last executing test programs: 2.081621409s ago: executing program 3 (id=1546): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6(0xa, 0x6, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket(0xa, 0x3, 0x87) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.041684369s ago: executing program 3 (id=1547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r1}) 1.606199797s ago: executing program 1 (id=1553): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) sendmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="292de0a7eecf5faa4f4becd8ce3000fbd0d2d4a48380cea2983d48228fbc67e7106db33541d9fe8006b1ecbef9d83ce3d731520a1bf2cc181b398ecf1e7bc9d8b6b1032b8937593cf5118982ea9ce3d2b9c7fa33016340f55ef05e9662c2489ce04c40635ade5798023904b9050c4e08122f0ac4bc4a99d361", 0x79}, {&(0x7f0000001340)="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", 0x590}], 0x2}}, {{0x0, 0x0, &(0x7f00000079c0)=[{&(0x7f0000007640)="f095c047e63b9a271b2065d9afcdf7223da94f0e1b2b489e5f1967af612704886fbb21", 0x23}, {&(0x7f0000007800)="447e00cdd1f8b72fe4fd2a8c393e3c9dd9d6bcbb3298d2e979aeb0989b81a9cc0a4b1d294313c9055d165bcbecf86f79bc4d6afa7b7a92f407d800323019103bea00e9721a328d2669d30ead1101ee77ea4794a1b9bd78ceb3cae4c85e15217fe627a85c61a84c9abd46bde9", 0x6c}], 0x2}}], 0x2, 0x4000000) 1.409176512s ago: executing program 2 (id=1558): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000ec0), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x0) pipe(&(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1f, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.377921753s ago: executing program 2 (id=1559): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d040000", @ANYRES32=r2, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x4) 1.328500761s ago: executing program 2 (id=1560): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a004e2700000000fc010000000000000000000000000001"], 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x4d, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 1.257678876s ago: executing program 2 (id=1561): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000ec0), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 2) 1.018540336s ago: executing program 2 (id=1562): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) read$alg(r0, &(0x7f0000000c40)=""/160, 0xa0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000"], 0xfdef) 1.018192131s ago: executing program 3 (id=1563): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=@bridge_dellink={0x19c, 0x11, 0x100, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x2020, 0x8000}, [@IFLA_VFINFO_LIST={0x17c, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8000, 0x306}}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x100, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x6}}]}, {0xe0, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7fffffff, 0x80000000}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xc0b, 0x9, 0x8100}}, {0x14, 0x1, {0x40000000, 0xc61, 0x8001}}, {0x14, 0x1, {0x5, 0xfae, 0x3, 0x88a8}}, {0x14, 0x1, {0x80, 0x3db, 0x7fff, 0x88a8}}, {0x14, 0x1, {0x5, 0x7bd, 0x6, 0x88a8}}, {0x14, 0x1, {0xa, 0xca, 0x3, 0x8100}}, {0x14, 0x1, {0x6, 0xac4, 0x6, 0x88a8}}, {0x14, 0x1, {0x0, 0x9b2, 0x3, 0x88a8}}, {0x14, 0x1, {0x2, 0xccf, 0x3, 0x8100}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x40}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x10}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0xffffffff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x1ff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000001, 0x3}}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x21}, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000100)={0x0, "19b72b146be5d069c8b81a226973dd31d1deecf9d43ef22a5d6108a497bcef34dbdbb1fb6012db77a007b4aad9a9413954d96c451d7e0e913c6e12fb2b256d46082ac82b8f807ff1fac7b968d87fe2d09dcfe8cff31cf6506c92aa22866392315e69bffc74ae8b92b6741fd453a29ad3b0a3c912a62672550764c081ad6e20fd"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) 838.4871ms ago: executing program 3 (id=1567): socket(0x11, 0x3, 0x7fff) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, 0x0, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) 708.298702ms ago: executing program 3 (id=1570): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400000000000000", @ANYRES32=r2, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x4) 708.122728ms ago: executing program 1 (id=1571): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) 605.249861ms ago: executing program 3 (id=1574): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) 533.70699ms ago: executing program 1 (id=1576): socket(0x400000000010, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet(0x2, 0x3, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r2], 0x40}}, 0x0) 532.673041ms ago: executing program 0 (id=1577): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fe", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/65, 0x41}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 479.103607ms ago: executing program 1 (id=1578): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (fail_nth: 3) 449.817661ms ago: executing program 4 (id=1579): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a004e2700000000fc010000000000000000000000000001"], 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x929af94f5496dc8, 0xb, 0x4, 0x1a, 0x3404, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x8, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @enum64={0x4, 0x9, 0x0, 0x13, 0x1, 0x8, [{0x5, 0xe6, 0x3}, {0xc, 0x865, 0x6}, {0x5, 0x0, 0x4e4}, {0x8, 0x7, 0x5}, {0x9, 0x0, 0x4}, {0xf, 0x8, 0x9}, {0x7, 0x6, 0x3ff}, {0xc, 0x4, 0x7}, {0x6, 0x5300, 0x7}]}, @union={0xd, 0x6, 0x0, 0x5, 0x1, 0x5, [{0xd, 0x5, 0x3069c0d5}, {0xe, 0x1, 0x2}, {0x8, 0x2, 0x5}, {0x0, 0x2}, {0x7, 0x5, 0x100}, {0xf, 0x0, 0x1}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x8}, @typedef={0x4, 0x0, 0x0, 0x8, 0x4}, @struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x10000, [{0xd, 0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x61, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000340)=""/171, 0x12c, 0xab, 0x0, 0x51, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1c, 0x3, 0x46a3, 0x6, 0x2, r1, 0x9, '\x00', 0x0, r2, 0x0, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000580)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 360.586528ms ago: executing program 4 (id=1580): socket(0x11, 0x3, 0x7fff) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, 0x0, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) 360.080508ms ago: executing program 1 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20020400) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) r6 = socket$inet6(0xa, 0x200000000003, 0x87) r7 = socket$l2tp(0x2, 0x2, 0x73) accept$inet(r7, &(0x7f0000000500)={0x2, 0x0, @private}, &(0x7f0000000540)=0x10) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fc8f23", 0x0, 0x87, 0xff, @private1={0xfc, 0x1, '\x00', 0x2}, @mcast2}}}}, 0x0) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x9, @loopback, 0x1}, {0xa, 0x4e21, 0x8, @local, 0xfff}, 0x1, {[0x2, 0x0, 0x9, 0x8, 0x6, 0x6, 0xd, 0x2]}}, 0x5c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000580)="051a00000e80006558", 0x9}, {&(0x7f0000000140)="6419439f", 0x4}], 0x3) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r10, 0x0, 0xca, 0x8d, &(0x7f0000000200)="fd5238c54722c8fb7798f6a24a0b962ef791f8dca4beb85502e4766ecdc9a8dc43fe3eccf96c5ef850e3fed11ca77cdb22cdf51c2dc9ab265fc872384769d02d5413985edc0fdec95da88f436f395c475a71847be7eb1950368524b7a121ea34dc3009d4bdfde8a4334dc011cd6c3029a9d8039ce40374358ae94909d73ee01836383ef89aaeef50ab3c11dec4d833cbf07ecbc7e2a0f07304621cd2e1265b4e9083beac01fa21a836a0fe205a778a113c9b05e84202fb4bf8183266abc83f3a6647eef52a85f62928d0", &(0x7f0000000100)=""/141, 0xffffffff, 0x0, 0x62, 0x56, &(0x7f0000000300)="7b2ec49e4160f63fd9c6fe6bd557a520fc36f304f80945ee007ce7f62492030557ea426e75382f902144c25aad57dce92b5b9c724503fd8fb8dca010a85842691c4f3da6cbda748d2e47a35491a614385c49afe3a2b85abb94e4e31a18a3d5afa3ad", &(0x7f0000000400)="e8176a102ba3de6fb1c0d2639d8b675d04599f9c1b6fcb021fe5e3923c942eaf63144140ab9e52aa8fedaff5be929fa7a1c0cc4a81c41059bd5282c2602ee12f723c2a6b60f36ed6b5640e56c15d1ef71731d28d5778", 0x4, 0x0, 0x40}, 0x50) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000380)) 359.912331ms ago: executing program 0 (id=1582): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) sendmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="292de0a7eecf5faa4f4becd8ce3000fbd0d2d4a48380cea2983d48228fbc67e7106db33541d9fe8006b1ecbef9d83ce3d731520a1bf2cc181b398ecf1e7bc9d8b6b1032b8937593cf5118982ea9ce3d2b9c7fa33016340f55ef05e9662c2489ce04c40635ade5798023904b9050c4e08122f0ac4bc4a99d361", 0x79}, {&(0x7f0000001340)="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", 0x590}], 0x2}}, {{0x0, 0x0, &(0x7f00000079c0)=[{&(0x7f0000007640)="f095c047e63b9a271b2065d9afcdf7223da94f0e1b2b489e5f1967af612704886fbb21", 0x23}, {&(0x7f0000007800)="447e00cdd1f8b72fe4fd2a8c393e3c9dd9d6bcbb3298d2e979aeb0989b81a9cc0a4b1d294313c9055d165bcbecf86f79bc4d6afa7b7a92f407d800323019103bea00e9721a328d2669d30ead1101ee77ea4794a1b9bd78ceb3cae4c85e15217fe627a85c61a84c9abd46bde9", 0x6c}], 0x2}}], 0x2, 0x4000000) 253.408296ms ago: executing program 4 (id=1583): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket(0xa, 0x3, 0x87) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 253.25198ms ago: executing program 0 (id=1584): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d0400000000000000", @ANYRES32=r2, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x4) 197.382779ms ago: executing program 0 (id=1585): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@report={0x4c, 0x20, 0x1, 0x70bd25, 0x25dfdbfd, {0x6c, {@in=@multicast2, @in=@private=0xa010100, 0x4e20, 0x0, 0x4e20, 0x2, 0x2, 0x20, 0x80, 0x4, 0x0, r0}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r7, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) 195.560816ms ago: executing program 4 (id=1586): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "372a31a11e03279cec094e071cc80f218d360356a936a7e3971a8c35c47e5804", "400100", "fffffffffffffffd"}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 176.56635ms ago: executing program 1 (id=1587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)={r1}) 109.946584ms ago: executing program 4 (id=1588): socket(0x400000000010, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet(0x2, 0x3, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r2], 0x40}}, 0x0) 95.572392ms ago: executing program 0 (id=1589): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fe", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x41}}], 0x3, 0x40000121, 0x0) 17.516278ms ago: executing program 2 (id=1590): r0 = socket$inet(0x2, 0x1, 0x100) r1 = socket(0x25, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f00000004c0)={@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, 0x0, "e80c0dcaffc405ceb42cacd2e8c23aa2a58bbb45a83e9a7a30312a06806c0709", 0x10000, 0x2, 0xa2e, 0xe}, 0x3c) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$kcm(0x10, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000240)="c99b5700ffffffff09d0ff0f1f0dbd30", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004b40)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="604b4080c3c1fd4ae21c603a96a52b5391", 0x11}, {&(0x7f0000000040)="e6a8d222", 0x4}], 0x2, 0x0, 0x0, 0x4003}], 0x1, 0x20000040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) pselect6(0x40, &(0x7f0000000200)={0xf, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1, 0x3}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000bc0)=0xfffffff1, 0x4) syz_emit_ethernet(0xf4, &(0x7f0000000500)={@multicast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x1, 0x6, 0xe6, 0x65, 0x0, 0x6, 0x2, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x14, 0x34, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x749fc104}]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x7, [{@private=0xa010102, 0x4}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4}, {@multicast1, 0xe}]}]}}, {0x12, 0x9, 0x0, @remote, "c826c2188c0ccd4dbd7445623c43660074dfd2e055d8bc4c3bbf0939d1a538a7eb5e7c1efa602ddc650ab5aff4a6e05cdf2d8b47b5e9f23e746411a75ec4159a2e2035a02d1a4495f3d1787696462f17c8e16c2d7710d6c096d5bb1616677a9422cf8c6214c77d52889aeb83ac8d82b810432909e67c4a8487d44603fb5c35db75151e48e208a669b56b"}}}}}, 0x0) bind$xdp(r9, &(0x7f00000001c0)={0x2c, 0x0, r10}, 0x2a) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000b80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000001800)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0c00a00005000000000000008701cd803f1a32ceea5e1284f82af4ee53db942aaed3b5fc1cbb3faae3544eb3029cfdd8398831b3831f254dae6b4377de506569bea9c456a32ba30ad167270794e9765d29c55da29cddc6f21abb83866d836ddf0af1142e130cfbf2f9cec73343bde362a5c0b730531398cdbc5f8fe2ea8c5ccb11a3f29da8c6fb6fe449fb10996d2b4b4e5ca57317ec71e44d2e0e7e3e81a783594c4ebfc32f39ffeffb47e6d5a39d41faaf157f2e4f93215448d1f6db6c986b62dbe4a21ddaaf434b7ddb6b2c709ee36539873eca14b786e74c0a79efcff5d36b9ab8d98a99f7d46a4056c4c1289382d9f84dd5dc3e5038276972653b11da28d5fd33508834bb58dfff1d054353094e10ac25ecdb01b16b49c9351a5579a92afc2ece2f1a2433b38a895b4834c18713f551d12ecf8229ce0d3fa4755cbcf8c71edccd6dd9bc195b5918db89df50b90cd934ea0d3128bd836aaaf654e354444469477b6921dd0e78055f86cc953d14194196391e3100148388b4330400ae800c00140002000000000000000400fd800400aa8000000000"], 0x5dc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000880) accept(r4, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x80) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000340)=0x84) 17.22695ms ago: executing program 0 (id=1591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @sack_perm, @window={0x3, 0x5}], 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 4 (id=1592): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x3, 0xce, [0x6, 0x10, 0x1, 0xfffffffffffffffb, 0x9, 0x9], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000200)=""/206}, &(0x7f0000000180)=0x78) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000005c36fbc8c5c69d9b000008000300", @ANYRES32=r3, @ANYBLOB="080026008009000008009f"], 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800000000fcffffff00004c00", @ANYRES32=0x0, @ANYBLOB="c30000000600000008001b0000000000050010fb05000000"], 0x30}, 0x1, 0xffffa888}, 0x8810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40300200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r5, 0x2, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, 'nr0\x00'}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 63.947399][ T5828] cgroup: Unknown subsys name 'net' [ 64.098028][ T5828] cgroup: Unknown subsys name 'cpuset' [ 64.107109][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.473502][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.895392][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.918105][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.926825][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.927016][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.935279][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.949601][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.957973][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.966442][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.974219][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.981350][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.983011][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.013347][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.026617][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.033368][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.049525][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.056681][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.057530][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.072300][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.072879][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.087439][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.088646][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.105504][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.117261][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.128598][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.136838][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.503255][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 68.719102][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 68.807746][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.816266][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.824278][ T5845] bridge_slave_0: entered allmulticast mode [ 68.831910][ T5845] bridge_slave_0: entered promiscuous mode [ 68.843057][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.850427][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.857864][ T5845] bridge_slave_1: entered allmulticast mode [ 68.865812][ T5845] bridge_slave_1: entered promiscuous mode [ 68.872697][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 68.990316][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.999583][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 69.045184][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.110863][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.118121][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.125683][ T5848] bridge_slave_0: entered allmulticast mode [ 69.132586][ T5848] bridge_slave_0: entered promiscuous mode [ 69.172264][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.179901][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.187126][ T5848] bridge_slave_1: entered allmulticast mode [ 69.194772][ T5848] bridge_slave_1: entered promiscuous mode [ 69.216277][ T5845] team0: Port device team_slave_0 added [ 69.260486][ T5845] team0: Port device team_slave_1 added [ 69.281411][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.311487][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.318718][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.326304][ T5838] bridge_slave_0: entered allmulticast mode [ 69.334248][ T5838] bridge_slave_0: entered promiscuous mode [ 69.355975][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.394761][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 69.406685][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.414239][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.421399][ T5838] bridge_slave_1: entered allmulticast mode [ 69.428583][ T5838] bridge_slave_1: entered promiscuous mode [ 69.448077][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.455491][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.481768][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.565760][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.572747][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.599267][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.618226][ T5848] team0: Port device team_slave_0 added [ 69.627863][ T5848] team0: Port device team_slave_1 added [ 69.634252][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.641343][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.648636][ T5847] bridge_slave_0: entered allmulticast mode [ 69.655924][ T5847] bridge_slave_0: entered promiscuous mode [ 69.683583][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.708229][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.715470][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.722612][ T5847] bridge_slave_1: entered allmulticast mode [ 69.731136][ T5847] bridge_slave_1: entered promiscuous mode [ 69.752007][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.774107][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.781068][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.807502][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.878424][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.885594][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.911778][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.926399][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.979751][ T5838] team0: Port device team_slave_0 added [ 69.988398][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.005401][ T5845] hsr_slave_0: entered promiscuous mode [ 70.011836][ T5845] hsr_slave_1: entered promiscuous mode [ 70.015503][ T5852] Bluetooth: hci2: command tx timeout [ 70.019785][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.030095][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.037523][ T5840] bridge_slave_0: entered allmulticast mode [ 70.045700][ T5840] bridge_slave_0: entered promiscuous mode [ 70.054671][ T5838] team0: Port device team_slave_1 added [ 70.096612][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.104287][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.111488][ T5840] bridge_slave_1: entered allmulticast mode [ 70.118862][ T5840] bridge_slave_1: entered promiscuous mode [ 70.173895][ T5844] Bluetooth: hci4: command tx timeout [ 70.174014][ T5842] Bluetooth: hci3: command tx timeout [ 70.179569][ T5844] Bluetooth: hci0: command tx timeout [ 70.190943][ T5852] Bluetooth: hci1: command tx timeout [ 70.199322][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.206582][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.232741][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.247140][ T5847] team0: Port device team_slave_0 added [ 70.253671][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.260763][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.286799][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.340549][ T5847] team0: Port device team_slave_1 added [ 70.370492][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.384060][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.398441][ T5848] hsr_slave_0: entered promiscuous mode [ 70.404726][ T5848] hsr_slave_1: entered promiscuous mode [ 70.410718][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.418520][ T5848] Cannot create hsr debugfs directory [ 70.498190][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.505283][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.531643][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.549685][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.556691][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.582769][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.625731][ T5838] hsr_slave_0: entered promiscuous mode [ 70.632389][ T5838] hsr_slave_1: entered promiscuous mode [ 70.639044][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.646648][ T5838] Cannot create hsr debugfs directory [ 70.672195][ T5840] team0: Port device team_slave_0 added [ 70.714824][ T5840] team0: Port device team_slave_1 added [ 70.804765][ T5847] hsr_slave_0: entered promiscuous mode [ 70.810988][ T5847] hsr_slave_1: entered promiscuous mode [ 70.818773][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.826400][ T5847] Cannot create hsr debugfs directory [ 70.844320][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.851270][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.877272][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.932732][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.939828][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.966033][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.048986][ T5840] hsr_slave_0: entered promiscuous mode [ 71.056380][ T5840] hsr_slave_1: entered promiscuous mode [ 71.062869][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.070644][ T5840] Cannot create hsr debugfs directory [ 71.265779][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.302543][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.333917][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.346478][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.379131][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.385628][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.493031][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.504844][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.525186][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.548790][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.622137][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.636249][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.648049][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.664522][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.769883][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.807089][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.814580][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.826078][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.846258][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.875191][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.935315][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.942545][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.978986][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.986121][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.997002][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.008018][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.019780][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.043671][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.058077][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.092388][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.094222][ T5852] Bluetooth: hci2: command tx timeout [ 72.119774][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.126881][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.138682][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.145791][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.235217][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.255526][ T5852] Bluetooth: hci3: command tx timeout [ 72.255583][ T5844] Bluetooth: hci4: command tx timeout [ 72.260939][ T5153] Bluetooth: hci1: command tx timeout [ 72.266756][ T5842] Bluetooth: hci0: command tx timeout [ 72.323015][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.358049][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.399635][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.406833][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.462308][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.472038][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.479220][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.516684][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.549364][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.556565][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.589575][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.612387][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.619562][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.702354][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.738743][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.745921][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.789599][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.799688][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.806865][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.858680][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.968706][ T5845] veth0_vlan: entered promiscuous mode [ 73.009565][ T5845] veth1_vlan: entered promiscuous mode [ 73.126707][ T5845] veth0_macvtap: entered promiscuous mode [ 73.180295][ T5845] veth1_macvtap: entered promiscuous mode [ 73.208549][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.287015][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.318488][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.379741][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.390347][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.400927][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.409904][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.453648][ T5838] veth0_vlan: entered promiscuous mode [ 73.468552][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.503150][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.523380][ T5838] veth1_vlan: entered promiscuous mode [ 73.620111][ T5848] veth0_vlan: entered promiscuous mode [ 73.633395][ T5838] veth0_macvtap: entered promiscuous mode [ 73.666319][ T5838] veth1_macvtap: entered promiscuous mode [ 73.682225][ T5840] veth0_vlan: entered promiscuous mode [ 73.691990][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.706744][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.732594][ T5848] veth1_vlan: entered promiscuous mode [ 73.764325][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.772170][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.783462][ T5848] veth0_macvtap: entered promiscuous mode [ 73.799458][ T5840] veth1_vlan: entered promiscuous mode [ 73.813540][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.824818][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.837970][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.857220][ T5848] veth1_macvtap: entered promiscuous mode [ 73.897218][ T5847] veth0_vlan: entered promiscuous mode [ 73.906301][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.916934][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.930855][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.970373][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.979310][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.988953][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.998609][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.022299][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.025563][ T5847] veth1_vlan: entered promiscuous mode [ 74.049368][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.060524][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.070575][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.082038][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.093174][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.120514][ T5840] veth0_macvtap: entered promiscuous mode [ 74.148246][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.174376][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.183729][ T5844] Bluetooth: hci2: command tx timeout [ 74.190472][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.202712][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.215043][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.226815][ T5840] veth1_macvtap: entered promiscuous mode [ 74.252551][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.267818][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.278148][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.287281][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.335524][ T5844] Bluetooth: hci3: command tx timeout [ 74.340973][ T5844] Bluetooth: hci4: command tx timeout [ 74.344375][ T5842] Bluetooth: hci1: command tx timeout [ 74.349728][ T5844] Bluetooth: hci0: command tx timeout [ 74.377506][ T5847] veth0_macvtap: entered promiscuous mode [ 74.460811][ T5847] veth1_macvtap: entered promiscuous mode [ 74.471094][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.482168][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.488693][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.501378][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.511914][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.522653][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.536559][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.548023][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.559435][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.601847][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.622978][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.638664][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.650384][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.661666][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.678337][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.686630][ T5933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'. [ 74.690393][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.722440][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.733393][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.745780][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.755661][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.774896][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.786898][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.798251][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.811363][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.821527][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.832122][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.842183][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.852732][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.863617][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.905623][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.914488][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.922872][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.937263][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.947536][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.958325][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.968343][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.982935][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.993389][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.004332][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.016762][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.030600][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.041798][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.051641][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.060952][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.071942][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.084782][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.168202][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.178903][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.269490][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.316500][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.373447][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.402448][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.528285][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.549334][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.612421][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.660891][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.038708][ T5958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.063590][ T5958] netlink: 'syz.2.3': attribute type 7 has an invalid length. [ 76.118924][ T5958] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 76.130219][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.254258][ T5844] Bluetooth: hci2: command tx timeout [ 76.419021][ T5844] Bluetooth: hci0: command tx timeout [ 76.419038][ T5842] Bluetooth: hci1: command tx timeout [ 76.419070][ T5842] Bluetooth: hci4: command tx timeout [ 76.424971][ T5844] Bluetooth: hci3: command tx timeout [ 76.568446][ T5976] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20'. [ 76.580646][ T5976] unsupported nlmsg_type 40 [ 76.767388][ T5985] netlink: del zone limit has 4 unknown bytes [ 76.781521][ T5985] netlink: 'syz.0.22': attribute type 33 has an invalid length. [ 76.831223][ T5985] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22'. [ 76.958032][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.020612][ T5989] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.555501][ T6015] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 77.589643][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 77.621754][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 77.661342][ T6019] netlink: 'syz.3.35': attribute type 18 has an invalid length. [ 77.717888][ T6014] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 78.718036][ T6066] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.538049][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 79.766423][ T6106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.857759][ T6106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.902591][ T6106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.956152][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 79.966337][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 79.995149][ T6114] batadv0: entered promiscuous mode [ 80.009016][ T6114] bridge0: entered promiscuous mode [ 80.109921][ T6118] bridge1: entered promiscuous mode [ 80.123331][ T6118] bridge1: entered allmulticast mode [ 80.187739][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 80.275195][ T6124] netlink: 256 bytes leftover after parsing attributes in process `syz.3.78'. [ 80.712791][ T6142] Zero length message leads to an empty skb [ 81.048597][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 81.099012][ T6156] block nbd0: not configured, cannot reconfigure [ 81.198141][ T6156] raw_sendmsg: syz.1.92 forgot to set AF_INET. Fix it! [ 81.274587][ T6166] netlink: 'syz.2.96': attribute type 4 has an invalid length. [ 81.519932][ T6172] bond0: entered promiscuous mode [ 81.555348][ T6172] bond_slave_0: entered promiscuous mode [ 81.579266][ T6172] bond_slave_1: entered promiscuous mode [ 81.753044][ T6184] netlink: 'syz.0.105': attribute type 4 has an invalid length. [ 82.644474][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 82.910338][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'. [ 83.204476][ T6229] netlink: 'syz.1.125': attribute type 16 has an invalid length. [ 83.212258][ T6229] netlink: 'syz.1.125': attribute type 17 has an invalid length. [ 83.234914][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 83.253962][ T6229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.621151][ T6273] netlink: 'syz.4.143': attribute type 16 has an invalid length. [ 84.865290][ T6281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.147'. [ 84.890700][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.4.148'. [ 84.916662][ T6285] netlink: 'syz.4.148': attribute type 7 has an invalid length. [ 84.938232][ T6285] netlink: 'syz.4.148': attribute type 8 has an invalid length. [ 84.980709][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 85.024058][ T6285] bridge0: entered promiscuous mode [ 85.033588][ T6285] syz_tun: entered promiscuous mode [ 85.040431][ T6285] gretap0: entered promiscuous mode [ 85.048764][ T6285] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 85.062333][ T6285] Cannot create hsr debugfs directory [ 85.324267][ T6306] Bluetooth: MGMT ver 1.23 [ 85.407290][ T6306] netlink: 148 bytes leftover after parsing attributes in process `syz.3.155'. [ 85.721692][ T6325] Bluetooth: MGMT ver 1.23 [ 86.333907][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 86.369673][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'. [ 86.384224][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 86.398012][ T6351] lo speed is unknown, defaulting to 1000 [ 86.411536][ T6351] lo speed is unknown, defaulting to 1000 [ 86.426620][ T6351] lo speed is unknown, defaulting to 1000 [ 86.743584][ T9] cfg80211: failed to load regulatory.db [ 86.776639][ T6368] netlink: 71 bytes leftover after parsing attributes in process `syz.2.177'. [ 86.975025][ T9] lo speed is unknown, defaulting to 1000 [ 86.981071][ T6351] infiniband syz0: set active [ 86.994382][ T6351] infiniband syz0: added lo [ 87.096231][ T6351] RDS/IB: syz0: added [ 87.100765][ T6351] smc: adding ib device syz0 with port count 1 [ 87.108874][ T6351] smc: ib device syz0 port 1 has pnetid [ 87.116121][ T120] lo speed is unknown, defaulting to 1000 [ 87.125043][ T6351] lo speed is unknown, defaulting to 1000 [ 87.369978][ T6382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.483710][ T6395] dccp_invalid_packet: P.Data Offset(0) too small [ 87.599777][ T6382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.624051][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 87.691949][ T6351] lo speed is unknown, defaulting to 1000 [ 87.758354][ T6382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.866170][ T6382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.032051][ T6382] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.092639][ T6382] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.119848][ T6382] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.142365][ T6382] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.153276][ T6351] lo speed is unknown, defaulting to 1000 [ 88.281484][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 88.309265][ T6419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.200'. [ 88.437306][ T6424] bridge0: port 3(gretap0) entered blocking state [ 88.448861][ T6424] bridge0: port 3(gretap0) entered disabled state [ 88.455874][ T6424] gretap0: entered allmulticast mode [ 88.465819][ T6424] gretap0: entered promiscuous mode [ 88.474602][ T6424] bridge0: port 3(gretap0) entered blocking state [ 88.481614][ T6424] bridge0: port 3(gretap0) entered forwarding state [ 88.504432][ T6351] lo speed is unknown, defaulting to 1000 [ 88.930717][ T6351] lo speed is unknown, defaulting to 1000 [ 89.548418][ T6459] lo speed is unknown, defaulting to 1000 [ 91.642174][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 92.481192][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 93.010604][ T10] IPVS: starting estimator thread 0... [ 93.033027][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.041262][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.113952][ T6616] IPVS: using max 32 ests per chain, 76800 per kthread [ 93.460673][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.490934][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.711300][ T6605] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.741953][ T6605] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.756230][ T6605] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.765317][ T6605] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.852439][ T6605] bridge1: left promiscuous mode [ 93.858033][ T6605] bridge1: left allmulticast mode [ 93.896583][ T6605] syz.2.278 (6605) used greatest stack depth: 18920 bytes left [ 94.491973][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.662476][ T6681] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 94.691273][ T6681] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 95.027700][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.320504][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.321'. [ 95.565718][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 96.247412][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 96.586518][ T6773] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 97.134430][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 97.713643][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 97.927716][ T6840] warning: `syz.2.368' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.933948][ T6841] netlink: 'syz.3.370': attribute type 11 has an invalid length. [ 98.177921][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 98.328770][ T6864] netlink: 'syz.1.379': attribute type 4 has an invalid length. [ 98.377962][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 98.611098][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.782401][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.789710][ T6889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.952596][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 99.298611][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.415696][ T6925] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.499838][ T6925] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.603310][ T6925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.721591][ T6925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.887253][ T6925] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.938538][ T6925] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.005708][ T6925] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.063168][ T6925] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.536895][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.479745][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 101.498250][ T7016] bridge_slave_1: left allmulticast mode [ 101.520991][ T7016] bridge_slave_1: left promiscuous mode [ 101.527508][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.538648][ T7024] netlink: 88 bytes leftover after parsing attributes in process `syz.0.446'. [ 101.549282][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.446'. [ 101.559761][ T7016] bridge_slave_0: left allmulticast mode [ 101.566942][ T7016] bridge_slave_0: left promiscuous mode [ 101.573028][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.716970][ T7018] lo speed is unknown, defaulting to 1000 [ 102.294107][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.449'. [ 102.961654][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 103.629573][ T7098] netlink: 32 bytes leftover after parsing attributes in process `syz.2.474'. [ 103.738708][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 103.928197][ T7095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.940299][ T7095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.950408][ T7095] bond0 (unregistering): Released all slaves [ 104.569746][ T7152] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 105.238639][ T7191] netlink: 'syz.4.514': attribute type 10 has an invalid length. [ 105.282396][ T7191] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 105.303369][ T7191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 105.319311][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.633156][ T7216] xt_hashlimit: max too large, truncated to 1048576 [ 108.402419][ T7373] netlink: 32 bytes leftover after parsing attributes in process `syz.1.580'. [ 108.851653][ T7396] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 108.899033][ T7392] lo speed is unknown, defaulting to 1000 [ 109.471105][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 110.065619][ T7453] netlink: 156 bytes leftover after parsing attributes in process `syz.3.610'. [ 110.266885][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 110.479227][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'. [ 110.500042][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'. [ 110.789909][ T7503] netlink: 60 bytes leftover after parsing attributes in process `syz.1.631'. [ 111.193984][ T7514] IPVS: Scheduler module ip_vs_sip not found [ 111.821013][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 112.579962][ T7576] netlink: 'syz.1.661': attribute type 10 has an invalid length. [ 112.888184][ T7591] lo speed is unknown, defaulting to 1000 [ 114.321295][ T7654] netlink: 212 bytes leftover after parsing attributes in process `syz.1.695'. [ 114.615864][ T7672] hsr0: entered promiscuous mode [ 114.648899][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 114.685440][ T7672] hsr_slave_0: left promiscuous mode [ 114.696906][ T7672] hsr_slave_1: left promiscuous mode [ 114.745686][ T7672] hsr0 (unregistering): left promiscuous mode [ 114.969869][ T7685] netlink: 'syz.1.707': attribute type 10 has an invalid length. [ 114.995697][ T7685] batman_adv: batadv0: Adding interface: team0 [ 115.001920][ T7685] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.055835][ T7685] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 115.475498][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 116.861341][ T7791] SET target dimension over the limit! [ 117.543138][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 118.049849][ T7856] dummy0: entered promiscuous mode [ 118.123645][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 118.771796][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 118.852068][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'. [ 119.151653][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 119.298684][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 119.681220][ T7964] netlink: 'syz.3.828': attribute type 7 has an invalid length. [ 119.714224][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'. [ 119.739824][ T7964] bond0: option arp_all_targets: invalid value (18446744073709551615) [ 119.748534][ T12] bond0: (slave bond_slave_0): interface is now down [ 119.759962][ T12] bond0: (slave bond_slave_1): interface is now down [ 119.782543][ T12] bond0: now running without any active interface! [ 119.932018][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 120.150869][ T7994] batadv_slave_0: entered promiscuous mode [ 120.161741][ T7993] batadv_slave_0: left promiscuous mode [ 120.286436][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 120.440020][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 120.872762][ T8024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.850'. [ 121.415641][ T8038] lo speed is unknown, defaulting to 1000 [ 121.463431][ T8041] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 121.552398][ T8046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'. [ 121.812053][ T8054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.862'. [ 122.553950][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.869'. [ 122.576232][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.869'. [ 122.594163][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 123.513362][ T5844] Bluetooth: hci4: link tx timeout [ 123.519634][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.059049][ T8119] syzkaller1: entered promiscuous mode [ 124.073776][ T8119] syzkaller1: entered allmulticast mode [ 124.226921][ T7991] Set syz1 is full, maxelem 65536 reached [ 125.466154][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045160400: rx timeout, send abort [ 125.533847][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 125.966219][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045163800: rx timeout, send abort [ 125.975313][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045160400: abort rx timeout. Force session deactivation [ 126.028431][ T8231] __nla_validate_parse: 5 callbacks suppressed [ 126.028449][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.937'. [ 126.468678][ T8262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.952'. [ 126.477607][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045163800: abort rx timeout. Force session deactivation [ 126.628412][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806db6e800: rx timeout, send abort [ 127.128488][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806db6f400: rx timeout, send abort [ 127.136800][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806db6e800: abort rx timeout. Force session deactivation [ 127.636753][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806db6f400: abort rx timeout. Force session deactivation [ 128.712899][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.213561][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.373443][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 129.484921][ T8396] lo speed is unknown, defaulting to 1000 [ 130.066294][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 130.690283][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 132.056213][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1066'. [ 132.246340][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1070'. [ 132.785166][ T8559] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1083'. [ 132.828315][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.892163][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 134.651305][ T8660] lo speed is unknown, defaulting to 1000 [ 135.286134][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1135'. [ 135.663529][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 135.712657][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 135.845141][ T8712] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1146'. [ 136.176337][ T8729] FAULT_INJECTION: forcing a failure. [ 136.176337][ T8729] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.196867][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.2.1153 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 136.196893][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.196906][ T8729] Call Trace: [ 136.196913][ T8729] [ 136.196920][ T8729] dump_stack_lvl+0x241/0x360 [ 136.196963][ T8729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.196986][ T8729] ? __pfx__printk+0x10/0x10 [ 136.197022][ T8729] should_fail_ex+0x424/0x570 [ 136.197046][ T8729] _copy_from_user+0x2d/0xb0 [ 136.197070][ T8729] copy_msghdr_from_user+0xb3/0x580 [ 136.197105][ T8729] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 136.197124][ T8729] ? __fget_files+0x2a/0x420 [ 136.197143][ T8729] ? __fget_files+0x2a/0x420 [ 136.197167][ T8729] __sys_sendmsg+0x20a/0x360 [ 136.197191][ T8729] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.197261][ T8729] ? do_syscall_64+0xb6/0x230 [ 136.197284][ T8729] do_syscall_64+0xf3/0x230 [ 136.197304][ T8729] ? clear_bhb_loop+0x45/0xa0 [ 136.197325][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.197344][ T8729] RIP: 0033:0x7f227f38d169 [ 136.197362][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.197375][ T8729] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.197399][ T8729] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 136.197411][ T8729] RDX: 0000000000044800 RSI: 0000200000000200 RDI: 0000000000000004 [ 136.197422][ T8729] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 136.197431][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.197441][ T8729] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 136.197469][ T8729] [ 136.388310][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1155'. [ 136.663368][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 136.812166][ T8762] FAULT_INJECTION: forcing a failure. [ 136.812166][ T8762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.847911][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.3.1164 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 136.847936][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.847946][ T8762] Call Trace: [ 136.847953][ T8762] [ 136.847960][ T8762] dump_stack_lvl+0x241/0x360 [ 136.847990][ T8762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.848013][ T8762] ? __pfx__printk+0x10/0x10 [ 136.848048][ T8762] should_fail_ex+0x424/0x570 [ 136.848070][ T8762] _copy_from_user+0x2d/0xb0 [ 136.848094][ T8762] copy_msghdr_from_user+0xb3/0x580 [ 136.848122][ T8762] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 136.848140][ T8762] ? __fget_files+0x2a/0x420 [ 136.848158][ T8762] ? __fget_files+0x2a/0x420 [ 136.848182][ T8762] do_recvmmsg+0x3bf/0xab0 [ 136.848210][ T8762] ? __pfx_do_recvmmsg+0x10/0x10 [ 136.848243][ T8762] ? rcu_read_lock_any_held+0xbb/0x160 [ 136.848265][ T8762] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 136.848289][ T8762] ? vfs_write+0xb29/0xd10 [ 136.848317][ T8762] ? ksys_write+0x24e/0x2d0 [ 136.848337][ T8762] ? __mutex_unlock_slowpath+0x229/0x800 [ 136.848365][ T8762] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.848383][ T8762] ? __fget_files+0x2a/0x420 [ 136.848412][ T8762] __x64_sys_recvmmsg+0x1ab/0x260 [ 136.848431][ T8762] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 136.848456][ T8762] ? do_syscall_64+0xb6/0x230 [ 136.848479][ T8762] do_syscall_64+0xf3/0x230 [ 136.848498][ T8762] ? clear_bhb_loop+0x45/0xa0 [ 136.848518][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.848533][ T8762] RIP: 0033:0x7f505758d169 [ 136.848548][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.848561][ T8762] RSP: 002b:00007f50584ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 136.848578][ T8762] RAX: ffffffffffffffda RBX: 00007f50577a5fa0 RCX: 00007f505758d169 [ 136.848590][ T8762] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 136.848600][ T8762] RBP: 00007f50584ad090 R08: 0000000000000000 R09: 0000000000000000 [ 136.848610][ T8762] R10: 0000000040000060 R11: 0000000000000246 R12: 0000000000000001 [ 136.848619][ T8762] R13: 0000000000000000 R14: 00007f50577a5fa0 R15: 00007fff20d0a1f8 [ 136.848644][ T8762] [ 137.108162][ T8768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1166'. [ 137.369270][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1171'. [ 137.392583][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1171'. [ 137.733498][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 138.426182][ T8847] FAULT_INJECTION: forcing a failure. [ 138.426182][ T8847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.443900][ T8847] CPU: 1 UID: 0 PID: 8847 Comm: syz.4.1194 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 138.443924][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.443934][ T8847] Call Trace: [ 138.443941][ T8847] [ 138.443948][ T8847] dump_stack_lvl+0x241/0x360 [ 138.443980][ T8847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.444004][ T8847] ? __pfx__printk+0x10/0x10 [ 138.444035][ T8847] should_fail_ex+0x424/0x570 [ 138.444059][ T8847] _copy_to_user+0x31/0xb0 [ 138.444084][ T8847] simple_read_from_buffer+0xc4/0x170 [ 138.444114][ T8847] proc_fail_nth_read+0x1ef/0x260 [ 138.444134][ T8847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.444155][ T8847] ? rw_verify_area+0x246/0x630 [ 138.444172][ T8847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.444191][ T8847] vfs_read+0x21f/0xb90 [ 138.444214][ T8847] ? __pfx___mutex_lock+0x10/0x10 [ 138.444235][ T8847] ? __pfx_vfs_read+0x10/0x10 [ 138.444257][ T8847] ? __fget_files+0x2a/0x420 [ 138.444274][ T8847] ? __fget_files+0x39d/0x420 [ 138.444288][ T8847] ? __fget_files+0x2a/0x420 [ 138.444312][ T8847] ksys_read+0x19d/0x2d0 [ 138.444333][ T8847] ? __pfx_ksys_read+0x10/0x10 [ 138.444358][ T8847] ? do_syscall_64+0xb6/0x230 [ 138.444381][ T8847] do_syscall_64+0xf3/0x230 [ 138.444401][ T8847] ? clear_bhb_loop+0x45/0xa0 [ 138.444421][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.444437][ T8847] RIP: 0033:0x7ff0c2f8bb7c [ 138.444452][ T8847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.444465][ T8847] RSP: 002b:00007ff0c3d33030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.444483][ T8847] RAX: ffffffffffffffda RBX: 00007ff0c31a5fa0 RCX: 00007ff0c2f8bb7c [ 138.444495][ T8847] RDX: 000000000000000f RSI: 00007ff0c3d330a0 RDI: 0000000000000004 [ 138.444505][ T8847] RBP: 00007ff0c3d33090 R08: 0000000000000000 R09: 0000000000000000 [ 138.444515][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.444524][ T8847] R13: 0000000000000000 R14: 00007ff0c31a5fa0 R15: 00007ffe62646b78 [ 138.444561][ T8847] [ 138.490110][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 138.841760][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 138.864273][ T8863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 138.900061][ T8865] netlink: 'syz.1.1200': attribute type 25 has an invalid length. [ 139.678329][ T8903] netlink: 'syz.0.1214': attribute type 25 has an invalid length. [ 140.013482][ T8923] lo speed is unknown, defaulting to 1000 [ 140.266908][ T8931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1225'. [ 140.292509][ T8931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1225'. [ 140.825797][ T8959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1237'. [ 141.537463][ T8997] netlink: 'syz.4.1248': attribute type 4 has an invalid length. [ 141.711561][ T8999] lo speed is unknown, defaulting to 1000 [ 142.085869][ T9026] FAULT_INJECTION: forcing a failure. [ 142.085869][ T9026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.116930][ T9026] CPU: 0 UID: 0 PID: 9026 Comm: syz.0.1260 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 142.116955][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.116964][ T9026] Call Trace: [ 142.116971][ T9026] [ 142.116979][ T9026] dump_stack_lvl+0x241/0x360 [ 142.117009][ T9026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.117033][ T9026] ? __pfx__printk+0x10/0x10 [ 142.117069][ T9026] should_fail_ex+0x424/0x570 [ 142.117092][ T9026] _copy_from_iter+0x211/0x1c70 [ 142.117127][ T9026] ? is_bpf_text_address+0x26/0x2a0 [ 142.117147][ T9026] ? __pfx__copy_from_iter+0x10/0x10 [ 142.117166][ T9026] ? 0xffffffffa0002214 [ 142.117182][ T9026] ? is_bpf_text_address+0x288/0x2a0 [ 142.117199][ T9026] ? is_bpf_text_address+0x26/0x2a0 [ 142.117219][ T9026] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 142.117244][ T9026] ? kernel_text_address+0xa7/0xe0 [ 142.117265][ T9026] tun_get_user+0x269/0x47c0 [ 142.117302][ T9026] ? aa_file_perm+0x139/0xf60 [ 142.117327][ T9026] ? aa_file_perm+0x139/0xf60 [ 142.117357][ T9026] ? aa_file_perm+0x3f1/0xf60 [ 142.117379][ T9026] ? __pfx_tun_get_user+0x10/0x10 [ 142.117401][ T9026] ? __lock_acquire+0xad5/0xd80 [ 142.117423][ T9026] ? ref_tracker_alloc+0x316/0x4c0 [ 142.117445][ T9026] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 142.117478][ T9026] ? tun_get+0x1e/0x2f0 [ 142.117503][ T9026] ? tun_get+0x1e/0x2f0 [ 142.117525][ T9026] ? tun_get+0x27d/0x2f0 [ 142.117550][ T9026] tun_chr_write_iter+0x10d/0x1f0 [ 142.117577][ T9026] vfs_write+0x70f/0xd10 [ 142.117601][ T9026] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 142.117626][ T9026] ? __pfx_vfs_write+0x10/0x10 [ 142.117646][ T9026] ? __fget_files+0x2a/0x420 [ 142.117665][ T9026] ? __fget_files+0x2a/0x420 [ 142.117689][ T9026] ksys_write+0x19d/0x2d0 [ 142.117709][ T9026] ? __pfx_ksys_write+0x10/0x10 [ 142.117732][ T9026] ? do_syscall_64+0xb6/0x230 [ 142.117754][ T9026] do_syscall_64+0xf3/0x230 [ 142.117773][ T9026] ? clear_bhb_loop+0x45/0xa0 [ 142.117793][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.117808][ T9026] RIP: 0033:0x7fbbac98d169 [ 142.117823][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.117835][ T9026] RSP: 002b:00007fbbad73e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.117852][ T9026] RAX: ffffffffffffffda RBX: 00007fbbacba5fa0 RCX: 00007fbbac98d169 [ 142.117864][ T9026] RDX: 000000000000fdef RSI: 00002000000005c0 RDI: 0000000000000004 [ 142.117873][ T9026] RBP: 00007fbbad73e090 R08: 0000000000000000 R09: 0000000000000000 [ 142.117883][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.117892][ T9026] R13: 0000000000000000 R14: 00007fbbacba5fa0 R15: 00007ffdd5c74e18 [ 142.117923][ T9026] [ 142.591520][ T9031] __nla_validate_parse: 2 callbacks suppressed [ 142.591539][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 142.821091][ T9047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1266'. [ 143.902388][ T9083] FAULT_INJECTION: forcing a failure. [ 143.902388][ T9083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.951947][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: syz.2.1278 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 143.951972][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.951982][ T9083] Call Trace: [ 143.951989][ T9083] [ 143.951996][ T9083] dump_stack_lvl+0x241/0x360 [ 143.952028][ T9083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.952052][ T9083] ? __pfx__printk+0x10/0x10 [ 143.952084][ T9083] should_fail_ex+0x424/0x570 [ 143.952109][ T9083] _copy_to_user+0x31/0xb0 [ 143.952135][ T9083] simple_read_from_buffer+0xc4/0x170 [ 143.952163][ T9083] proc_fail_nth_read+0x1ef/0x260 [ 143.952183][ T9083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.952203][ T9083] ? rw_verify_area+0x246/0x630 [ 143.952219][ T9083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.952236][ T9083] vfs_read+0x21f/0xb90 [ 143.952259][ T9083] ? __pfx___mutex_lock+0x10/0x10 [ 143.952280][ T9083] ? __pfx_vfs_read+0x10/0x10 [ 143.952301][ T9083] ? __fget_files+0x2a/0x420 [ 143.952318][ T9083] ? __fget_files+0x39d/0x420 [ 143.952330][ T9083] ? __fget_files+0x2a/0x420 [ 143.952354][ T9083] ksys_read+0x19d/0x2d0 [ 143.952374][ T9083] ? __pfx_ksys_read+0x10/0x10 [ 143.952399][ T9083] ? do_syscall_64+0xb6/0x230 [ 143.952421][ T9083] do_syscall_64+0xf3/0x230 [ 143.952441][ T9083] ? clear_bhb_loop+0x45/0xa0 [ 143.952460][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.952476][ T9083] RIP: 0033:0x7f227f38bb7c [ 143.952498][ T9083] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.952509][ T9083] RSP: 002b:00007f228021c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.952527][ T9083] RAX: ffffffffffffffda RBX: 00007f227f5a6080 RCX: 00007f227f38bb7c [ 143.952539][ T9083] RDX: 000000000000000f RSI: 00007f228021c0a0 RDI: 0000000000000003 [ 143.952549][ T9083] RBP: 00007f228021c090 R08: 0000000000000000 R09: 0000000000000000 [ 143.952558][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.952568][ T9083] R13: 0000000000000001 R14: 00007f227f5a6080 R15: 00007ffea06e6cf8 [ 143.952596][ T9083] [ 144.058324][ T9078] syzkaller0: entered promiscuous mode [ 144.234024][ T9078] syzkaller0: entered allmulticast mode [ 144.340276][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 144.493113][ T9095] xt_CT: No such helper "pptp" [ 145.689807][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 145.981734][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1297'. [ 146.000282][ T9137] netlink: 'syz.2.1297': attribute type 7 has an invalid length. [ 146.130084][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1302'. [ 146.271814][ T9155] FAULT_INJECTION: forcing a failure. [ 146.271814][ T9155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.291258][ T9155] CPU: 1 UID: 0 PID: 9155 Comm: syz.2.1307 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 146.291282][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.291291][ T9155] Call Trace: [ 146.291306][ T9155] [ 146.291314][ T9155] dump_stack_lvl+0x241/0x360 [ 146.291343][ T9155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.291365][ T9155] ? __pfx__printk+0x10/0x10 [ 146.291398][ T9155] should_fail_ex+0x424/0x570 [ 146.291420][ T9155] _copy_from_user+0x2d/0xb0 [ 146.291443][ T9155] copy_msghdr_from_user+0xb3/0x580 [ 146.291471][ T9155] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 146.291490][ T9155] ? __fget_files+0x2a/0x420 [ 146.291507][ T9155] ? __fget_files+0x2a/0x420 [ 146.291532][ T9155] __sys_sendmsg+0x20a/0x360 [ 146.291556][ T9155] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.291621][ T9155] ? do_syscall_64+0xb6/0x230 [ 146.291645][ T9155] do_syscall_64+0xf3/0x230 [ 146.291665][ T9155] ? clear_bhb_loop+0x45/0xa0 [ 146.291684][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.291699][ T9155] RIP: 0033:0x7f227f38d169 [ 146.291714][ T9155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.291726][ T9155] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.291744][ T9155] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 146.291756][ T9155] RDX: 0000000024040044 RSI: 00002000000002c0 RDI: 0000000000000004 [ 146.291767][ T9155] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 146.291777][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.291786][ T9155] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 146.291813][ T9155] [ 146.810735][ T9177] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1314'. [ 146.885259][ T9177] trusted_key: syz.0.1314 sent an empty control message without MSG_MORE. [ 146.966344][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1320'. [ 147.348875][ T9221] FAULT_INJECTION: forcing a failure. [ 147.348875][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.368233][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.4.1330 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 147.368258][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.368267][ T9221] Call Trace: [ 147.368275][ T9221] [ 147.368282][ T9221] dump_stack_lvl+0x241/0x360 [ 147.368312][ T9221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.368335][ T9221] ? __pfx__printk+0x10/0x10 [ 147.368370][ T9221] should_fail_ex+0x424/0x570 [ 147.368393][ T9221] _copy_from_user+0x2d/0xb0 [ 147.368417][ T9221] move_addr_to_kernel+0x7f/0x170 [ 147.368440][ T9221] copy_msghdr_from_user+0x477/0x580 [ 147.368468][ T9221] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 147.368487][ T9221] ? __fget_files+0x2a/0x420 [ 147.368506][ T9221] ? __fget_files+0x2a/0x420 [ 147.368529][ T9221] __sys_sendmmsg+0x361/0x7b0 [ 147.368560][ T9221] ? __pfx___sys_sendmmsg+0x10/0x10 [ 147.368613][ T9221] ? rcu_read_lock_any_held+0xbb/0x160 [ 147.368636][ T9221] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 147.368660][ T9221] ? vfs_write+0xb29/0xd10 [ 147.368689][ T9221] ? ksys_write+0x24e/0x2d0 [ 147.368711][ T9221] ? __mutex_unlock_slowpath+0x229/0x800 [ 147.368762][ T9221] ? ksys_write+0x275/0x2d0 [ 147.368793][ T9221] __x64_sys_sendmmsg+0xa0/0xb0 [ 147.368813][ T9221] do_syscall_64+0xf3/0x230 [ 147.368833][ T9221] ? clear_bhb_loop+0x45/0xa0 [ 147.368854][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.368870][ T9221] RIP: 0033:0x7ff0c2f8d169 [ 147.368884][ T9221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.368897][ T9221] RSP: 002b:00007ff0c3d33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.368915][ T9221] RAX: ffffffffffffffda RBX: 00007ff0c31a5fa0 RCX: 00007ff0c2f8d169 [ 147.368927][ T9221] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 147.368937][ T9221] RBP: 00007ff0c3d33090 R08: 0000000000000000 R09: 0000000000000000 [ 147.368947][ T9221] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001 [ 147.368958][ T9221] R13: 0000000000000000 R14: 00007ff0c31a5fa0 R15: 00007ffe62646b78 [ 147.368992][ T9221] [ 147.811571][ T9245] FAULT_INJECTION: forcing a failure. [ 147.811571][ T9245] name failslab, interval 1, probability 0, space 0, times 1 [ 147.895627][ T9245] CPU: 1 UID: 0 PID: 9245 Comm: syz.0.1341 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 147.895652][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.895662][ T9245] Call Trace: [ 147.895668][ T9245] [ 147.895676][ T9245] dump_stack_lvl+0x241/0x360 [ 147.895708][ T9245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.895739][ T9245] ? __pfx__printk+0x10/0x10 [ 147.895766][ T9245] ? __pfx___might_resched+0x10/0x10 [ 147.895791][ T9245] should_fail_ex+0x424/0x570 [ 147.895814][ T9245] should_failslab+0xac/0x100 [ 147.895839][ T9245] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 147.895862][ T9245] ? __alloc_skb+0x1c2/0x480 [ 147.895882][ T9245] __alloc_skb+0x1c2/0x480 [ 147.895898][ T9245] ? up_write+0x1ab/0x590 [ 147.895923][ T9245] ? __pfx___alloc_skb+0x10/0x10 [ 147.895939][ T9245] ? __up_read+0x650/0x6b0 [ 147.895957][ T9245] ? ima_get_action+0x75/0xb0 [ 147.895981][ T9245] alloc_skb_with_frags+0xc3/0x830 [ 147.895998][ T9245] ? process_measurement+0x1b33/0x1fe0 [ 147.896036][ T9245] sock_alloc_send_pskb+0x91c/0xa70 [ 147.896075][ T9245] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 147.896112][ T9245] l2cap_sock_alloc_skb_cb+0x101/0x5b0 [ 147.896142][ T9245] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 147.896171][ T9245] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 147.896197][ T9245] l2cap_chan_send+0xf44/0x2750 [ 147.896244][ T9245] ? __pfx_l2cap_chan_send+0x10/0x10 [ 147.896280][ T9245] l2cap_sock_sendmsg+0x339/0x4e0 [ 147.896305][ T9245] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 147.896331][ T9245] ? aa_sock_msg_perm+0x91/0x160 [ 147.896360][ T9245] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 147.896380][ T9245] __sock_sendmsg+0x221/0x270 [ 147.896405][ T9245] ____sys_sendmsg+0x523/0x860 [ 147.896432][ T9245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.896448][ T9245] ? __fget_files+0x2a/0x420 [ 147.896467][ T9245] ? __fget_files+0x2a/0x420 [ 147.896491][ T9245] __sys_sendmsg+0x271/0x360 [ 147.896515][ T9245] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.896591][ T9245] ? do_syscall_64+0xb6/0x230 [ 147.896614][ T9245] do_syscall_64+0xf3/0x230 [ 147.896635][ T9245] ? clear_bhb_loop+0x45/0xa0 [ 147.896655][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.896671][ T9245] RIP: 0033:0x7fbbac98d169 [ 147.896686][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.896698][ T9245] RSP: 002b:00007fbbad73e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.896716][ T9245] RAX: ffffffffffffffda RBX: 00007fbbacba5fa0 RCX: 00007fbbac98d169 [ 147.896728][ T9245] RDX: 0000000024040044 RSI: 00002000000002c0 RDI: 0000000000000004 [ 147.896738][ T9245] RBP: 00007fbbad73e090 R08: 0000000000000000 R09: 0000000000000000 [ 147.896747][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.896757][ T9245] R13: 0000000000000000 R14: 00007fbbacba5fa0 R15: 00007ffdd5c74e18 [ 147.896784][ T9245] [ 148.258125][ T9255] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1348'. [ 148.422055][ T9269] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1352'. [ 148.482549][ T9266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1349'. [ 148.515850][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 148.539571][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 148.651118][ T9279] FAULT_INJECTION: forcing a failure. [ 148.651118][ T9279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.664623][ T9279] CPU: 1 UID: 0 PID: 9279 Comm: syz.2.1357 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 148.664644][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.664654][ T9279] Call Trace: [ 148.664661][ T9279] [ 148.664668][ T9279] dump_stack_lvl+0x241/0x360 [ 148.664698][ T9279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.664721][ T9279] ? __pfx__printk+0x10/0x10 [ 148.664758][ T9279] should_fail_ex+0x424/0x570 [ 148.664780][ T9279] _copy_from_iter+0x211/0x1c70 [ 148.664808][ T9279] ? alloc_pages_mpol+0x4e6/0x690 [ 148.664836][ T9279] ? __pfx__copy_from_iter+0x10/0x10 [ 148.664863][ T9279] ? set_page_refcounted+0xa1/0x1e0 [ 148.664886][ T9279] ? alloc_pages_noprof+0x136/0x190 [ 148.664905][ T9279] ? page_copy_sane+0x46/0x260 [ 148.664929][ T9279] copy_page_from_iter+0x7a/0x100 [ 148.664953][ T9279] tun_get_user+0x1f6c/0x47c0 [ 148.664971][ T9279] ? tun_get_user+0x852/0x47c0 [ 148.665003][ T9279] ? aa_file_perm+0x139/0xf60 [ 148.665027][ T9279] ? aa_file_perm+0x3f1/0xf60 [ 148.665050][ T9279] ? __pfx_tun_get_user+0x10/0x10 [ 148.665084][ T9279] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.665120][ T9279] ? tun_get+0x1e/0x2f0 [ 148.665144][ T9279] ? tun_get+0x1e/0x2f0 [ 148.665167][ T9279] ? tun_get+0x27d/0x2f0 [ 148.665192][ T9279] tun_chr_write_iter+0x10d/0x1f0 [ 148.665226][ T9279] vfs_write+0x70f/0xd10 [ 148.665252][ T9279] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.665278][ T9279] ? __pfx_vfs_write+0x10/0x10 [ 148.665301][ T9279] ? __fget_files+0x2a/0x420 [ 148.665319][ T9279] ? __fget_files+0x2a/0x420 [ 148.665344][ T9279] ksys_write+0x19d/0x2d0 [ 148.665365][ T9279] ? __pfx_ksys_write+0x10/0x10 [ 148.665390][ T9279] ? do_syscall_64+0xb6/0x230 [ 148.665413][ T9279] do_syscall_64+0xf3/0x230 [ 148.665432][ T9279] ? clear_bhb_loop+0x45/0xa0 [ 148.665452][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.665467][ T9279] RIP: 0033:0x7f227f38bc1f [ 148.665481][ T9279] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.665494][ T9279] RSP: 002b:00007f228023d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.665512][ T9279] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38bc1f [ 148.665524][ T9279] RDX: 0000000000000046 RSI: 0000200000000580 RDI: 00000000000000c8 [ 148.665534][ T9279] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 148.665545][ T9279] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 148.665554][ T9279] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 148.665581][ T9279] [ 149.172959][ T9300] FAULT_INJECTION: forcing a failure. [ 149.172959][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 149.185702][ T9300] CPU: 1 UID: 0 PID: 9300 Comm: syz.3.1363 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 149.185724][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.185733][ T9300] Call Trace: [ 149.185741][ T9300] [ 149.185748][ T9300] dump_stack_lvl+0x241/0x360 [ 149.185778][ T9300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.185800][ T9300] ? __pfx__printk+0x10/0x10 [ 149.185827][ T9300] ? __pfx___might_resched+0x10/0x10 [ 149.185849][ T9300] should_fail_ex+0x424/0x570 [ 149.185871][ T9300] should_failslab+0xac/0x100 [ 149.185895][ T9300] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 149.185919][ T9300] ? __alloc_skb+0x1c2/0x480 [ 149.185946][ T9300] __alloc_skb+0x1c2/0x480 [ 149.185967][ T9300] ? __pfx___alloc_skb+0x10/0x10 [ 149.185984][ T9300] ? netlink_autobind+0xd6/0x2f0 [ 149.186006][ T9300] ? netlink_autobind+0x2b0/0x2f0 [ 149.186032][ T9300] netlink_sendmsg+0x638/0xcd0 [ 149.186067][ T9300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.186094][ T9300] ? aa_sock_msg_perm+0x91/0x160 [ 149.186122][ T9300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.186143][ T9300] __sock_sendmsg+0x221/0x270 [ 149.186166][ T9300] ____sys_sendmsg+0x523/0x860 [ 149.186191][ T9300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.186205][ T9300] ? __fget_files+0x2a/0x420 [ 149.186224][ T9300] ? __fget_files+0x2a/0x420 [ 149.186248][ T9300] __sys_sendmsg+0x271/0x360 [ 149.186271][ T9300] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.186342][ T9300] ? do_syscall_64+0xb6/0x230 [ 149.186365][ T9300] do_syscall_64+0xf3/0x230 [ 149.186385][ T9300] ? clear_bhb_loop+0x45/0xa0 [ 149.186405][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.186420][ T9300] RIP: 0033:0x7f505758d169 [ 149.186435][ T9300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.186447][ T9300] RSP: 002b:00007f50584ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.186465][ T9300] RAX: ffffffffffffffda RBX: 00007f50577a5fa0 RCX: 00007f505758d169 [ 149.186477][ T9300] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 149.186487][ T9300] RBP: 00007f50584ad090 R08: 0000000000000000 R09: 0000000000000000 [ 149.186497][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.186506][ T9300] R13: 0000000000000000 R14: 00007f50577a5fa0 R15: 00007fff20d0a1f8 [ 149.186534][ T9300] [ 149.468273][ T9304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1364'. [ 149.828580][ T9323] lo speed is unknown, defaulting to 1000 [ 150.069643][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1375'. [ 151.298900][ T9390] FAULT_INJECTION: forcing a failure. [ 151.298900][ T9390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.315061][ T9390] CPU: 0 UID: 0 PID: 9390 Comm: syz.2.1398 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 151.315077][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.315083][ T9390] Call Trace: [ 151.315087][ T9390] [ 151.315091][ T9390] dump_stack_lvl+0x241/0x360 [ 151.315110][ T9390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.315123][ T9390] ? __pfx__printk+0x10/0x10 [ 151.315142][ T9390] should_fail_ex+0x424/0x570 [ 151.315155][ T9390] _copy_to_user+0x31/0xb0 [ 151.315170][ T9390] simple_read_from_buffer+0xc4/0x170 [ 151.315186][ T9390] proc_fail_nth_read+0x1ef/0x260 [ 151.315198][ T9390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.315209][ T9390] ? rw_verify_area+0x246/0x630 [ 151.315219][ T9390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.315230][ T9390] vfs_read+0x21f/0xb90 [ 151.315243][ T9390] ? __pfx___mutex_lock+0x10/0x10 [ 151.315256][ T9390] ? __pfx_vfs_read+0x10/0x10 [ 151.315268][ T9390] ? __fget_files+0x2a/0x420 [ 151.315277][ T9390] ? __fget_files+0x39d/0x420 [ 151.315285][ T9390] ? __fget_files+0x2a/0x420 [ 151.315298][ T9390] ksys_read+0x19d/0x2d0 [ 151.315309][ T9390] ? __pfx_ksys_read+0x10/0x10 [ 151.315323][ T9390] ? do_syscall_64+0xb6/0x230 [ 151.315336][ T9390] do_syscall_64+0xf3/0x230 [ 151.315347][ T9390] ? clear_bhb_loop+0x45/0xa0 [ 151.315359][ T9390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.315368][ T9390] RIP: 0033:0x7f227f38bb7c [ 151.315377][ T9390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.315384][ T9390] RSP: 002b:00007f228023d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.315395][ T9390] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38bb7c [ 151.315402][ T9390] RDX: 000000000000000f RSI: 00007f228023d0a0 RDI: 0000000000000004 [ 151.315408][ T9390] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 151.315413][ T9390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.315418][ T9390] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 151.315433][ T9390] [ 151.658658][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 151.728450][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1403'. [ 151.778545][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1404'. [ 152.300140][ T9439] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 152.316099][ T9439] netlink: 'syz.0.1416': attribute type 2 has an invalid length. [ 153.019639][ T9464] FAULT_INJECTION: forcing a failure. [ 153.019639][ T9464] name failslab, interval 1, probability 0, space 0, times 0 [ 153.033031][ T9464] CPU: 1 UID: 0 PID: 9464 Comm: syz.4.1424 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 153.033046][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.033051][ T9464] Call Trace: [ 153.033056][ T9464] [ 153.033060][ T9464] dump_stack_lvl+0x241/0x360 [ 153.033079][ T9464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.033092][ T9464] ? __pfx__printk+0x10/0x10 [ 153.033108][ T9464] ? __pfx___might_resched+0x10/0x10 [ 153.033122][ T9464] should_fail_ex+0x424/0x570 [ 153.033134][ T9464] should_failslab+0xac/0x100 [ 153.033149][ T9464] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 153.033163][ T9464] ? __alloc_skb+0x1c2/0x480 [ 153.033174][ T9464] __alloc_skb+0x1c2/0x480 [ 153.033183][ T9464] ? up_write+0x1ab/0x590 [ 153.033197][ T9464] ? __pfx___alloc_skb+0x10/0x10 [ 153.033205][ T9464] ? __up_read+0x650/0x6b0 [ 153.033215][ T9464] ? ima_get_action+0x75/0xb0 [ 153.033229][ T9464] alloc_skb_with_frags+0xc3/0x830 [ 153.033239][ T9464] ? process_measurement+0x1b33/0x1fe0 [ 153.033260][ T9464] sock_alloc_send_pskb+0x91c/0xa70 [ 153.033281][ T9464] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 153.033301][ T9464] l2cap_sock_alloc_skb_cb+0x101/0x5b0 [ 153.033317][ T9464] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 153.033335][ T9464] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 153.033352][ T9464] l2cap_chan_send+0x1773/0x2750 [ 153.033367][ T9464] ? trace_contention_end+0x3c/0x120 [ 153.033400][ T9464] ? l2cap_sock_sendmsg+0x323/0x4e0 [ 153.033421][ T9464] ? __pfx_l2cap_chan_send+0x10/0x10 [ 153.033450][ T9464] l2cap_sock_sendmsg+0x339/0x4e0 [ 153.033465][ T9464] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 153.033479][ T9464] ? aa_sock_msg_perm+0x91/0x160 [ 153.033497][ T9464] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 153.033515][ T9464] __sock_sendmsg+0x221/0x270 [ 153.033539][ T9464] ____sys_sendmsg+0x523/0x860 [ 153.033565][ T9464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.033579][ T9464] ? __fget_files+0x2a/0x420 [ 153.033598][ T9464] ? __fget_files+0x2a/0x420 [ 153.033620][ T9464] __sys_sendmsg+0x271/0x360 [ 153.033633][ T9464] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.033697][ T9464] ? do_syscall_64+0xb6/0x230 [ 153.033721][ T9464] do_syscall_64+0xf3/0x230 [ 153.033741][ T9464] ? clear_bhb_loop+0x45/0xa0 [ 153.033762][ T9464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.033776][ T9464] RIP: 0033:0x7ff0c2f8d169 [ 153.033785][ T9464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.033792][ T9464] RSP: 002b:00007ff0c3d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.033803][ T9464] RAX: ffffffffffffffda RBX: 00007ff0c31a5fa0 RCX: 00007ff0c2f8d169 [ 153.033810][ T9464] RDX: 0000000024040044 RSI: 00002000000002c0 RDI: 0000000000000004 [ 153.033816][ T9464] RBP: 00007ff0c3d33090 R08: 0000000000000000 R09: 0000000000000000 [ 153.033822][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.033833][ T9464] R13: 0000000000000000 R14: 00007ff0c31a5fa0 R15: 00007ffe62646b78 [ 153.033848][ T9464] [ 153.520262][ T9474] __nla_validate_parse: 4 callbacks suppressed [ 153.520281][ T9474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1430'. [ 153.531291][ T9472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1429'. [ 153.752513][ T9491] FAULT_INJECTION: forcing a failure. [ 153.752513][ T9491] name failslab, interval 1, probability 0, space 0, times 0 [ 153.828144][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 153.832790][ T9497] openvswitch: netlink: EtherType 0 is less than min 600 [ 153.845149][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.0.1435 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 153.845171][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.845179][ T9491] Call Trace: [ 153.845186][ T9491] [ 153.845193][ T9491] dump_stack_lvl+0x241/0x360 [ 153.845222][ T9491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.845245][ T9491] ? __pfx__printk+0x10/0x10 [ 153.845273][ T9491] ? __pfx___might_resched+0x10/0x10 [ 153.845298][ T9491] should_fail_ex+0x424/0x570 [ 153.845320][ T9491] should_failslab+0xac/0x100 [ 153.845344][ T9491] __kmalloc_cache_noprof+0x73/0x370 [ 153.845366][ T9491] ? sctp_association_new+0x8a/0x2540 [ 153.845388][ T9491] sctp_association_new+0x8a/0x2540 [ 153.845407][ T9491] ? sctp_has_association+0x1d4/0x1f0 [ 153.845425][ T9491] ? sctp_has_association+0x2f/0x1f0 [ 153.845444][ T9491] ? __ipv6_addr_type+0x23c/0x2f0 [ 153.845465][ T9491] sctp_connect_new_asoc+0x31c/0x700 [ 153.845484][ T9491] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 153.845500][ T9491] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 153.845519][ T9491] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 153.845533][ T9491] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 153.845546][ T9491] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 153.845567][ T9491] sctp_sendmsg+0x2009/0x3620 [ 153.845624][ T9491] ? __pfx_sctp_sendmsg+0x10/0x10 [ 153.845651][ T9491] ? aa_sk_perm+0x96f/0xac0 [ 153.845686][ T9491] ? inet_sendmsg+0x330/0x390 [ 153.845708][ T9491] __sock_sendmsg+0x1a6/0x270 [ 153.845732][ T9491] ____sys_sendmsg+0x523/0x860 [ 153.845759][ T9491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.845774][ T9491] ? __fget_files+0x2a/0x420 [ 153.845792][ T9491] ? __fget_files+0x2a/0x420 [ 153.845815][ T9491] __sys_sendmmsg+0x3a0/0x7b0 [ 153.845845][ T9491] ? __pfx___sys_sendmmsg+0x10/0x10 [ 153.845899][ T9491] ? rcu_read_lock_any_held+0xbb/0x160 [ 153.845921][ T9491] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 153.845946][ T9491] ? vfs_write+0xb29/0xd10 [ 153.845974][ T9491] ? ksys_write+0x24e/0x2d0 [ 153.845995][ T9491] ? __mutex_unlock_slowpath+0x229/0x800 [ 153.846042][ T9491] ? ksys_write+0x275/0x2d0 [ 153.846074][ T9491] __x64_sys_sendmmsg+0xa0/0xb0 [ 153.846092][ T9491] do_syscall_64+0xf3/0x230 [ 153.846117][ T9491] ? clear_bhb_loop+0x45/0xa0 [ 153.846138][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.846153][ T9491] RIP: 0033:0x7fbbac98d169 [ 153.846168][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.846180][ T9491] RSP: 002b:00007fbbad73e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 153.846197][ T9491] RAX: ffffffffffffffda RBX: 00007fbbacba5fa0 RCX: 00007fbbac98d169 [ 153.846208][ T9491] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 153.846218][ T9491] RBP: 00007fbbad73e090 R08: 0000000000000000 R09: 0000000000000000 [ 153.846228][ T9491] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001 [ 153.846238][ T9491] R13: 0000000000000000 R14: 00007fbbacba5fa0 R15: 00007ffdd5c74e18 [ 153.846265][ T9491] [ 154.356262][ T9513] netlink: 'syz.2.1441': attribute type 26 has an invalid length. [ 154.385892][ T9517] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1443'. [ 154.469660][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 154.630320][ T9527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1448'. [ 154.639701][ T9527] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1448'. [ 154.649124][ T9527] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1448'. [ 155.139095][ T9536] FAULT_INJECTION: forcing a failure. [ 155.139095][ T9536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.153092][ T9536] CPU: 0 UID: 0 PID: 9536 Comm: syz.2.1452 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 155.153115][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.153124][ T9536] Call Trace: [ 155.153131][ T9536] [ 155.153137][ T9536] dump_stack_lvl+0x241/0x360 [ 155.153168][ T9536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.153188][ T9536] ? __pfx__printk+0x10/0x10 [ 155.153219][ T9536] should_fail_ex+0x424/0x570 [ 155.153241][ T9536] _copy_to_user+0x31/0xb0 [ 155.153265][ T9536] simple_read_from_buffer+0xc4/0x170 [ 155.153292][ T9536] proc_fail_nth_read+0x1ef/0x260 [ 155.153312][ T9536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.153332][ T9536] ? rw_verify_area+0x246/0x630 [ 155.153349][ T9536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.153366][ T9536] vfs_read+0x21f/0xb90 [ 155.153389][ T9536] ? __pfx___mutex_lock+0x10/0x10 [ 155.153409][ T9536] ? __pfx_vfs_read+0x10/0x10 [ 155.153429][ T9536] ? __fget_files+0x2a/0x420 [ 155.153446][ T9536] ? __fget_files+0x39d/0x420 [ 155.153458][ T9536] ? __fget_files+0x2a/0x420 [ 155.153481][ T9536] ksys_read+0x19d/0x2d0 [ 155.153500][ T9536] ? __pfx_ksys_read+0x10/0x10 [ 155.153516][ T9536] ? do_syscall_64+0xb6/0x230 [ 155.153529][ T9536] do_syscall_64+0xf3/0x230 [ 155.153541][ T9536] ? clear_bhb_loop+0x45/0xa0 [ 155.153553][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.153563][ T9536] RIP: 0033:0x7f227f38bb7c [ 155.153572][ T9536] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.153579][ T9536] RSP: 002b:00007f228023d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.153590][ T9536] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38bb7c [ 155.153597][ T9536] RDX: 000000000000000f RSI: 00007f228023d0a0 RDI: 0000000000000003 [ 155.153603][ T9536] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 155.153609][ T9536] R10: 0000000040000060 R11: 0000000000000246 R12: 0000000000000001 [ 155.153614][ T9536] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 155.153629][ T9536] [ 155.396721][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1453'. [ 155.495912][ T9545] FAULT_INJECTION: forcing a failure. [ 155.495912][ T9545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.498498][ T9544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1456'. [ 155.514132][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.2.1455 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 155.514156][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.514165][ T9545] Call Trace: [ 155.514171][ T9545] [ 155.514178][ T9545] dump_stack_lvl+0x241/0x360 [ 155.514208][ T9545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.514231][ T9545] ? __pfx__printk+0x10/0x10 [ 155.514265][ T9545] should_fail_ex+0x424/0x570 [ 155.514288][ T9545] prepare_alloc_pages+0x220/0x610 [ 155.514314][ T9545] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 155.514336][ T9545] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 155.514375][ T9545] alloc_pages_mpol+0x339/0x690 [ 155.514403][ T9545] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 155.514428][ T9545] ? xas_start+0x405/0x7c0 [ 155.514453][ T9545] folio_alloc_mpol_noprof+0x36/0x70 [ 155.514477][ T9545] shmem_alloc_and_add_folio+0x490/0x1070 [ 155.514504][ T9545] ? shmem_huge_global_enabled+0x175/0x3b0 [ 155.514527][ T9545] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 155.514547][ T9545] ? shmem_allowable_huge_orders+0x200/0x430 [ 155.514577][ T9545] shmem_get_folio_gfp+0x655/0x1800 [ 155.514619][ T9545] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 155.514647][ T9545] ? ktime_get_coarse_real_ts64_mg+0x57/0x220 [ 155.514673][ T9545] shmem_write_begin+0x17e/0x3a0 [ 155.514693][ T9545] ? __pfx_shmem_write_begin+0x10/0x10 [ 155.514719][ T9545] generic_perform_write+0x329/0xa10 [ 155.514742][ T9545] ? ktime_get_coarse_real_ts64_mg+0x20c/0x220 [ 155.514773][ T9545] ? __pfx_generic_perform_write+0x10/0x10 [ 155.514796][ T9545] ? __pfx_generic_write_checks+0x10/0x10 [ 155.514826][ T9545] ? file_update_time+0x2ab/0x450 [ 155.514851][ T9545] shmem_file_write_iter+0xf9/0x120 [ 155.514870][ T9545] iter_file_splice_write+0xbdf/0x1530 [ 155.514923][ T9545] ? __pfx_iter_file_splice_write+0x10/0x10 [ 155.514961][ T9545] ? rcu_read_lock_any_held+0xbb/0x160 [ 155.514999][ T9545] ? __pfx_iter_file_splice_write+0x10/0x10 [ 155.515020][ T9545] do_splice+0xda7/0x1920 [ 155.515045][ T9545] ? __lock_acquire+0xad5/0xd80 [ 155.515084][ T9545] ? pipe_clear_nowait+0x1ad/0x250 [ 155.515111][ T9545] ? __pfx_do_splice+0x10/0x10 [ 155.515131][ T9545] ? __fget_files+0x2a/0x420 [ 155.515157][ T9545] __se_sys_splice+0x2dc/0x450 [ 155.515186][ T9545] ? __pfx___se_sys_splice+0x10/0x10 [ 155.515215][ T9545] ? __x64_sys_splice+0x21/0xf0 [ 155.515242][ T9545] do_syscall_64+0xf3/0x230 [ 155.515262][ T9545] ? clear_bhb_loop+0x45/0xa0 [ 155.515282][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.515298][ T9545] RIP: 0033:0x7f227f38d169 [ 155.515313][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.515326][ T9545] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 155.515344][ T9545] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 155.515356][ T9545] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 155.515367][ T9545] RBP: 00007f228023d090 R08: 0000000000004a0a R09: 0000000000000000 [ 155.515377][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.515387][ T9545] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 155.515416][ T9545] [ 156.016046][ T9564] FAULT_INJECTION: forcing a failure. [ 156.016046][ T9564] name failslab, interval 1, probability 0, space 0, times 0 [ 156.033156][ T9564] CPU: 1 UID: 0 PID: 9564 Comm: syz.1.1464 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 156.033180][ T9564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.033189][ T9564] Call Trace: [ 156.033194][ T9564] [ 156.033201][ T9564] dump_stack_lvl+0x241/0x360 [ 156.033232][ T9564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.033254][ T9564] ? __pfx__printk+0x10/0x10 [ 156.033281][ T9564] ? __pfx___might_resched+0x10/0x10 [ 156.033304][ T9564] should_fail_ex+0x424/0x570 [ 156.033327][ T9564] should_failslab+0xac/0x100 [ 156.033350][ T9564] __kmalloc_noprof+0xdf/0x4d0 [ 156.033358][ T9560] netlink: 'syz.4.1462': attribute type 25 has an invalid length. [ 156.033371][ T9564] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 156.033393][ T9564] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 156.033418][ T9564] tomoyo_realpath_from_path+0xcf/0x5e0 [ 156.033453][ T9564] tomoyo_path_number_perm+0x245/0x790 [ 156.033478][ T9564] ? tomoyo_path_number_perm+0x215/0x790 [ 156.033501][ T9564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.033529][ T9564] ? ksys_write+0x24e/0x2d0 [ 156.033555][ T9564] ? __lock_acquire+0xad5/0xd80 [ 156.033591][ T9564] ? __fget_files+0x2a/0x420 [ 156.033605][ T9564] ? __fget_files+0x2a/0x420 [ 156.033623][ T9564] ? __fget_files+0x2a/0x420 [ 156.033653][ T9564] security_file_ioctl+0xc6/0x2a0 [ 156.033676][ T9564] __se_sys_ioctl+0x46/0x160 [ 156.033699][ T9564] do_syscall_64+0xf3/0x230 [ 156.033720][ T9564] ? clear_bhb_loop+0x45/0xa0 [ 156.033741][ T9564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.033757][ T9564] RIP: 0033:0x7f6f94f8d169 [ 156.033772][ T9564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.033785][ T9564] RSP: 002b:00007f6f95d23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.033804][ T9564] RAX: ffffffffffffffda RBX: 00007f6f951a5fa0 RCX: 00007f6f94f8d169 [ 156.033816][ T9564] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000006 [ 156.033827][ T9564] RBP: 00007f6f95d23090 R08: 0000000000000000 R09: 0000000000000000 [ 156.033837][ T9564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.033848][ T9564] R13: 0000000000000000 R14: 00007f6f951a5fa0 R15: 00007ffe37b72858 [ 156.033876][ T9564] [ 156.034160][ T9564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.569557][ T9584] FAULT_INJECTION: forcing a failure. [ 156.569557][ T9584] name failslab, interval 1, probability 0, space 0, times 0 [ 156.590385][ T9584] CPU: 1 UID: 0 PID: 9584 Comm: syz.2.1474 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 156.590410][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.590419][ T9584] Call Trace: [ 156.590426][ T9584] [ 156.590433][ T9584] dump_stack_lvl+0x241/0x360 [ 156.590462][ T9584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.590486][ T9584] ? __pfx__printk+0x10/0x10 [ 156.590512][ T9584] ? __pfx___might_resched+0x10/0x10 [ 156.590536][ T9584] should_fail_ex+0x424/0x570 [ 156.590557][ T9584] should_failslab+0xac/0x100 [ 156.590578][ T9584] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 156.590593][ T9584] ? __alloc_skb+0x1c2/0x480 [ 156.590605][ T9584] __alloc_skb+0x1c2/0x480 [ 156.590616][ T9584] ? __pfx___alloc_skb+0x10/0x10 [ 156.590624][ T9584] ? __lock_acquire+0xad5/0xd80 [ 156.590639][ T9584] alloc_skb_with_frags+0xc3/0x830 [ 156.590657][ T9584] sock_alloc_send_pskb+0x91c/0xa70 [ 156.590678][ T9584] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 156.590688][ T9584] ? 0xffffffffa00022a4 [ 156.590697][ T9584] ? is_bpf_text_address+0x288/0x2a0 [ 156.590707][ T9584] ? is_bpf_text_address+0x26/0x2a0 [ 156.590718][ T9584] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.590733][ T9584] ? iov_iter_advance+0x8f/0x1e0 [ 156.590747][ T9584] tun_get_user+0xc04/0x47c0 [ 156.590766][ T9584] ? aa_file_perm+0x139/0xf60 [ 156.590781][ T9584] ? aa_file_perm+0x139/0xf60 [ 156.590794][ T9584] ? aa_file_perm+0x3f1/0xf60 [ 156.590807][ T9584] ? __pfx_tun_get_user+0x10/0x10 [ 156.590818][ T9584] ? __lock_acquire+0xad5/0xd80 [ 156.590830][ T9584] ? ref_tracker_alloc+0x316/0x4c0 [ 156.590842][ T9584] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 156.590861][ T9584] ? tun_get+0x1e/0x2f0 [ 156.590875][ T9584] ? tun_get+0x1e/0x2f0 [ 156.590887][ T9584] ? tun_get+0x27d/0x2f0 [ 156.590901][ T9584] tun_chr_write_iter+0x10d/0x1f0 [ 156.590916][ T9584] vfs_write+0x70f/0xd10 [ 156.590931][ T9584] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 156.590946][ T9584] ? __pfx_vfs_write+0x10/0x10 [ 156.590958][ T9584] ? __fget_files+0x2a/0x420 [ 156.590968][ T9584] ? __fget_files+0x2a/0x420 [ 156.590981][ T9584] ksys_write+0x19d/0x2d0 [ 156.590993][ T9584] ? __pfx_ksys_write+0x10/0x10 [ 156.591006][ T9584] ? do_syscall_64+0xb6/0x230 [ 156.591019][ T9584] do_syscall_64+0xf3/0x230 [ 156.591030][ T9584] ? clear_bhb_loop+0x45/0xa0 [ 156.591042][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.591051][ T9584] RIP: 0033:0x7f227f38d169 [ 156.591059][ T9584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.591066][ T9584] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.591078][ T9584] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 156.591085][ T9584] RDX: 000000000000fdef RSI: 00002000000005c0 RDI: 0000000000000004 [ 156.591090][ T9584] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 156.591096][ T9584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.591101][ T9584] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 156.591116][ T9584] [ 157.016117][ T9591] lo speed is unknown, defaulting to 1000 [ 157.084999][ T9594] netlink: 'syz.4.1477': attribute type 25 has an invalid length. [ 157.256779][ T9597] syzkaller0: entered allmulticast mode [ 157.316569][ T9597] netlink: 'syz.3.1478': attribute type 4 has an invalid length. [ 157.791194][ T9624] netlink: 'syz.2.1490': attribute type 25 has an invalid length. [ 158.064177][ T9641] FAULT_INJECTION: forcing a failure. [ 158.064177][ T9641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.103930][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.2.1498 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 158.103955][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.103965][ T9641] Call Trace: [ 158.103971][ T9641] [ 158.103979][ T9641] dump_stack_lvl+0x241/0x360 [ 158.104005][ T9641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.104025][ T9641] ? __pfx__printk+0x10/0x10 [ 158.104058][ T9641] should_fail_ex+0x424/0x570 [ 158.104081][ T9641] _copy_from_iter+0x211/0x1c70 [ 158.104108][ T9641] ? __build_skb_around+0x247/0x3d0 [ 158.104136][ T9641] ? __alloc_skb+0x298/0x480 [ 158.104150][ T9641] ? __pfx__copy_from_iter+0x10/0x10 [ 158.104173][ T9641] ? __pfx___alloc_skb+0x10/0x10 [ 158.104190][ T9641] ? skb_put+0x114/0x1f0 [ 158.104210][ T9641] netlink_sendmsg+0x73c/0xcd0 [ 158.104254][ T9641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.104280][ T9641] ? aa_sock_msg_perm+0x91/0x160 [ 158.104308][ T9641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.104327][ T9641] __sock_sendmsg+0x221/0x270 [ 158.104351][ T9641] ____sys_sendmsg+0x523/0x860 [ 158.104379][ T9641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.104394][ T9641] ? __fget_files+0x2a/0x420 [ 158.104411][ T9641] ? __fget_files+0x2a/0x420 [ 158.104434][ T9641] __sys_sendmsg+0x271/0x360 [ 158.104456][ T9641] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.104523][ T9641] ? do_syscall_64+0xb6/0x230 [ 158.104545][ T9641] do_syscall_64+0xf3/0x230 [ 158.104565][ T9641] ? clear_bhb_loop+0x45/0xa0 [ 158.104585][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.104601][ T9641] RIP: 0033:0x7f227f38d169 [ 158.104616][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.104628][ T9641] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.104647][ T9641] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 158.104659][ T9641] RDX: 0000000000044800 RSI: 0000200000000200 RDI: 0000000000000004 [ 158.104669][ T9641] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 158.104679][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.104688][ T9641] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 158.104715][ T9641] [ 158.106332][ T9644] netlink: 'syz.1.1495': attribute type 10 has an invalid length. [ 158.500589][ T9652] netlink: 'syz.3.1502': attribute type 25 has an invalid length. [ 158.559906][ T9657] FAULT_INJECTION: forcing a failure. [ 158.559906][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 158.600810][ T9657] CPU: 1 UID: 0 PID: 9657 Comm: syz.4.1503 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 158.600834][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.600844][ T9657] Call Trace: [ 158.600850][ T9657] [ 158.600857][ T9657] dump_stack_lvl+0x241/0x360 [ 158.600887][ T9657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.600909][ T9657] ? __pfx__printk+0x10/0x10 [ 158.600930][ T9657] ? process_measurement+0x1b33/0x1fe0 [ 158.600958][ T9657] ? __pfx___might_resched+0x10/0x10 [ 158.600983][ T9657] should_fail_ex+0x424/0x570 [ 158.601006][ T9657] should_failslab+0xac/0x100 [ 158.601032][ T9657] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 158.601055][ T9657] ? __alloc_skb+0x1c2/0x480 [ 158.601075][ T9657] __alloc_skb+0x1c2/0x480 [ 158.601096][ T9657] ? __pfx___alloc_skb+0x10/0x10 [ 158.601116][ T9657] ? __lock_acquire+0xad5/0xd80 [ 158.601138][ T9657] alloc_skb_with_frags+0xc3/0x830 [ 158.601159][ T9657] ? aa_label_sk_perm+0x4f4/0x6d0 [ 158.601190][ T9657] sock_alloc_send_pskb+0x91c/0xa70 [ 158.601225][ T9657] ? lockdep_hardirqs_on+0x9d/0x150 [ 158.601246][ T9657] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 158.601263][ T9657] ? __local_bh_enable_ip+0x168/0x200 [ 158.601288][ T9657] ? dccp_sendmsg+0x3d7/0xbb0 [ 158.601307][ T9657] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 158.601334][ T9657] dccp_sendmsg+0x3f3/0xbb0 [ 158.601363][ T9657] ? __pfx_dccp_sendmsg+0x10/0x10 [ 158.601381][ T9657] ? sock_rps_record_flow+0x1a/0x410 [ 158.601404][ T9657] ? inet_sendmsg+0x330/0x390 [ 158.601426][ T9657] __sock_sendmsg+0x1a6/0x270 [ 158.601451][ T9657] ____sys_sendmsg+0x523/0x860 [ 158.601476][ T9657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.601491][ T9657] ? __fget_files+0x2a/0x420 [ 158.601510][ T9657] ? __fget_files+0x2a/0x420 [ 158.601534][ T9657] __sys_sendmsg+0x271/0x360 [ 158.601557][ T9657] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.601628][ T9657] ? do_syscall_64+0xb6/0x230 [ 158.601652][ T9657] do_syscall_64+0xf3/0x230 [ 158.601672][ T9657] ? clear_bhb_loop+0x45/0xa0 [ 158.601692][ T9657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.601708][ T9657] RIP: 0033:0x7ff0c2f8d169 [ 158.601723][ T9657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.601735][ T9657] RSP: 002b:00007ff0c3d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.601753][ T9657] RAX: ffffffffffffffda RBX: 00007ff0c31a5fa0 RCX: 00007ff0c2f8d169 [ 158.601765][ T9657] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000005 [ 158.601775][ T9657] RBP: 00007ff0c3d33090 R08: 0000000000000000 R09: 0000000000000000 [ 158.601785][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.601794][ T9657] R13: 0000000000000000 R14: 00007ff0c31a5fa0 R15: 00007ffe62646b78 [ 158.601822][ T9657] [ 159.111745][ T9674] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.131961][ T9674] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 159.269506][ T9685] __nla_validate_parse: 7 callbacks suppressed [ 159.269526][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 159.329811][ T9687] netlink: 'syz.2.1516': attribute type 25 has an invalid length. [ 159.511697][ T9698] FAULT_INJECTION: forcing a failure. [ 159.511697][ T9698] name failslab, interval 1, probability 0, space 0, times 0 [ 159.524506][ T9698] CPU: 0 UID: 0 PID: 9698 Comm: syz.2.1521 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 159.524520][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.524526][ T9698] Call Trace: [ 159.524531][ T9698] [ 159.524536][ T9698] dump_stack_lvl+0x241/0x360 [ 159.524555][ T9698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.524575][ T9698] ? __pfx__printk+0x10/0x10 [ 159.524601][ T9698] ? __pfx___might_resched+0x10/0x10 [ 159.524625][ T9698] should_fail_ex+0x424/0x570 [ 159.524648][ T9698] should_failslab+0xac/0x100 [ 159.524665][ T9698] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 159.524679][ T9698] ? __alloc_skb+0x1c2/0x480 [ 159.524690][ T9698] __alloc_skb+0x1c2/0x480 [ 159.524702][ T9698] ? __pfx___alloc_skb+0x10/0x10 [ 159.524712][ T9698] ? netlink_autobind+0xd6/0x2f0 [ 159.524725][ T9698] ? netlink_autobind+0x2b0/0x2f0 [ 159.524740][ T9698] netlink_sendmsg+0x638/0xcd0 [ 159.524760][ T9698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.524785][ T9698] ? aa_sock_msg_perm+0x91/0x160 [ 159.524813][ T9698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.524833][ T9698] __sock_sendmsg+0x221/0x270 [ 159.524858][ T9698] ____sys_sendmsg+0x523/0x860 [ 159.524884][ T9698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.524899][ T9698] ? __fget_files+0x2a/0x420 [ 159.524918][ T9698] ? __fget_files+0x2a/0x420 [ 159.524931][ T9698] __sys_sendmsg+0x271/0x360 [ 159.524944][ T9698] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.524981][ T9698] ? do_syscall_64+0xb6/0x230 [ 159.524995][ T9698] do_syscall_64+0xf3/0x230 [ 159.525006][ T9698] ? clear_bhb_loop+0x45/0xa0 [ 159.525018][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.525027][ T9698] RIP: 0033:0x7f227f38d169 [ 159.525036][ T9698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.525044][ T9698] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.525055][ T9698] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 159.525062][ T9698] RDX: 0000000000044800 RSI: 0000200000000200 RDI: 0000000000000004 [ 159.525068][ T9698] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 159.525073][ T9698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.525079][ T9698] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 159.525093][ T9698] [ 159.887334][ T9704] netlink: 'syz.4.1523': attribute type 1 has an invalid length. [ 159.895845][ T9704] netlink: 'syz.4.1523': attribute type 4 has an invalid length. [ 159.903590][ T9704] netlink: 16114 bytes leftover after parsing attributes in process `syz.4.1523'. [ 159.918573][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 159.961342][ T9710] FAULT_INJECTION: forcing a failure. [ 159.961342][ T9710] name failslab, interval 1, probability 0, space 0, times 0 [ 159.985437][ T9710] CPU: 1 UID: 0 PID: 9710 Comm: syz.2.1526 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 159.985454][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.985459][ T9710] Call Trace: [ 159.985464][ T9710] [ 159.985468][ T9710] dump_stack_lvl+0x241/0x360 [ 159.985489][ T9710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.985502][ T9710] ? __pfx__printk+0x10/0x10 [ 159.985522][ T9710] should_fail_ex+0x424/0x570 [ 159.985536][ T9710] should_failslab+0xac/0x100 [ 159.985551][ T9710] __kmalloc_cache_noprof+0x73/0x370 [ 159.985564][ T9710] ? sctp_add_bind_addr+0x89/0x3a0 [ 159.985579][ T9710] sctp_add_bind_addr+0x89/0x3a0 [ 159.985594][ T9710] sctp_do_bind+0x5d2/0x950 [ 159.985610][ T9710] sctp_connect_new_asoc+0x2a0/0x700 [ 159.985621][ T9710] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 159.985629][ T9710] ? sctp_sendmsg+0xf30/0x3620 [ 159.985646][ T9710] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 159.985654][ T9710] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 159.985667][ T9710] sctp_sendmsg+0x2009/0x3620 [ 159.985693][ T9710] ? __pfx_sctp_sendmsg+0x10/0x10 [ 159.985709][ T9710] ? aa_sk_perm+0x96f/0xac0 [ 159.985730][ T9710] ? inet_sendmsg+0x330/0x390 [ 159.985743][ T9710] __sock_sendmsg+0x1a6/0x270 [ 159.985758][ T9710] ____sys_sendmsg+0x523/0x860 [ 159.985774][ T9710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.985782][ T9710] ? __fget_files+0x2a/0x420 [ 159.985793][ T9710] ? __fget_files+0x2a/0x420 [ 159.985807][ T9710] __sys_sendmmsg+0x3a0/0x7b0 [ 159.985833][ T9710] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.985884][ T9710] ? rcu_read_lock_any_held+0xbb/0x160 [ 159.985907][ T9710] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 159.985931][ T9710] ? vfs_write+0xb29/0xd10 [ 159.985957][ T9710] ? ksys_write+0x24e/0x2d0 [ 159.985970][ T9710] ? __mutex_unlock_slowpath+0x229/0x800 [ 159.985998][ T9710] ? ksys_write+0x275/0x2d0 [ 159.986015][ T9710] __x64_sys_sendmmsg+0xa0/0xb0 [ 159.986026][ T9710] do_syscall_64+0xf3/0x230 [ 159.986038][ T9710] ? clear_bhb_loop+0x45/0xa0 [ 159.986050][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.986059][ T9710] RIP: 0033:0x7f227f38d169 [ 159.986069][ T9710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.986076][ T9710] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.986087][ T9710] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 159.986094][ T9710] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 159.986106][ T9710] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 159.986111][ T9710] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000001 [ 159.986117][ T9710] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 159.986132][ T9710] [ 160.306546][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1527'. [ 160.468169][ T9714] netlink: 'syz.0.1528': attribute type 25 has an invalid length. [ 160.588563][ T9729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1535'. [ 160.595256][ T9731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'. [ 161.125481][ T9754] netlink: 'syz.3.1546': attribute type 25 has an invalid length. [ 161.280380][ T9761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1548'. [ 161.387389][ T9766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1550'. [ 161.762692][ T9782] netlink: 'syz.2.1557': attribute type 25 has an invalid length. [ 161.840957][ T9786] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1559'. [ 161.917017][ T9790] FAULT_INJECTION: forcing a failure. [ 161.917017][ T9790] name failslab, interval 1, probability 0, space 0, times 0 [ 161.929845][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.2.1561 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 161.929866][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.929876][ T9790] Call Trace: [ 161.929883][ T9790] [ 161.929890][ T9790] dump_stack_lvl+0x241/0x360 [ 161.929920][ T9790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.929943][ T9790] ? __pfx__printk+0x10/0x10 [ 161.929969][ T9790] ? __pfx___might_resched+0x10/0x10 [ 161.929994][ T9790] should_fail_ex+0x424/0x570 [ 161.930017][ T9790] should_failslab+0xac/0x100 [ 161.930041][ T9790] __kmalloc_noprof+0xdf/0x4d0 [ 161.930063][ T9790] ? bpf_test_init+0xc2/0x170 [ 161.930086][ T9790] bpf_test_init+0xc2/0x170 [ 161.930111][ T9790] bpf_prog_test_run_skb+0x2bf/0x1850 [ 161.930155][ T9790] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 161.930175][ T9790] ? __fget_files+0x2a/0x420 [ 161.930196][ T9790] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 161.930226][ T9790] bpf_prog_test_run+0x2e4/0x360 [ 161.930249][ T9790] __sys_bpf+0x4ee/0x8b0 [ 161.930268][ T9790] ? __pfx___sys_bpf+0x10/0x10 [ 161.930298][ T9790] ? ksys_write+0x275/0x2d0 [ 161.930331][ T9790] __x64_sys_bpf+0x7c/0x90 [ 161.930356][ T9790] do_syscall_64+0xf3/0x230 [ 161.930377][ T9790] ? clear_bhb_loop+0x45/0xa0 [ 161.930397][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.930413][ T9790] RIP: 0033:0x7f227f38d169 [ 161.930428][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.930440][ T9790] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.930458][ T9790] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 161.930470][ T9790] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 161.930480][ T9790] RBP: 00007f228023d090 R08: 0000000000000000 R09: 0000000000000000 [ 161.930490][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.930500][ T9790] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 161.930525][ T9790] [ 162.497239][ T9812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1570'. [ 162.517651][ T9810] netlink: 'syz.0.1568': attribute type 25 has an invalid length. [ 162.653956][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 162.959082][ T9842] netlink: 'syz.4.1583': attribute type 25 has an invalid length. [ 163.205141][ T9859] [ 163.207514][ T9859] ====================================================== [ 163.214537][ T9859] WARNING: possible circular locking dependency detected [ 163.221559][ T9859] 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 Not tainted [ 163.228681][ T9859] ------------------------------------------------------ [ 163.235704][ T9859] syz.2.1590/9859 is trying to acquire lock: [ 163.239627][ T9861] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.241669][ T9859] ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x161/0x11f0 [ 163.248817][ T9861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.257948][ T9859] [ 163.257948][ T9859] but task is already holding lock: [ 163.257957][ T9859] ffff88807b92ad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 163.282595][ T9859] [ 163.282595][ T9859] which lock already depends on the new lock. [ 163.282595][ T9859] [ 163.293000][ T9859] [ 163.293000][ T9859] the existing dependency chain (in reverse order) is: [ 163.302084][ T9859] [ 163.302084][ T9859] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 163.310712][ T9859] lock_acquire+0x116/0x2f0 [ 163.315746][ T9859] __mutex_lock+0x1a5/0x10c0 [ 163.320878][ T9859] smc_switch_to_fallback+0x35/0xda0 [ 163.326700][ T9859] smc_sendmsg+0x11f/0x530 [ 163.331649][ T9859] __sock_sendmsg+0x221/0x270 [ 163.336867][ T9859] __sys_sendto+0x365/0x4c0 [ 163.341896][ T9859] __x64_sys_sendto+0xde/0x100 [ 163.347189][ T9859] do_syscall_64+0xf3/0x230 [ 163.352223][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.358645][ T9859] [ 163.358645][ T9859] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 163.366304][ T9859] lock_acquire+0x116/0x2f0 [ 163.371336][ T9859] lock_sock_nested+0x48/0x100 [ 163.376631][ T9859] do_ip_setsockopt+0x17e9/0x39c0 [ 163.382186][ T9859] ip_setsockopt+0x63/0x100 [ 163.387222][ T9859] do_sock_setsockopt+0x3b1/0x710 [ 163.392778][ T9859] __x64_sys_setsockopt+0x1ee/0x280 [ 163.398498][ T9859] do_syscall_64+0xf3/0x230 [ 163.403521][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.409927][ T9859] [ 163.409927][ T9859] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 163.417130][ T9859] validate_chain+0xa69/0x24e0 [ 163.422422][ T9859] __lock_acquire+0xad5/0xd80 [ 163.427604][ T9859] lock_acquire+0x116/0x2f0 [ 163.432612][ T9859] __mutex_lock+0x1a5/0x10c0 [ 163.437708][ T9859] ip_mroute_setsockopt+0x161/0x11f0 [ 163.443500][ T9859] do_ip_setsockopt+0x1114/0x39c0 [ 163.449045][ T9859] ip_setsockopt+0x63/0x100 [ 163.454063][ T9859] smc_setsockopt+0x25c/0xd50 [ 163.459265][ T9859] do_sock_setsockopt+0x3b1/0x710 [ 163.464798][ T9859] __x64_sys_setsockopt+0x1ee/0x280 [ 163.470499][ T9859] do_syscall_64+0xf3/0x230 [ 163.475509][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.481905][ T9859] [ 163.481905][ T9859] other info that might help us debug this: [ 163.481905][ T9859] [ 163.492119][ T9859] Chain exists of: [ 163.492119][ T9859] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 163.492119][ T9859] [ 163.505667][ T9859] Possible unsafe locking scenario: [ 163.505667][ T9859] [ 163.513104][ T9859] CPU0 CPU1 [ 163.518463][ T9859] ---- ---- [ 163.523812][ T9859] lock(&smc->clcsock_release_lock); [ 163.529175][ T9859] lock(sk_lock-AF_INET); [ 163.536100][ T9859] lock(&smc->clcsock_release_lock); [ 163.543977][ T9859] lock(rtnl_mutex); [ 163.547944][ T9859] [ 163.547944][ T9859] *** DEADLOCK *** [ 163.547944][ T9859] [ 163.556069][ T9859] 1 lock held by syz.2.1590/9859: [ 163.561076][ T9859] #0: ffff88807b92ad28 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 163.571598][ T9859] [ 163.571598][ T9859] stack backtrace: [ 163.577470][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.2.1590 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 163.577487][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.577495][ T9859] Call Trace: [ 163.577501][ T9859] [ 163.577506][ T9859] dump_stack_lvl+0x241/0x360 [ 163.577529][ T9859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.577548][ T9859] ? __pfx__printk+0x10/0x10 [ 163.577566][ T9859] ? print_lock+0x171/0x1a0 [ 163.577583][ T9859] print_circular_bug+0x2e1/0x300 [ 163.577602][ T9859] check_noncircular+0x142/0x160 [ 163.577622][ T9859] validate_chain+0xa69/0x24e0 [ 163.577641][ T9859] ? sched_clock_cpu+0x77/0x4d0 [ 163.577661][ T9859] __lock_acquire+0xad5/0xd80 [ 163.577677][ T9859] lock_acquire+0x116/0x2f0 [ 163.577690][ T9859] ? ip_mroute_setsockopt+0x161/0x11f0 [ 163.577710][ T9859] ? finish_task_switch+0x1e5/0x870 [ 163.577724][ T9859] __mutex_lock+0x1a5/0x10c0 [ 163.577740][ T9859] ? ip_mroute_setsockopt+0x161/0x11f0 [ 163.577758][ T9859] ? trace_sched_exit_tp+0x3c/0x120 [ 163.577770][ T9859] ? __schedule+0x1ba6/0x5240 [ 163.577785][ T9859] ? ip_mroute_setsockopt+0x161/0x11f0 [ 163.577803][ T9859] ? __pfx___mutex_lock+0x10/0x10 [ 163.577818][ T9859] ? stack_trace_save+0x11a/0x1d0 [ 163.577841][ T9859] ? schedule+0x163/0x360 [ 163.577857][ T9859] ip_mroute_setsockopt+0x161/0x11f0 [ 163.577877][ T9859] ? register_lock_class+0x54/0x330 [ 163.577891][ T9859] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 163.577914][ T9859] ? __pfx___mutex_trylock_common+0x10/0x10 [ 163.577933][ T9859] do_ip_setsockopt+0x1114/0x39c0 [ 163.577952][ T9859] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 163.577969][ T9859] ? smc_setsockopt+0x1b2/0xd50 [ 163.577984][ T9859] ? __pfx___mutex_lock+0x10/0x10 [ 163.578004][ T9859] ip_setsockopt+0x63/0x100 [ 163.578019][ T9859] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 163.578039][ T9859] smc_setsockopt+0x25c/0xd50 [ 163.578055][ T9859] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.578072][ T9859] ? __pfx_smc_setsockopt+0x10/0x10 [ 163.578091][ T9859] ? aa_sock_opt_perm+0x79/0x120 [ 163.578111][ T9859] ? __pfx_smc_setsockopt+0x10/0x10 [ 163.578125][ T9859] do_sock_setsockopt+0x3b1/0x710 [ 163.578140][ T9859] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 163.578152][ T9859] ? __fget_files+0x2a/0x420 [ 163.578165][ T9859] ? __fget_files+0x39d/0x420 [ 163.578176][ T9859] ? __fget_files+0x2a/0x420 [ 163.578189][ T9859] __x64_sys_setsockopt+0x1ee/0x280 [ 163.578205][ T9859] do_syscall_64+0xf3/0x230 [ 163.578221][ T9859] ? clear_bhb_loop+0x45/0xa0 [ 163.578237][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.578250][ T9859] RIP: 0033:0x7f227f38d169 [ 163.578262][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.578273][ T9859] RSP: 002b:00007f228023d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 163.578287][ T9859] RAX: ffffffffffffffda RBX: 00007f227f5a5fa0 RCX: 00007f227f38d169 [ 163.578297][ T9859] RDX: 00000000000000cd RSI: 0000000000000000 RDI: 0000000000000003 [ 163.578305][ T9859] RBP: 00007f227f40e990 R08: 000000000000003c R09: 0000000000000000 [ 163.578313][ T9859] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 163.578321][ T9859] R13: 0000000000000000 R14: 00007f227f5a5fa0 R15: 00007ffea06e6cf8 [ 163.578336][ T9859] [ 163.934952][ T9870] netlink: 'syz.4.1596': attribute type 25 has an invalid length. [ 164.102748][ T9859] caif:caif_disconnect_client(): nothing to disconnect