x3620 [ 294.661518][T11940] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 294.661532][T11940] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 294.661552][T11940] sctp_sendmsg+0x2009/0x3620 [ 294.661583][T11940] ? __pfx_sctp_sendmsg+0x10/0x10 [ 294.661601][T11940] ? aa_sk_perm+0x96f/0xac0 [ 294.661635][T11940] ? inet_sendmsg+0x330/0x390 [ 294.661656][T11940] __sock_sendmsg+0x1a6/0x270 [ 294.661679][T11940] __sys_sendto+0x365/0x4c0 [ 294.661697][T11940] ? __pfx___sys_sendto+0x10/0x10 [ 294.661722][T11940] ? __fget_files+0x2a/0x420 [ 294.661743][T11940] ? ksys_write+0x275/0x2d0 [ 294.661770][T11940] __x64_sys_sendto+0xde/0x100 [ 294.661789][T11940] do_syscall_64+0xf3/0x230 [ 294.661820][T11940] ? clear_bhb_loop+0x45/0xa0 [ 294.661846][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.661867][T11940] RIP: 0033:0x7f3ffad8d169 [ 294.661886][T11940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.661904][T11940] RSP: 002b:00007f3ffbb74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 294.661929][T11940] RAX: ffffffffffffffda RBX: 00007f3ffafa5fa0 RCX: 00007f3ffad8d169 [ 294.661941][T11940] RDX: 0000000000034000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 294.661950][T11940] RBP: 00007f3ffbb74090 R08: 0000200000000100 R09: 0000000000000010 [ 294.661960][T11940] R10: 0000000026000854 R11: 0000000000000246 R12: 0000000000000002 [ 294.661969][T11940] R13: 0000000000000000 R14: 00007f3ffafa5fa0 R15: 00007ffc9fdffce8 [ 294.661993][T11940] [ 295.384457][T11937] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.522903][T11947] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.548567][T11937] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.602998][T11948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2068'. [ 295.626766][T11948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2068'. [ 295.680842][T11937] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.803014][T11937] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.922821][T11964] IPVS: length: 78 != 8 [ 295.953193][T11937] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.987299][T11937] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.014904][T11937] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.055858][T11937] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.772344][T11989] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 296.911353][T11996] FAULT_INJECTION: forcing a failure. [ 296.911353][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 296.924994][T11995] xt_hashlimit: size too large, truncated to 1048576 [ 296.936765][T11996] CPU: 1 UID: 0 PID: 11996 Comm: syz.0.2082 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 296.936796][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 296.936809][T11996] Call Trace: [ 296.936817][T11996] [ 296.936825][T11996] dump_stack_lvl+0x241/0x360 [ 296.936875][T11996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.936903][T11996] ? __pfx__printk+0x10/0x10 [ 296.936934][T11996] ? __pfx___might_resched+0x10/0x10 [ 296.936962][T11996] should_fail_ex+0x424/0x570 [ 296.936987][T11996] should_failslab+0xac/0x100 [ 296.937016][T11996] __kmalloc_noprof+0xdf/0x4d0 [ 296.937040][T11996] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 296.937068][T11996] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 296.937103][T11996] tomoyo_realpath_from_path+0xcf/0x5e0 [ 296.937146][T11996] tomoyo_path_number_perm+0x245/0x790 [ 296.937176][T11996] ? tomoyo_path_number_perm+0x215/0x790 [ 296.937203][T11996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.937236][T11996] ? ksys_write+0x24e/0x2d0 [ 296.937266][T11996] ? __lock_acquire+0xad5/0xd80 [ 296.937309][T11996] ? __fget_files+0x2a/0x420 [ 296.937332][T11996] ? __fget_files+0x2a/0x420 [ 296.937352][T11996] ? __fget_files+0x2a/0x420 [ 296.937375][T11996] security_file_ioctl+0xc6/0x2a0 [ 296.937400][T11996] __se_sys_ioctl+0x46/0x160 [ 296.937426][T11996] do_syscall_64+0xf3/0x230 [ 296.937452][T11996] ? clear_bhb_loop+0x45/0xa0 [ 296.937474][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.937493][T11996] RIP: 0033:0x7fb77fd8d169 [ 296.937510][T11996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.937527][T11996] RSP: 002b:00007fb780b69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.937547][T11996] RAX: ffffffffffffffda RBX: 00007fb77ffa5fa0 RCX: 00007fb77fd8d169 [ 296.937561][T11996] RDX: 0000200000000080 RSI: 0000000040107446 RDI: 0000000000000003 [ 296.937573][T11996] RBP: 00007fb780b69090 R08: 0000000000000000 R09: 0000000000000000 [ 296.937585][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.937596][T11996] R13: 0000000000000000 R14: 00007fb77ffa5fa0 R15: 00007fff541c0908 [ 296.937627][T11996] [ 296.937660][T11996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.147790][T12001] xt_hashlimit: size too large, truncated to 1048576 [ 297.286322][T12006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2084'. [ 297.300486][T12006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2084'. [ 297.472673][T12014] netlink: 'syz.0.2086': attribute type 31 has an invalid length. [ 298.025775][T12037] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.036264][T12037] bond0: (slave bond3): Enslaving as an active interface with an up link [ 298.068911][T12040] netlink: 'syz.3.2093': attribute type 10 has an invalid length. [ 298.259794][T12046] bridge0: port 3(syz_tun) entered blocking state [ 298.274460][T12046] bridge0: port 3(syz_tun) entered disabled state [ 298.282142][T12046] syz_tun: entered allmulticast mode [ 298.294732][T12046] syz_tun: entered promiscuous mode [ 298.459479][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 298.609696][T12061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.632385][T12061] bond0: (slave bond4): Enslaving as an active interface with an up link [ 298.945161][T12069] : (slave bridge0): Releasing backup interface [ 299.243685][T12083] lo speed is unknown, defaulting to 1000 [ 299.251598][T12083] lo speed is unknown, defaulting to 1000 [ 299.510750][T12088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.525525][T12111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.845321][T12120] netlink: 'syz.2.2114': attribute type 27 has an invalid length. [ 299.928522][T12123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2115'. [ 300.054513][T12127] x_tables: duplicate underflow at hook 2 [ 300.226007][T12127] netlink: 'syz.0.2113': attribute type 29 has an invalid length. [ 300.278694][T12135] netlink: 'syz.0.2113': attribute type 29 has an invalid length. [ 300.360776][T12127] netlink: 'syz.0.2113': attribute type 10 has an invalid length. [ 300.488020][T12146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2120'. [ 300.506281][T12127] veth1_macvtap: left promiscuous mode [ 300.536118][T12127] team0: Device veth1_macvtap failed to register rx_handler [ 301.308410][T12174] siw: device registration error -23 [ 301.404897][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 301.570033][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2133'. [ 301.621774][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2133'. [ 302.161976][T12215] FAULT_INJECTION: forcing a failure. [ 302.161976][T12215] name failslab, interval 1, probability 0, space 0, times 0 [ 302.240974][T12215] CPU: 0 UID: 0 PID: 12215 Comm: syz.1.2141 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 302.241007][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.241019][T12215] Call Trace: [ 302.241027][T12215] [ 302.241037][T12215] dump_stack_lvl+0x241/0x360 [ 302.241077][T12215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.241107][T12215] ? __pfx__printk+0x10/0x10 [ 302.241134][T12215] ? kmem_cache_alloc_node_noprof+0x24e/0x3b0 [ 302.241174][T12215] should_fail_ex+0x424/0x570 [ 302.241203][T12215] should_failslab+0xac/0x100 [ 302.241234][T12215] kmem_cache_alloc_noprof+0x78/0x390 [ 302.241263][T12215] ? skb_clone+0x20c/0x390 [ 302.241292][T12215] skb_clone+0x20c/0x390 [ 302.241319][T12215] pfkey_broadcast_one+0x99/0x330 [ 302.241350][T12215] pfkey_broadcast+0x20d/0x400 [ 302.241374][T12215] ? pfkey_broadcast+0x45/0x400 [ 302.241402][T12215] pfkey_send_notify+0x75c/0xda0 [ 302.241427][T12215] ? __pfx_pfkey_send_notify+0x10/0x10 [ 302.241450][T12215] km_state_notify+0x116/0x1f0 [ 302.241476][T12215] ? km_state_notify+0x26/0x1f0 [ 302.241505][T12215] pfkey_add+0x1e6b/0x2e00 [ 302.241551][T12215] ? __pfx_pfkey_add+0x10/0x10 [ 302.241592][T12215] ? pfkey_broadcast+0x45/0x400 [ 302.241611][T12215] ? pfkey_broadcast+0x3e3/0x400 [ 302.241641][T12215] pfkey_sendmsg+0xc96/0x1140 [ 302.241679][T12215] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 302.241723][T12215] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.241749][T12215] ? __import_iovec+0x585/0x830 [ 302.241780][T12215] ? aa_sock_msg_perm+0x91/0x160 [ 302.241814][T12215] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 302.241837][T12215] __sock_sendmsg+0x221/0x270 [ 302.241877][T12215] ____sys_sendmsg+0x523/0x860 [ 302.241910][T12215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.241930][T12215] ? __fget_files+0x2a/0x420 [ 302.241953][T12215] ? __fget_files+0x2a/0x420 [ 302.241987][T12215] __sys_sendmsg+0x271/0x360 [ 302.242016][T12215] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.242099][T12215] ? do_syscall_64+0xb6/0x230 [ 302.242130][T12215] do_syscall_64+0xf3/0x230 [ 302.242156][T12215] ? clear_bhb_loop+0x45/0xa0 [ 302.242181][T12215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.242201][T12215] RIP: 0033:0x7f53fe58d169 [ 302.242219][T12215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.242236][T12215] RSP: 002b:00007f53ff33d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.242258][T12215] RAX: ffffffffffffffda RBX: 00007f53fe7a5fa0 RCX: 00007f53fe58d169 [ 302.242273][T12215] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 302.242286][T12215] RBP: 00007f53ff33d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.242298][T12215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.242310][T12215] R13: 0000000000000000 R14: 00007f53fe7a5fa0 R15: 00007ffc4735f088 [ 302.242342][T12215] [ 302.606006][T12224] lo speed is unknown, defaulting to 1000 [ 302.613619][T12224] lo speed is unknown, defaulting to 1000 [ 303.549145][T12256] netlink: 'syz.1.2156': attribute type 10 has an invalid length. [ 303.676194][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2158'. [ 303.695005][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2158'. [ 303.708006][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2158'. [ 303.721542][ T30] audit: type=1800 audit(1744449720.660:2): pid=12246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2152" name="memory.events" dev="tmpfs" ino=2350 res=0 errno=0 [ 304.278643][T12280] xt_SECMARK: invalid mode: 0 [ 305.114719][T12293] bond2: entered allmulticast mode [ 305.353004][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 305.376084][T12308] x_tables: duplicate underflow at hook 2 [ 305.531792][T12319] x_tables: duplicate underflow at hook 2 [ 305.615453][T12326] netlink: 'syz.0.2180': attribute type 16 has an invalid length. [ 305.625045][T12326] netlink: 'syz.0.2180': attribute type 17 has an invalid length. [ 305.640065][T12325] netlink: 'syz.1.2178': attribute type 10 has an invalid length. [ 305.654267][T12325] veth1_macvtap: left promiscuous mode [ 305.663969][T12325] team0: Device veth1_macvtap failed to register rx_handler [ 305.760865][T12326] gretap0: left promiscuous mode [ 305.783827][T12326] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 305.805813][T12326] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 305.813411][T12332] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2183'. [ 305.839558][T12326] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 305.857077][T12326] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 306.270454][T12343] netlink: 'syz.3.2188': attribute type 10 has an invalid length. [ 306.349928][T12341] lo speed is unknown, defaulting to 1000 [ 306.370690][T12346] netlink: 'syz.1.2189': attribute type 10 has an invalid length. [ 306.390269][T12341] lo speed is unknown, defaulting to 1000 [ 306.523503][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 306.686095][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2195'. [ 306.747074][T12359] FAULT_INJECTION: forcing a failure. [ 306.747074][T12359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.791750][T12359] CPU: 0 UID: 0 PID: 12359 Comm: syz.3.2193 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 306.791778][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.791790][T12359] Call Trace: [ 306.791797][T12359] [ 306.791804][T12359] dump_stack_lvl+0x241/0x360 [ 306.791841][T12359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.791870][T12359] ? __pfx__printk+0x10/0x10 [ 306.791909][T12359] should_fail_ex+0x424/0x570 [ 306.791936][T12359] _copy_from_iter+0x211/0x1c70 [ 306.791967][T12359] ? alloc_pages_mpol+0x4e6/0x690 [ 306.791999][T12359] ? __pfx__copy_from_iter+0x10/0x10 [ 306.792030][T12359] ? set_page_refcounted+0xa1/0x1e0 [ 306.792057][T12359] ? alloc_pages_noprof+0x136/0x190 [ 306.792081][T12359] ? page_copy_sane+0x46/0x260 [ 306.792109][T12359] copy_page_from_iter+0x7a/0x100 [ 306.792138][T12359] tun_get_user+0x1f6c/0x47c0 [ 306.792159][T12359] ? tun_get_user+0x852/0x47c0 [ 306.792193][T12359] ? aa_file_perm+0x139/0xf60 [ 306.792223][T12359] ? aa_file_perm+0x3f1/0xf60 [ 306.792251][T12359] ? __pfx_tun_get_user+0x10/0x10 [ 306.792287][T12359] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 306.792327][T12359] ? tun_get+0x1e/0x2f0 [ 306.792357][T12359] ? tun_get+0x1e/0x2f0 [ 306.792383][T12359] ? tun_get+0x27d/0x2f0 [ 306.792421][T12359] tun_chr_write_iter+0x10d/0x1f0 [ 306.792452][T12359] vfs_write+0x70f/0xd10 [ 306.792481][T12359] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 306.792511][T12359] ? __pfx_vfs_write+0x10/0x10 [ 306.792535][T12359] ? __fget_files+0x2a/0x420 [ 306.792557][T12359] ? __fget_files+0x2a/0x420 [ 306.792584][T12359] ksys_write+0x19d/0x2d0 [ 306.792609][T12359] ? __pfx_ksys_write+0x10/0x10 [ 306.792638][T12359] ? do_syscall_64+0xb6/0x230 [ 306.792667][T12359] do_syscall_64+0xf3/0x230 [ 306.792691][T12359] ? clear_bhb_loop+0x45/0xa0 [ 306.792714][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.792733][T12359] RIP: 0033:0x7f3ffad8bc1f [ 306.792750][T12359] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 306.792767][T12359] RSP: 002b:00007f3ffbb74000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 306.792789][T12359] RAX: ffffffffffffffda RBX: 00007f3ffafa5fa0 RCX: 00007f3ffad8bc1f [ 306.792803][T12359] RDX: 0000000000000019 RSI: 0000200000000280 RDI: 00000000000000c8 [ 306.792816][T12359] RBP: 00007f3ffbb74090 R08: 0000000000000000 R09: 0000000000000000 [ 306.792829][T12359] R10: 0000000000000019 R11: 0000000000000293 R12: 0000000000000001 [ 306.792840][T12359] R13: 0000000000000000 R14: 00007f3ffafa5fa0 R15: 00007ffc9fdffce8 [ 306.792871][T12359] [ 307.320910][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2197'. [ 307.601369][T12377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2202'. [ 307.631009][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2201'. [ 307.828535][T12387] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 308.326783][T12394] lo speed is unknown, defaulting to 1000 [ 308.359806][T12405] netlink: 'syz.1.2213': attribute type 8 has an invalid length. [ 308.366796][T12394] lo speed is unknown, defaulting to 1000 [ 308.613968][T12409] xt_hashlimit: size too large, truncated to 1048576 [ 308.671475][T12412] xt_hashlimit: size too large, truncated to 1048576 [ 308.999308][T12425] __nla_validate_parse: 4 callbacks suppressed [ 308.999329][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 309.594883][T12440] x_tables: duplicate underflow at hook 2 [ 309.636586][T12435] lo speed is unknown, defaulting to 1000 [ 309.662179][T12250] Set syz1 is full, maxelem 65536 reached [ 309.677181][T12435] lo speed is unknown, defaulting to 1000 [ 309.730335][T12441] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 309.798007][T12441] team0: Device veth1_macvtap failed to register rx_handler [ 310.060224][T12435] FAULT_INJECTION: forcing a failure. [ 310.060224][T12435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.074425][T12435] CPU: 1 UID: 0 PID: 12435 Comm: syz.3.2223 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 310.074456][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.074469][T12435] Call Trace: [ 310.074478][T12435] [ 310.074486][T12435] dump_stack_lvl+0x241/0x360 [ 310.074525][T12435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.074557][T12435] ? __pfx__printk+0x10/0x10 [ 310.074601][T12435] should_fail_ex+0x424/0x570 [ 310.074629][T12435] _copy_from_user+0x2d/0xb0 [ 310.074662][T12435] do_ipt_get_ctl+0x38d/0x18c0 [ 310.074690][T12435] ? __local_bh_enable_ip+0x168/0x200 [ 310.074721][T12435] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 310.074750][T12435] ? __lock_acquire+0xad5/0xd80 [ 310.074776][T12435] ? __mutex_trylock_common+0x184/0x2e0 [ 310.074810][T12435] ? __pfx___mutex_trylock_common+0x10/0x10 [ 310.074861][T12435] ? nf_getsockopt+0x248/0x2c0 [ 310.074897][T12435] ? __mutex_unlock_slowpath+0x229/0x800 [ 310.074939][T12435] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 310.074995][T12435] nf_getsockopt+0x299/0x2c0 [ 310.075030][T12435] ip_getsockopt+0x226/0x2e0 [ 310.075059][T12435] ? __pfx_ip_getsockopt+0x10/0x10 [ 310.075097][T12435] tcp_getsockopt+0x16f/0x1d0 [ 310.075128][T12435] ? __pfx_tcp_getsockopt+0x10/0x10 [ 310.075159][T12435] ? sock_common_getsockopt+0x2e/0xb0 [ 310.075185][T12435] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 310.075215][T12435] do_sock_getsockopt+0x391/0x740 [ 310.075240][T12435] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 310.075258][T12435] ? __fget_files+0x2a/0x420 [ 310.075277][T12435] ? __fget_files+0x39d/0x420 [ 310.075292][T12435] ? __fget_files+0x2a/0x420 [ 310.075318][T12435] __x64_sys_getsockopt+0x2a3/0x370 [ 310.075346][T12435] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 310.075373][T12435] ? do_syscall_64+0xb6/0x230 [ 310.075400][T12435] do_syscall_64+0xf3/0x230 [ 310.075424][T12435] ? clear_bhb_loop+0x45/0xa0 [ 310.075448][T12435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.075465][T12435] RIP: 0033:0x7f3ffad8d169 [ 310.075480][T12435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.075497][T12435] RSP: 002b:00007f3ffbb74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 310.075517][T12435] RAX: ffffffffffffffda RBX: 00007f3ffafa5fa0 RCX: 00007f3ffad8d169 [ 310.075531][T12435] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 310.075542][T12435] RBP: 00007f3ffbb74090 R08: 0000200000000100 R09: 0000000000000000 [ 310.075554][T12435] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 310.075565][T12435] R13: 0000000000000000 R14: 00007f3ffafa5fa0 R15: 00007ffc9fdffce8 [ 310.075595][T12435] [ 310.501937][T12464] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2231'. [ 310.668285][T12468] xt_TPROXY: Can be used only with -p tcp or -p udp [ 310.818352][T12471] netlink: 'syz.4.2236': attribute type 10 has an invalid length. [ 310.966393][T12477] set match dimension is over the limit! [ 311.085094][T12484] netlink: 'syz.1.2241': attribute type 10 has an invalid length. [ 311.459372][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2245'. [ 311.610045][T12502] trusted_key: syz.3.2250 sent an empty control message without MSG_MORE. [ 311.664156][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2250'. [ 311.866954][T12512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.066949][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2258'. [ 312.137054][T12526] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 312.951379][T12569] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 313.205161][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 313.409942][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 313.900846][T12616] netlink: 'syz.3.2294': attribute type 10 has an invalid length. [ 313.921773][T12616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2294'. [ 313.944087][T12620] FAULT_INJECTION: forcing a failure. [ 313.944087][T12620] name failslab, interval 1, probability 0, space 0, times 0 [ 313.984265][T12623] FAULT_INJECTION: forcing a failure. [ 313.984265][T12623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.993739][T12620] CPU: 1 UID: 0 PID: 12620 Comm: syz.2.2297 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 313.993781][T12620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.993796][T12620] Call Trace: [ 313.993805][T12620] [ 313.993815][T12620] dump_stack_lvl+0x241/0x360 [ 313.993857][T12620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.993891][T12620] ? __pfx__printk+0x10/0x10 [ 313.993928][T12620] ? __pfx___might_resched+0x10/0x10 [ 313.993961][T12620] should_fail_ex+0x424/0x570 [ 313.993991][T12620] should_failslab+0xac/0x100 [ 313.994026][T12620] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 313.994060][T12620] ? __alloc_skb+0x1c2/0x480 [ 313.994087][T12620] __alloc_skb+0x1c2/0x480 [ 313.994114][T12620] ? __pfx___alloc_skb+0x10/0x10 [ 313.994139][T12620] ? netlink_autobind+0xd6/0x2f0 [ 313.994159][T12620] ? netlink_autobind+0x2b0/0x2f0 [ 313.994186][T12620] netlink_sendmsg+0x638/0xcd0 [ 313.994236][T12620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.994275][T12620] ? aa_sock_msg_perm+0x91/0x160 [ 313.994324][T12620] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.994354][T12620] __sock_sendmsg+0x221/0x270 [ 313.994388][T12620] ____sys_sendmsg+0x523/0x860 [ 313.994421][T12620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.994441][T12620] ? __fget_files+0x2a/0x420 [ 313.994464][T12620] ? __fget_files+0x2a/0x420 [ 313.994495][T12620] __sys_sendmsg+0x271/0x360 [ 313.994525][T12620] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.994615][T12620] ? do_syscall_64+0xb6/0x230 [ 313.994647][T12620] do_syscall_64+0xf3/0x230 [ 313.994676][T12620] ? clear_bhb_loop+0x45/0xa0 [ 313.994702][T12620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.994723][T12620] RIP: 0033:0x7f927bb8d169 [ 313.994742][T12620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.994760][T12620] RSP: 002b:00007f927c931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.994784][T12620] RAX: ffffffffffffffda RBX: 00007f927bda5fa0 RCX: 00007f927bb8d169 [ 313.994800][T12620] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 313.994814][T12620] RBP: 00007f927c931090 R08: 0000000000000000 R09: 0000000000000000 [ 313.994827][T12620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.994840][T12620] R13: 0000000000000000 R14: 00007f927bda5fa0 R15: 00007fffa088e718 [ 313.994874][T12620] [ 314.022103][T12613] syzkaller0: entered promiscuous mode [ 314.041741][T12626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2295'. [ 314.079978][T12613] syzkaller0: entered allmulticast mode [ 314.112278][T12623] CPU: 0 UID: 0 PID: 12623 Comm: syz.1.2295 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 314.112319][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.112333][T12623] Call Trace: [ 314.112343][T12623] [ 314.112351][T12623] dump_stack_lvl+0x241/0x360 [ 314.112392][T12623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.112425][T12623] ? __pfx__printk+0x10/0x10 [ 314.112488][T12623] should_fail_ex+0x424/0x570 [ 314.112518][T12623] _copy_from_iter+0x211/0x1c70 [ 314.112555][T12623] ? __build_skb_around+0x247/0x3d0 [ 314.112597][T12623] ? __alloc_skb+0x298/0x480 [ 314.112616][T12623] ? __pfx__copy_from_iter+0x10/0x10 [ 314.112649][T12623] ? __pfx___alloc_skb+0x10/0x10 [ 314.112673][T12623] ? skb_put+0x114/0x1f0 [ 314.112700][T12623] netlink_sendmsg+0x73c/0xcd0 [ 314.112749][T12623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.112795][T12623] ? aa_sock_msg_perm+0x91/0x160 [ 314.112834][T12623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.112865][T12623] __sock_sendmsg+0x221/0x270 [ 314.112899][T12623] ____sys_sendmsg+0x523/0x860 [ 314.112934][T12623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.112955][T12623] ? __fget_files+0x2a/0x420 [ 314.112981][T12623] ? __fget_files+0x2a/0x420 [ 314.113024][T12623] __sys_sendmsg+0x271/0x360 [ 314.113054][T12623] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.113137][T12623] ? do_syscall_64+0xb6/0x230 [ 314.113170][T12623] do_syscall_64+0xf3/0x230 [ 314.113198][T12623] ? clear_bhb_loop+0x45/0xa0 [ 314.113224][T12623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.113245][T12623] RIP: 0033:0x7f53fe58d169 [ 314.113265][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.113283][T12623] RSP: 002b:00007f53ff31c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.113308][T12623] RAX: ffffffffffffffda RBX: 00007f53fe7a6080 RCX: 00007f53fe58d169 [ 314.113325][T12623] RDX: 0000000000008080 RSI: 0000200000000080 RDI: 000000000000000a [ 314.113339][T12623] RBP: 00007f53ff31c090 R08: 0000000000000000 R09: 0000000000000000 [ 314.113353][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.113366][T12623] R13: 0000000000000000 R14: 00007f53fe7a6080 R15: 00007ffc4735f088 [ 314.113399][T12623] [ 314.525468][T12616] batadv0: entered promiscuous mode [ 314.535765][T12616] batadv0: entered allmulticast mode [ 314.544704][T12616] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 314.576030][T12622] batman_adv: batadv0: Adding interface: dummy0 [ 314.582455][T12622] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.624964][T12622] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 315.200981][T12659] siw: device registration error -23 [ 315.300256][T12665] netlink: 'syz.4.2308': attribute type 1 has an invalid length. [ 315.313580][T12665] netlink: 'syz.4.2308': attribute type 2 has an invalid length. [ 315.321716][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 317.163453][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.168650][T12713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2316'. [ 317.180207][T12713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2316'. [ 317.196063][T12713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2316'. [ 317.205786][T12713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2316'. [ 317.835062][T12712] lo speed is unknown, defaulting to 1000 [ 317.922767][T12712] lo speed is unknown, defaulting to 1000 [ 318.186332][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2323'. [ 318.218060][T12740] FAULT_INJECTION: forcing a failure. [ 318.218060][T12740] name failslab, interval 1, probability 0, space 0, times 0 [ 318.234079][T12740] CPU: 1 UID: 0 PID: 12740 Comm: syz.1.2325 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 318.234127][T12740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.234147][T12740] Call Trace: [ 318.234155][T12740] [ 318.234164][T12740] dump_stack_lvl+0x241/0x360 [ 318.234202][T12740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.234231][T12740] ? __pfx__printk+0x10/0x10 [ 318.234259][T12740] ? register_lock_class+0x54/0x330 [ 318.234281][T12740] ? __pfx___might_resched+0x10/0x10 [ 318.234311][T12740] should_fail_ex+0x424/0x570 [ 318.234337][T12740] should_failslab+0xac/0x100 [ 318.234367][T12740] __kmalloc_cache_noprof+0x73/0x370 [ 318.234395][T12740] ? wakeup_source_register+0x57/0x250 [ 318.234423][T12740] wakeup_source_register+0x57/0x250 [ 318.234450][T12740] ep_insert+0xe61/0x1ac0 [ 318.234494][T12740] ? __pfx_ep_insert+0x10/0x10 [ 318.234536][T12740] ? bpf_lsm_capable+0x9/0x10 [ 318.234570][T12740] do_epoll_ctl+0x8bc/0xf70 [ 318.234608][T12740] __x64_sys_epoll_ctl+0x163/0x1a0 [ 318.234640][T12740] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 318.234675][T12740] ? do_syscall_64+0xb6/0x230 [ 318.234703][T12740] do_syscall_64+0xf3/0x230 [ 318.234728][T12740] ? clear_bhb_loop+0x45/0xa0 [ 318.234752][T12740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.234772][T12740] RIP: 0033:0x7f53fe58d169 [ 318.234788][T12740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.234804][T12740] RSP: 002b:00007f53ff33d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 318.234825][T12740] RAX: ffffffffffffffda RBX: 00007f53fe7a5fa0 RCX: 00007f53fe58d169 [ 318.234840][T12740] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 318.234851][T12740] RBP: 00007f53ff33d090 R08: 0000000000000000 R09: 0000000000000000 [ 318.234863][T12740] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 318.234875][T12740] R13: 0000000000000000 R14: 00007f53fe7a5fa0 R15: 00007ffc4735f088 [ 318.234905][T12740] [ 318.548861][T12745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2327'. [ 318.558731][T12745] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2327'. [ 318.859672][T12757] FAULT_INJECTION: forcing a failure. [ 318.859672][T12757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 318.915200][T12757] CPU: 0 UID: 0 PID: 12757 Comm: syz.3.2330 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 318.915232][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.915245][T12757] Call Trace: [ 318.915254][T12757] [ 318.915262][T12757] dump_stack_lvl+0x241/0x360 [ 318.915301][T12757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.915332][T12757] ? __pfx__printk+0x10/0x10 [ 318.915373][T12757] should_fail_ex+0x424/0x570 [ 318.915402][T12757] prepare_alloc_pages+0x220/0x610 [ 318.915434][T12757] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 318.915463][T12757] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 318.915493][T12757] ? rep_movs_alternative+0x4a/0x90 [ 318.915527][T12757] alloc_pages_mpol+0x339/0x690 [ 318.915563][T12757] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 318.915604][T12757] alloc_pages_noprof+0x121/0x190 [ 318.915637][T12757] af_alg_sendmsg+0x142b/0x24d0 [ 318.915663][T12757] ? __pfx___might_resched+0x10/0x10 [ 318.915713][T12757] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 318.915741][T12757] ? __pfx_aa_sk_perm+0x10/0x10 [ 318.915773][T12757] ? aa_sock_msg_perm+0x91/0x160 [ 318.915802][T12757] ? skcipher_sendmsg+0x28/0xf0 [ 318.915832][T12757] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 318.915856][T12757] __sock_sendmsg+0x221/0x270 [ 318.915890][T12757] ____sys_sendmsg+0x523/0x860 [ 318.915923][T12757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.915944][T12757] ? __fget_files+0x2a/0x420 [ 318.915968][T12757] ? __fget_files+0x2a/0x420 [ 318.915998][T12757] __sys_sendmmsg+0x3a0/0x7b0 [ 318.916034][T12757] ? __pfx___sys_sendmmsg+0x10/0x10 [ 318.916097][T12757] ? rcu_read_lock_any_held+0xbb/0x160 [ 318.916134][T12757] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 318.916165][T12757] ? vfs_write+0xb29/0xd10 [ 318.916200][T12757] ? ksys_write+0x24e/0x2d0 [ 318.916229][T12757] ? __mutex_unlock_slowpath+0x229/0x800 [ 318.916292][T12757] ? ksys_write+0x275/0x2d0 [ 318.916329][T12757] __x64_sys_sendmmsg+0xa0/0xb0 [ 318.916356][T12757] do_syscall_64+0xf3/0x230 [ 318.916384][T12757] ? clear_bhb_loop+0x45/0xa0 [ 318.916413][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.916432][T12757] RIP: 0033:0x7f3ffad8d169 [ 318.916450][T12757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.916468][T12757] RSP: 002b:00007f3ffbb74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.916491][T12757] RAX: ffffffffffffffda RBX: 00007f3ffafa5fa0 RCX: 00007f3ffad8d169 [ 318.916505][T12757] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000005 [ 318.916518][T12757] RBP: 00007f3ffbb74090 R08: 0000000000000000 R09: 0000000000000000 [ 318.916530][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.916542][T12757] R13: 0000000000000000 R14: 00007f3ffafa5fa0 R15: 00007ffc9fdffce8 [ 318.916576][T12757] [ 319.240945][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 319.277008][T12759] FAULT_INJECTION: forcing a failure. [ 319.277008][T12759] name failslab, interval 1, probability 0, space 0, times 0 [ 319.325700][T12759] CPU: 1 UID: 0 PID: 12759 Comm: syz.4.2331 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 319.325733][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.325746][T12759] Call Trace: [ 319.325755][T12759] [ 319.325764][T12759] dump_stack_lvl+0x241/0x360 [ 319.325804][T12759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.325835][T12759] ? __pfx__printk+0x10/0x10 [ 319.325879][T12759] should_fail_ex+0x424/0x570 [ 319.325908][T12759] should_failslab+0xac/0x100 [ 319.325939][T12759] __kmalloc_cache_noprof+0x73/0x370 [ 319.325967][T12759] ? sctp_add_bind_addr+0x89/0x3a0 [ 319.326001][T12759] sctp_add_bind_addr+0x89/0x3a0 [ 319.326035][T12759] sctp_copy_local_addr_list+0x313/0x500 [ 319.326067][T12759] ? sctp_copy_local_addr_list+0xad/0x500 [ 319.326097][T12759] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 319.326130][T12759] ? sctp_v6_is_any+0x60/0x70 [ 319.326163][T12759] ? sctp_copy_one_addr+0x94/0x360 [ 319.326196][T12759] sctp_bind_addr_copy+0xad/0x3b0 [ 319.326230][T12759] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 319.326259][T12759] sctp_connect_new_asoc+0x337/0x700 [ 319.326285][T12759] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 319.326314][T12759] ? sctp_get_af_specific+0x2a/0x80 [ 319.326351][T12759] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 319.326377][T12759] __sctp_connect+0x6ab/0xe60 [ 319.326409][T12759] ? __local_bh_enable_ip+0x168/0x200 [ 319.326429][T12759] ? __pfx___sctp_connect+0x10/0x10 [ 319.326448][T12759] ? sctp_setsockopt+0x1fb/0x11e0 [ 319.326468][T12759] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 319.326488][T12759] ? do_raw_spin_unlock+0x13c/0x8b0 [ 319.326518][T12759] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 319.326540][T12759] ? security_sctp_bind_connect+0x7e/0x2d0 [ 319.326575][T12759] sctp_setsockopt+0x45d/0x11e0 [ 319.326599][T12759] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.326629][T12759] do_sock_setsockopt+0x3b1/0x710 [ 319.326657][T12759] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 319.326676][T12759] ? __fget_files+0x2a/0x420 [ 319.326701][T12759] ? __fget_files+0x39d/0x420 [ 319.326719][T12759] ? __fget_files+0x2a/0x420 [ 319.326748][T12759] __x64_sys_setsockopt+0x1ee/0x280 [ 319.326777][T12759] do_syscall_64+0xf3/0x230 [ 319.326804][T12759] ? clear_bhb_loop+0x45/0xa0 [ 319.326828][T12759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.326849][T12759] RIP: 0033:0x7f5fa898d169 [ 319.326867][T12759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.326884][T12759] RSP: 002b:00007f5fa977e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.326907][T12759] RAX: ffffffffffffffda RBX: 00007f5fa8ba5fa0 RCX: 00007f5fa898d169 [ 319.326922][T12759] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 319.326933][T12759] RBP: 00007f5fa977e090 R08: 000000000000001c R09: 0000000000000000 [ 319.326945][T12759] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 319.326957][T12759] R13: 0000000000000000 R14: 00007f5fa8ba5fa0 R15: 00007ffd17e285d8 [ 319.326990][T12759] [ 319.678624][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2335'. [ 320.001388][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2339'. [ 320.017638][T12792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2339'. [ 320.028838][T12793] FAULT_INJECTION: forcing a failure. [ 320.028838][T12793] name failslab, interval 1, probability 0, space 0, times 0 [ 320.048794][T12793] CPU: 0 UID: 0 PID: 12793 Comm: syz.0.2342 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 320.048826][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.048839][T12793] Call Trace: [ 320.048846][T12793] [ 320.048855][T12793] dump_stack_lvl+0x241/0x360 [ 320.048894][T12793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.048923][T12793] ? __pfx__printk+0x10/0x10 [ 320.048957][T12793] ? __pfx___might_resched+0x10/0x10 [ 320.048989][T12793] should_fail_ex+0x424/0x570 [ 320.049016][T12793] should_failslab+0xac/0x100 [ 320.049047][T12793] __kmalloc_noprof+0xdf/0x4d0 [ 320.049075][T12793] ? tomoyo_encode+0x26f/0x540 [ 320.049111][T12793] tomoyo_encode+0x26f/0x540 [ 320.049149][T12793] tomoyo_realpath_from_path+0x59e/0x5e0 [ 320.049194][T12793] tomoyo_path_number_perm+0x245/0x790 [ 320.049232][T12793] ? tomoyo_path_number_perm+0x215/0x790 [ 320.049280][T12793] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.049316][T12793] ? ksys_write+0x24e/0x2d0 [ 320.049350][T12793] ? __lock_acquire+0xad5/0xd80 [ 320.049393][T12793] ? __fget_files+0x2a/0x420 [ 320.049411][T12793] ? __fget_files+0x2a/0x420 [ 320.049433][T12793] ? __fget_files+0x2a/0x420 [ 320.049458][T12793] security_file_ioctl+0xc6/0x2a0 [ 320.049486][T12793] __se_sys_ioctl+0x46/0x160 [ 320.049514][T12793] do_syscall_64+0xf3/0x230 [ 320.049543][T12793] ? clear_bhb_loop+0x45/0xa0 [ 320.049568][T12793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.049589][T12793] RIP: 0033:0x7fb77fd8d169 [ 320.049607][T12793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.049625][T12793] RSP: 002b:00007fb780b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.049647][T12793] RAX: ffffffffffffffda RBX: 00007fb77ffa6080 RCX: 00007fb77fd8d169 [ 320.049662][T12793] RDX: 0000200000000080 RSI: 0000000040107446 RDI: 0000000000000003 [ 320.049676][T12793] RBP: 00007fb780b48090 R08: 0000000000000000 R09: 0000000000000000 [ 320.049693][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.049704][T12793] R13: 0000000000000001 R14: 00007fb77ffa6080 R15: 00007fff541c0908 [ 320.049736][T12793] [ 320.049826][T12793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.401944][T12785] lo speed is unknown, defaulting to 1000 [ 320.412798][T12785] lo speed is unknown, defaulting to 1000 [ 320.579842][T12802] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 320.721341][T12802] lo speed is unknown, defaulting to 1000 [ 320.750551][T12802] lo speed is unknown, defaulting to 1000 [ 321.247069][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2352'. [ 321.410384][T12827] netlink: 'syz.4.2356': attribute type 1 has an invalid length. [ 321.550467][T12833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.645428][T12840] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 321.952927][T12844] lo speed is unknown, defaulting to 1000 [ 321.973487][T12844] lo speed is unknown, defaulting to 1000 [ 322.323353][T12873] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2374'. [ 322.615296][T12888] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2379'. [ 322.637887][T12888] tipc: Enabling of bearer rejected, failed to enable media [ 323.077702][T12901] lo speed is unknown, defaulting to 1000 [ 323.085288][T12901] lo speed is unknown, defaulting to 1000 [ 323.112022][T12904] ipt_ECN: cannot use operation on non-tcp rule [ 323.316385][T12913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 323.327428][T12913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2389'. [ 323.756335][T12940] 8021q: VLANs not supported on vxcan0 [ 323.831407][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2396'. [ 323.831787][T12941] lo speed is unknown, defaulting to 1000 [ 323.957698][T12941] lo speed is unknown, defaulting to 1000 [ 323.967198][T12950] netlink: 'syz.2.2400': attribute type 10 has an invalid length. [ 323.981760][T12942] netlink: 15846 bytes leftover after parsing attributes in process `syz.0.2396'. [ 324.102907][T12956] netlink: 'syz.1.2402': attribute type 1 has an invalid length. [ 324.275821][T12967] xt_hashlimit: max too large, truncated to 1048576 [ 324.558947][T12961] IPVS: Error connecting to the multicast addr [ 324.830934][T12981] __nla_validate_parse: 3 callbacks suppressed [ 324.830958][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2407'. [ 325.080785][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2410'. [ 325.154827][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 325.277134][T12996] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 325.320912][T12997] netlink: 'syz.0.2414': attribute type 10 has an invalid length. [ 325.362884][T12989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2412'. [ 325.446134][T13004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2417'. [ 325.455147][T13002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2412'. [ 325.508166][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2419'. [ 325.522356][T12989] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 325.565706][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2419'. [ 325.773770][T13012] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2420'. [ 325.802086][T13012] netlink: zone id is out of range [ 325.840758][T13012] netlink: zone id is out of range [ 325.858044][T13012] netlink: zone id is out of range [ 325.863388][T13012] netlink: get zone limit has 8 unknown bytes [ 325.899532][T13019] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2422'. [ 326.022887][T13023] FAULT_INJECTION: forcing a failure. [ 326.022887][T13023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.037351][T13023] CPU: 1 UID: 0 PID: 13023 Comm: syz.0.2424 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 326.037381][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.037393][T13023] Call Trace: [ 326.037400][T13023] [ 326.037409][T13023] dump_stack_lvl+0x241/0x360 [ 326.037447][T13023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.037478][T13023] ? __pfx__printk+0x10/0x10 [ 326.037519][T13023] should_fail_ex+0x424/0x570 [ 326.037548][T13023] _copy_to_user+0x31/0xb0 [ 326.037581][T13023] simple_read_from_buffer+0xc4/0x170 [ 326.037617][T13023] proc_fail_nth_read+0x1ef/0x260 [ 326.037642][T13023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.037668][T13023] ? rw_verify_area+0x246/0x630 [ 326.037700][T13023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 326.037723][T13023] vfs_read+0x21f/0xb90 [ 326.037753][T13023] ? __pfx___mutex_lock+0x10/0x10 [ 326.037781][T13023] ? __pfx_vfs_read+0x10/0x10 [ 326.037808][T13023] ? __fget_files+0x2a/0x420 [ 326.037829][T13023] ? __fget_files+0x39d/0x420 [ 326.037846][T13023] ? __fget_files+0x2a/0x420 [ 326.037875][T13023] ksys_read+0x19d/0x2d0 [ 326.037901][T13023] ? __pfx_ksys_read+0x10/0x10 [ 326.037932][T13023] ? do_syscall_64+0xb6/0x230 [ 326.037963][T13023] do_syscall_64+0xf3/0x230 [ 326.037989][T13023] ? clear_bhb_loop+0x45/0xa0 [ 326.038014][T13023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.038033][T13023] RIP: 0033:0x7fb77fd8bb7c [ 326.038052][T13023] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 326.038068][T13023] RSP: 002b:00007fb780b69030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 326.038090][T13023] RAX: ffffffffffffffda RBX: 00007fb77ffa5fa0 RCX: 00007fb77fd8bb7c [ 326.038105][T13023] RDX: 000000000000000f RSI: 00007fb780b690a0 RDI: 0000000000000003 [ 326.038118][T13023] RBP: 00007fb780b69090 R08: 0000000000000000 R09: 0000000000000000 [ 326.038130][T13023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.038141][T13023] R13: 0000000000000000 R14: 00007fb77ffa5fa0 R15: 00007fff541c0908 [ 326.038174][T13023] [ 326.498089][T13031] netlink: 'syz.0.2427': attribute type 10 has an invalid length. [ 326.674724][T13036] openvswitch: netlink: Flow actions attr not present in new flow. [ 326.857916][T13043] netlink: 'syz.1.2433': attribute type 27 has an invalid length. [ 326.866290][T13043] bridge_slave_1: left allmulticast mode [ 326.930019][T13043] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 326.963141][T13043] vxcan3: left allmulticast mode [ 326.984417][T13043] bond3: left allmulticast mode [ 327.066929][T13048] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 327.112659][T13048] team0: Port device macvlan4 added [ 327.264839][T13064] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 327.425849][T13070] netlink: 'syz.0.2444': attribute type 10 has an invalid length. [ 327.449067][T13070] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.462269][T13070] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.471444][T13070] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.480601][T13070] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.550962][T13070] team0: Port device geneve0 added [ 327.661799][T13079] lo speed is unknown, defaulting to 1000 [ 327.690352][T13079] lo speed is unknown, defaulting to 1000 [ 327.700498][T13085] tipc: Enabling of bearer rejected, failed to enable media [ 328.250293][T13097] lo speed is unknown, defaulting to 1000 [ 328.294894][T13104] netlink: 'syz.3.2456': attribute type 10 has an invalid length. [ 328.303838][T13097] lo speed is unknown, defaulting to 1000 [ 328.570576][T13121] set match dimension is over the limit! [ 328.769937][T13128] netlink: 'syz.1.2464': attribute type 17 has an invalid length. [ 329.085232][T13140] netlink: 'syz.4.2469': attribute type 10 has an invalid length. [ 329.469141][T13155] vlan2: entered promiscuous mode [ 329.474438][T13155] team0: entered promiscuous mode [ 329.480877][T13155] geneve0: entered promiscuous mode [ 329.723963][T13162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.751672][T13159] 8021q: VLANs not supported on wlan1 [ 330.648065][T13209] No such timeout policy "syz0" [ 330.782941][T13213] __nla_validate_parse: 9 callbacks suppressed [ 330.782963][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 330.803432][T13215] FAULT_INJECTION: forcing a failure. [ 330.803432][T13215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.858083][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.2.2494 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 330.858115][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.858128][T13215] Call Trace: [ 330.858136][T13215] [ 330.858145][T13215] dump_stack_lvl+0x241/0x360 [ 330.858184][T13215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.858219][T13215] ? __pfx__printk+0x10/0x10 [ 330.858263][T13215] should_fail_ex+0x424/0x570 [ 330.858290][T13215] _copy_from_user+0x2d/0xb0 [ 330.858322][T13215] copy_msghdr_from_user+0xb3/0x580 [ 330.858357][T13215] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 330.858383][T13215] ? __fget_files+0x2a/0x420 [ 330.858407][T13215] ? __fget_files+0x2a/0x420 [ 330.858436][T13215] __sys_sendmsg+0x20a/0x360 [ 330.858465][T13215] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.858548][T13215] ? do_syscall_64+0xb6/0x230 [ 330.858579][T13215] do_syscall_64+0xf3/0x230 [ 330.858606][T13215] ? clear_bhb_loop+0x45/0xa0 [ 330.858632][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.858652][T13215] RIP: 0033:0x7f927bb8d169 [ 330.858670][T13215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.858689][T13215] RSP: 002b:00007f927c931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.858711][T13215] RAX: ffffffffffffffda RBX: 00007f927bda5fa0 RCX: 00007f927bb8d169 [ 330.858726][T13215] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 330.858739][T13215] RBP: 00007f927c931090 R08: 0000000000000000 R09: 0000000000000000 [ 330.858752][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.858764][T13215] R13: 0000000000000000 R14: 00007f927bda5fa0 R15: 00007fffa088e718 [ 330.858797][T13215] [ 331.155616][T13223] netlink: 'syz.2.2497': attribute type 10 has an invalid length. [ 331.281517][T13230] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 331.298815][T13230] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2500'. [ 331.595871][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2505'. [ 331.831144][T13258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2510'. [ 331.891409][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2510'. [ 332.014212][T13264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2513'. [ 332.032336][T13264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2513'. [ 332.256391][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2519'. [ 332.271860][T13282] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 332.374967][T13282] 8021q: adding VLAN 0 to HW filter on device bond5 [ 332.452438][T13281] bond5: (slave gretap1): making interface the new active one [ 332.478772][T13281] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 333.264417][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 333.304706][T13322] gretap0: entered promiscuous mode [ 333.373845][T13325] FAULT_INJECTION: forcing a failure. [ 333.373845][T13325] name failslab, interval 1, probability 0, space 0, times 0 [ 333.416528][T13325] CPU: 0 UID: 0 PID: 13325 Comm: syz.3.2530 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 333.416560][T13325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.416574][T13325] Call Trace: [ 333.416582][T13325] [ 333.416590][T13325] dump_stack_lvl+0x241/0x360 [ 333.416630][T13325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.416660][T13325] ? __pfx__printk+0x10/0x10 [ 333.416711][T13325] should_fail_ex+0x424/0x570 [ 333.416738][T13325] should_failslab+0xac/0x100 [ 333.416768][T13325] __kmalloc_cache_noprof+0x73/0x370 [ 333.416795][T13325] ? sctp_add_bind_addr+0x89/0x3a0 [ 333.416829][T13325] sctp_add_bind_addr+0x89/0x3a0 [ 333.416861][T13325] sctp_copy_local_addr_list+0x313/0x500 [ 333.416892][T13325] ? sctp_copy_local_addr_list+0xad/0x500 [ 333.416921][T13325] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 333.416952][T13325] ? sctp_v6_is_any+0x60/0x70 [ 333.416984][T13325] ? sctp_copy_one_addr+0x94/0x360 [ 333.417016][T13325] sctp_bind_addr_copy+0xad/0x3b0 [ 333.417044][T13325] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 333.417073][T13325] sctp_connect_new_asoc+0x337/0x700 [ 333.417099][T13325] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 333.417128][T13325] ? sctp_get_af_specific+0x2a/0x80 [ 333.417153][T13325] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 333.417178][T13325] __sctp_connect+0x6ab/0xe60 [ 333.417210][T13325] ? __local_bh_enable_ip+0x168/0x200 [ 333.417232][T13325] ? __pfx___sctp_connect+0x10/0x10 [ 333.417250][T13325] ? sctp_setsockopt+0x1fb/0x11e0 [ 333.417269][T13325] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 333.417288][T13325] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.417316][T13325] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 333.417337][T13325] ? security_sctp_bind_connect+0x7e/0x2d0 [ 333.417389][T13325] sctp_setsockopt+0x45d/0x11e0 [ 333.417412][T13325] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 333.417442][T13325] do_sock_setsockopt+0x3b1/0x710 [ 333.417471][T13325] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 333.417490][T13325] ? __fget_files+0x2a/0x420 [ 333.417514][T13325] ? __fget_files+0x39d/0x420 [ 333.417531][T13325] ? __fget_files+0x2a/0x420 [ 333.417560][T13325] __x64_sys_setsockopt+0x1ee/0x280 [ 333.417623][T13325] do_syscall_64+0xf3/0x230 [ 333.417651][T13325] ? clear_bhb_loop+0x45/0xa0 [ 333.417676][T13325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.417705][T13325] RIP: 0033:0x7f3ffad8d169 [ 333.417725][T13325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.417743][T13325] RSP: 002b:00007f3ffbb74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.417767][T13325] RAX: ffffffffffffffda RBX: 00007f3ffafa5fa0 RCX: 00007f3ffad8d169 [ 333.417782][T13325] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 333.417795][T13325] RBP: 00007f3ffbb74090 R08: 000000000000001c R09: 0000000000000000 [ 333.417807][T13325] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 333.417821][T13325] R13: 0000000000000000 R14: 00007f3ffafa5fa0 R15: 00007ffc9fdffce8 [ 333.417855][T13325] [ 333.988478][T13342] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 334.455892][T13363] veth0_to_batadv: entered promiscuous mode [ 334.476324][T13363] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 334.535388][T13367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.546117][T13361] lo speed is unknown, defaulting to 1000 [ 334.575221][T13361] lo speed is unknown, defaulting to 1000 [ 334.771616][T13375] netlink: 'syz.2.2551': attribute type 10 has an invalid length. [ 335.143607][T13392] netlink: 'syz.2.2558': attribute type 27 has an invalid length. [ 335.201856][T13387] xt_cgroup: invalid path, errno=-2 [ 335.776282][T13422] openvswitch: netlink: Flow actions attr not present in new flow. [ 335.882346][T13427] __nla_validate_parse: 5 callbacks suppressed [ 335.882368][T13427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2574'. [ 336.413180][T13452] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 336.514703][T13457] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 336.531600][T13457] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 336.858631][T13473] netlink: 'syz.0.2593': attribute type 3 has an invalid length. [ 337.083325][T13488] x_tables: ip_tables: osf match: only valid for protocol 6 [ 337.232250][T13495] FAULT_INJECTION: forcing a failure. [ 337.232250][T13495] name failslab, interval 1, probability 0, space 0, times 0 [ 337.341887][T13495] CPU: 0 UID: 0 PID: 13495 Comm: syz.4.2603 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 337.341917][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.341928][T13495] Call Trace: [ 337.341935][T13495] [ 337.341942][T13495] dump_stack_lvl+0x241/0x360 [ 337.341974][T13495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.341998][T13495] ? __pfx__printk+0x10/0x10 [ 337.342025][T13495] ? __pfx___might_resched+0x10/0x10 [ 337.342050][T13495] should_fail_ex+0x424/0x570 [ 337.342072][T13495] should_failslab+0xac/0x100 [ 337.342098][T13495] __kmalloc_cache_noprof+0x73/0x370 [ 337.342121][T13495] ? alloc_netdev_mqs+0xc1a/0x1210 [ 337.342139][T13495] ? __xdp_rxq_info_reg+0x186/0x290 [ 337.342168][T13495] alloc_netdev_mqs+0xc1a/0x1210 [ 337.342195][T13495] register_vlan_device+0x21a/0x4a0 [ 337.342216][T13495] ? __pfx_register_vlan_device+0x10/0x10 [ 337.342234][T13495] ? bpf_lsm_capable+0x9/0x10 [ 337.342254][T13495] ? security_capable+0x7e/0x2d0 [ 337.342282][T13495] vlan_ioctl_handler+0x2d7/0xa20 [ 337.342302][T13495] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 337.342329][T13495] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 337.342348][T13495] sock_ioctl+0x6f0/0x900 [ 337.342371][T13495] ? __pfx_sock_ioctl+0x10/0x10 [ 337.342391][T13495] ? __fget_files+0x2a/0x420 [ 337.342405][T13495] ? __fget_files+0x2a/0x420 [ 337.342422][T13495] ? __fget_files+0x2a/0x420 [ 337.342441][T13495] ? __pfx_sock_ioctl+0x10/0x10 [ 337.342462][T13495] __se_sys_ioctl+0xf1/0x160 [ 337.342484][T13495] do_syscall_64+0xf3/0x230 [ 337.342506][T13495] ? clear_bhb_loop+0x45/0xa0 [ 337.342526][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.342541][T13495] RIP: 0033:0x7f5fa898d169 [ 337.342556][T13495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.342570][T13495] RSP: 002b:00007f5fa977e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.342588][T13495] RAX: ffffffffffffffda RBX: 00007f5fa8ba5fa0 RCX: 00007f5fa898d169 [ 337.342600][T13495] RDX: 0000200000000200 RSI: 0000000000008983 RDI: 0000000000000003 [ 337.342610][T13495] RBP: 00007f5fa977e090 R08: 0000000000000000 R09: 0000000000000000 [ 337.342620][T13495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.342636][T13495] R13: 0000000000000000 R14: 00007f5fa8ba5fa0 R15: 00007ffd17e285d8 [ 337.342662][T13495] [ 337.605818][T13500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2604'. [ 337.951040][T13516] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 337.965830][T13516] team0: Port device macvlan4 added [ 338.017113][T13522] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 338.231357][T13524] tipc: Enabling of bearer rejected, failed to enable media [ 338.462876][T13547] Cannot find set identified by id 0 to match [ 338.537445][T13549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2622'. [ 338.581230][T13549] ªªªªªª: renamed from lo [ 338.737833][T13560] FAULT_INJECTION: forcing a failure. [ 338.737833][T13560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.790082][T13560] CPU: 0 UID: 0 PID: 13560 Comm: syz.3.2627 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 338.790115][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.790128][T13560] Call Trace: [ 338.790137][T13560] [ 338.790146][T13560] dump_stack_lvl+0x241/0x360 [ 338.790186][T13560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.790234][T13560] ? dump_stack+0x9/0x15 [ 338.790271][T13560] should_fail_ex+0x424/0x570 [ 338.790299][T13560] _copy_from_user+0x2d/0xb0 [ 338.790331][T13560] copy_msghdr_from_user+0xb3/0x580 [ 338.790367][T13560] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 338.790392][T13560] ? __fget_files+0x2a/0x420 [ 338.790415][T13560] ? __fget_files+0x2a/0x420 [ 338.790445][T13560] __sys_sendmsg+0x20a/0x360 [ 338.790474][T13560] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.790557][T13560] ? do_syscall_64+0xb6/0x230 [ 338.790588][T13560] do_syscall_64+0xf3/0x230 [ 338.790615][T13560] ? clear_bhb_loop+0x45/0xa0 [ 338.790639][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.790660][T13560] RIP: 0033:0x7f3ffad8d169 [ 338.790678][T13560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.790695][T13560] RSP: 002b:00007f3ffbb74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.790730][T13560] RAX: ffffffffffffffda RBX: 00007f3ffafa5fa0 RCX: 00007f3ffad8d169 [ 338.790744][T13560] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000004 [ 338.790757][T13560] RBP: 00007f3ffbb74090 R08: 0000000000000000 R09: 0000000000000000 [ 338.790769][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.790780][T13560] R13: 0000000000000000 R14: 00007f3ffafa5fa0 R15: 00007ffc9fdffce8 [ 338.790812][T13560] [ 338.821384][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'. [ 338.994234][T13565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2629'. [ 339.101512][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 339.241739][T13582] FAULT_INJECTION: forcing a failure. [ 339.241739][T13582] name failslab, interval 1, probability 0, space 0, times 0 [ 339.261266][T13582] CPU: 1 UID: 0 PID: 13582 Comm: syz.2.2637 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 339.261296][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.261309][T13582] Call Trace: [ 339.261318][T13582] [ 339.261327][T13582] dump_stack_lvl+0x241/0x360 [ 339.261368][T13582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.261397][T13582] ? __pfx__printk+0x10/0x10 [ 339.261440][T13582] ? __pfx___might_resched+0x10/0x10 [ 339.261463][T13582] should_fail_ex+0x424/0x570 [ 339.261483][T13582] should_failslab+0xac/0x100 [ 339.261506][T13582] kmem_cache_alloc_noprof+0x78/0x390 [ 339.261527][T13582] ? __proc_create+0x453/0xa80 [ 339.261549][T13582] __proc_create+0x453/0xa80 [ 339.261571][T13582] ? __pfx___proc_create+0x10/0x10 [ 339.261601][T13582] proc_create_data+0x12b/0x3a0 [ 339.261623][T13582] ? __pfx_proc_create_data+0x10/0x10 [ 339.261641][T13582] ? trace_kmalloc+0x1f/0xd0 [ 339.261659][T13582] ? __kvmalloc_node_noprof+0x34a/0x5a0 [ 339.261681][T13582] ? recent_mt_check+0x622/0xd40 [ 339.261706][T13582] recent_mt_check+0x971/0xd40 [ 339.261732][T13582] ? __pfx_recent_mt_check+0x10/0x10 [ 339.261754][T13582] ? recent_mt_check_v0+0xc1/0x140 [ 339.261778][T13582] recent_mt_check_v0+0xe2/0x140 [ 339.261798][T13582] ? __pfx_recent_mt_check_v0+0x10/0x10 [ 339.261839][T13582] ? xt_find_match+0x1e5/0x240 [ 339.261879][T13582] ? __mutex_unlock_slowpath+0x229/0x800 [ 339.261902][T13582] xt_check_match+0x36a/0xa40 [ 339.261926][T13582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.261950][T13582] ? __pfx_xt_check_match+0x10/0x10 [ 339.261997][T13582] ? xt_find_match+0x1e5/0x240 [ 339.262055][T13582] translate_table+0x1721/0x24b0 [ 339.262081][T13582] ? __x64_sys_setsockopt+0x1ee/0x280 [ 339.262095][T13582] ? do_syscall_64+0xf3/0x230 [ 339.262112][T13582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.262149][T13582] ? __pfx_translate_table+0x10/0x10 [ 339.262193][T13582] ? copy_from_sockptr_offset+0x60/0xb0 [ 339.262217][T13582] do_ip6t_set_ctl+0xe53/0x1270 [ 339.262243][T13582] ? __pfx___mutex_trylock_common+0x10/0x10 [ 339.262264][T13582] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 339.262299][T13582] ? __mutex_unlock_slowpath+0x229/0x800 [ 339.262326][T13582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.262349][T13582] ? rcu_read_lock_any_held+0xbb/0x160 [ 339.262370][T13582] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 339.262396][T13582] nf_setsockopt+0x295/0x2c0 [ 339.262425][T13582] rawv6_setsockopt+0x2b3/0x6d0 [ 339.262449][T13582] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 339.262463][T13582] ? aa_sock_opt_perm+0x79/0x120 [ 339.262485][T13582] ? sock_common_setsockopt+0x37/0xc0 [ 339.262509][T13582] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 339.262529][T13582] do_sock_setsockopt+0x3b1/0x710 [ 339.262549][T13582] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 339.262562][T13582] ? __fget_files+0x2a/0x420 [ 339.262579][T13582] ? __fget_files+0x39d/0x420 [ 339.262591][T13582] ? __fget_files+0x2a/0x420 [ 339.262611][T13582] __x64_sys_setsockopt+0x1ee/0x280 [ 339.262645][T13582] do_syscall_64+0xf3/0x230 [ 339.262663][T13582] ? clear_bhb_loop+0x45/0xa0 [ 339.262681][T13582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.262694][T13582] RIP: 0033:0x7f927bb8d169 [ 339.262726][T13582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.262739][T13582] RSP: 002b:00007f927c931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.262769][T13582] RAX: ffffffffffffffda RBX: 00007f927bda5fa0 RCX: 00007f927bb8d169 [ 339.262780][T13582] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 339.262788][T13582] RBP: 00007f927c931090 R08: 0000000000000520 R09: 0000000000000000 [ 339.262797][T13582] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 339.262806][T13582] R13: 0000000000000000 R14: 00007f927bda5fa0 R15: 00007fffa088e718 [ 339.262829][T13582] [ 339.773247][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'. [ 339.845704][T13591] x_tables: duplicate underflow at hook 4 [ 340.239352][T13611] FAULT_INJECTION: forcing a failure. [ 340.239352][T13611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.269376][T13611] CPU: 1 UID: 0 PID: 13611 Comm: syz.1.2646 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 340.269409][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 340.269422][T13611] Call Trace: [ 340.269431][T13611] [ 340.269441][T13611] dump_stack_lvl+0x241/0x360 [ 340.269483][T13611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.269515][T13611] ? __pfx__printk+0x10/0x10 [ 340.269560][T13611] should_fail_ex+0x424/0x570 [ 340.269588][T13611] _copy_from_user+0x2d/0xb0 [ 340.269620][T13611] copy_msghdr_from_user+0xb3/0x580 [ 340.269656][T13611] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 340.269682][T13611] ? __fget_files+0x2a/0x420 [ 340.269705][T13611] ? __fget_files+0x2a/0x420 [ 340.269735][T13611] __sys_sendmmsg+0x361/0x7b0 [ 340.269770][T13611] ? __pfx___sys_sendmmsg+0x10/0x10 [ 340.269832][T13611] ? rcu_read_lock_any_held+0xbb/0x160 [ 340.269861][T13611] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 340.269893][T13611] ? vfs_write+0xb29/0xd10 [ 340.269925][T13611] ? ksys_write+0x24e/0x2d0 [ 340.269953][T13611] ? __mutex_unlock_slowpath+0x229/0x800 [ 340.270012][T13611] ? ksys_write+0x275/0x2d0 [ 340.270049][T13611] __x64_sys_sendmmsg+0xa0/0xb0 [ 340.270091][T13611] do_syscall_64+0xf3/0x230 [ 340.270118][T13611] ? clear_bhb_loop+0x45/0xa0 [ 340.270143][T13611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.270163][T13611] RIP: 0033:0x7f53fe58d169 [ 340.270182][T13611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.270200][T13611] RSP: 002b:00007f53ff33d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 340.270223][T13611] RAX: ffffffffffffffda RBX: 00007f53fe7a5fa0 RCX: 00007f53fe58d169 [ 340.270239][T13611] RDX: 0000000000000001 RSI: 0000200000004140 RDI: 0000000000000005 [ 340.270253][T13611] RBP: 00007f53ff33d090 R08: 0000000000000000 R09: 0000000000000000 [ 340.270266][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.270278][T13611] R13: 0000000000000000 R14: 00007f53fe7a5fa0 R15: 00007ffc4735f088 [ 340.270312][T13611] [ 340.702805][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.713500][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.716561][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2650'. [ 340.723664][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.738863][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.752021][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.834780][T13624] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2651'. [ 340.846689][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2651'. [ 340.961216][T13618] lo speed is unknown, defaulting to 1000 [ 340.971335][T13618] lo speed is unknown, defaulting to 1000 [ 341.025050][T13627] __nla_validate_parse: 2 callbacks suppressed [ 341.025070][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 341.215064][T13634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2655'. [ 341.364067][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2655'. [ 341.415456][ T63] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.562754][T13642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2656'. [ 341.579350][T13638] syzkaller0: entered promiscuous mode [ 341.584881][T13638] syzkaller0: entered allmulticast mode [ 341.663337][ T63] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.682107][T13649] FAULT_INJECTION: forcing a failure. [ 341.682107][T13649] name failslab, interval 1, probability 0, space 0, times 0 [ 341.695033][T13649] CPU: 0 UID: 0 PID: 13649 Comm: syz.4.2660 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 341.695072][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 341.695086][T13649] Call Trace: [ 341.695094][T13649] [ 341.695103][T13649] dump_stack_lvl+0x241/0x360 [ 341.695143][T13649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.695174][T13649] ? __pfx__printk+0x10/0x10 [ 341.695209][T13649] ? __pfx___might_resched+0x10/0x10 [ 341.695239][T13649] should_fail_ex+0x424/0x570 [ 341.695267][T13649] should_failslab+0xac/0x100 [ 341.695299][T13649] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 341.695332][T13649] ? kobject_set_name_vargs+0x61/0x120 [ 341.695366][T13649] kvasprintf+0xe1/0x190 [ 341.695401][T13649] ? __pfx_kvasprintf+0x10/0x10 [ 341.695438][T13649] ? __debug_object_init+0x284/0x480 [ 341.695473][T13649] ? kvasprintf_const+0x51/0x170 [ 341.695508][T13649] kobject_set_name_vargs+0x61/0x120 [ 341.695540][T13649] dev_set_name+0xd7/0x120 [ 341.695567][T13649] ? __pfx_dev_set_name+0x10/0x10 [ 341.695585][T13649] ? __raw_spin_lock_init+0x45/0x100 [ 341.695617][T13649] ? __init_waitqueue_head+0xae/0x150 [ 341.695655][T13649] ? device_initialize+0x266/0x460 [ 341.695683][T13649] wakeup_source_sysfs_add+0x180/0x270 [ 341.695714][T13649] wakeup_source_register+0x171/0x250 [ 341.695742][T13649] ep_insert+0xe61/0x1ac0 [ 341.695787][T13649] ? __pfx_ep_insert+0x10/0x10 [ 341.695830][T13649] ? bpf_lsm_capable+0x9/0x10 [ 341.695865][T13649] do_epoll_ctl+0x8bc/0xf70 [ 341.695904][T13649] __x64_sys_epoll_ctl+0x163/0x1a0 [ 341.695937][T13649] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 341.695974][T13649] ? do_syscall_64+0xb6/0x230 [ 341.696005][T13649] do_syscall_64+0xf3/0x230 [ 341.696032][T13649] ? clear_bhb_loop+0x45/0xa0 [ 341.696064][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.696085][T13649] RIP: 0033:0x7f5fa898d169 [ 341.696104][T13649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.696122][T13649] RSP: 002b:00007f5fa977e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 341.696145][T13649] RAX: ffffffffffffffda RBX: 00007f5fa8ba5fa0 RCX: 00007f5fa898d169 [ 341.696160][T13649] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 341.696173][T13649] RBP: 00007f5fa977e090 R08: 0000000000000000 R09: 0000000000000000 [ 341.696187][T13649] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 341.696200][T13649] R13: 0000000000000000 R14: 00007f5fa8ba5fa0 R15: 00007ffd17e285d8 [ 341.696235][T13649] [ 342.838756][ T5857] Bluetooth: hci5: command tx timeout [ 343.669024][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'. [ 343.684445][ T63] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.746872][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 343.780897][T13671] lo speed is unknown, defaulting to 1000 [ 343.818943][ T63] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.872217][T13671] lo speed is unknown, defaulting to 1000 [ 343.894144][T13618] chnl_net:caif_netlink_parms(): no params data found [ 343.915247][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2668'. [ 344.035732][T13684] netlink: 'syz.1.2669': attribute type 10 has an invalid length. [ 344.054636][T13684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2669'. [ 344.141357][T13684] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.174530][T13684] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.184107][T13684] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.196011][T13684] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.215440][T13684] team0: Port device geneve0 added [ 344.398954][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2673'. [ 344.412308][T13618] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.427119][T13618] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.434352][T13618] bridge_slave_0: entered allmulticast mode [ 344.442646][T13618] bridge_slave_0: entered promiscuous mode [ 344.497228][T13618] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.508494][T13618] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.515784][T13618] bridge_slave_1: entered allmulticast mode [ 344.530728][T13618] bridge_slave_1: entered promiscuous mode [ 344.765578][ T63] ip6gretap0 (unregistering): left promiscuous mode [ 344.923249][ T5857] Bluetooth: hci5: command tx timeout [ 345.391807][T13709] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2675'. [ 345.576921][ T63]  (unregistering): left promiscuous mode [ 345.600176][ T63]  (unregistering): Released all slaves [ 345.704189][ T63] bond0 (unregistering): Released all slaves [ 345.720710][ T63] bond1 (unregistering): Released all slaves [ 345.822702][T13709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 345.845750][T13618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.885441][ T63] tipc: Left network mode [ 345.899624][T13618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.960901][T13706] lo speed is unknown, defaulting to 1000 [ 346.018565][T13618] team0: Port device team_slave_0 added [ 346.030301][T13618] team0: Port device team_slave_1 added [ 346.036260][T13706] lo speed is unknown, defaulting to 1000 [ 346.113723][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'. [ 346.124910][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2677'. [ 346.251883][T13618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.266419][T13618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.300065][T13618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.411467][T13720] 8021q: adding VLAN 0 to HW filter on device bond5 [ 346.440872][T13720] bond0: (slave bond5): Enslaving as an active interface with an up link [ 346.492334][T13618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.506566][T13618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.552489][T13618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.989800][ T63] hsr_slave_0: left promiscuous mode [ 346.996934][ T5857] Bluetooth: hci5: command tx timeout [ 347.006757][ T63] hsr_slave_1: left promiscuous mode [ 347.012613][ T63] batman_adv: batadv0: Removing interface: dummy0 [ 347.244373][ T63] veth1_macvtap: left promiscuous mode [ 347.251811][ T63] veth0_macvtap: left promiscuous mode [ 347.394455][ T63] [ 347.396832][ T63] ====================================================== [ 347.403854][ T63] WARNING: possible circular locking dependency detected [ 347.410865][ T63] 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 Not tainted [ 347.417966][ T63] ------------------------------------------------------ [ 347.424991][ T63] kworker/u8:4/63 is trying to acquire lock: [ 347.430961][ T63] ffff888062408e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 347.441090][ T63] [ 347.441090][ T63] but task is already holding lock: [ 347.448472][ T63] ffff888062456d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 347.460183][ T63] [ 347.460183][ T63] which lock already depends on the new lock. [ 347.460183][ T63] [ 347.470586][ T63] [ 347.470586][ T63] the existing dependency chain (in reverse order) is: [ 347.479596][ T63] [ 347.479596][ T63] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 347.488043][ T63] lock_acquire+0x116/0x2f0 [ 347.493160][ T63] __mutex_lock+0x1a5/0x10c0 [ 347.498279][ T63] dev_set_mtu+0x11c/0x270 [ 347.503217][ T63] team_add_slave+0x83b/0x28b0 [ 347.508504][ T63] do_set_master+0x579/0x730 [ 347.513633][ T63] do_setlink+0xf76/0x4390 [ 347.518599][ T63] rtnl_newlink+0x17e2/0x1fe0 [ 347.523822][ T63] rtnetlink_rcv_msg+0x80f/0xd70 [ 347.529292][ T63] netlink_rcv_skb+0x208/0x480 [ 347.534587][ T63] netlink_unicast+0x7f8/0x9a0 [ 347.539878][ T63] netlink_sendmsg+0x8c3/0xcd0 [ 347.545172][ T63] __sock_sendmsg+0x221/0x270 [ 347.550392][ T63] ____sys_sendmsg+0x523/0x860 [ 347.555704][ T63] __sys_sendmsg+0x271/0x360 [ 347.560829][ T63] do_syscall_64+0xf3/0x230 [ 347.565865][ T63] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.572282][ T63] [ 347.572282][ T63] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 347.580473][ T63] validate_chain+0xa69/0x24e0 [ 347.585852][ T63] __lock_acquire+0xad5/0xd80 [ 347.591048][ T63] lock_acquire+0x116/0x2f0 [ 347.596071][ T63] __mutex_lock+0x1a5/0x10c0 [ 347.601202][ T63] team_vlan_rx_kill_vid+0x36/0xe0 [ 347.606836][ T63] vlan_vid_del+0x483/0x770 [ 347.611854][ T63] vlan_device_event+0x23c/0x1e00 [ 347.617396][ T63] notifier_call_chain+0x1a5/0x3f0 [ 347.623033][ T63] dev_close_many+0x33e/0x4c0 [ 347.628253][ T63] unregister_netdevice_many_notify+0x628/0x2510 [ 347.635113][ T63] default_device_exit_batch+0x7ff/0x880 [ 347.641291][ T63] cleanup_net+0x8af/0xd60 [ 347.646262][ T63] process_scheduled_works+0xac3/0x18e0 [ 347.652342][ T63] worker_thread+0x870/0xd50 [ 347.657469][ T63] kthread+0x7b7/0x940 [ 347.662077][ T63] ret_from_fork+0x4b/0x80 [ 347.667013][ T63] ret_from_fork_asm+0x1a/0x30 [ 347.672291][ T63] [ 347.672291][ T63] other info that might help us debug this: [ 347.672291][ T63] [ 347.682521][ T63] Possible unsafe locking scenario: [ 347.682521][ T63] [ 347.689965][ T63] CPU0 CPU1 [ 347.695339][ T63] ---- ---- [ 347.700721][ T63] lock(&dev_instance_lock_key#3); [ 347.705959][ T63] lock(team->team_lock_key#5); [ 347.713422][ T63] lock(&dev_instance_lock_key#3); [ 347.721150][ T63] lock(team->team_lock_key#5); [ 347.726096][ T63] [ 347.726096][ T63] *** DEADLOCK *** [ 347.726096][ T63] [ 347.734231][ T63] 5 locks held by kworker/u8:4/63: [ 347.739332][ T63] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 347.750226][ T63] #1: ffffc90001557c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 347.760797][ T63] #2: ffffffff900f0910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 347.770220][ T63] #3: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 347.780251][ T63] #4: ffff888062456d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 347.792282][ T63] [ 347.792282][ T63] stack backtrace: [ 347.798175][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u8:4 Not tainted 6.15.0-rc1-syzkaller-00209-gfaeefc173be4 #0 PREEMPT(full) [ 347.798196][ T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.798208][ T63] Workqueue: netns cleanup_net [ 347.798236][ T63] Call Trace: [ 347.798242][ T63] [ 347.798250][ T63] dump_stack_lvl+0x241/0x360 [ 347.798276][ T63] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.798299][ T63] ? __pfx__printk+0x10/0x10 [ 347.798322][ T63] ? print_lock+0x171/0x1a0 [ 347.798343][ T63] print_circular_bug+0x2e1/0x300 [ 347.798366][ T63] check_noncircular+0x142/0x160 [ 347.798390][ T63] validate_chain+0xa69/0x24e0 [ 347.798423][ T63] __lock_acquire+0xad5/0xd80 [ 347.798443][ T63] lock_acquire+0x116/0x2f0 [ 347.798458][ T63] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 347.798476][ T63] ? __timer_delete_sync+0x25f/0x310 [ 347.798503][ T63] __mutex_lock+0x1a5/0x10c0 [ 347.798524][ T63] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 347.798539][ T63] ? __neigh_ifdown+0x3c4/0x400 [ 347.798562][ T63] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 347.798576][ T63] ? rt6_disable_ip+0x791/0x810 [ 347.798599][ T63] ? __pfx___mutex_lock+0x10/0x10 [ 347.798627][ T63] team_vlan_rx_kill_vid+0x36/0xe0 [ 347.798649][ T63] vlan_vid_del+0x483/0x770 [ 347.798668][ T63] vlan_device_event+0x23c/0x1e00 [ 347.798687][ T63] ? br_device_event+0x28f/0xae0 [ 347.798709][ T63] ? __pfx_phonet_device_notify+0x10/0x10 [ 347.798726][ T63] ? __pfx_vlan_device_event+0x10/0x10 [ 347.798741][ T63] ? __pfx_br_device_event+0x10/0x10 [ 347.798762][ T63] ? raw_notifier+0x9d/0x740 [ 347.798784][ T63] ? isotp_notifier+0xa4/0x6b0 [ 347.798800][ T63] ? cgw_notifier+0xd8/0x3b0 [ 347.798814][ T63] ? packet_notifier+0x76/0xa30 [ 347.798837][ T63] notifier_call_chain+0x1a5/0x3f0 [ 347.798860][ T63] dev_close_many+0x33e/0x4c0 [ 347.798897][ T63] ? __pfx_dev_close_many+0x10/0x10 [ 347.798922][ T63] unregister_netdevice_many_notify+0x628/0x2510 [ 347.798944][ T63] ? lockdep_hardirqs_on+0x9d/0x150 [ 347.798962][ T63] ? __local_bh_enable_ip+0x168/0x200 [ 347.798977][ T63] ? batadv_tt_local_remove+0x119/0x230 [ 347.798993][ T63] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 347.799008][ T63] ? batadv_tt_local_remove+0x119/0x230 [ 347.799022][ T63] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 347.799046][ T63] ? unregister_netdevice_queue+0x2c4/0x400 [ 347.799066][ T63] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 347.799091][ T63] default_device_exit_batch+0x7ff/0x880 [ 347.799117][ T63] ? __pfx_default_device_exit_batch+0x10/0x10 [ 347.799140][ T63] ? cfg802154_switch_netns+0x21b/0x3d0 [ 347.799157][ T63] ? cfg802154_pernet_exit+0xc3/0xe0 [ 347.799171][ T63] ? __pfx_default_device_exit_batch+0x10/0x10 [ 347.799212][ T63] cleanup_net+0x8af/0xd60 [ 347.799238][ T63] ? __pfx_cleanup_net+0x10/0x10 [ 347.799266][ T63] ? process_scheduled_works+0x9cb/0x18e0 [ 347.799284][ T63] process_scheduled_works+0xac3/0x18e0 [ 347.799323][ T63] ? __pfx_process_scheduled_works+0x10/0x10 [ 347.799344][ T63] ? assign_work+0x367/0x3d0 [ 347.799362][ T63] worker_thread+0x870/0xd50 [ 347.799384][ T63] ? __kthread_parkme+0x1a8/0x200 [ 347.799424][ T63] ? __pfx_worker_thread+0x10/0x10 [ 347.799443][ T63] kthread+0x7b7/0x940 [ 347.799465][ T63] ? __pfx_worker_thread+0x10/0x10 [ 347.799485][ T63] ? __pfx_kthread+0x10/0x10 [ 347.799506][ T63] ? __pfx_kthread+0x10/0x10 [ 347.799527][ T63] ? __pfx_kthread+0x10/0x10 [ 347.799566][ T63] ? __pfx_kthread+0x10/0x10 [ 347.799588][ T63] ? _raw_spin_unlock_irq+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.799604][ T63] ? lockdep_hardirqs_on+0x9d/0x150 [ 347.799623][ T63] ? __pfx_kthread+0x10/0x10 [ 347.799652][ T63] ret_from_fork+0x4b/0x80 [ 347.799669][ T63] ? __pfx_kthread+0x10/0x10 [ 347.799692][ T63] ret_from_fork_asm+0x1a/0x30 [ 347.799714][ T63] [ 348.852830][T13618] hsr_slave_0: entered promiscuous mode [ 348.859831][T13618] hsr_slave_1: entered promiscuous mode [ 348.865985][T13618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.873899][T13618] Cannot create hsr debugfs directory [ 349.092242][ T5857] Bluetooth: hci5: command tx timeout [ 349.414495][T13735] syz_tun (unregistering): left allmulticast mode [ 349.421065][T13735] syz_tun (unregistering): left promiscuous mode [ 349.431551][ T5849] syz-executor (5849) used greatest stack depth: 18616 bytes left [ 349.437238][T13735] bridge0: port 3(syz_tun) entered disabled state