last executing test programs: 3.470250903s ago: executing program 3 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) (fail_nth: 21) 2.921059702s ago: executing program 3 (id=833): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r2, &(0x7f0000000340)={0x23, 0x2, 0x3}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x4, {{'ecb(arc4)\x00'}}}]}, 0x180}}, 0x0) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000029c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff000000, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x2f, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 2.808570613s ago: executing program 0 (id=834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 2.756863037s ago: executing program 0 (id=835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 2.686885882s ago: executing program 0 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x4810) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)={'filter\x00', 0x0, [0x0, 0x6, 0x1, 0x40, 0x10001]}, &(0x7f0000000200)=0x54) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYBLOB="ad3edec7a83bf0c1f1bb585885d952810f3351fc6eaf85ee235d656bf01be8f13dfc71549a5a5ed1fb42682bef11bf2d4730250d2428f7e2acde0a3b56e324f4e83f3b2a97fb15e3bcc212ca489c44e3113e5804e12a4d1e4159de00debe6cf96034315b3bb8f0a40140375f9aaaa1d723559cce803023e86ddcc5fc0e80d9dd8e1457a944fc4d563b6d99848b69e2392229e27466d73f188755043657281b89ba24c9ec6013f4e39496c144a1acbe53801abd888267a3088649199c2e2215aaf8fbe1f140d935701cc88850bec011f4fa220b649d"], 0x74}}, 0x0) 1.94687255s ago: executing program 3 (id=846): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 1.812166185s ago: executing program 2 (id=847): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1.741378437s ago: executing program 3 (id=849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.66036422s ago: executing program 2 (id=850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef232", 0x28}, {&(0x7f0000000100)="051a00000e80006558f2878f0200d735be8500003d83", 0x16}], 0x2) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x120, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x0, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xfffffffffffffca1, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x9}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x44001}, 0x4040050) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 1.479315938s ago: executing program 4 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, 0x0, &(0x7f0000000500)=""/73}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000090601020000000000040000000000000000020073797a3100000000480007802edb8b72da530c001680080001400a0101000900130073797a30000000000a001100aaaaaaaaaabb000008000b40000000011800148014000240fe8000"/107], 0x6c}, 0x1, 0x0, 0x0, 0x100000ca}, 0x4000080) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="b31cc3ca00000000280012800b0001006272696467650000180002800c002e0001007c9387"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xc4, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_ZONE={0x6}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xaf}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x5870, 0xfffffff7]}, @CTA_ZONE={0x6}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x8}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xf9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x34}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) 1.452082331s ago: executing program 1 (id=853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "0600", "028279eb840000003000", '\x00\';\x00', "2e0b4a496e4d37b3"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)}, 0x0) 1.354503278s ago: executing program 1 (id=854): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d12a9b171ed3c4ae92aefe7d0ac4294044d7173ecb84266e10b660ef78f2427814e32799a537681b771291bec3537152669df49082b3364e941609a1a3d048f9f6e0f45b993221363d9733684d89", 0x4e}, {&(0x7f0000000140)="6ad3c65c85fa287f7bd2d3e0f49417bca40170048e4c5b113ccf48a8b252c677c05d0a62646fab62c0762f9089d4cb4543ec49389aaf71dc2b8b395ab31c7c3d595ad996c572e750b15bb8bbbe21af47ea141fe6fd9740819ed1f57c70e2423e32e5b2fd6c62faff9fc45f107a0cec235cd5a617a0a1b5e1033c420b1d8cc547f7f8d66a6cbfe81f12defb3254e60f3fbc1744b09ee4f82d5e3f18b54e8d5f2ece4bd16405b86e6c8098fafa7441bcdc51b6", 0xb2}, {&(0x7f0000000040)="4ad36471f8611575a965d14d89b7542309e258b50293e0c982bb745d143cd7261fda1a86cda29996a966", 0x2a}, {&(0x7f00000005c0)="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", 0x6c8}, {&(0x7f0000000200)="a4b354", 0x3}], 0x5}}], 0x1, 0x4000010) 1.207237901s ago: executing program 1 (id=855): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190015000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.097761274s ago: executing program 4 (id=856): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$kcm(0x11, 0xa, 0x300) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x6, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010010"], 0x1c}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0001000000000000140012800b00010062397461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x48}}, 0x0) 1.076477739s ago: executing program 3 (id=857): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r1, &(0x7f0000000340)={0x23, 0x2, 0x3}, 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) 935.748356ms ago: executing program 2 (id=858): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000001080001000300000005000200000000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 853.223116ms ago: executing program 1 (id=859): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001011010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 852.469135ms ago: executing program 4 (id=860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB="1000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 825.054687ms ago: executing program 0 (id=861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 758.988552ms ago: executing program 2 (id=862): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000080)={@local, @loopback, 0x0, "3744000000001ac700000000aea380c74c081fdf00", 0x80, 0x0, 0x7, 0xf04}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, 0x0, 0x0) 661.628199ms ago: executing program 1 (id=863): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x4, 0x5, 0x5, 0x7, 0x7, 0x3, 0x4, 0x3}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xe, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x8, [0xc, 0x8, 0xb, 0x0, 0x9, 0xb, 0xd, 0x3, 0xc, 0xa1, 0xa, 0x8, 0xc, 0x2, 0x6], 0x0, [0x5d3, 0x94e8, 0x0, 0x7, 0x0, 0xe, 0x101, 0x2, 0x0, 0xfffd, 0x4, 0x4, 0x8, 0x3, 0xbf24, 0x989], [0x4, 0x3, 0x7, 0x8, 0x8, 0x7, 0x40, 0x7, 0x0, 0x800, 0x8, 0x1, 0x8, 0x9, 0x1000, 0x40]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0], 0x7c}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xff000000}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x4000001, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = accept4$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000180)={0x0, @aes128}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'sit0\x00', @random="76acca34c177"}) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0) 660.961826ms ago: executing program 4 (id=864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "0600", "028279eb840000003000", '\x00\';\x00', "2e0b4a496e4d37b3"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)}, 0x0) 555.04797ms ago: executing program 2 (id=865): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES64=r0, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 553.733083ms ago: executing program 0 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) write(r2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4801}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, 0x0, &(0x7f0000000500)=""/73}, 0x20) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000090601020000000000040000000000000000020073797a3100000000480007802edb8b72da530c001680080001400a0101000900130073797a30000000000a001100aaaaaaaaaabb000008000b40000000011800148014000240fe8000"/107], 0x6c}, 0x1, 0x0, 0x0, 0x100000ca}, 0x4000080) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="b31cc3ca00000000280012800b0001006272696467650000180002800c002e0001007c9387"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xc4, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_ZONE={0x6}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x44, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xaf}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x5870, 0xfffffff7]}, @CTA_ZONE={0x6}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x8}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xf9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x34}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) 548.817587ms ago: executing program 4 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 417.091025ms ago: executing program 1 (id=868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef232", 0x28}, {&(0x7f0000000100)="051a00000e80006558f2878f0200d735be8500003d83", 0x16}], 0x2) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x120, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x0, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xfffffffffffffca1, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x9}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x44001}, 0x4040050) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) 416.467173ms ago: executing program 2 (id=869): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private=0xa010101, 0x0, 0xb7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb43, 0x4}, {0x0, 0x0, 0xcd57}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x30, @in=@broadcast, 0x0, 0x1, 0x0, 0xe}]}]}, 0xfc}}, 0x4008080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r4, 0x0, 0x0, 0x0}, 0x30) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r9, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001d80)=""/166, 0xa6}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002002, 0x0) sendmsg$tipc(r9, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000004c0)="e8", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4800) 370.710753ms ago: executing program 4 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, r2, 0x2, 0x0, 0x0, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018111d78048b82abd767230ef46d17b872460e9b8d18eaf0ee2a5eadb88fba81db1ae98fb68e7437449e51d488c48ca11311b1a6d848b90346e657c082ab9ab454eba3b6dab1b60aefb6c309f7901557596f69297f1f460ffb2fe1b0693de07af84deb1d6bf140f072ce4aaaef88387a97a4c8963b3591049650251529a0a916c95e942cfc48790aa4cbbb81214dce44be67f26fa3f58a8dfeea6fd1a93c364496d20da0ff31b81446f94acacf356f3142a3db884fbdb9fe63b0a8e012f01f76bc0c60ba", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000009515e43be13572536cf7ee80df2f8b1363aa2dada8164ae0f8f7dd9fce3365ea1cd529a70cd60a53b3312c2725bb5e513000758bdcafca1f22a440113e847edfd7003fa9b2174900db3369ac6f57dcbb15c6f7cc3e66317b6a240d4417c17e86de89d91154ac50a0a9d2b5380e943e2e72c8d3edbc34a7ad662a0b920940d75129c13b6aa5fd2e2914fc362db5137884b342764fe828283cdbb59a37e74a031590e697154604bdd73a2009b2d4653874"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket(0x10, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r11, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="03008000", @ANYRES16=r14, @ANYBLOB="08002abd7000ffdbdf250a00000008000300", @ANYRES32=r16, @ANYBLOB="08003700000000000a000600ffffffffffff00100800090001ac0effeb000700f851cc1083000000040028000a00060008021100000100be0b30e870fd9a4a53fdc9552e0008003700020000"], 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x801) 156.494037ms ago: executing program 0 (id=871): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xca) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x7, 0x3, 0x7fffffffffffffff, 0x80000001, 0x6, 0x8, 0x9, 0x29f9238, 0xfffffffffffffffe, 0x8000000000000000, 0x5, 0xcc76, 0x0, 0x912]}, &(0x7f0000000100)=0x100) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x100020, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmm'], 0xa) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00 ', @ANYRES16=r6, @ANYBLOB="00022bbd7000fcdbdf256a0000000a00060008021100000100000500d2000a00000000000600ffffffffffff00000500d200000000000a000600ffffffffffff00000000060008021100000100000a000600ffffffffffff0000"], 0xfffffffffffffc26}, 0x1, 0x0, 0x0, 0x80}, 0xc090) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) unshare(0x36000080) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="08210c000900000085000000400000007a4328ed0104000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0x67, &(0x7f0000000780)=""/103, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x5, 0x9}, 0x10, 0x4e83, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB='D'], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44090}, 0x800) 0s ago: executing program 3 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r1, 0x307, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x20004800) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8993, &(0x7f0000001440)={'bond0\x00', 0x0}) kernel console output (not intermixed with test programs): 036] IPVS: using max 25 ests per chain, 60000 per kthread [ 104.784290][ T6052] FAULT_INJECTION: forcing a failure. [ 104.784290][ T6052] name failslab, interval 1, probability 0, space 0, times 0 [ 104.799430][ T6052] CPU: 1 UID: 0 PID: 6052 Comm: syz.3.39 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 104.799458][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 104.799475][ T6052] Call Trace: [ 104.799487][ T6052] [ 104.799496][ T6052] dump_stack_lvl+0x189/0x250 [ 104.799540][ T6052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.799569][ T6052] ? __pfx__printk+0x10/0x10 [ 104.799601][ T6052] should_fail_ex+0x414/0x560 [ 104.799643][ T6052] should_failslab+0xa8/0x100 [ 104.799671][ T6052] __kmalloc_noprof+0xcb/0x4f0 [ 104.799695][ T6052] ? sk_prot_alloc+0xe7/0x220 [ 104.799724][ T6052] sk_prot_alloc+0xe7/0x220 [ 104.799746][ T6052] ? sk_alloc+0x24/0x370 [ 104.799772][ T6052] sk_alloc+0x3a/0x370 [ 104.799801][ T6052] x25_alloc_socket+0x2d/0x300 [ 104.799829][ T6052] x25_create+0xa8/0x4d0 [ 104.799856][ T6052] __sock_create+0x4b0/0x9f0 [ 104.799886][ T6052] __sys_socket+0xd7/0x1b0 [ 104.799911][ T6052] __x64_sys_socket+0x7a/0x90 [ 104.799932][ T6052] do_syscall_64+0xf6/0x210 [ 104.799951][ T6052] ? clear_bhb_loop+0x45/0xa0 [ 104.799975][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.799994][ T6052] RIP: 0033:0x7fcaabb8e969 [ 104.800016][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.800032][ T6052] RSP: 002b:00007fcaacab1fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 104.800060][ T6052] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fcaabb8e969 [ 104.800079][ T6052] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000009 [ 104.800090][ T6052] RBP: 00007fcaacab2090 R08: 0000000000000000 R09: 0000000000000000 [ 104.800102][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.800113][ T6052] R13: 0000000000000000 R14: 00007fcaabdb5fa0 R15: 00007ffd18b613a8 [ 104.800143][ T6052] [ 105.240031][ T6064] __nla_validate_parse: 2 callbacks suppressed [ 105.240050][ T6064] netlink: 44 bytes leftover after parsing attributes in process `syz.3.42'. [ 105.643801][ T6079] block nbd0: server does not support multiple connections per device. [ 105.719801][ T6079] block nbd0: shutting down sockets [ 106.012617][ T6094] lo speed is unknown, defaulting to 1000 [ 106.051493][ T6094] lo speed is unknown, defaulting to 1000 [ 106.098960][ T6094] lo speed is unknown, defaulting to 1000 [ 106.189748][ T6094] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.247570][ T6094] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.346170][ T6094] lo speed is unknown, defaulting to 1000 [ 106.355098][ T6094] lo speed is unknown, defaulting to 1000 [ 106.363253][ T6094] lo speed is unknown, defaulting to 1000 [ 106.371562][ T6094] lo speed is unknown, defaulting to 1000 [ 106.380371][ T6094] lo speed is unknown, defaulting to 1000 [ 106.600266][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 106.614209][ T6106] netlink: 248 bytes leftover after parsing attributes in process `syz.3.53'. [ 106.731358][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 106.898911][ T6107] lo speed is unknown, defaulting to 1000 [ 107.347784][ T6121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.57'. [ 107.394429][ T6121] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 107.425097][ T6123] Bluetooth: MGMT ver 1.23 [ 107.896474][ T6138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.897827][ T6140] FAULT_INJECTION: forcing a failure. [ 107.897827][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 107.987852][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.63'. [ 107.993412][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.0.61 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 107.993443][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 107.993456][ T6140] Call Trace: [ 107.993465][ T6140] [ 107.993474][ T6140] dump_stack_lvl+0x189/0x250 [ 107.993515][ T6140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.993547][ T6140] ? __pfx__printk+0x10/0x10 [ 107.993576][ T6140] ? __pfx___might_resched+0x10/0x10 [ 107.993596][ T6140] ? fs_reclaim_acquire+0x7d/0x100 [ 107.993635][ T6140] should_fail_ex+0x414/0x560 [ 107.993676][ T6140] should_failslab+0xa8/0x100 [ 107.993706][ T6140] kmem_cache_alloc_noprof+0x73/0x3c0 [ 107.993731][ T6140] ? __kernfs_new_node+0xd7/0x7f0 [ 107.993767][ T6140] __kernfs_new_node+0xd7/0x7f0 [ 107.993799][ T6140] ? __lock_acquire+0xaac/0xd20 [ 107.993835][ T6140] ? __pfx___kernfs_new_node+0x10/0x10 [ 107.993867][ T6140] ? kernfs_root+0x1c/0x230 [ 107.993904][ T6140] ? kernfs_root+0x1c/0x230 [ 107.993931][ T6140] ? kernfs_root+0x1c/0x230 [ 107.993957][ T6140] ? kernfs_root+0x1c/0x230 [ 107.993991][ T6140] kernfs_new_node+0x102/0x210 [ 107.994028][ T6140] kernfs_create_dir_ns+0x44/0x130 [ 107.994072][ T6140] sysfs_create_dir_ns+0x123/0x280 [ 107.994106][ T6140] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.994136][ T6140] ? do_raw_spin_unlock+0x122/0x240 [ 107.994166][ T6140] kobject_add_internal+0x59f/0xb40 [ 107.994200][ T6140] kobject_add+0x155/0x220 [ 107.994227][ T6140] ? __pfx_kobject_add+0x10/0x10 [ 107.994247][ T6140] ? do_raw_spin_unlock+0x122/0x240 [ 107.994276][ T6140] ? get_device_parent+0x366/0x3a0 [ 107.994306][ T6140] device_add+0x408/0xb50 [ 107.994335][ T6140] device_create+0x25b/0x2f0 [ 107.994364][ T6140] ? init_timer_key+0x171/0x2d0 [ 107.994392][ T6140] ? __pfx_device_create+0x10/0x10 [ 107.994419][ T6140] ? ieee80211_alloc_hw_nm+0x18d2/0x1f20 [ 107.994459][ T6140] mac80211_hwsim_new_radio+0x418/0x5340 [ 107.994505][ T6140] ? stack_depot_save_flags+0x40/0x910 [ 107.994545][ T6140] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 107.994574][ T6140] ? __nla_validate_parse+0x2400/0x2d40 [ 107.994597][ T6140] ? __sock_sendmsg+0x219/0x270 [ 107.994615][ T6140] ? ____sys_sendmsg+0x505/0x830 [ 107.994655][ T6140] hwsim_new_radio_nl+0xea4/0x1b10 [ 107.994691][ T6140] ? __pfx___nla_validate_parse+0x10/0x10 [ 107.994732][ T6140] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 107.994779][ T6140] ? __nla_parse+0x40/0x60 [ 107.994807][ T6140] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 107.994849][ T6140] genl_family_rcv_msg_doit+0x212/0x300 [ 107.994888][ T6140] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 107.994936][ T6140] ? bpf_lsm_capable+0x9/0x20 [ 107.994965][ T6140] ? security_capable+0x7e/0x2e0 [ 107.994997][ T6140] genl_rcv_msg+0x60e/0x790 [ 107.995035][ T6140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.995074][ T6140] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 107.995107][ T6140] ? ref_tracker_free+0x63a/0x7d0 [ 107.995127][ T6140] ? __copy_skb_header+0xa7/0x550 [ 107.995167][ T6140] netlink_rcv_skb+0x219/0x490 [ 107.995192][ T6140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.995224][ T6140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.995276][ T6140] ? down_read+0x1ad/0x2e0 [ 107.995300][ T6140] genl_rcv+0x28/0x40 [ 107.995326][ T6140] netlink_unicast+0x758/0x8d0 [ 107.995360][ T6140] netlink_sendmsg+0x805/0xb30 [ 107.995396][ T6140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.995425][ T6140] ? aa_sock_msg_perm+0x94/0x160 [ 107.995450][ T6140] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.995473][ T6140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.995498][ T6140] __sock_sendmsg+0x219/0x270 [ 107.995522][ T6140] ____sys_sendmsg+0x505/0x830 [ 107.995556][ T6140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.995595][ T6140] ? import_iovec+0x74/0xa0 [ 107.995629][ T6140] ___sys_sendmsg+0x21f/0x2a0 [ 107.995659][ T6140] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.995730][ T6140] ? __fget_files+0x2a/0x420 [ 107.995758][ T6140] ? __fget_files+0x3a0/0x420 [ 107.995796][ T6140] __x64_sys_sendmsg+0x19b/0x260 [ 107.995828][ T6140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.995875][ T6140] ? do_syscall_64+0xba/0x210 [ 107.995899][ T6140] do_syscall_64+0xf6/0x210 [ 107.995919][ T6140] ? clear_bhb_loop+0x45/0xa0 [ 107.995945][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.995966][ T6140] RIP: 0033:0x7fab7e78e969 [ 107.995985][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.996001][ T6140] RSP: 002b:00007fab7f591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.996024][ T6140] RAX: ffffffffffffffda RBX: 00007fab7e9b5fa0 RCX: 00007fab7e78e969 [ 107.996040][ T6140] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 107.996061][ T6140] RBP: 00007fab7f591090 R08: 0000000000000000 R09: 0000000000000000 [ 107.996074][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.996086][ T6140] R13: 0000000000000000 R14: 00007fab7e9b5fa0 R15: 00007ffc7e38ca58 [ 107.996119][ T6140] [ 108.007576][ T6140] kobject: kobject_add_internal failed for hwsim14 (error: -12 parent: mac80211_hwsim) [ 108.030048][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 108.121485][ T6147] netlink: 'syz.1.65': attribute type 4 has an invalid length. [ 108.830572][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 109.091816][ T6164] lo speed is unknown, defaulting to 1000 [ 109.138112][ T6173] sch_fq: defrate 2048 ignored. [ 109.202850][ T6170] netlink: 'syz.3.69': attribute type 3 has an invalid length. [ 109.231377][ T6170] netlink: 'syz.3.69': attribute type 3 has an invalid length. [ 109.271665][ T6176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.69'. [ 109.329361][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'. [ 109.739288][ T6194] openvswitch: netlink: Multiple metadata blocks provided [ 110.458795][ T6222] __nla_validate_parse: 4 callbacks suppressed [ 110.458815][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 110.603730][ T6222] netlink: 104 bytes leftover after parsing attributes in process `syz.1.83'. [ 110.851707][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.860138][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.285933][ T6260] netlink: 'syz.2.88': attribute type 39 has an invalid length. [ 111.306138][ T6262] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 111.336901][ T6262] netlink: 'syz.0.89': attribute type 2 has an invalid length. [ 111.341708][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.367612][ T6212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.543744][ T6212] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.552706][ T6212] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.593576][ T6212] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.602670][ T6212] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.794579][ T6267] openvswitch: netlink: Multiple metadata blocks provided [ 111.820406][ T6267] netlink: 88 bytes leftover after parsing attributes in process `syz.0.90'. [ 111.822177][ T6213] veth3: entered allmulticast mode [ 111.841014][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 111.909395][ T6216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.921551][ T6216] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.938120][ T6216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.955873][ T6217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.82'. [ 111.955884][ T6218] netlink: 'syz.1.83': attribute type 25 has an invalid length. [ 111.965031][ T6218] netlink: 'syz.1.83': attribute type 8 has an invalid length. [ 111.965054][ T6218] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 111.965067][ T6218] netlink: 'syz.1.83': attribute type 40 has an invalid length. [ 112.176644][ T6277] FAULT_INJECTION: forcing a failure. [ 112.176644][ T6277] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.213354][ T6277] CPU: 1 UID: 0 PID: 6277 Comm: syz.4.92 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 112.213385][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 112.213396][ T6277] Call Trace: [ 112.213405][ T6277] [ 112.213414][ T6277] dump_stack_lvl+0x189/0x250 [ 112.213458][ T6277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.213488][ T6277] ? __pfx__printk+0x10/0x10 [ 112.213524][ T6277] should_fail_ex+0x414/0x560 [ 112.213574][ T6277] _copy_from_user+0x2d/0xb0 [ 112.213603][ T6277] bpf_test_init+0xf8/0x170 [ 112.213630][ T6277] bpf_prog_test_run_xdp+0x37c/0xf90 [ 112.213670][ T6277] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 112.213698][ T6277] ? __fget_files+0x2a/0x420 [ 112.213731][ T6277] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 112.213757][ T6277] bpf_prog_test_run+0x2a9/0x340 [ 112.213789][ T6277] __sys_bpf+0x4a4/0x860 [ 112.213818][ T6277] ? __pfx___sys_bpf+0x10/0x10 [ 112.213858][ T6277] ? ksys_write+0x1f0/0x250 [ 112.213879][ T6277] ? rcu_is_watching+0x15/0xb0 [ 112.213923][ T6277] __x64_sys_bpf+0x7c/0x90 [ 112.213947][ T6277] do_syscall_64+0xf6/0x210 [ 112.213967][ T6277] ? clear_bhb_loop+0x45/0xa0 [ 112.213993][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.214013][ T6277] RIP: 0033:0x7fc204b8e969 [ 112.214032][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.214048][ T6277] RSP: 002b:00007fc2059d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.214068][ T6277] RAX: ffffffffffffffda RBX: 00007fc204db5fa0 RCX: 00007fc204b8e969 [ 112.214083][ T6277] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 112.214095][ T6277] RBP: 00007fc2059d6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.214108][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.214119][ T6277] R13: 0000000000000000 R14: 00007fc204db5fa0 R15: 00007ffd75ce1328 [ 112.214152][ T6277] [ 112.764679][ T6293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.98'. [ 113.323603][ T6311] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 113.387522][ T6283] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 113.428554][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 113.935048][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 114.037558][ T6352] openvswitch: netlink: Multiple metadata blocks provided [ 114.057438][ T6352] netlink: 88 bytes leftover after parsing attributes in process `syz.2.106'. [ 114.059693][ T6343] lo speed is unknown, defaulting to 1000 [ 114.109028][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 114.932268][ T6388] FAULT_INJECTION: forcing a failure. [ 114.932268][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 114.982201][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.1.114 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 114.982231][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 114.982243][ T6388] Call Trace: [ 114.982251][ T6388] [ 114.982259][ T6388] dump_stack_lvl+0x189/0x250 [ 114.982296][ T6388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.982324][ T6388] ? __pfx__printk+0x10/0x10 [ 114.982346][ T6388] ? __pfx___might_resched+0x10/0x10 [ 114.982364][ T6388] ? fs_reclaim_acquire+0x7d/0x100 [ 114.982394][ T6388] should_fail_ex+0x414/0x560 [ 114.982429][ T6388] should_failslab+0xa8/0x100 [ 114.982456][ T6388] __kmalloc_noprof+0xcb/0x4f0 [ 114.982478][ T6388] ? ethnl_default_start+0x173/0x570 [ 114.982502][ T6388] ethnl_default_start+0x173/0x570 [ 114.982526][ T6388] genl_start+0x4c0/0x6c0 [ 114.982557][ T6388] __netlink_dump_start+0x466/0x7e0 [ 114.982581][ T6388] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 114.982608][ T6388] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 114.982630][ T6388] ? genl_get_cmd+0x67f/0x910 [ 114.982656][ T6388] ? __pfx_genl_start+0x10/0x10 [ 114.982676][ T6388] ? __pfx_genl_dumpit+0x10/0x10 [ 114.982698][ T6388] ? __pfx_genl_done+0x10/0x10 [ 114.982734][ T6388] genl_rcv_msg+0x5da/0x790 [ 114.982768][ T6388] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.982789][ T6388] ? __pfx_ethnl_default_start+0x10/0x10 [ 114.982808][ T6388] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 114.982826][ T6388] ? __pfx_ethnl_default_done+0x10/0x10 [ 114.982847][ T6388] ? ref_tracker_free+0x63a/0x7d0 [ 114.982863][ T6388] ? __copy_skb_header+0xa7/0x550 [ 114.982894][ T6388] netlink_rcv_skb+0x219/0x490 [ 114.982915][ T6388] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.982944][ T6388] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.982991][ T6388] ? down_read+0x1ad/0x2e0 [ 114.983014][ T6388] genl_rcv+0x28/0x40 [ 114.983039][ T6388] netlink_unicast+0x758/0x8d0 [ 114.983071][ T6388] netlink_sendmsg+0x805/0xb30 [ 114.983104][ T6388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.983142][ T6388] ? aa_sock_msg_perm+0x94/0x160 [ 114.983166][ T6388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.983187][ T6388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.983211][ T6388] __sock_sendmsg+0x219/0x270 [ 114.983234][ T6388] ____sys_sendmsg+0x505/0x830 [ 114.983267][ T6388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.983301][ T6388] ? import_iovec+0x74/0xa0 [ 114.983332][ T6388] ___sys_sendmsg+0x21f/0x2a0 [ 114.983360][ T6388] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.983422][ T6388] ? __fget_files+0x2a/0x420 [ 114.983446][ T6388] ? __fget_files+0x3a0/0x420 [ 114.983481][ T6388] __x64_sys_sendmsg+0x19b/0x260 [ 114.983509][ T6388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.983555][ T6388] ? do_syscall_64+0xba/0x210 [ 114.983577][ T6388] do_syscall_64+0xf6/0x210 [ 114.983596][ T6388] ? clear_bhb_loop+0x45/0xa0 [ 114.983621][ T6388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.983639][ T6388] RIP: 0033:0x7fec4fb8e969 [ 114.983657][ T6388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.983674][ T6388] RSP: 002b:00007fec50934038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.983695][ T6388] RAX: ffffffffffffffda RBX: 00007fec4fdb5fa0 RCX: 00007fec4fb8e969 [ 114.983709][ T6388] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 114.983721][ T6388] RBP: 00007fec50934090 R08: 0000000000000000 R09: 0000000000000000 [ 114.983733][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.983744][ T6388] R13: 0000000000000000 R14: 00007fec4fdb5fa0 R15: 00007ffd049a31a8 [ 114.983775][ T6388] [ 115.568589][ T6400] __nla_validate_parse: 3 callbacks suppressed [ 115.568609][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 116.083247][ T6412] validate_nla: 2 callbacks suppressed [ 116.083267][ T6412] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 116.127615][ T6412] netlink: 'syz.2.122': attribute type 2 has an invalid length. [ 116.380591][ T6351] lo speed is unknown, defaulting to 1000 [ 116.425087][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 116.446252][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 116.473856][ T6422] netlink: 'syz.3.121': attribute type 18 has an invalid length. [ 116.581224][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 116.683779][ T6432] lo speed is unknown, defaulting to 1000 [ 116.736550][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.123'. [ 116.910018][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 117.027040][ T6445] hsr_slave_0: left promiscuous mode [ 117.036242][ T6445] hsr_slave_1: left promiscuous mode [ 117.238939][ T6435] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.794795][ T6459] sctp: [Deprecated]: syz.0.131 (pid 6459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.794795][ T6459] Use struct sctp_sack_info instead [ 117.870399][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 117.901457][ T6459] netlink: 'syz.0.131': attribute type 30 has an invalid length. [ 117.982379][ T6459] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.991690][ T6459] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.000580][ T6459] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.009433][ T6459] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.772980][ T6487] lo speed is unknown, defaulting to 1000 [ 119.381380][ T6501] lo speed is unknown, defaulting to 1000 [ 119.587397][ T6526] openvswitch: netlink: Multiple metadata blocks provided [ 119.631516][ T6526] netlink: 88 bytes leftover after parsing attributes in process `syz.3.142'. [ 119.673214][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 119.846555][ T6533] openvswitch: netlink: Multiple metadata blocks provided [ 119.904923][ T6533] netlink: 88 bytes leftover after parsing attributes in process `syz.2.143'. [ 120.464605][ T6554] !: renamed from dummy0 (while UP) [ 120.747873][ T6558] lo speed is unknown, defaulting to 1000 [ 120.952775][ T6577] __nla_validate_parse: 3 callbacks suppressed [ 120.952797][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 121.054796][ T6577] netlink: 'syz.2.149': attribute type 20 has an invalid length. [ 121.096639][ T6577] netlink: 'syz.2.149': attribute type 21 has an invalid length. [ 121.210205][ T6581] syzkaller1: entered promiscuous mode [ 121.218219][ T6592] sctp: [Deprecated]: syz.0.153 (pid 6592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.218219][ T6592] Use struct sctp_sack_info instead [ 121.243621][ T6581] syzkaller1: entered allmulticast mode [ 122.665331][ T6631] FAULT_INJECTION: forcing a failure. [ 122.665331][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 122.683600][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.4.168 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 122.683629][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 122.683641][ T6631] Call Trace: [ 122.683649][ T6631] [ 122.683659][ T6631] dump_stack_lvl+0x189/0x250 [ 122.683697][ T6631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.683726][ T6631] ? __pfx__printk+0x10/0x10 [ 122.683762][ T6631] should_fail_ex+0x414/0x560 [ 122.683799][ T6631] should_failslab+0xa8/0x100 [ 122.683828][ T6631] __kmalloc_cache_noprof+0x70/0x3d0 [ 122.683853][ T6631] ? sctp_add_bind_addr+0x8c/0x370 [ 122.683877][ T6631] sctp_add_bind_addr+0x8c/0x370 [ 122.683901][ T6631] sctp_copy_local_addr_list+0x30b/0x4e0 [ 122.683937][ T6631] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 122.683968][ T6631] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 122.684001][ T6631] ? sctp_v6_is_any+0x64/0x80 [ 122.684024][ T6631] ? sctp_copy_one_addr+0x93/0x360 [ 122.684060][ T6631] sctp_bind_addr_copy+0xb3/0x3c0 [ 122.684092][ T6631] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 122.684124][ T6631] sctp_connect_new_asoc+0x2e0/0x690 [ 122.684152][ T6631] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 122.684178][ T6631] ? __lock_acquire+0xaac/0xd20 [ 122.684207][ T6631] ? sctp_get_af_specific+0x29/0x80 [ 122.684225][ T6631] ? sctp_inet6_send_verify+0x80/0x300 [ 122.684243][ T6631] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 122.684270][ T6631] __sctp_connect+0x5ba/0xd50 [ 122.684309][ T6631] ? __pfx___sctp_connect+0x10/0x10 [ 122.684337][ T6631] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 122.684361][ T6631] ? security_sctp_bind_connect+0x7e/0x2e0 [ 122.684394][ T6631] sctp_getsockopt_connectx3+0x2c4/0x440 [ 122.684418][ T6631] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 122.684439][ T6631] ? __local_bh_enable_ip+0x12d/0x1c0 [ 122.684470][ T6631] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 122.684513][ T6631] sctp_getsockopt+0x98a/0xb60 [ 122.684541][ T6631] do_sock_getsockopt+0x35d/0x650 [ 122.684577][ T6631] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 122.684601][ T6631] ? do_syscall_64+0x40/0x210 [ 122.684617][ T6631] ? __fget_files+0x2a/0x420 [ 122.684642][ T6631] ? __fget_files+0x3a0/0x420 [ 122.684666][ T6631] ? __fget_files+0x2a/0x420 [ 122.684700][ T6631] __x64_sys_getsockopt+0x1a5/0x250 [ 122.684725][ T6631] ? do_syscall_64+0x40/0x210 [ 122.684743][ T6631] ? do_syscall_64+0x40/0x210 [ 122.684789][ T6631] do_syscall_64+0xf6/0x210 [ 122.684809][ T6631] ? clear_bhb_loop+0x45/0xa0 [ 122.684834][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.684853][ T6631] RIP: 0033:0x7fc204b8e969 [ 122.684871][ T6631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.684886][ T6631] RSP: 002b:00007fc2059d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 122.684907][ T6631] RAX: ffffffffffffffda RBX: 00007fc204db5fa0 RCX: 00007fc204b8e969 [ 122.684921][ T6631] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 122.684933][ T6631] RBP: 00007fc2059d6090 R08: 0000200000000440 R09: 0000000000000000 [ 122.684945][ T6631] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.684957][ T6631] R13: 0000000000000000 R14: 00007fc204db5fa0 R15: 00007ffd75ce1328 [ 122.684989][ T6631] [ 123.599481][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 123.626226][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.174'. [ 123.696955][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.705189][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.912483][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.955826][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.177465][ T6649] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.203491][ T6649] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.218259][ T6649] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.228138][ T6649] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.276248][ T6662] FAULT_INJECTION: forcing a failure. [ 124.276248][ T6662] name failslab, interval 1, probability 0, space 0, times 0 [ 124.288998][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: syz.2.180 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 124.289025][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 124.289036][ T6662] Call Trace: [ 124.289044][ T6662] [ 124.289052][ T6662] dump_stack_lvl+0x189/0x250 [ 124.289090][ T6662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.289119][ T6662] ? __pfx__printk+0x10/0x10 [ 124.289136][ T6662] ? rcu_is_watching+0x15/0xb0 [ 124.289173][ T6662] ? enqueue_to_backlog+0xa45/0xfa0 [ 124.289221][ T6662] should_fail_ex+0x414/0x560 [ 124.289258][ T6662] should_failslab+0xa8/0x100 [ 124.289287][ T6662] kmem_cache_alloc_noprof+0x73/0x3c0 [ 124.289312][ T6662] ? skb_clone+0x212/0x3a0 [ 124.289344][ T6662] skb_clone+0x212/0x3a0 [ 124.289375][ T6662] bpf_clone_redirect+0xad/0x3d0 [ 124.289404][ T6662] bpf_prog_4a8c2353fb668905+0x65/0x6d [ 124.289429][ T6662] ? preempt_schedule+0xae/0xc0 [ 124.289455][ T6662] ? bpf_test_run+0x205/0x830 [ 124.289477][ T6662] ? preempt_schedule_common+0x83/0xd0 [ 124.289510][ T6662] ? __pfx_do_softirq+0x10/0x10 [ 124.289552][ T6662] ? __local_bh_disable_ip+0xf1/0x190 [ 124.289582][ T6662] ? __pfx___cant_migrate+0x10/0x10 [ 124.289598][ T6662] ? __local_bh_enable_ip+0x12d/0x1c0 [ 124.289628][ T6662] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 124.289662][ T6662] ? bpf_test_timer_continue+0x136/0x350 [ 124.289690][ T6662] bpf_test_run+0x38b/0x830 [ 124.289724][ T6662] ? bpf_test_run+0x205/0x830 [ 124.289753][ T6662] ? __pfx_bpf_test_run+0x10/0x10 [ 124.289801][ T6662] ? slab_build_skb+0x273/0x3e0 [ 124.289823][ T6662] ? convert___skb_to_skb+0x3d/0x590 [ 124.289847][ T6662] bpf_prog_test_run_skb+0xb30/0x1560 [ 124.289888][ T6662] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 124.289911][ T6662] bpf_prog_test_run+0x2a9/0x340 [ 124.289943][ T6662] __sys_bpf+0x4a4/0x860 [ 124.289971][ T6662] ? __pfx___sys_bpf+0x10/0x10 [ 124.290010][ T6662] ? ksys_write+0x1f0/0x250 [ 124.290031][ T6662] ? rcu_is_watching+0x15/0xb0 [ 124.290072][ T6662] __x64_sys_bpf+0x7c/0x90 [ 124.290095][ T6662] do_syscall_64+0xf6/0x210 [ 124.290115][ T6662] ? clear_bhb_loop+0x45/0xa0 [ 124.290140][ T6662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.290158][ T6662] RIP: 0033:0x7fd34838e969 [ 124.290175][ T6662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.290199][ T6662] RSP: 002b:00007fd34911f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.290219][ T6662] RAX: ffffffffffffffda RBX: 00007fd3485b5fa0 RCX: 00007fd34838e969 [ 124.290233][ T6662] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 124.290245][ T6662] RBP: 00007fd34911f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.290257][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.290268][ T6662] R13: 0000000000000000 R14: 00007fd3485b5fa0 R15: 00007ffcf7af8038 [ 124.290299][ T6662] [ 124.787409][ T5931] lo speed is unknown, defaulting to 1000 [ 124.835955][ T5931] syz2: Port: 1 Link DOWN [ 124.971257][ T6671] netlink: 'syz.1.183': attribute type 39 has an invalid length. [ 125.091485][ T6678] netlink: 420 bytes leftover after parsing attributes in process `syz.1.183'. [ 125.148152][ T6678] netlink: 104 bytes leftover after parsing attributes in process `syz.1.183'. [ 125.246904][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 125.297676][ T6676] vlan2: entered promiscuous mode [ 125.303125][ T6676] vlan2: entered allmulticast mode [ 125.309052][ T6676] hsr_slave_1: entered allmulticast mode [ 125.577830][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 125.626368][ T6702] netlink: 'syz.2.193': attribute type 5 has an invalid length. [ 125.795586][ T6702] lo speed is unknown, defaulting to 1000 [ 125.875668][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 126.052853][ T6720] netlink: 'syz.4.195': attribute type 10 has an invalid length. [ 126.255185][ T6720] team0: Port device syz_tun added [ 126.278171][ T6726] netem: change failed [ 126.630183][ T6740] tipc: Started in network mode [ 126.666755][ T6740] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 126.679506][ T6740] tipc: Enabled bearer , priority 0 [ 127.051987][ T6764] FAULT_INJECTION: forcing a failure. [ 127.051987][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 127.067765][ T6764] CPU: 1 UID: 0 PID: 6764 Comm: syz.0.208 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 127.067797][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 127.067809][ T6764] Call Trace: [ 127.067818][ T6764] [ 127.067827][ T6764] dump_stack_lvl+0x189/0x250 [ 127.067869][ T6764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.067901][ T6764] ? __pfx__printk+0x10/0x10 [ 127.067926][ T6764] ? __pfx___might_resched+0x10/0x10 [ 127.067947][ T6764] ? fs_reclaim_acquire+0x7d/0x100 [ 127.067985][ T6764] should_fail_ex+0x414/0x560 [ 127.068026][ T6764] should_failslab+0xa8/0x100 [ 127.068058][ T6764] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 127.068100][ T6764] ? page_pool_create_percpu+0x76/0xbe0 [ 127.068137][ T6764] page_pool_create_percpu+0x76/0xbe0 [ 127.068165][ T6764] ? __kvmalloc_node_noprof+0x338/0x5e0 [ 127.068205][ T6764] ? bpf_test_run_xdp_live+0x1b8/0x1aa0 [ 127.068237][ T6764] bpf_test_run_xdp_live+0x1cd/0x1aa0 [ 127.068269][ T6764] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 127.068310][ T6764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.068341][ T6764] ? synchronize_rcu+0x11a/0x310 [ 127.068361][ T6764] ? __pfx_synchronize_rcu+0x10/0x10 [ 127.068385][ T6764] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 127.068412][ T6764] ? 0xffffffffa0003b40 [ 127.068452][ T6764] ? 0xffffffffa0001f98 [ 127.068501][ T6764] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 127.068539][ T6764] ? _copy_from_user+0x94/0xb0 [ 127.068569][ T6764] ? bpf_test_init+0x133/0x170 [ 127.068589][ T6764] ? xdp_convert_md_to_buff+0x5b/0x330 [ 127.068615][ T6764] bpf_prog_test_run_xdp+0x713/0xf90 [ 127.068656][ T6764] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.068683][ T6764] ? __fget_files+0x2a/0x420 [ 127.068715][ T6764] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 127.068739][ T6764] bpf_prog_test_run+0x2a9/0x340 [ 127.068774][ T6764] __sys_bpf+0x4a4/0x860 [ 127.068802][ T6764] ? __pfx___sys_bpf+0x10/0x10 [ 127.068843][ T6764] ? ksys_write+0x1f0/0x250 [ 127.068865][ T6764] ? rcu_is_watching+0x15/0xb0 [ 127.068908][ T6764] __x64_sys_bpf+0x7c/0x90 [ 127.068931][ T6764] do_syscall_64+0xf6/0x210 [ 127.068951][ T6764] ? clear_bhb_loop+0x45/0xa0 [ 127.068977][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.068997][ T6764] RIP: 0033:0x7fab7e78e969 [ 127.069015][ T6764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.069032][ T6764] RSP: 002b:00007fab7f591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.069055][ T6764] RAX: ffffffffffffffda RBX: 00007fab7e9b5fa0 RCX: 00007fab7e78e969 [ 127.069069][ T6764] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 127.069082][ T6764] RBP: 00007fab7f591090 R08: 0000000000000000 R09: 0000000000000000 [ 127.069095][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.069107][ T6764] R13: 0000000000000000 R14: 00007fab7e9b5fa0 R15: 00007ffc7e38ca58 [ 127.069141][ T6764] [ 127.076688][ T6761] netlink: 'syz.4.207': attribute type 1 has an invalid length. [ 127.398905][ T6761] netlink: 120 bytes leftover after parsing attributes in process `syz.4.207'. [ 127.412524][ T6774] FAULT_INJECTION: forcing a failure. [ 127.412524][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.461890][ T6774] CPU: 1 UID: 0 PID: 6774 Comm: syz.2.213 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 127.461925][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 127.461937][ T6774] Call Trace: [ 127.461945][ T6774] [ 127.461954][ T6774] dump_stack_lvl+0x189/0x250 [ 127.461987][ T6774] ? __lock_acquire+0xaac/0xd20 [ 127.462018][ T6774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.462046][ T6774] ? __pfx__printk+0x10/0x10 [ 127.462066][ T6774] ? __might_fault+0xb0/0x130 [ 127.462104][ T6774] should_fail_ex+0x414/0x560 [ 127.462141][ T6774] _copy_from_user+0x2d/0xb0 [ 127.462190][ T6774] ___sys_recvmsg+0x12e/0x510 [ 127.462225][ T6774] ? __pfx____sys_recvmsg+0x10/0x10 [ 127.462285][ T6774] ? __might_fault+0xb0/0x130 [ 127.462314][ T6774] do_recvmmsg+0x307/0x760 [ 127.462351][ T6774] ? __pfx_do_recvmmsg+0x10/0x10 [ 127.462391][ T6774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.462441][ T6774] __x64_sys_recvmmsg+0x190/0x240 [ 127.462468][ T6774] ? rcu_is_watching+0x15/0xb0 [ 127.462499][ T6774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 127.462531][ T6774] ? do_syscall_64+0xba/0x210 [ 127.462553][ T6774] do_syscall_64+0xf6/0x210 [ 127.462572][ T6774] ? clear_bhb_loop+0x45/0xa0 [ 127.462596][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.462615][ T6774] RIP: 0033:0x7fd34838e969 [ 127.462632][ T6774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.462648][ T6774] RSP: 002b:00007fd34911f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.462669][ T6774] RAX: ffffffffffffffda RBX: 00007fd3485b5fa0 RCX: 00007fd34838e969 [ 127.462683][ T6774] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 127.462695][ T6774] RBP: 00007fd34911f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.462707][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.462718][ T6774] R13: 0000000000000000 R14: 00007fd3485b5fa0 R15: 00007ffcf7af8038 [ 127.462749][ T6774] [ 127.804684][ T6230] tipc: Node number set to 12429994 [ 127.866056][ T6785] FAULT_INJECTION: forcing a failure. [ 127.866056][ T6785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.916332][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.0.214 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 127.916363][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 127.916374][ T6785] Call Trace: [ 127.916381][ T6785] [ 127.916390][ T6785] dump_stack_lvl+0x189/0x250 [ 127.916423][ T6785] ? __lock_acquire+0xaac/0xd20 [ 127.916454][ T6785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.916482][ T6785] ? __pfx__printk+0x10/0x10 [ 127.916502][ T6785] ? __might_fault+0xb0/0x130 [ 127.916539][ T6785] should_fail_ex+0x414/0x560 [ 127.916576][ T6785] _copy_from_user+0x2d/0xb0 [ 127.916604][ T6785] ___sys_recvmsg+0x12e/0x510 [ 127.916638][ T6785] ? __pfx____sys_recvmsg+0x10/0x10 [ 127.916697][ T6785] ? __might_fault+0xb0/0x130 [ 127.916725][ T6785] do_recvmmsg+0x307/0x760 [ 127.916761][ T6785] ? __pfx_do_recvmmsg+0x10/0x10 [ 127.916800][ T6785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.916857][ T6785] __x64_sys_recvmmsg+0x190/0x240 [ 127.916884][ T6785] ? rcu_is_watching+0x15/0xb0 [ 127.916914][ T6785] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 127.916946][ T6785] ? do_syscall_64+0xba/0x210 [ 127.916967][ T6785] do_syscall_64+0xf6/0x210 [ 127.916985][ T6785] ? clear_bhb_loop+0x45/0xa0 [ 127.917009][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.917028][ T6785] RIP: 0033:0x7fab7e78e969 [ 127.917046][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.917061][ T6785] RSP: 002b:00007fab7f591038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 127.917083][ T6785] RAX: ffffffffffffffda RBX: 00007fab7e9b5fa0 RCX: 00007fab7e78e969 [ 127.917097][ T6785] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 127.917109][ T6785] RBP: 00007fab7f591090 R08: 0000000000000000 R09: 0000000000000000 [ 127.917121][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.917132][ T6785] R13: 0000000000000000 R14: 00007fab7e9b5fa0 R15: 00007ffc7e38ca58 [ 127.917162][ T6785] [ 128.392141][ T6797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.512841][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 128.661300][ T6806] FAULT_INJECTION: forcing a failure. [ 128.661300][ T6806] name failslab, interval 1, probability 0, space 0, times 0 [ 128.694723][ T6806] CPU: 1 UID: 0 PID: 6806 Comm: syz.2.222 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 128.694767][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 128.694780][ T6806] Call Trace: [ 128.694788][ T6806] [ 128.694797][ T6806] dump_stack_lvl+0x189/0x250 [ 128.694835][ T6806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.694864][ T6806] ? __pfx__printk+0x10/0x10 [ 128.694892][ T6806] ? ref_tracker_alloc+0x318/0x460 [ 128.694917][ T6806] should_fail_ex+0x414/0x560 [ 128.694954][ T6806] should_failslab+0xa8/0x100 [ 128.694984][ T6806] kmem_cache_alloc_noprof+0x73/0x3c0 [ 128.695009][ T6806] ? skb_clone+0x212/0x3a0 [ 128.695041][ T6806] skb_clone+0x212/0x3a0 [ 128.695072][ T6806] __netlink_deliver_tap+0x404/0x850 [ 128.695109][ T6806] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.695134][ T6806] netlink_deliver_tap+0x19c/0x1b0 [ 128.695157][ T6806] netlink_unicast+0x72f/0x8d0 [ 128.695189][ T6806] netlink_sendmsg+0x805/0xb30 [ 128.695223][ T6806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.695250][ T6806] ? aa_sock_msg_perm+0x94/0x160 [ 128.695273][ T6806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.695295][ T6806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.695318][ T6806] __sock_sendmsg+0x219/0x270 [ 128.695341][ T6806] ____sys_sendmsg+0x505/0x830 [ 128.695373][ T6806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.695410][ T6806] ? import_iovec+0x74/0xa0 [ 128.695441][ T6806] ___sys_sendmsg+0x21f/0x2a0 [ 128.695468][ T6806] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.695536][ T6806] ? __fget_files+0x2a/0x420 [ 128.695560][ T6806] ? __fget_files+0x3a0/0x420 [ 128.695598][ T6806] __x64_sys_sendmsg+0x19b/0x260 [ 128.695627][ T6806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.695672][ T6806] ? do_syscall_64+0xba/0x210 [ 128.695694][ T6806] do_syscall_64+0xf6/0x210 [ 128.695713][ T6806] ? clear_bhb_loop+0x45/0xa0 [ 128.695747][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.695767][ T6806] RIP: 0033:0x7fd34838e969 [ 128.695785][ T6806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.695801][ T6806] RSP: 002b:00007fd34911f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.695822][ T6806] RAX: ffffffffffffffda RBX: 00007fd3485b5fa0 RCX: 00007fd34838e969 [ 128.695836][ T6806] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 128.695848][ T6806] RBP: 00007fd34911f090 R08: 0000000000000000 R09: 0000000000000000 [ 128.695859][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.695870][ T6806] R13: 0000000000000000 R14: 00007fd3485b5fa0 R15: 00007ffcf7af8038 [ 128.695902][ T6806] [ 129.336547][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 129.477993][ T6818] lo speed is unknown, defaulting to 1000 [ 129.539230][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 129.758480][ T6824] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 129.805332][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.814025][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.274123][ T6826] lo speed is unknown, defaulting to 1000 [ 130.882851][ T6858] netlink: 168 bytes leftover after parsing attributes in process `syz.4.235'. [ 131.309319][ T6865] warning: `syz.2.237' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.345749][ T6868] netlink: 56 bytes leftover after parsing attributes in process `syz.2.237'. [ 131.475650][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 131.553045][ T6887] bridge_slave_0: left allmulticast mode [ 131.580380][ T6887] bridge_slave_0: left promiscuous mode [ 131.591871][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.724708][ T6887] bridge_slave_1: left allmulticast mode [ 131.730717][ T6887] bridge_slave_1: left promiscuous mode [ 131.750063][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.780807][ T6887] bond0: (slave bond_slave_0): Releasing backup interface [ 131.821478][ T6887] bond0: (slave bond_slave_1): Releasing backup interface [ 131.877639][ T6887] team0: Port device team_slave_0 removed [ 131.903877][ T6887] team0: Port device team_slave_1 removed [ 131.910486][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.918923][ T6887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.929116][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.937180][ T6887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.217576][ T6899] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.320556][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.245'. [ 132.374999][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 132.465981][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 132.507366][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.247'. [ 132.564374][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 132.863214][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 132.880062][ T6928] openvswitch: netlink: Multiple metadata blocks provided [ 132.889192][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.897559][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.056937][ T6921] lo speed is unknown, defaulting to 1000 [ 134.054493][ T6962] openvswitch: netlink: Multiple metadata blocks provided [ 134.075254][ T6962] netlink: 88 bytes leftover after parsing attributes in process `syz.3.262'. [ 134.108050][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.262'. [ 134.317480][ T6971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.368985][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.265'. [ 134.440378][ T6976] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 134.471269][ T6979] openvswitch: netlink: Multiple metadata blocks provided [ 134.667952][ T6976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.895504][ T6981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.944603][ T6981] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 134.996312][ T6981] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 135.090731][ T7000] openvswitch: netlink: Multiple metadata blocks provided [ 135.149939][ T7000] netlink: 88 bytes leftover after parsing attributes in process `syz.0.271'. [ 135.197330][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 135.310817][ T6983] veth5: entered promiscuous mode [ 135.563773][ T7015] nbd: must specify a device to reconfigure [ 136.338478][ T7035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.363310][ T7038] openvswitch: netlink: Multiple metadata blocks provided [ 136.432708][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 136.724787][ T7046] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 136.819043][ T7046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.909906][ T7050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.922947][ T7050] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 136.939141][ T7050] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 137.116780][ T7046] veth3: entered promiscuous mode [ 137.354407][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.363024][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.676545][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.707925][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.877335][ T7060] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.903473][ T7060] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.912494][ T7060] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.923525][ T7060] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.972392][ T7060] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.981635][ T7060] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.990705][ T7060] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.000200][ T7060] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.212819][ T7091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.309235][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 138.434682][ T7104] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 138.488954][ T7104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.530875][ T7107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.538994][ T7107] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 138.565587][ T7107] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 138.680687][ T7104] veth5: entered promiscuous mode [ 138.875192][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 138.961150][ T7119] lo speed is unknown, defaulting to 1000 [ 139.262289][ T7126] lo speed is unknown, defaulting to 1000 [ 139.705386][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.773172][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.317'. [ 139.868649][ T7151] netlink: 'syz.1.318': attribute type 10 has an invalid length. [ 139.912867][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.318'. [ 140.115815][ T7151] batadv0: entered promiscuous mode [ 140.146493][ T7151] batadv0: entered allmulticast mode [ 140.168831][ T7151] bridge0: port 1(batadv0) entered blocking state [ 140.209441][ T7151] bridge0: port 1(batadv0) entered disabled state [ 140.236759][ T7151] bridge0: port 1(batadv0) entered blocking state [ 140.243461][ T7151] bridge0: port 1(batadv0) entered forwarding state [ 140.402089][ T7163] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 140.636739][ T3445] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 140.646912][ T3445] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 140.658768][ T7163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.693244][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 140.811718][ T7168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.819125][ T7168] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 140.832184][ T7168] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 140.871718][ T7169] veth3: entered promiscuous mode [ 140.930512][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.326'. [ 140.966087][ T7185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.326'. [ 141.208289][ T7194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.291452][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.332'. [ 141.823293][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 142.012357][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 142.032892][ T7219] netlink: 'syz.4.343': attribute type 1 has an invalid length. [ 142.131916][ T7219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.246597][ T7225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.256436][ T7234] openvswitch: netlink: Multiple metadata blocks provided [ 142.276336][ T7225] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 142.312575][ T7225] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 142.381213][ T7224] lo speed is unknown, defaulting to 1000 [ 142.423336][ T7219] veth5: entered promiscuous mode [ 142.465043][ T7233] erspan0: entered allmulticast mode [ 143.433876][ T7267] __nla_validate_parse: 3 callbacks suppressed [ 143.433897][ T7267] netlink: 112 bytes leftover after parsing attributes in process `syz.1.357'. [ 143.547735][ T7272] openvswitch: netlink: Multiple metadata blocks provided [ 143.568856][ T7267] netlink: 188 bytes leftover after parsing attributes in process `syz.1.357'. [ 143.649586][ T7275] netlink: 'syz.2.359': attribute type 16 has an invalid length. [ 143.659105][ T7275] netlink: 'syz.2.359': attribute type 17 has an invalid length. [ 143.806750][ T7283] netlink: 420 bytes leftover after parsing attributes in process `syz.3.361'. [ 143.825179][ T7283] netlink: 104 bytes leftover after parsing attributes in process `syz.3.361'. [ 143.835803][ T7281] netlink: 'syz.2.359': attribute type 9 has an invalid length. [ 143.854110][ T7283] FAULT_INJECTION: forcing a failure. [ 143.854110][ T7283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.863554][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 143.896823][ T7283] CPU: 0 UID: 0 PID: 7283 Comm: syz.3.361 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 143.896857][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 143.896870][ T7283] Call Trace: [ 143.896878][ T7283] [ 143.896888][ T7283] dump_stack_lvl+0x189/0x250 [ 143.896925][ T7283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.896954][ T7283] ? __pfx__printk+0x10/0x10 [ 143.896987][ T7283] should_fail_ex+0x414/0x560 [ 143.897026][ T7283] _copy_to_user+0x31/0xb0 [ 143.897055][ T7283] simple_read_from_buffer+0xe1/0x170 [ 143.897085][ T7283] proc_fail_nth_read+0x1df/0x250 [ 143.897116][ T7283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.897147][ T7283] ? rw_verify_area+0x258/0x650 [ 143.897167][ T7283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.897195][ T7283] vfs_read+0x1fd/0x980 [ 143.897221][ T7283] ? __pfx___mutex_lock+0x10/0x10 [ 143.897252][ T7283] ? __pfx_vfs_read+0x10/0x10 [ 143.897275][ T7283] ? __fget_files+0x2a/0x420 [ 143.897306][ T7283] ? __fget_files+0x3a0/0x420 [ 143.897329][ T7283] ? __fget_files+0x2a/0x420 [ 143.897364][ T7283] ksys_read+0x145/0x250 [ 143.897385][ T7283] ? rcu_is_watching+0x15/0xb0 [ 143.897417][ T7283] ? __pfx_ksys_read+0x10/0x10 [ 143.897443][ T7283] ? do_syscall_64+0xba/0x210 [ 143.897464][ T7283] do_syscall_64+0xf6/0x210 [ 143.897481][ T7283] ? clear_bhb_loop+0x45/0xa0 [ 143.897504][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.897522][ T7283] RIP: 0033:0x7fcaabb8d37c [ 143.897538][ T7283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.897553][ T7283] RSP: 002b:00007fcaacab2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.897587][ T7283] RAX: ffffffffffffffda RBX: 00007fcaabdb5fa0 RCX: 00007fcaabb8d37c [ 143.897601][ T7283] RDX: 000000000000000f RSI: 00007fcaacab20a0 RDI: 0000000000000005 [ 143.897612][ T7283] RBP: 00007fcaacab2090 R08: 0000000000000000 R09: 0000000000000000 [ 143.897623][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.897634][ T7283] R13: 0000000000000000 R14: 00007fcaabdb5fa0 R15: 00007ffd18b613a8 [ 143.897664][ T7283] [ 144.378836][ T7275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.427219][ T7275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.604798][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 144.898680][ T7275] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.908825][ T7275] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.919405][ T7275] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.929561][ T7275] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.006962][ T7281] macvlan2: entered promiscuous mode [ 145.012735][ T7281] hsr0: entered promiscuous mode [ 145.022505][ T7281] macvlan2: entered allmulticast mode [ 145.029622][ T7281] hsr0: entered allmulticast mode [ 145.040756][ T7281] hsr_slave_0: entered allmulticast mode [ 145.050385][ T7281] hsr_slave_1: entered allmulticast mode [ 145.370271][ T7313] openvswitch: netlink: Multiple metadata blocks provided [ 145.393041][ T7315] openvswitch: netlink: Multiple metadata blocks provided [ 145.435892][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 145.807472][ T7331] FAULT_INJECTION: forcing a failure. [ 145.807472][ T7331] name failslab, interval 1, probability 0, space 0, times 0 [ 145.820594][ T7331] CPU: 0 UID: 0 PID: 7331 Comm: syz.1.377 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 145.820620][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 145.820632][ T7331] Call Trace: [ 145.820640][ T7331] [ 145.820648][ T7331] dump_stack_lvl+0x189/0x250 [ 145.820682][ T7331] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.820713][ T7331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.820740][ T7331] ? __pfx__printk+0x10/0x10 [ 145.820776][ T7331] should_fail_ex+0x414/0x560 [ 145.820808][ T7331] should_failslab+0xa8/0x100 [ 145.820832][ T7331] kmem_cache_alloc_noprof+0x73/0x3c0 [ 145.820853][ T7331] ? sctp_get_port_local+0x6bb/0x1610 [ 145.820878][ T7331] sctp_get_port_local+0x6bb/0x1610 [ 145.820908][ T7331] ? __pfx_sctp_get_port_local+0x10/0x10 [ 145.820930][ T7331] ? sctp_bind_addr_match+0x30/0x2b0 [ 145.820945][ T7331] ? sctp_bind_addr_match+0x28b/0x2b0 [ 145.820964][ T7331] sctp_do_bind+0x4ea/0x940 [ 145.820993][ T7331] sctp_setsockopt_bindx+0x260/0x430 [ 145.821019][ T7331] sctp_setsockopt+0x7eb/0x1200 [ 145.821044][ T7331] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 145.821063][ T7331] do_sock_setsockopt+0x257/0x3e0 [ 145.821086][ T7331] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 145.821103][ T7331] ? __fget_files+0x2a/0x420 [ 145.821128][ T7331] ? __fget_files+0x3a0/0x420 [ 145.821147][ T7331] ? __fget_files+0x2a/0x420 [ 145.821174][ T7331] __x64_sys_setsockopt+0x18b/0x220 [ 145.821199][ T7331] do_syscall_64+0xf6/0x210 [ 145.821214][ T7331] ? clear_bhb_loop+0x45/0xa0 [ 145.821234][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.821249][ T7331] RIP: 0033:0x7fec4fb8e969 [ 145.821263][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.821276][ T7331] RSP: 002b:00007fec50934038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.821295][ T7331] RAX: ffffffffffffffda RBX: 00007fec4fdb5fa0 RCX: 00007fec4fb8e969 [ 145.821307][ T7331] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 145.821317][ T7331] RBP: 00007fec50934090 R08: 000000000000002c R09: 0000000000000000 [ 145.821326][ T7331] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 145.821336][ T7331] R13: 0000000000000000 R14: 00007fec4fdb5fa0 R15: 00007ffd049a31a8 [ 145.821360][ T7331] [ 146.371693][ T7342] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 146.515782][ T7342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.574031][ T7352] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 146.656494][ T7344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.695367][ T7344] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 146.715610][ T7344] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 146.748152][ T7359] FAULT_INJECTION: forcing a failure. [ 146.748152][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 146.772325][ T7359] CPU: 0 UID: 0 PID: 7359 Comm: syz.4.386 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 146.772355][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 146.772367][ T7359] Call Trace: [ 146.772375][ T7359] [ 146.772384][ T7359] dump_stack_lvl+0x189/0x250 [ 146.772421][ T7359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.772450][ T7359] ? __pfx__printk+0x10/0x10 [ 146.772477][ T7359] ? ref_tracker_alloc+0x318/0x460 [ 146.772501][ T7359] should_fail_ex+0x414/0x560 [ 146.772537][ T7359] should_failslab+0xa8/0x100 [ 146.772566][ T7359] kmem_cache_alloc_noprof+0x73/0x3c0 [ 146.772590][ T7359] ? skb_clone+0x212/0x3a0 [ 146.772622][ T7359] skb_clone+0x212/0x3a0 [ 146.772653][ T7359] __netlink_deliver_tap+0x404/0x850 [ 146.772690][ T7359] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.772713][ T7359] netlink_deliver_tap+0x19c/0x1b0 [ 146.772737][ T7359] netlink_unicast+0x72f/0x8d0 [ 146.772768][ T7359] netlink_sendmsg+0x805/0xb30 [ 146.772801][ T7359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.772828][ T7359] ? aa_sock_msg_perm+0x94/0x160 [ 146.772852][ T7359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.772873][ T7359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.772897][ T7359] __sock_sendmsg+0x219/0x270 [ 146.772920][ T7359] ____sys_sendmsg+0x505/0x830 [ 146.772951][ T7359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.772986][ T7359] ? import_iovec+0x74/0xa0 [ 146.773022][ T7359] ___sys_sendmsg+0x21f/0x2a0 [ 146.773050][ T7359] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.773114][ T7359] ? __fget_files+0x2a/0x420 [ 146.773138][ T7359] ? __fget_files+0x3a0/0x420 [ 146.773175][ T7359] __x64_sys_sendmsg+0x19b/0x260 [ 146.773203][ T7359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.773248][ T7359] ? do_syscall_64+0xba/0x210 [ 146.773269][ T7359] do_syscall_64+0xf6/0x210 [ 146.773288][ T7359] ? clear_bhb_loop+0x45/0xa0 [ 146.773312][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.773331][ T7359] RIP: 0033:0x7fc204b8e969 [ 146.773348][ T7359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.773364][ T7359] RSP: 002b:00007fc2059d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.773389][ T7359] RAX: ffffffffffffffda RBX: 00007fc204db5fa0 RCX: 00007fc204b8e969 [ 146.773402][ T7359] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 146.773414][ T7359] RBP: 00007fc2059d6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.773425][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.773436][ T7359] R13: 0000000000000000 R14: 00007fc204db5fa0 R15: 00007ffd75ce1328 [ 146.773467][ T7359] [ 147.046312][ T7359] netlink: 68 bytes leftover after parsing attributes in process `syz.4.386'. [ 147.077935][ T7345] veth3: entered promiscuous mode [ 147.218869][ T7352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.281225][ T7356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.288638][ T7356] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.300901][ T7356] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 147.349814][ T7357] veth5: entered promiscuous mode [ 147.386016][ T7360] erspan0: entered allmulticast mode [ 147.521716][ T7372] openvswitch: netlink: Multiple metadata blocks provided [ 147.531985][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 147.581432][ T7378] netlink: 48 bytes leftover after parsing attributes in process `syz.0.392'. [ 148.084707][ T7401] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 148.182079][ T7401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.291221][ T7405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.324187][ T7405] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 148.359666][ T7405] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 148.518403][ T7401] veth3: entered promiscuous mode [ 148.595596][ T7421] openvswitch: netlink: Multiple metadata blocks provided [ 148.604962][ T7421] __nla_validate_parse: 2 callbacks suppressed [ 148.604981][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 149.065438][ T7440] openvswitch: netlink: Multiple metadata blocks provided [ 149.243820][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 149.253053][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 149.314209][ T7452] FAULT_INJECTION: forcing a failure. [ 149.314209][ T7452] name failslab, interval 1, probability 0, space 0, times 0 [ 149.377353][ T7452] CPU: 1 UID: 0 PID: 7452 Comm: syz.2.414 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 149.377383][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 149.377395][ T7452] Call Trace: [ 149.377403][ T7452] [ 149.377411][ T7452] dump_stack_lvl+0x189/0x250 [ 149.377448][ T7452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.377477][ T7452] ? __pfx__printk+0x10/0x10 [ 149.377502][ T7452] ? __pfx___might_resched+0x10/0x10 [ 149.377526][ T7452] should_fail_ex+0x414/0x560 [ 149.377563][ T7452] should_failslab+0xa8/0x100 [ 149.377591][ T7452] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 149.377616][ T7452] ? __alloc_skb+0x112/0x2d0 [ 149.377643][ T7452] __alloc_skb+0x112/0x2d0 [ 149.377670][ T7452] netlink_sendmsg+0x5c6/0xb30 [ 149.377702][ T7452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.377729][ T7452] ? aa_sock_msg_perm+0x94/0x160 [ 149.377759][ T7452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.377781][ T7452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.377804][ T7452] __sock_sendmsg+0x219/0x270 [ 149.377825][ T7452] ____sys_sendmsg+0x505/0x830 [ 149.377857][ T7452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.377892][ T7452] ? import_iovec+0x74/0xa0 [ 149.377923][ T7452] ___sys_sendmsg+0x21f/0x2a0 [ 149.377952][ T7452] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.378014][ T7452] ? __fget_files+0x2a/0x420 [ 149.378039][ T7452] ? __fget_files+0x3a0/0x420 [ 149.378075][ T7452] __x64_sys_sendmsg+0x19b/0x260 [ 149.378104][ T7452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.378147][ T7452] ? do_syscall_64+0xba/0x210 [ 149.378169][ T7452] do_syscall_64+0xf6/0x210 [ 149.378188][ T7452] ? clear_bhb_loop+0x45/0xa0 [ 149.378212][ T7452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.378231][ T7452] RIP: 0033:0x7fd34838e969 [ 149.378248][ T7452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.378264][ T7452] RSP: 002b:00007fd34911f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.378284][ T7452] RAX: ffffffffffffffda RBX: 00007fd3485b5fa0 RCX: 00007fd34838e969 [ 149.378298][ T7452] RDX: 0000000004008094 RSI: 0000200000000140 RDI: 0000000000000003 [ 149.378311][ T7452] RBP: 00007fd34911f090 R08: 0000000000000000 R09: 0000000000000000 [ 149.378322][ T7452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.378334][ T7452] R13: 0000000000000000 R14: 00007fd3485b5fa0 R15: 00007ffcf7af8038 [ 149.378364][ T7452] [ 149.749168][ T7459] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 149.786722][ T7459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.818307][ T7459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.825851][ T7459] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 149.839950][ T7459] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 149.941511][ T7463] veth3: entered promiscuous mode [ 150.008644][ T7469] erspan0: entered allmulticast mode [ 150.038485][ T7473] openvswitch: netlink: Multiple metadata blocks provided [ 150.082686][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 150.479566][ T7493] openvswitch: netlink: Multiple metadata blocks provided [ 150.670284][ T6230] hid-generic 0005:04F3:0009.0001: unknown main item tag 0x0 [ 150.697968][ T6230] hid-generic 0005:04F3:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 150.753833][ T7507] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 150.835324][ T7507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.039903][ T7515] openvswitch: netlink: Multiple metadata blocks provided [ 151.054342][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 151.067431][ T7514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.077368][ T7514] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 151.108698][ T7514] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 151.173057][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 151.182628][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 151.681268][ T7555] netlink: 'syz.2.443': attribute type 3 has an invalid length. [ 151.714516][ T7555] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.443'. [ 151.781764][ T7555] siw: device registration error -23 [ 151.925456][ T7561] lo speed is unknown, defaulting to 1000 [ 152.143357][ T7571] netlink: 'syz.2.450': attribute type 1 has an invalid length. [ 152.324758][ T7571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.402189][ T7585] trusted_key: syz.4.453 sent an empty control message without MSG_MORE. [ 152.438739][ T7574] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.470495][ T7588] openvswitch: netlink: Multiple metadata blocks provided [ 152.480420][ T7574] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.499389][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 152.517544][ T7574] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 153.459467][ T7626] tipc: Started in network mode [ 153.467054][ T7626] tipc: Node identity , cluster identity 4711 [ 153.478566][ T7626] tipc: Failed to set node id, please configure manually [ 153.490919][ T7626] tipc: Enabling of bearer rejected, failed to enable media [ 153.510742][ T7625] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 153.537413][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 153.602967][ T7625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 153.664922][ T7630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 153.679303][ T7630] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.693028][ T7630] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 153.767961][ T7639] openvswitch: netlink: Multiple metadata blocks provided [ 153.799767][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 153.963697][ T7648] FAULT_INJECTION: forcing a failure. [ 153.963697][ T7648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.987124][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.1.472 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 153.987152][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 153.987164][ T7648] Call Trace: [ 153.987172][ T7648] [ 153.987180][ T7648] dump_stack_lvl+0x189/0x250 [ 153.987219][ T7648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.987248][ T7648] ? __pfx__printk+0x10/0x10 [ 153.987282][ T7648] should_fail_ex+0x414/0x560 [ 153.987327][ T7648] _copy_to_user+0x31/0xb0 [ 153.987358][ T7648] simple_read_from_buffer+0xe1/0x170 [ 153.987393][ T7648] proc_fail_nth_read+0x1df/0x250 [ 153.987425][ T7648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.987456][ T7648] ? rw_verify_area+0x258/0x650 [ 153.987477][ T7648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.987506][ T7648] vfs_read+0x1fd/0x980 [ 153.987533][ T7648] ? __pfx___mutex_lock+0x10/0x10 [ 153.987565][ T7648] ? __pfx_vfs_read+0x10/0x10 [ 153.987588][ T7648] ? __fget_files+0x2a/0x420 [ 153.987618][ T7648] ? __fget_files+0x3a0/0x420 [ 153.987642][ T7648] ? __fget_files+0x2a/0x420 [ 153.987676][ T7648] ksys_read+0x145/0x250 [ 153.987697][ T7648] ? rcu_is_watching+0x15/0xb0 [ 153.987729][ T7648] ? __pfx_ksys_read+0x10/0x10 [ 153.987754][ T7648] ? do_syscall_64+0xba/0x210 [ 153.987777][ T7648] do_syscall_64+0xf6/0x210 [ 153.987795][ T7648] ? clear_bhb_loop+0x45/0xa0 [ 153.987820][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.987839][ T7648] RIP: 0033:0x7fec4fb8d37c [ 153.987856][ T7648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 153.987873][ T7648] RSP: 002b:00007fec50934030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.987893][ T7648] RAX: ffffffffffffffda RBX: 00007fec4fdb5fa0 RCX: 00007fec4fb8d37c [ 153.987907][ T7648] RDX: 000000000000000f RSI: 00007fec509340a0 RDI: 0000000000000004 [ 153.987919][ T7648] RBP: 00007fec50934090 R08: 0000000000000000 R09: 0000000000000000 [ 153.987931][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.987942][ T7648] R13: 0000000000000000 R14: 00007fec4fdb5fa0 R15: 00007ffd049a31a8 [ 153.987973][ T7648] [ 154.864514][ T6230] hid-generic 0005:04F3:0009.0002: unknown main item tag 0x0 [ 154.883994][ T7684] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 154.939365][ T6230] hid-generic 0005:04F3:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 154.993341][ T7666] syzkaller1: entered promiscuous mode [ 155.000431][ T7666] syzkaller1: entered allmulticast mode [ 155.060325][ T7684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.108542][ T7681] veth5: entered promiscuous mode [ 155.196483][ T7691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.216423][ T7691] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 155.236020][ T7691] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 155.265142][ T7679] lo speed is unknown, defaulting to 1000 [ 155.525385][ T7703] openvswitch: netlink: Multiple metadata blocks provided [ 155.546569][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 155.840010][ T7717] FAULT_INJECTION: forcing a failure. [ 155.840010][ T7717] name failslab, interval 1, probability 0, space 0, times 0 [ 155.897868][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: syz.4.491 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 155.897900][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 155.897912][ T7717] Call Trace: [ 155.897921][ T7717] [ 155.897930][ T7717] dump_stack_lvl+0x189/0x250 [ 155.897970][ T7717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.898001][ T7717] ? __pfx__printk+0x10/0x10 [ 155.898028][ T7717] ? __pfx___might_resched+0x10/0x10 [ 155.898069][ T7717] should_fail_ex+0x414/0x560 [ 155.898149][ T7717] should_failslab+0xa8/0x100 [ 155.898179][ T7717] __kmalloc_cache_noprof+0x70/0x3d0 [ 155.898205][ T7717] ? sctp_association_new+0x89/0x25f0 [ 155.898237][ T7717] sctp_association_new+0x89/0x25f0 [ 155.898264][ T7717] ? sctp_has_association+0x1cd/0x1f0 [ 155.898292][ T7717] ? sctp_has_association+0x2f/0x1f0 [ 155.898322][ T7717] ? __ipv6_addr_type+0x247/0x2f0 [ 155.898357][ T7717] sctp_connect_new_asoc+0x2c5/0x690 [ 155.898387][ T7717] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 155.898413][ T7717] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 155.898437][ T7717] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 155.898459][ T7717] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 155.898484][ T7717] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 155.898510][ T7717] ? security_sctp_bind_connect+0x7e/0x2e0 [ 155.898545][ T7717] sctp_sendmsg+0x155c/0x2810 [ 155.898584][ T7717] ? __pfx_sctp_sendmsg+0x10/0x10 [ 155.898613][ T7717] ? aa_sk_perm+0x81e/0x950 [ 155.898638][ T7717] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.898661][ T7717] ? sock_rps_record_flow+0x19/0x410 [ 155.898697][ T7717] ? inet_sendmsg+0x2f4/0x370 [ 155.898727][ T7717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.898754][ T7717] __sock_sendmsg+0x19c/0x270 [ 155.898778][ T7717] __sys_sendto+0x3bd/0x520 [ 155.898805][ T7717] ? __pfx___sys_sendto+0x10/0x10 [ 155.898826][ T7717] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 155.898872][ T7717] ? __fget_files+0x3a0/0x420 [ 155.898912][ T7717] ? ksys_write+0x1f0/0x250 [ 155.898933][ T7717] ? rcu_is_watching+0x15/0xb0 [ 155.898974][ T7717] __x64_sys_sendto+0xde/0x100 [ 155.899002][ T7717] do_syscall_64+0xf6/0x210 [ 155.899022][ T7717] ? clear_bhb_loop+0x45/0xa0 [ 155.899048][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.899068][ T7717] RIP: 0033:0x7fc204b8e969 [ 155.899086][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.899103][ T7717] RSP: 002b:00007fc2059d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 155.899131][ T7717] RAX: ffffffffffffffda RBX: 00007fc204db5fa0 RCX: 00007fc204b8e969 [ 155.899145][ T7717] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000005 [ 155.899157][ T7717] RBP: 00007fc2059d6090 R08: 000020000005ffe4 R09: 000000000000001c [ 155.899169][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.899179][ T7717] R13: 0000000000000000 R14: 00007fc204db5fa0 R15: 00007ffd75ce1328 [ 155.899210][ T7717] [ 156.577139][ T7733] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 156.665934][ T7741] netlink: 'syz.0.499': attribute type 9 has an invalid length. [ 156.675114][ T7741] netlink: 'syz.0.499': attribute type 6 has an invalid length. [ 156.701939][ T7733] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.778392][ T7739] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.796749][ T7739] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.845397][ T7739] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 156.939923][ T7743] veth7: entered promiscuous mode [ 157.029355][ T7756] openvswitch: netlink: Multiple metadata blocks provided [ 157.056014][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 157.487262][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 157.740048][ T7792] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 157.841092][ T7792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.920648][ T7798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.938938][ T7798] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 157.952769][ T7798] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 158.001469][ T7808] openvswitch: netlink: Multiple metadata blocks provided [ 158.020697][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 158.065574][ T7802] veth3: entered promiscuous mode [ 158.105405][ T7792] erspan0: entered allmulticast mode [ 158.343851][ T7824] syz_tun: entered allmulticast mode [ 158.350230][ T7824] syz_tun: left allmulticast mode [ 158.691206][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 158.820189][ T7841] lo speed is unknown, defaulting to 1000 [ 158.835025][ T7844] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 158.916532][ T7844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.928517][ T7851] netlink: 108 bytes leftover after parsing attributes in process `syz.3.539'. [ 159.041726][ T7844] veth5: entered promiscuous mode [ 159.269257][ T7849] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.284196][ T7849] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 159.305819][ T7849] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 159.377446][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.540'. [ 159.387307][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.540'. [ 159.415305][ T7866] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.542'. [ 160.061139][ T7893] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.104877][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 160.160262][ T7896] hsr_slave_0: left promiscuous mode [ 160.189881][ T7896] hsr_slave_1: left promiscuous mode [ 160.433025][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 160.496445][ T7914] lo speed is unknown, defaulting to 1000 [ 161.385848][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 161.679399][ T7957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.574'. [ 162.085847][ T7974] netlink: 'syz.3.578': attribute type 5 has an invalid length. [ 162.138798][ T7974] ip6erspan0: entered promiscuous mode [ 162.213536][ T7978] netlink: 830 bytes leftover after parsing attributes in process `syz.3.578'. [ 162.306607][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 162.710113][ T7993] lo speed is unknown, defaulting to 1000 [ 162.885443][ T8007] Cannot find del_set index 2 as target [ 162.938649][ T8007] tipc: Enabling of bearer rejected, failed to enable media [ 163.142300][ T7996] syzkaller0: entered promiscuous mode [ 163.155009][ T7996] syzkaller0: entered allmulticast mode [ 164.166019][ T8042] __nla_validate_parse: 10 callbacks suppressed [ 164.166039][ T8042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.598'. [ 164.243331][ T8043] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 165.545411][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 165.560369][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 165.573610][ T8064] lo speed is unknown, defaulting to 1000 [ 165.676748][ T8070] 8021q: adding VLAN 0 to HW filter on device team1 [ 165.788378][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 165.802846][ T8069] lo speed is unknown, defaulting to 1000 [ 166.031292][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 166.107236][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 166.520025][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 166.620269][ T8097] sock: sock_set_timeout: `syz.1.615' (pid 8097) tries to set negative timeout [ 166.870617][ T8111] netlink: 'syz.3.619': attribute type 2 has an invalid length. [ 166.923589][ T8111] netlink: 'syz.3.619': attribute type 1 has an invalid length. [ 167.068341][ T8121] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.189918][ T8121] netlink: 'syz.4.622': attribute type 1 has an invalid length. [ 167.275515][ T8129] ip6erspan0: entered promiscuous mode [ 167.443340][ T8136] openvswitch: netlink: Multiple metadata blocks provided [ 167.509844][ T8136] netlink: 88 bytes leftover after parsing attributes in process `syz.0.626'. [ 167.547864][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 167.558672][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 167.619963][ T8143] FAULT_INJECTION: forcing a failure. [ 167.619963][ T8143] name failslab, interval 1, probability 0, space 0, times 0 [ 167.667359][ T8143] CPU: 0 UID: 0 PID: 8143 Comm: syz.2.630 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 167.667391][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 167.667403][ T8143] Call Trace: [ 167.667411][ T8143] [ 167.667420][ T8143] dump_stack_lvl+0x189/0x250 [ 167.667460][ T8143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.667493][ T8143] ? __pfx__printk+0x10/0x10 [ 167.667528][ T8143] should_fail_ex+0x414/0x560 [ 167.667566][ T8143] should_failslab+0xa8/0x100 [ 167.667594][ T8143] __kmalloc_cache_noprof+0x70/0x3d0 [ 167.667619][ T8143] ? sctp_add_bind_addr+0x8c/0x370 [ 167.667643][ T8143] sctp_add_bind_addr+0x8c/0x370 [ 167.667666][ T8143] sctp_copy_local_addr_list+0x30b/0x4e0 [ 167.667702][ T8143] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 167.667733][ T8143] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 167.667767][ T8143] ? sctp_v6_is_any+0x64/0x80 [ 167.667789][ T8143] ? sctp_copy_one_addr+0x93/0x360 [ 167.667824][ T8143] sctp_bind_addr_copy+0xb3/0x3c0 [ 167.667857][ T8143] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 167.667889][ T8143] sctp_connect_new_asoc+0x2e0/0x690 [ 167.667917][ T8143] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 167.667940][ T8143] ? __local_bh_enable_ip+0x12d/0x1c0 [ 167.667978][ T8143] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 167.668003][ T8143] ? security_sctp_bind_connect+0x7e/0x2e0 [ 167.668043][ T8143] sctp_sendmsg+0x155c/0x2810 [ 167.668080][ T8143] ? __pfx_sctp_sendmsg+0x10/0x10 [ 167.668107][ T8143] ? aa_sk_perm+0x81e/0x950 [ 167.668131][ T8143] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.668154][ T8143] ? sock_rps_record_flow+0x19/0x410 [ 167.668187][ T8143] ? inet_sendmsg+0x2f4/0x370 [ 167.668221][ T8143] __sock_sendmsg+0x19c/0x270 [ 167.668244][ T8143] __sys_sendto+0x3bd/0x520 [ 167.668270][ T8143] ? __pfx___sys_sendto+0x10/0x10 [ 167.668290][ T8143] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 167.668335][ T8143] ? __fget_files+0x3a0/0x420 [ 167.668372][ T8143] ? ksys_write+0x1f0/0x250 [ 167.668392][ T8143] ? rcu_is_watching+0x15/0xb0 [ 167.668432][ T8143] __x64_sys_sendto+0xde/0x100 [ 167.668459][ T8143] do_syscall_64+0xf6/0x210 [ 167.668478][ T8143] ? clear_bhb_loop+0x45/0xa0 [ 167.668503][ T8143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.668522][ T8143] RIP: 0033:0x7fd34838e969 [ 167.668540][ T8143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.668557][ T8143] RSP: 002b:00007fd34911f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 167.668577][ T8143] RAX: ffffffffffffffda RBX: 00007fd3485b5fa0 RCX: 00007fd34838e969 [ 167.668591][ T8143] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 167.668603][ T8143] RBP: 00007fd34911f090 R08: 0000200000000080 R09: 000000000000001c [ 167.668615][ T8143] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 167.668627][ T8143] R13: 0000000000000000 R14: 00007fd3485b5fa0 R15: 00007ffcf7af8038 [ 167.668658][ T8143] [ 168.017590][ T8138] lo speed is unknown, defaulting to 1000 [ 168.295858][ T8156] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 168.381943][ T8156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.477993][ T8159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.500507][ T8159] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.520211][ T8159] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 168.765962][ T8171] FAULT_INJECTION: forcing a failure. [ 168.765962][ T8171] name failslab, interval 1, probability 0, space 0, times 0 [ 168.799317][ T8169] netlink: 'syz.4.637': attribute type 1 has an invalid length. [ 168.813738][ T8171] CPU: 0 UID: 0 PID: 8171 Comm: syz.3.638 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 168.813769][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 168.813781][ T8171] Call Trace: [ 168.813789][ T8171] [ 168.813798][ T8171] dump_stack_lvl+0x189/0x250 [ 168.813836][ T8171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.813865][ T8171] ? __pfx__printk+0x10/0x10 [ 168.813899][ T8171] ? __pfx___might_resched+0x10/0x10 [ 168.813923][ T8171] should_fail_ex+0x414/0x560 [ 168.813960][ T8171] should_failslab+0xa8/0x100 [ 168.813988][ T8171] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 168.814014][ T8171] ? __alloc_skb+0x112/0x2d0 [ 168.814041][ T8171] __alloc_skb+0x112/0x2d0 [ 168.814069][ T8171] netlink_sendmsg+0x5c6/0xb30 [ 168.814102][ T8171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.814128][ T8171] ? aa_sock_msg_perm+0x94/0x160 [ 168.814152][ T8171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.814174][ T8171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.814198][ T8171] __sock_sendmsg+0x219/0x270 [ 168.814220][ T8171] ____sys_sendmsg+0x505/0x830 [ 168.814252][ T8171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.814288][ T8171] ? import_iovec+0x74/0xa0 [ 168.814318][ T8171] ___sys_sendmsg+0x21f/0x2a0 [ 168.814346][ T8171] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.814408][ T8171] ? __fget_files+0x2a/0x420 [ 168.814432][ T8171] ? __fget_files+0x3a0/0x420 [ 168.814466][ T8171] __x64_sys_sendmsg+0x19b/0x260 [ 168.814495][ T8171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.814537][ T8171] ? do_syscall_64+0xba/0x210 [ 168.814564][ T8171] do_syscall_64+0xf6/0x210 [ 168.814582][ T8171] ? clear_bhb_loop+0x45/0xa0 [ 168.814607][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.814626][ T8171] RIP: 0033:0x7fcaabb8e969 [ 168.814643][ T8171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.814659][ T8171] RSP: 002b:00007fcaacab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.814680][ T8171] RAX: ffffffffffffffda RBX: 00007fcaabdb5fa0 RCX: 00007fcaabb8e969 [ 168.814711][ T8171] RDX: 0000000000000010 RSI: 0000200000001300 RDI: 0000000000000003 [ 168.814723][ T8171] RBP: 00007fcaacab2090 R08: 0000000000000000 R09: 0000000000000000 [ 168.814735][ T8171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.814746][ T8171] R13: 0000000000000000 R14: 00007fcaabdb5fa0 R15: 00007ffd18b613a8 [ 168.814776][ T8171] [ 168.860176][ T8169] netlink: 'syz.4.637': attribute type 4 has an invalid length. [ 168.947243][ T8174] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 169.285683][ T8187] xt_time: unknown flags 0x4 [ 169.322294][ T8189] openvswitch: netlink: Multiple metadata blocks provided [ 169.354970][ T8189] __nla_validate_parse: 2 callbacks suppressed [ 169.354993][ T8189] netlink: 88 bytes leftover after parsing attributes in process `syz.3.644'. [ 169.412501][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 169.635574][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 169.759930][ T8209] lo speed is unknown, defaulting to 1000 [ 169.975619][ T8215] team0 (unregistering): Port device team_slave_0 removed [ 169.991882][ T8215] team0 (unregistering): Port device team_slave_1 removed [ 170.421888][ T8227] netlink: 48 bytes leftover after parsing attributes in process `syz.0.655'. [ 170.427826][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 170.458994][ T8226] netlink: 244 bytes leftover after parsing attributes in process `syz.1.654'. [ 170.810443][ T8251] openvswitch: netlink: Multiple metadata blocks provided [ 170.819302][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.660'. [ 170.834955][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 170.837503][ T8251] netlink: 88 bytes leftover after parsing attributes in process `syz.2.659'. [ 170.882211][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 171.085906][ T8260] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 171.526085][ T8276] lo speed is unknown, defaulting to 1000 [ 171.823038][ T8288] xt_ipcomp: unknown flags F7 [ 172.061392][ T8298] openvswitch: netlink: Multiple metadata blocks provided [ 172.719464][ T8320] FAULT_INJECTION: forcing a failure. [ 172.719464][ T8320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.772638][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.0.680 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 172.772668][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 172.772679][ T8320] Call Trace: [ 172.772687][ T8320] [ 172.772696][ T8320] dump_stack_lvl+0x189/0x250 [ 172.772729][ T8320] ? __lock_acquire+0xaac/0xd20 [ 172.772759][ T8320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.772787][ T8320] ? __pfx__printk+0x10/0x10 [ 172.772807][ T8320] ? __might_fault+0xb0/0x130 [ 172.772844][ T8320] should_fail_ex+0x414/0x560 [ 172.772880][ T8320] _copy_from_iter+0x1db/0x15a0 [ 172.772914][ T8320] ? policy_nodemask+0x27c/0x720 [ 172.772943][ T8320] ? __pfx__copy_from_iter+0x10/0x10 [ 172.772973][ T8320] ? set_page_refcounted+0xa0/0x1e0 [ 172.773000][ T8320] ? page_copy_sane+0x4e/0x280 [ 172.773025][ T8320] copy_page_from_iter+0x7b/0x100 [ 172.773052][ T8320] tun_get_user+0x1b13/0x3c20 [ 172.773084][ T8320] ? tun_get_user+0x687/0x3c20 [ 172.773126][ T8320] ? __pfx_tun_get_user+0x10/0x10 [ 172.773157][ T8320] ? aa_file_perm+0x11f/0xed0 [ 172.773179][ T8320] ? aa_file_perm+0x3e7/0xed0 [ 172.773214][ T8320] ? ref_tracker_alloc+0x318/0x460 [ 172.773237][ T8320] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.773264][ T8320] ? tun_get+0x1c/0x2f0 [ 172.773296][ T8320] ? tun_get+0x1c/0x2f0 [ 172.773322][ T8320] ? tun_get+0x1c/0x2f0 [ 172.773353][ T8320] tun_chr_write_iter+0x113/0x200 [ 172.773383][ T8320] vfs_write+0x548/0xa90 [ 172.773408][ T8320] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 172.773475][ T8320] ? __pfx_vfs_write+0x10/0x10 [ 172.773509][ T8320] ? __fget_files+0x2a/0x420 [ 172.773545][ T8320] ksys_write+0x145/0x250 [ 172.773569][ T8320] ? __pfx_ksys_write+0x10/0x10 [ 172.773595][ T8320] ? do_syscall_64+0xba/0x210 [ 172.773618][ T8320] do_syscall_64+0xf6/0x210 [ 172.773636][ T8320] ? clear_bhb_loop+0x45/0xa0 [ 172.773660][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.773679][ T8320] RIP: 0033:0x7fab7e78d41f [ 172.773697][ T8320] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 172.773713][ T8320] RSP: 002b:00007fab7f591000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 172.773734][ T8320] RAX: ffffffffffffffda RBX: 00007fab7e9b5fa0 RCX: 00007fab7e78d41f [ 172.773748][ T8320] RDX: 0000000000000046 RSI: 0000200000000100 RDI: 00000000000000c8 [ 172.773760][ T8320] RBP: 00007fab7f591090 R08: 0000000000000000 R09: 0000000000000000 [ 172.773771][ T8320] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 172.773782][ T8320] R13: 0000000000000001 R14: 00007fab7e9b5fa0 R15: 00007ffc7e38ca58 [ 172.773812][ T8320] [ 173.141510][ T8324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.496866][ T8340] openvswitch: netlink: Multiple metadata blocks provided [ 173.529167][ T8341] lo: entered allmulticast mode [ 173.596129][ T8341] lo: left allmulticast mode [ 173.980774][ T8359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.162680][ T8370] FAULT_INJECTION: forcing a failure. [ 174.162680][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 174.203738][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.0.700 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 174.203769][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 174.203783][ T8370] Call Trace: [ 174.203791][ T8370] [ 174.203800][ T8370] dump_stack_lvl+0x189/0x250 [ 174.203841][ T8370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.203872][ T8370] ? __pfx__printk+0x10/0x10 [ 174.203899][ T8370] ? __pfx___might_resched+0x10/0x10 [ 174.203919][ T8370] ? fs_reclaim_acquire+0x7d/0x100 [ 174.203955][ T8370] should_fail_ex+0x414/0x560 [ 174.203995][ T8370] should_failslab+0xa8/0x100 [ 174.204026][ T8370] __kmalloc_cache_noprof+0x70/0x3d0 [ 174.204052][ T8370] ? netlbl_cipsov4_add+0x348/0x24b0 [ 174.204074][ T8370] ? end_current_label_crit_section+0x152/0x180 [ 174.204102][ T8370] netlbl_cipsov4_add+0x348/0x24b0 [ 174.204138][ T8370] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 174.204167][ T8370] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 174.204209][ T8370] genl_family_rcv_msg_doit+0x212/0x300 [ 174.204248][ T8370] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 174.204294][ T8370] ? bpf_lsm_capable+0x9/0x20 [ 174.204322][ T8370] ? security_capable+0x7e/0x2e0 [ 174.204362][ T8370] genl_rcv_msg+0x60e/0x790 [ 174.204400][ T8370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.204429][ T8370] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 174.204469][ T8370] netlink_rcv_skb+0x219/0x490 [ 174.204495][ T8370] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.204526][ T8370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.204590][ T8370] ? down_read+0x1ad/0x2e0 [ 174.204614][ T8370] genl_rcv+0x28/0x40 [ 174.204640][ T8370] netlink_unicast+0x758/0x8d0 [ 174.204673][ T8370] netlink_sendmsg+0x805/0xb30 [ 174.204708][ T8370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.204736][ T8370] ? aa_sock_msg_perm+0x94/0x160 [ 174.204759][ T8370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.204780][ T8370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.204805][ T8370] __sock_sendmsg+0x219/0x270 [ 174.204829][ T8370] ____sys_sendmsg+0x505/0x830 [ 174.204862][ T8370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.204898][ T8370] ? import_iovec+0x74/0xa0 [ 174.204930][ T8370] ___sys_sendmsg+0x21f/0x2a0 [ 174.204958][ T8370] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.205026][ T8370] ? __fget_files+0x2a/0x420 [ 174.205052][ T8370] ? __fget_files+0x3a0/0x420 [ 174.205087][ T8370] __x64_sys_sendmsg+0x19b/0x260 [ 174.205117][ T8370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.205162][ T8370] ? do_syscall_64+0xba/0x210 [ 174.205185][ T8370] do_syscall_64+0xf6/0x210 [ 174.205204][ T8370] ? clear_bhb_loop+0x45/0xa0 [ 174.205230][ T8370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.205249][ T8370] RIP: 0033:0x7fab7e78e969 [ 174.205267][ T8370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.205285][ T8370] RSP: 002b:00007fab7f591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.205306][ T8370] RAX: ffffffffffffffda RBX: 00007fab7e9b5fa0 RCX: 00007fab7e78e969 [ 174.205321][ T8370] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 174.205333][ T8370] RBP: 00007fab7f591090 R08: 0000000000000000 R09: 0000000000000000 [ 174.205352][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.205364][ T8370] R13: 0000000000000000 R14: 00007fab7e9b5fa0 R15: 00007ffc7e38ca58 [ 174.205396][ T8370] [ 174.267993][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.458283][ T8377] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 174.600111][ T8373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.723613][ T8390] openvswitch: netlink: Multiple metadata blocks provided [ 174.741416][ T8390] __nla_validate_parse: 17 callbacks suppressed [ 174.741438][ T8390] netlink: 88 bytes leftover after parsing attributes in process `syz.2.704'. [ 174.760556][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 174.809623][ T8377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.828180][ T8396] FAULT_INJECTION: forcing a failure. [ 174.828180][ T8396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.844209][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: syz.3.708 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 174.844249][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 174.844262][ T8396] Call Trace: [ 174.844270][ T8396] [ 174.844280][ T8396] dump_stack_lvl+0x189/0x250 [ 174.844319][ T8396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.844349][ T8396] ? __pfx__printk+0x10/0x10 [ 174.844372][ T8396] ? fs_reclaim_acquire+0x7d/0x100 [ 174.844413][ T8396] should_fail_ex+0x414/0x560 [ 174.844453][ T8396] prepare_alloc_pages+0x213/0x610 [ 174.844493][ T8396] __alloc_frozen_pages_noprof+0x123/0x370 [ 174.844530][ T8396] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.844574][ T8396] ? policy_nodemask+0x27c/0x720 [ 174.844599][ T8396] ? __lock_acquire+0xaac/0xd20 [ 174.844633][ T8396] alloc_pages_mpol+0x232/0x4a0 [ 174.844665][ T8396] vma_alloc_folio_noprof+0xe4/0x200 [ 174.844693][ T8396] ? page_table_check_set+0x16b/0x710 [ 174.844721][ T8396] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 174.844763][ T8396] folio_prealloc+0x30/0x180 [ 174.844793][ T8396] __handle_mm_fault+0x2b28/0x5380 [ 174.844840][ T8396] ? __pfx___handle_mm_fault+0x10/0x10 [ 174.844881][ T8396] ? follow_page_pte+0x888/0x13c0 [ 174.844917][ T8396] handle_mm_fault+0x3f6/0x8c0 [ 174.844955][ T8396] __get_user_pages+0x16f0/0x2a40 [ 174.845015][ T8396] ? __pfx___get_user_pages+0x10/0x10 [ 174.845039][ T8396] ? __gup_longterm_locked+0xbf7/0x15b0 [ 174.845064][ T8396] ? down_read_killable+0x1d1/0x350 [ 174.845091][ T8396] __gup_longterm_locked+0xd66/0x15b0 [ 174.845132][ T8396] ? sanity_check_pinned_pages+0x11a2/0x1290 [ 174.845158][ T8396] ? gup_fast_fallback+0x1672/0x1d60 [ 174.845187][ T8396] gup_fast_fallback+0x1843/0x1d60 [ 174.845257][ T8396] ? __pfx_gup_fast_fallback+0x10/0x10 [ 174.845287][ T8396] ? rcu_is_watching+0x15/0xb0 [ 174.845317][ T8396] ? is_valid_gup_args+0x11f/0x200 [ 174.845345][ T8396] ? pin_user_pages_fast+0x4d/0xb0 [ 174.845372][ T8396] rds_info_getsockopt+0x1fb/0x470 [ 174.845401][ T8396] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 174.845424][ T8396] ? __might_fault+0xb0/0x130 [ 174.845454][ T8396] ? rds_getsockopt+0x2b4/0x500 [ 174.845485][ T8396] do_sock_getsockopt+0x35d/0x650 [ 174.845516][ T8396] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 174.845542][ T8396] ? do_syscall_64+0x40/0x210 [ 174.845560][ T8396] ? __fget_files+0x2a/0x420 [ 174.845585][ T8396] ? __fget_files+0x3a0/0x420 [ 174.845610][ T8396] ? __fget_files+0x2a/0x420 [ 174.845644][ T8396] __x64_sys_getsockopt+0x1a5/0x250 [ 174.845670][ T8396] ? do_syscall_64+0x40/0x210 [ 174.845689][ T8396] ? do_syscall_64+0x40/0x210 [ 174.845712][ T8396] do_syscall_64+0xf6/0x210 [ 174.845731][ T8396] ? clear_bhb_loop+0x45/0xa0 [ 174.845758][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.845777][ T8396] RIP: 0033:0x7fcaabb8e969 [ 174.845796][ T8396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.845812][ T8396] RSP: 002b:00007fcaacab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 174.845833][ T8396] RAX: ffffffffffffffda RBX: 00007fcaabdb5fa0 RCX: 00007fcaabb8e969 [ 174.845847][ T8396] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 174.845860][ T8396] RBP: 00007fcaacab2090 R08: 0000200000000000 R09: 0000000000000000 [ 174.845872][ T8396] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 174.845884][ T8396] R13: 0000000000000000 R14: 00007fcaabdb5fa0 R15: 00007ffd18b613a8 [ 174.845914][ T8396] [ 175.491711][ T8407] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.513169][ T8413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.549392][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.711'. [ 175.658519][ T8419] FAULT_INJECTION: forcing a failure. [ 175.658519][ T8419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.724843][ T8419] CPU: 0 UID: 0 PID: 8419 Comm: syz.1.719 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 175.724873][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 175.724886][ T8419] Call Trace: [ 175.724894][ T8419] [ 175.724903][ T8419] dump_stack_lvl+0x189/0x250 [ 175.724942][ T8419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.724971][ T8419] ? __pfx__printk+0x10/0x10 [ 175.725004][ T8419] should_fail_ex+0x414/0x560 [ 175.725041][ T8419] _copy_to_user+0x31/0xb0 [ 175.725072][ T8419] simple_read_from_buffer+0xe1/0x170 [ 175.725102][ T8419] proc_fail_nth_read+0x1df/0x250 [ 175.725134][ T8419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.725166][ T8419] ? rw_verify_area+0x258/0x650 [ 175.725196][ T8419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.725227][ T8419] vfs_read+0x1fd/0x980 [ 175.725255][ T8419] ? __pfx___mutex_lock+0x10/0x10 [ 175.725287][ T8419] ? __pfx_vfs_read+0x10/0x10 [ 175.725311][ T8419] ? __fget_files+0x2a/0x420 [ 175.725342][ T8419] ? __fget_files+0x3a0/0x420 [ 175.725366][ T8419] ? __fget_files+0x2a/0x420 [ 175.725400][ T8419] ksys_read+0x145/0x250 [ 175.725421][ T8419] ? rcu_is_watching+0x15/0xb0 [ 175.725453][ T8419] ? __pfx_ksys_read+0x10/0x10 [ 175.725479][ T8419] ? do_syscall_64+0xba/0x210 [ 175.725501][ T8419] do_syscall_64+0xf6/0x210 [ 175.725519][ T8419] ? clear_bhb_loop+0x45/0xa0 [ 175.725544][ T8419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.725562][ T8419] RIP: 0033:0x7fec4fb8d37c [ 175.725579][ T8419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.725596][ T8419] RSP: 002b:00007fec50934030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.725617][ T8419] RAX: ffffffffffffffda RBX: 00007fec4fdb5fa0 RCX: 00007fec4fb8d37c [ 175.725630][ T8419] RDX: 000000000000000f RSI: 00007fec509340a0 RDI: 0000000000000004 [ 175.725642][ T8419] RBP: 00007fec50934090 R08: 0000000000000000 R09: 0000000000000000 [ 175.725654][ T8419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.725665][ T8419] R13: 0000000000000000 R14: 00007fec4fdb5fa0 R15: 00007ffd049a31a8 [ 175.725697][ T8419] [ 175.742308][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.720'. [ 176.056009][ T8427] netlink: 168 bytes leftover after parsing attributes in process `syz.1.721'. [ 176.182040][ T8433] openvswitch: netlink: Multiple metadata blocks provided [ 176.212785][ T8433] netlink: 88 bytes leftover after parsing attributes in process `syz.4.722'. [ 176.257514][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 176.524171][ T8449] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 176.662130][ T8449] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.801972][ T8451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.833112][ T8451] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 176.886069][ T8451] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 176.944868][ T8462] FAULT_INJECTION: forcing a failure. [ 176.944868][ T8462] name failslab, interval 1, probability 0, space 0, times 0 [ 176.968540][ T8462] CPU: 0 UID: 0 PID: 8462 Comm: syz.4.730 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 176.968572][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 176.968585][ T8462] Call Trace: [ 176.968592][ T8462] [ 176.968601][ T8462] dump_stack_lvl+0x189/0x250 [ 176.968640][ T8462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.968670][ T8462] ? __pfx__printk+0x10/0x10 [ 176.968694][ T8462] ? __pfx___might_resched+0x10/0x10 [ 176.968714][ T8462] ? fs_reclaim_acquire+0x7d/0x100 [ 176.968750][ T8462] should_fail_ex+0x414/0x560 [ 176.968789][ T8462] should_failslab+0xa8/0x100 [ 176.968818][ T8462] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 176.968845][ T8462] ? __alloc_skb+0x112/0x2d0 [ 176.968874][ T8462] __alloc_skb+0x112/0x2d0 [ 176.968903][ T8462] alloc_skb_with_frags+0xca/0x890 [ 176.968927][ T8462] ? aa_label_sk_perm+0x413/0x560 [ 176.968954][ T8462] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 176.968978][ T8462] sock_alloc_send_pskb+0x857/0x990 [ 176.969029][ T8462] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 176.969071][ T8462] ? aa_sk_perm+0x81e/0x950 [ 176.969093][ T8462] hci_sock_sendmsg+0x207/0xee0 [ 176.969126][ T8462] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 176.969152][ T8462] ? aa_sock_msg_perm+0x94/0x160 [ 176.969176][ T8462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.969199][ T8462] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 176.969226][ T8462] __sock_sendmsg+0x219/0x270 [ 176.969249][ T8462] sock_write_iter+0x258/0x330 [ 176.969283][ T8462] ? __pfx_sock_write_iter+0x10/0x10 [ 176.969334][ T8462] ? bpf_lsm_file_permission+0x9/0x20 [ 176.969357][ T8462] ? security_file_permission+0x75/0x290 [ 176.969396][ T8462] vfs_write+0x548/0xa90 [ 176.969425][ T8462] ? __pfx_sock_write_iter+0x10/0x10 [ 176.969455][ T8462] ? __pfx_vfs_write+0x10/0x10 [ 176.969488][ T8462] ? __fget_files+0x2a/0x420 [ 176.969526][ T8462] ksys_write+0x145/0x250 [ 176.969548][ T8462] ? rcu_is_watching+0x15/0xb0 [ 176.969580][ T8462] ? __pfx_ksys_write+0x10/0x10 [ 176.969607][ T8462] ? do_syscall_64+0xba/0x210 [ 176.969631][ T8462] do_syscall_64+0xf6/0x210 [ 176.969651][ T8462] ? clear_bhb_loop+0x45/0xa0 [ 176.969676][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.969696][ T8462] RIP: 0033:0x7fc204b8e969 [ 176.969714][ T8462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.969732][ T8462] RSP: 002b:00007fc2059d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.969755][ T8462] RAX: ffffffffffffffda RBX: 00007fc204db5fa0 RCX: 00007fc204b8e969 [ 176.969770][ T8462] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000007 [ 176.969783][ T8462] RBP: 00007fc2059d6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.969796][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.969808][ T8462] R13: 0000000000000000 R14: 00007fc204db5fa0 R15: 00007ffd75ce1328 [ 176.969841][ T8462] [ 177.517140][ T8470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.597710][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.734'. [ 177.614674][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 177.789273][ T8483] openvswitch: netlink: Multiple metadata blocks provided [ 177.825576][ T8483] netlink: 88 bytes leftover after parsing attributes in process `syz.0.737'. [ 178.215684][ T8502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.389073][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.891214][ T8528] openvswitch: netlink: Multiple metadata blocks provided [ 179.019137][ T8533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.281234][ T8550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.441943][ T8545] team0 (unregistering): Port device team_slave_0 removed [ 179.462850][ T8545] team0 (unregistering): Port device team_slave_1 removed [ 179.601566][ T8561] No such timeout policy "syz0" [ 180.259332][ T8575] __nla_validate_parse: 8 callbacks suppressed [ 180.259355][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.772'. [ 180.321226][ T8575] lo speed is unknown, defaulting to 1000 [ 180.591118][ T8588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.774'. [ 180.627795][ T8590] openvswitch: netlink: Multiple metadata blocks provided [ 180.638170][ T8590] netlink: 88 bytes leftover after parsing attributes in process `syz.1.771'. [ 180.648327][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 180.840506][ T5938] IPVS: starting estimator thread 0... [ 180.858522][ T8594] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 180.966290][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.776'. [ 181.043077][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'. [ 181.082227][ T8604] IPVS: using max 26 ests per chain, 62400 per kthread [ 181.263232][ T8613] tap0: tun_chr_ioctl cmd 2147767506 [ 181.289556][ T8613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.777'. [ 181.474487][ T8613] vlan0: entered promiscuous mode [ 181.519354][ T8621] openvswitch: netlink: Multiple metadata blocks provided [ 181.744893][ T8626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.782'. [ 182.007694][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 182.235784][ T8631] lo speed is unknown, defaulting to 1000 [ 182.283701][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 182.419819][ T8641] lo speed is unknown, defaulting to 1000 [ 182.897711][ T8657] openvswitch: netlink: Multiple metadata blocks provided [ 182.992532][ T8656] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 182.997683][ T5938] IPVS: starting estimator thread 0... [ 183.117617][ T8662] IPVS: using max 25 ests per chain, 60000 per kthread [ 183.662609][ T8675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.697738][ T8679] netlink: 'syz.1.798': attribute type 5 has an invalid length. [ 183.906640][ T8676] lo speed is unknown, defaulting to 1000 [ 184.839939][ T8715] openvswitch: netlink: Multiple metadata blocks provided [ 184.980788][ T8720] netlink: 'syz.4.809': attribute type 39 has an invalid length. [ 185.092749][ T8711] lo speed is unknown, defaulting to 1000 [ 185.101717][ T8723] vlan2: entered promiscuous mode [ 185.126621][ T8723] hsr_slave_1: entered promiscuous mode [ 185.133765][ T8723] vlan2: entered allmulticast mode [ 185.139392][ T8723] hsr_slave_1: entered allmulticast mode [ 185.166937][ T8726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.390157][ T8740] No such timeout policy "syz0" [ 185.587557][ T5842] Bluetooth: hci3: link tx timeout [ 185.593889][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.062473][ T8756] __nla_validate_parse: 17 callbacks suppressed [ 186.062495][ T8756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.818'. [ 186.113806][ T8756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.818'. [ 186.377142][ T8759] IPVS: Scheduler module ip_vs_sip not found [ 186.384592][ T8763] IPVS: length: 24 != 16106127384 [ 186.411133][ T8770] openvswitch: netlink: Multiple metadata blocks provided [ 186.446962][ T8770] netlink: 88 bytes leftover after parsing attributes in process `syz.2.822'. [ 186.473998][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 186.498259][ T8773] FAULT_INJECTION: forcing a failure. [ 186.498259][ T8773] name failslab, interval 1, probability 0, space 0, times 0 [ 186.533049][ T8773] CPU: 0 UID: 0 PID: 8773 Comm: syz.3.824 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 186.533080][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 186.533093][ T8773] Call Trace: [ 186.533101][ T8773] [ 186.533111][ T8773] dump_stack_lvl+0x189/0x250 [ 186.533149][ T8773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.533178][ T8773] ? __pfx__printk+0x10/0x10 [ 186.533205][ T8773] ? __pfx___might_resched+0x10/0x10 [ 186.533229][ T8773] ? fs_reclaim_acquire+0x7d/0x100 [ 186.533293][ T8773] should_fail_ex+0x414/0x560 [ 186.533342][ T8773] should_failslab+0xa8/0x100 [ 186.533373][ T8773] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 186.533408][ T8773] ? __alloc_skb+0x112/0x2d0 [ 186.533436][ T8773] __alloc_skb+0x112/0x2d0 [ 186.533463][ T8773] netlink_ack+0x146/0xa50 [ 186.533485][ T8773] ? is_bpf_text_address+0x26/0x2b0 [ 186.533526][ T8773] ? is_bpf_text_address+0x292/0x2b0 [ 186.533568][ T8773] netlink_rcv_skb+0x2a0/0x490 [ 186.533590][ T8773] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 186.533621][ T8773] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.533658][ T8773] ? apparmor_capable+0x137/0x1b0 [ 186.533687][ T8773] ? bpf_lsm_capable+0x9/0x20 [ 186.533714][ T8773] ? security_capable+0x7e/0x2e0 [ 186.533744][ T8773] nfnetlink_rcv+0x273/0x2530 [ 186.533775][ T8773] ? kernel_text_address+0xa5/0xe0 [ 186.533803][ T8773] ? __kernel_text_address+0xd/0x40 [ 186.533828][ T8773] ? unwind_get_return_address+0x4d/0x90 [ 186.533852][ T8773] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 186.533873][ T8773] ? arch_stack_walk+0xfc/0x150 [ 186.533920][ T8773] ? stack_trace_save+0x9c/0xe0 [ 186.533942][ T8773] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 186.533968][ T8773] ? stack_depot_save_flags+0x40/0x910 [ 186.534004][ T8773] ? kasan_save_track+0x4f/0x80 [ 186.534023][ T8773] ? kasan_save_track+0x3e/0x80 [ 186.534052][ T8773] ? __lock_acquire+0xaac/0xd20 [ 186.534105][ T8773] ? __lock_acquire+0xaac/0xd20 [ 186.534141][ T8773] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.534170][ T8773] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.534191][ T8773] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.534217][ T8773] netlink_unicast+0x758/0x8d0 [ 186.534248][ T8773] netlink_sendmsg+0x805/0xb30 [ 186.534282][ T8773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.534309][ T8773] ? aa_sock_msg_perm+0x94/0x160 [ 186.534333][ T8773] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.534354][ T8773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.534377][ T8773] __sock_sendmsg+0x219/0x270 [ 186.534407][ T8773] ____sys_sendmsg+0x505/0x830 [ 186.534440][ T8773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.534476][ T8773] ? import_iovec+0x74/0xa0 [ 186.534507][ T8773] ___sys_sendmsg+0x21f/0x2a0 [ 186.534536][ T8773] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.534599][ T8773] ? __fget_files+0x2a/0x420 [ 186.534624][ T8773] ? __fget_files+0x3a0/0x420 [ 186.534661][ T8773] __x64_sys_sendmsg+0x19b/0x260 [ 186.534691][ T8773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.534748][ T8773] ? do_syscall_64+0xba/0x210 [ 186.534777][ T8773] do_syscall_64+0xf6/0x210 [ 186.534796][ T8773] ? clear_bhb_loop+0x45/0xa0 [ 186.534821][ T8773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.534840][ T8773] RIP: 0033:0x7fcaabb8e969 [ 186.534858][ T8773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.534875][ T8773] RSP: 002b:00007fcaacab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.534897][ T8773] RAX: ffffffffffffffda RBX: 00007fcaabdb5fa0 RCX: 00007fcaabb8e969 [ 186.534912][ T8773] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 186.534924][ T8773] RBP: 00007fcaacab2090 R08: 0000000000000000 R09: 0000000000000000 [ 186.534936][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.534948][ T8773] R13: 0000000000000000 R14: 00007fcaabdb5fa0 R15: 00007ffd18b613a8 [ 186.534980][ T8773] [ 187.094800][ T8778] syz_tun: entered allmulticast mode [ 187.118389][ T8784] netlink: 'syz.2.828': attribute type 39 has an invalid length. [ 187.137169][ T8778] dvmrp1: entered allmulticast mode [ 187.167528][ T8778] raw_sendmsg: syz.3.827 forgot to set AF_INET. Fix it! [ 187.189910][ T8784] vlan2: entered promiscuous mode [ 187.196388][ T8784] vlan2: entered allmulticast mode [ 187.204780][ T8776] syz_tun: left allmulticast mode [ 187.242811][ T8784] netlink: 420 bytes leftover after parsing attributes in process `syz.2.828'. [ 187.300472][ T8793] openvswitch: netlink: Multiple metadata blocks provided [ 187.317074][ T8784] netlink: 104 bytes leftover after parsing attributes in process `syz.2.828'. [ 187.341137][ T8794] FAULT_INJECTION: forcing a failure. [ 187.341137][ T8794] name failslab, interval 1, probability 0, space 0, times 0 [ 187.368563][ T8794] CPU: 1 UID: 0 PID: 8794 Comm: syz.3.831 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 187.368592][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 187.368605][ T8794] Call Trace: [ 187.368613][ T8794] [ 187.368621][ T8794] dump_stack_lvl+0x189/0x250 [ 187.368661][ T8794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.368690][ T8794] ? __pfx__printk+0x10/0x10 [ 187.368717][ T8794] ? __pfx___might_resched+0x10/0x10 [ 187.368735][ T8794] ? fs_reclaim_acquire+0x7d/0x100 [ 187.368770][ T8794] should_fail_ex+0x414/0x560 [ 187.368808][ T8794] should_failslab+0xa8/0x100 [ 187.368837][ T8794] kmem_cache_alloc_noprof+0x73/0x3c0 [ 187.368861][ T8794] ? __kernfs_new_node+0xd7/0x7f0 [ 187.368896][ T8794] __kernfs_new_node+0xd7/0x7f0 [ 187.368926][ T8794] ? __lock_acquire+0xaac/0xd20 [ 187.368961][ T8794] ? __pfx___kernfs_new_node+0x10/0x10 [ 187.368989][ T8794] ? kernfs_root+0x1c/0x230 [ 187.369022][ T8794] ? kernfs_root+0x1c/0x230 [ 187.369049][ T8794] ? kernfs_root+0x1c/0x230 [ 187.369081][ T8794] kernfs_new_node+0x102/0x210 [ 187.369116][ T8794] kernfs_create_link+0xa7/0x200 [ 187.369143][ T8794] sysfs_do_create_link_sd+0x83/0x110 [ 187.369173][ T8794] device_add_class_symlinks+0xb6/0x240 [ 187.369202][ T8794] device_add+0x475/0xb50 [ 187.369230][ T8794] device_create+0x25b/0x2f0 [ 187.369258][ T8794] ? init_timer_key+0x171/0x2d0 [ 187.369285][ T8794] ? __pfx_device_create+0x10/0x10 [ 187.369312][ T8794] ? ieee80211_alloc_hw_nm+0x18d2/0x1f20 [ 187.369359][ T8794] mac80211_hwsim_new_radio+0x418/0x5340 [ 187.369402][ T8794] ? stack_depot_save_flags+0x40/0x910 [ 187.369441][ T8794] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 187.369469][ T8794] ? __nla_validate_parse+0x2400/0x2d40 [ 187.369490][ T8794] ? __sock_sendmsg+0x219/0x270 [ 187.369506][ T8794] ? ____sys_sendmsg+0x505/0x830 [ 187.369545][ T8794] hwsim_new_radio_nl+0xea4/0x1b10 [ 187.369578][ T8794] ? __pfx___nla_validate_parse+0x10/0x10 [ 187.369618][ T8794] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 187.369663][ T8794] ? __nla_parse+0x40/0x60 [ 187.369690][ T8794] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 187.369731][ T8794] genl_family_rcv_msg_doit+0x212/0x300 [ 187.369768][ T8794] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.369813][ T8794] ? bpf_lsm_capable+0x9/0x20 [ 187.369839][ T8794] ? security_capable+0x7e/0x2e0 [ 187.369867][ T8794] genl_rcv_msg+0x60e/0x790 [ 187.369902][ T8794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.369930][ T8794] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 187.369975][ T8794] netlink_rcv_skb+0x219/0x490 [ 187.369999][ T8794] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.370029][ T8794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.370079][ T8794] ? down_read+0x1ad/0x2e0 [ 187.370102][ T8794] genl_rcv+0x28/0x40 [ 187.370128][ T8794] netlink_unicast+0x758/0x8d0 [ 187.370161][ T8794] netlink_sendmsg+0x805/0xb30 [ 187.370196][ T8794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.370223][ T8794] ? aa_sock_msg_perm+0x94/0x160 [ 187.370248][ T8794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.370270][ T8794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.370294][ T8794] __sock_sendmsg+0x219/0x270 [ 187.370318][ T8794] ____sys_sendmsg+0x505/0x830 [ 187.370361][ T8794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.370398][ T8794] ? import_iovec+0x74/0xa0 [ 187.370430][ T8794] ___sys_sendmsg+0x21f/0x2a0 [ 187.370459][ T8794] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.370528][ T8794] ? __fget_files+0x2a/0x420 [ 187.370554][ T8794] ? __fget_files+0x3a0/0x420 [ 187.370592][ T8794] __x64_sys_sendmsg+0x19b/0x260 [ 187.370622][ T8794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.370668][ T8794] ? do_syscall_64+0xba/0x210 [ 187.370692][ T8794] do_syscall_64+0xf6/0x210 [ 187.370711][ T8794] ? clear_bhb_loop+0x45/0xa0 [ 187.370736][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.370755][ T8794] RIP: 0033:0x7fcaabb8e969 [ 187.370774][ T8794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.370792][ T8794] RSP: 002b:00007fcaacab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.370814][ T8794] RAX: ffffffffffffffda RBX: 00007fcaabdb5fa0 RCX: 00007fcaabb8e969 [ 187.370828][ T8794] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 187.370841][ T8794] RBP: 00007fcaacab2090 R08: 0000000000000000 R09: 0000000000000000 [ 187.370853][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.370865][ T8794] R13: 0000000000000000 R14: 00007fcaabdb5fa0 R15: 00007ffd18b613a8 [ 187.370898][ T8794] [ 187.510689][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 187.673624][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 187.955276][ T8807] No such timeout policy "syz0" [ 187.979689][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.835'. [ 188.154953][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 188.277671][ T8822] openvswitch: netlink: Multiple metadata blocks provided [ 188.289447][ T8822] netlink: 88 bytes leftover after parsing attributes in process `syz.1.838'. [ 188.354146][ T8828] veth3: entered promiscuous mode [ 188.498617][ T8815] lo speed is unknown, defaulting to 1000 [ 188.613709][ T8837] netlink: 'syz.2.842': attribute type 13 has an invalid length. [ 188.641972][ T8839] netlink: 'syz.2.842': attribute type 13 has an invalid length. [ 188.677093][ T8837] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 188.712599][ T8839] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 189.162600][ T8864] netlink: 'syz.4.851': attribute type 39 has an invalid length. [ 189.400057][ T8872] openvswitch: netlink: Multiple metadata blocks provided [ 190.317071][ T8908] openvswitch: netlink: Multiple metadata blocks provided [ 190.332888][ T8909] Bluetooth: MGMT ver 1.23 [ 190.374139][ T8909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.410436][ T8909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.429972][ T8909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.439299][ T8909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.478264][ T8909] geneve2: entered promiscuous mode [ 190.537016][ T8923] netlink: 'syz.4.870': attribute type 10 has an invalid length. [ 190.681312][ T8921] bridge0: entered promiscuous mode [ 190.693698][ T8921] macvlan2: entered promiscuous mode [ 190.699886][ T8921] bridge0: port 3(macvlan2) entered blocking state [ 190.729473][ T8929] ------------[ cut here ]------------ [ 190.735626][ T8929] WARNING: CPU: 0 PID: 8929 at lib/nlattr.c:123 nla_get_range_unsigned+0xc8/0x4b0 [ 190.740972][ T8921] bridge0: port 3(macvlan2) entered disabled state [ 190.745351][ T8929] Modules linked in: [ 190.745413][ T8929] CPU: 0 UID: 0 PID: 8929 Comm: syz.0.871 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 190.745440][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 190.745456][ T8929] RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 [ 190.745490][ T8929] Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 [ 190.745509][ T8929] RSP: 0018:ffffc9000b15f3d0 EFLAGS: 00010283 [ 190.745530][ T8929] RAX: ffffffff84ec1e8f RBX: ffffffff8c808eb0 RCX: 0000000000080000 [ 190.772973][ T8921] macvlan2: entered allmulticast mode [ 190.779420][ T8929] RDX: ffffc9000e889000 RSI: 000000000000766a RDI: 000000000000766b [ 190.818292][ T8921] bridge0: entered allmulticast mode [ 190.819553][ T8929] RBP: 0000000000008a3e R08: ffff888034a10000 R09: 0000000000000004 [ 190.846975][ T8929] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8c808eba [ 190.855052][ T8929] R13: ffffc9000b15f5b0 R14: dffffc0000000000 R15: 1ffffffff19011d6 [ 190.863492][ T8929] FS: 00007fab7f54f6c0(0000) GS:ffff8881260c1000(0000) knlGS:0000000000000000 [ 190.872981][ T8929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.879824][ T8929] CR2: 00007fab7e774420 CR3: 0000000020350000 CR4: 00000000003526f0 [ 190.888097][ T8929] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.896203][ T8929] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.904365][ T8929] Call Trace: [ 190.907718][ T8929] [ 190.910821][ T8929] __netlink_policy_dump_write_attr+0x565/0xdc0 [ 190.917331][ T8929] ? __pfx___netlink_policy_dump_write_attr+0x10/0x10 [ 190.924562][ T8929] ? stack_trace_save+0x9c/0xe0 [ 190.929494][ T8929] ? stack_depot_save_flags+0x40/0x910 [ 190.935119][ T8929] ? __asan_memset+0x22/0x50 [ 190.939777][ T8929] ? __nla_put+0x85/0xd0 [ 190.944129][ T8929] ? __asan_memcpy+0x40/0x70 [ 190.948855][ T8929] ? nla_put+0xd0/0x150 [ 190.953072][ T8929] netlink_policy_dump_write+0x1e1/0x6e0 [ 190.958928][ T8929] ctrl_dumppolicy+0x6f4/0xb90 [ 190.964150][ T8929] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 190.969517][ T8929] ? genl_dumpit+0xdb/0x1b0 [ 190.974628][ T8929] ? __pfx___mutex_lock+0x10/0x10 [ 190.979827][ T8929] ? __build_skb_around+0x257/0x3e0 [ 190.985381][ T8929] genl_dumpit+0x108/0x1b0 [ 190.989861][ T8929] netlink_dump+0x64e/0xe70 [ 190.994515][ T8929] ? __pfx_netlink_dump+0x10/0x10 [ 190.999631][ T8929] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.005114][ T8929] ? kmem_cache_free+0x192/0x3f0 [ 191.010229][ T8929] netlink_recvmsg+0x67b/0xe00 [ 191.015094][ T8929] ? __lock_acquire+0xaac/0xd20 [ 191.020035][ T8929] ? __pfx_netlink_recvmsg+0x10/0x10 [ 191.025484][ T8929] ? __pfx_aa_sk_perm+0x10/0x10 [ 191.030701][ T8929] ? aa_sock_msg_perm+0x94/0x160 [ 191.036062][ T8929] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 191.041666][ T8929] ? security_socket_recvmsg+0x7e/0x2e0 [ 191.047344][ T8929] ? __pfx_netlink_recvmsg+0x10/0x10 [ 191.053051][ T8929] sock_recvmsg+0x229/0x270 [ 191.057672][ T8929] __sys_recvfrom+0x1f6/0x340 [ 191.062424][ T8929] ? __pfx___sys_recvfrom+0x10/0x10 [ 191.068162][ T8929] ? count_memcg_event_mm+0x92/0x3b0 [ 191.074033][ T8929] ? rcu_is_watching+0x15/0xb0 [ 191.078900][ T8929] __x64_sys_recvfrom+0xde/0x100 [ 191.084038][ T8929] do_syscall_64+0xf6/0x210 [ 191.088603][ T8929] ? clear_bhb_loop+0x45/0xa0 [ 191.093338][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.099462][ T8929] RIP: 0033:0x7fab7e790734 [ 191.103978][ T8929] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 191.124017][ T8929] RSP: 002b:00007fab7f54df30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 191.132491][ T8929] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007fab7e790734 [ 191.140593][ T8929] RDX: 0000000000001000 RSI: 00007fab7f54e010 RDI: 0000000000000003 [ 191.148792][ T8929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.156867][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000440 [ 191.164926][ T8929] R13: 00007fab7f54dfc0 R14: 000000000000000c R15: 0000000000000000 [ 191.173779][ T8929] [ 191.176908][ T8929] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.184257][ T8929] CPU: 0 UID: 0 PID: 8929 Comm: syz.0.871 Not tainted 6.15.0-rc4-syzkaller-00808-ga7371be8c8f5 #0 PREEMPT(full) [ 191.196342][ T8929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 191.206406][ T8929] Call Trace: [ 191.209696][ T8929] [ 191.212631][ T8929] dump_stack_lvl+0x99/0x250 [ 191.217264][ T8929] ? __asan_memcpy+0x40/0x70 [ 191.221958][ T8929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.227180][ T8929] ? __pfx__printk+0x10/0x10 [ 191.231790][ T8929] panic+0x2db/0x790 [ 191.235974][ T8929] ? __pfx_panic+0x10/0x10 [ 191.240424][ T8929] __warn+0x31b/0x4b0 [ 191.244421][ T8929] ? nla_get_range_unsigned+0xc8/0x4b0 [ 191.249891][ T8929] ? nla_get_range_unsigned+0xc8/0x4b0 [ 191.255365][ T8929] report_bug+0x2be/0x4f0 [ 191.259711][ T8929] ? nla_get_range_unsigned+0xc8/0x4b0 [ 191.265271][ T8929] ? nla_get_range_unsigned+0xc8/0x4b0 [ 191.271003][ T8929] ? nla_get_range_unsigned+0xca/0x4b0 [ 191.276512][ T8929] handle_bug+0x84/0x160 [ 191.280768][ T8929] exc_invalid_op+0x1a/0x50 [ 191.285283][ T8929] asm_exc_invalid_op+0x1a/0x20 [ 191.290141][ T8929] RIP: 0010:nla_get_range_unsigned+0xc8/0x4b0 [ 191.296224][ T8929] Code: 0f 85 71 03 00 00 41 0f b7 2c 24 31 ff 89 ee e8 4e a8 d3 fc 66 85 ed 0f 88 df 02 00 00 e8 a0 a4 d3 fc eb 09 e8 99 a4 d3 fc 90 <0f> 0b 90 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 [ 191.316190][ T8929] RSP: 0018:ffffc9000b15f3d0 EFLAGS: 00010283 [ 191.322271][ T8929] RAX: ffffffff84ec1e8f RBX: ffffffff8c808eb0 RCX: 0000000000080000 [ 191.330254][ T8929] RDX: ffffc9000e889000 RSI: 000000000000766a RDI: 000000000000766b [ 191.338237][ T8929] RBP: 0000000000008a3e R08: ffff888034a10000 R09: 0000000000000004 [ 191.346266][ T8929] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff8c808eba [ 191.354337][ T8929] R13: ffffc9000b15f5b0 R14: dffffc0000000000 R15: 1ffffffff19011d6 [ 191.362416][ T8929] ? nla_get_range_unsigned+0x39f/0x4b0 [ 191.367995][ T8929] __netlink_policy_dump_write_attr+0x565/0xdc0 [ 191.374272][ T8929] ? __pfx___netlink_policy_dump_write_attr+0x10/0x10 [ 191.381156][ T8929] ? stack_trace_save+0x9c/0xe0 [ 191.386059][ T8929] ? stack_depot_save_flags+0x40/0x910 [ 191.391549][ T8929] ? __asan_memset+0x22/0x50 [ 191.396160][ T8929] ? __nla_put+0x85/0xd0 [ 191.400451][ T8929] ? __asan_memcpy+0x40/0x70 [ 191.405078][ T8929] ? nla_put+0xd0/0x150 [ 191.409271][ T8929] netlink_policy_dump_write+0x1e1/0x6e0 [ 191.415041][ T8929] ctrl_dumppolicy+0x6f4/0xb90 [ 191.419849][ T8929] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 191.425177][ T8929] ? genl_dumpit+0xdb/0x1b0 [ 191.429852][ T8929] ? __pfx___mutex_lock+0x10/0x10 [ 191.434937][ T8929] ? __build_skb_around+0x257/0x3e0 [ 191.440167][ T8929] genl_dumpit+0x108/0x1b0 [ 191.444702][ T8929] netlink_dump+0x64e/0xe70 [ 191.449275][ T8929] ? __pfx_netlink_dump+0x10/0x10 [ 191.454324][ T8929] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.459560][ T8929] ? kmem_cache_free+0x192/0x3f0 [ 191.464525][ T8929] netlink_recvmsg+0x67b/0xe00 [ 191.469321][ T8929] ? __lock_acquire+0xaac/0xd20 [ 191.474207][ T8929] ? __pfx_netlink_recvmsg+0x10/0x10 [ 191.479553][ T8929] ? __pfx_aa_sk_perm+0x10/0x10 [ 191.484450][ T8929] ? aa_sock_msg_perm+0x94/0x160 [ 191.489419][ T8929] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 191.494734][ T8929] ? security_socket_recvmsg+0x7e/0x2e0 [ 191.500303][ T8929] ? __pfx_netlink_recvmsg+0x10/0x10 [ 191.505701][ T8929] sock_recvmsg+0x229/0x270 [ 191.510314][ T8929] __sys_recvfrom+0x1f6/0x340 [ 191.515017][ T8929] ? __pfx___sys_recvfrom+0x10/0x10 [ 191.520230][ T8929] ? count_memcg_event_mm+0x92/0x3b0 [ 191.525582][ T8929] ? rcu_is_watching+0x15/0xb0 [ 191.530414][ T8929] __x64_sys_recvfrom+0xde/0x100 [ 191.535410][ T8929] do_syscall_64+0xf6/0x210 [ 191.539930][ T8929] ? clear_bhb_loop+0x45/0xa0 [ 191.544629][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.550645][ T8929] RIP: 0033:0x7fab7e790734 [ 191.555085][ T8929] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 191.574710][ T8929] RSP: 002b:00007fab7f54df30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 191.583347][ T8929] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007fab7e790734 [ 191.591335][ T8929] RDX: 0000000000001000 RSI: 00007fab7f54e010 RDI: 0000000000000003 [ 191.599320][ T8929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.607617][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000440 [ 191.615802][ T8929] R13: 00007fab7f54dfc0 R14: 000000000000000c R15: 0000000000000000 [ 191.623833][ T8929] [ 191.627313][ T8929] Kernel Offset: disabled [ 191.631695][ T8929] Rebooting in 86400 seconds..